Packages changed: MicroOS-release (20260830 -> 20260901) appstream-glib (0.8.3 -> 0.8.4) dracut (112+suse.34.g35e16b7 -> 112+suse.47.gec0b378) exiv2 (0.28.8 -> 0.28.9) glibc (2.43 -> 2.44) grub2 harfbuzz (14.3.1 -> 14.4.0) kernel-firmware-amdgpu (20260717 -> 20260829) kernel-firmware-ath10k (20260610 -> 20260809) kernel-firmware-ath12k (20260610 -> 20260813) kernel-firmware-bluetooth (20260720 -> 20260828) kernel-firmware-i915 (20260706 -> 20260806) kernel-firmware-intel (20260610 -> 20260728) kernel-firmware-iwlwifi (20260610 -> 20260820) kernel-firmware-media (20260706 -> 20260813) kernel-firmware-mediatek (20260629 -> 20260825) kernel-firmware-network (20260610 -> 20260813) kernel-firmware-qcom (20260717 -> 20260828) kernel-firmware-qlogic (20260610 -> 20260731) kernel-firmware-realtek (20260629 -> 20260731) kernel-firmware-sound (20260706 -> 20260825) kernel-firmware-ueagle (20260610 -> 20260703) libheif (1.23.1 -> 1.23.2) patterns-kde (20260428 -> 20260830) qca-qt6 (2.3.10 -> 2.3.12) zvbi (0.2.44 -> 0.2.45) === Details === ==== MicroOS-release ==== Version update (20260830 -> 20260901) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== appstream-glib ==== Version update (0.8.3 -> 0.8.4) Subpackages: libappstream-glib8 - Update to version 0.8.4: + New Features: - Add symbol and sample text for Amharic and Inuktitut - Add symbol text for N'Ko and Yi script + Bugfixes: - Fix building the silo when shared-mime-info >= 2.5.1 is installed - Fix RISC-V test failure ==== dracut ==== Version update (112+suse.34.g35e16b7 -> 112+suse.47.gec0b378) Subpackages: dracut-ima - Update to version 112+suse.47.gec0b378: * fix(base): check first argument in load_fstype() * fix(url-lib): check error if curl fails in subshell * fix(dracut-systemd): actually make rd.break=pre-trigger stop before pre-trigger * fix(lvm): unset DM_VG_NAME and DM_LV_NAME in each iteration * fix(lvm): drop stray leading and trailing spaces from generated cmdline * fix(lvm): install the LVM system ID file again * fix(lvm): deduplicate rd.lvm.lv= arguments in cmdline() * fix(lvm): check all host devices in cmdline() * fix(iscsi): sanitize netroot= value passed to initqueue scripts - CVE-2026-6893: root code execution via dhcp options command injection (bsc#1268322, follow-up fixes recently merged) * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname * fix(network-legacy): strip DHCP-supplied domain to a safe charset - Maintain configuration in OBS ==== exiv2 ==== Version update (0.28.8 -> 0.28.9) - update to 0.28.9 (bsc#1277579, CVE-2026-68547, bsc#1277579, CVE-2026-68546, CVE-2026-49275): * https://github.com/Exiv2/exiv2/security/advisories/GHSA-3695-mjv8-3r52 * https://github.com/Exiv2/exiv2/security/advisories/GHSA-jcgh-p9v3-pw6j * https://github.com/Exiv2/exiv2/security/advisories/GHSA-hxph-pv7w-8649 * https://github.com/Exiv2/exiv2/security/advisories/GHSA-vg6c-9f6h-4x5q * https://github.com/Exiv2/exiv2/security/advisories/GHSA-9v3x-mhg4-wwv2 * https://github.com/Exiv2/exiv2/security/advisories/GHSA-fgw8-p7pr-37cp * https://github.com/Exiv2/exiv2/security/advisories/GHSA-pwvq-9w4q-786w ==== glibc ==== Version update (2.43 -> 2.44) Subpackages: glibc-locale glibc-locale-base - dt-d-rule.patch: Makerules: Make the .dt to .d conversion safe against concurrent sub-makes - math-sinh-worst-case-results.patch: math: Fix sinh worst-case results for |x| > 36.736801 (BZ #34441) - math-x86-64-tanh-floatn-aliases.patch: Fix x86_64 tanh _FloatN aliases binding to the FMA variant (BZ #34465) - elf-honor-skip-ifunc-for-ifunc-relocations.patch: elf: Honour skip_ifunc for cross-object IFUNC relocations (BZ #34428) - For the cross-x86_64 flavor also build the -m32 glibc - Enable cross-x86_64 - Update to glibc 2.44 * System-wide tunables can be applied using /etc/tunables.conf and running ldconfig * A new tunable, glibc.elf.thp, is added to map read-only segments with Transparent Huge Pages (THP) if THP is not disabled in the kernel * The THP page size in malloc is capped to MAX_THP_PAGESIZE * Additional optimized and correctly rounded mathematical functions have been imported from the CORE-MATH project * Many additional improvements to existing functions have been synchronized from the CORE-MATH project * For C++26, the assert macro is now variadic * The SVID error handling for cosh and sinh was moved to compatibility symbols * Static PIE is now supported for arm-*-linux-gnueabi * On AArch64 targets that support the Guarded Control Stack extension all GCS operations (including status, write on shadow stack, and push to shadow stack) are locked after enabling GCS with ENFORCED or OVERRIDE GCS policy * On AArch64 targets, log, exp, sin, cas, sinh, cosh, asinh, acosh, atanh single and double precision special cases have been vectorized for SVE and AdvSIMD, and vector variants of powr have been added * On RISC-V targets, vector extension optimized variants of memcmp, memccpy, memchr, memcpy, memmove, stpncpy, strcmp, strchr, strcpy, strncmp, strncpy, strlen, and strrchr have been added * On PowerPC, memchr optimized for Power10 has been re-added * Pre-built ld.so.cache files can be installed with ldconfig * A new locale has been added: hrx_BR (Hunsrik language spoken in Brazil) * Although malloc and related functions currently return pointers aligned to alignof (max_align_t), the documentation now says future versions of glibc may relax alignment requirements for small allocations * GLIBC-SA-2026-0013: Potential stack-based buffer clash during tilde expansion in wordexp (CVE-2026-6791) * GLIBC-SA-2026-0014: wordexp with WRDE_APPEND may result in an invalid call to free() (CVE-2026-6368) - resolv-count-resource-records.patch, resolv-check-hostname.patch, ldbl-128ibm-ceill-floorl-roundl-truncl.patch, getlogin-utmp-fallback.patch, nss-malloc-failure-checks.patch, nss-database-for-fork.patch, malloc-sys-kernel-mm.patch, tests-aarch64-makefile-deps-bti.patch, aarch64-lock-gcs-startup.patch, elf-strlen-redir-ifunc.patch, riscv-redir-memcpy-generic.patch, tst-rseq-linux-7.patch, sys-mount-cloexec-flag.patch, sys-mount-open-tree-macros.patch, ibm139x-pending-char-state.patch, ungetwc-byte-stream.patch, scanf-mc-buffer-overflow.patch, fma-shift-ub.patch, struct-reserved-members.patch, iconv-translit-intermediate-errors.patch, arm-vfp-plt-trampoline.patch, resolv-sprintrrf-unkown-types.patch, resolv-sprintrrf-inet-ntop-check.patch, resolv-sprintrrf-buffer-overreads.patch: Removed ==== grub2 ==== Subpackages: grub2-common grub2-i386-efi grub2-i386-efi-bls grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi grub2-x86_64-efi-bls - Backport merged upstream patch * 0001-fs-btrfs-mark-Btrfs-on-disk-structs-as-GRUB_PACKED.patch * 0002-fs-btrfs-add-btrfs-info-command.patch * 0003-fs-btrfs-add-btrfs-list-subvols-command.patch * 0004-fs-btrfs-add-btrfs-get-default-subvol-command.patch - Patch rebased * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch * grub2-btrfs-06-subvol-mount.patch * grub2-btrfs-10-config-directory.patch - Drop local patch * grub2-btrfs-09-get-default-subvolume.patch ==== harfbuzz ==== Version update (14.3.1 -> 14.4.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 14.4.0: + Glyph positions and extents now saturate instead of overflowing. + Arabic Windows-1256 fallback shaping is now enabled on all platforms. + Fix cluster values and a dropped glyph advance in the Graphite shaper. + Fix `avar` axis value mapping in fonts that repeat the boundary entries. + Fix `avar` version 2 partial instancing. + Fix `COLR` sweep gradient truncation and unbounded memory use. + Faster subsetting, especially for large `GSUB`/`GPOS` and `CFF` tables. + Faster extraction of the experimental glyph dependency graph. + Various shaping speedups. + Various fixes for crashes and hangs with malformed fonts. + Various fixes to the experimental raster, vector, and GPU libraries. + Various improvements to the HarfRust integration shaper. + The DirectWrite backend no longer uses the C++ runtime. + Various build, portability, and fuzzing fixes. + New API: +hb_set_intersects() ==== kernel-firmware-amdgpu ==== Version update (20260717 -> 20260829) - Update to version 20260829 (git commit 458e40fdbb4d): * amdgpu: DMCUB updates for various ASICs - Update to version 20260828 (git commit b6bdea3726dc): * amdgpu: add VCN 5.3.0 firmware - Update to version 20260821 (git commit 8c7fac62c0d1): * amdgpu: add VPE 2.0.0 firmware * amdgpu: add SDMA 6.1.4 firmware * amdgpu: add DCN 4.2 firmware * amdgpu: add PSP 15.0.9 firmware * amdgpu: add PSP 15.0.0 firmware * amdgpu: add GC 11.7.1 firmware * amdgpu: add GC 11.7.0 firmware * amdgpu: DMCUB update for DCN314 - Update to version 20260814 (git commit 2398c20fc656): * amdgpu: DMCUB updates for various ASICs - Update to version 20260813 (git commit 984503d80fd6): * Revert "amdgpu: update GC 10.3.6 firmware" * amdgpu: update vangogh firmware * amdgpu: update VPE 6.1.1 firmware * amdgpu: update VCN 4.0.6 firmware * amdgpu: update PSP 14.0.1 firmware * amdgpu: update GC 11.5.1 firmware * amdgpu: update VPE 6.1.0 firmware * amdgpu: update VCN 4.0.5 firmware * amdgpu: update PSP 14.0.0 firmware * amdgpu: update GC 11.5.0 firmware * amdgpu: update renoir firmware * amdgpu: update yellow carp firmware * amdgpu: update raven2 firmware * amdgpu: update raven firmware * amdgpu: update VCN 3.1.2 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update GC 10.3.6 firmware * amdgpu: update picasso firmware * amdgpu: update PSP 13.0.11 firmware * amdgpu: update GC 11.0.4 firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update VCN 5.0.0 firmware * amdgpu: update SMU 14.0.3 firmware * amdgpu: update PSP 14.0.3 firmware * amdgpu: update GC 12.0.1 firmware * amdgpu: update SMU 14.0.2 firmware * amdgpu: update PSP 14.0.2 firmware * amdgpu: update GC 12.0.0 firmware * amdgpu: update vcn 4.0.4 firmware * amdgpu: update SMU 13.0.7 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update SMU 13.0.10 firmware * amdgpu: update SDMA 6.0.3 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update SMU 13.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update beige goby firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update navy flounder firmware * amdgpu: update sienna cichlid firmware * amdgpu: update navi14 firmware * amdgpu: update navi12 firmware * amdgpu: update navi10 firmware * amdgpu: add PSP 13.0.15 firmware * amdgpu: update VCN 5.0.1 firmware * amdgpu: update PSP 13.0.12 firmware * amdgpu: update GC 9.5.0 firmware * amdgpu: update PSP 13.0.14 firmware * amdgpu: update GC 9.4.4 firmware * amdgpu: update PSP 14.0.5 firmware * amdgpu: update GC 11.5.3 firmware * amdgpu: update VPE 6.1.3 firmware * amdgpu: update PSP 14.0.4 firmware * amdgpu: update GC 11.5.2 firmware * amdgpu: update green sardine firmware * amdgpu: update arcturus firmware * amdgpu: update VCN 4.0.3 firmware * amdgpu: update PSP 13.0.6 firmware * amdgpu: update GC 9.4.3 firmware * amdgpu: update aldebaran firmware - Update to version 20260728 (git commit 543b8f5f987c): * amdgpu: DMCUB updates for various ASICs ==== kernel-firmware-ath10k ==== Version update (20260610 -> 20260809) - Update to version 20260809 (git commit 6f221d80d2fa): * ath10k: WCN3990 hw1.0: update board-2.bin ==== kernel-firmware-ath12k ==== Version update (20260610 -> 20260813) - Update to version 20260813 (git commit 984503d80fd6): * ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 ==== kernel-firmware-bluetooth ==== Version update (20260720 -> 20260828) - Update to version 20260828 (git commit b6bdea3726dc): * linux-firmware: Update firmware file for Intel BlazarIW core * linux-firmware: Update firmware file for Intel BlazarU core * linux-firmware: Update firmware file for Intel Scorpius core - Update to version 20260825 (git commit 0305399a8783): * QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - Update to version 20260821 (git commit 8c7fac62c0d1): * qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 ==== kernel-firmware-i915 ==== Version update (20260706 -> 20260806) - Update to version 20260806 (git commit 16d815da3637): * xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S ==== kernel-firmware-intel ==== Version update (20260610 -> 20260728) - Update to version 20260728 (git commit 543b8f5f987c): * intel_vpu: Update NPU firmware ==== kernel-firmware-iwlwifi ==== Version update (20260610 -> 20260820) - Update to version 20260820 (git commit f2ab551dea14): * iwlwifi: add Bz/Sc FW for core24.70-49 release * iwlwifi: Add Hr/Gf firmware for core24.70-49 release * iwlwifi: update ty/So/Ma firmwares for core24.70-49 release * iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - Update to version 20260703 (git commit c95059a3774b): * iwlwifi: add Bz/Sc FW for core24.60-33 release * iwlwifi: Add Hr/Gf firmware for core24.60-33 release * iwlwifi: update ty/So/Ma firmwares for core24.60-33 release * iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release ==== kernel-firmware-media ==== Version update (20260706 -> 20260813) - Update to version 20260813 (git commit 984503d80fd6): * qcom: vpu: add Gen2 firmware binary for Eliza - Update to version 20260731 (git commit a968c5c2962e): * qcom: venus-5.4: fix vp9 decoder assertion failure ==== kernel-firmware-mediatek ==== Version update (20260629 -> 20260825) - Update to version 20260825 (git commit 0305399a8783): * mediatek MT7925: update bluetooth firmware to 20260813113236 * linux-firmware: update firmware for MT7925 WiFi device - Update to version 20260813 (git commit 984503d80fd6): * linux-firmware: update firmware for MT7922 WiFi device - Update to version 20260805 (git commit 31883adc3365): * mediatek MT7922: update bluetooth firmware to 20260724143815 ==== kernel-firmware-network ==== Version update (20260610 -> 20260813) - Update to version 20260813 (git commit 984503d80fd6): * morsemicro: add firmware for mm8108 support - Update to version 20260806 (git commit 16d815da3637): * linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - Update to version 20260805 (git commit 31883adc3365): * airoha: update AN7583 NPU firmwares to version 0.5 ==== kernel-firmware-qcom ==== Version update (20260717 -> 20260828) - Update to version 20260828 (git commit b6bdea3726dc): * qcom: update CDSP firmware for x1e80100 platform * qcom: add QUPv3 firmware for nord * qcom: add HPASS firmware for nord platform * qcom/sa8775p: update signature on cdsp1 firmware - Update to version 20260820 (git commit f2ab551dea14): * qcom: add NSP firmware for nord platform * WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - Update to version 20260813 (git commit 984503d80fd6): * qcom: add CDSP firmware for eliza platform - Update to version 20260803 (git commit 73b4d58aba76): * qcom: Add gpu firmwares for Eliza chipset - Update to version 20260728 (git commit 543b8f5f987c): * qcom: Update qdsp6sw firmware for shikra platform * qcom: Update DSP firmware for qcs8300 platform ==== kernel-firmware-qlogic ==== Version update (20260610 -> 20260731) - Update to version 20260731 (git commit a968c5c2962e): * qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters ==== kernel-firmware-realtek ==== Version update (20260629 -> 20260731) - Update to version 20260731 (git commit a968c5c2962e): * rtw89: 8922d: add fw 0.35.113.2 - Update to version 20260728 (git commit 543b8f5f987c): * rtw88: add firmware v41.0.0 for RTL8723B ==== kernel-firmware-sound ==== Version update (20260706 -> 20260825) - Update to version 20260825 (git commit 0305399a8783): * cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop * linux-firmware: Upload firmware for tas2573 stereo * intel: avs: Add AudioDSP base firmware for LKF platforms * intel: avs: Update AudioDSP firmware for APL-based platforms * intel: avs: Update AudioDSP firmware for SKL-based platforms * intel: catpt: Update AudioDSP firmware for BDW platforms - Update to version 20260820 (git commit f2ab551dea14): * cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops * cirrus: cs42l45: Add new SSIDs for Dell laptops * cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop * cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - Update to version 20260813 (git commit 984503d80fd6): * cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - Update to version 20260803 (git commit 73b4d58aba76): * linux-firmware: Add firmware for new project - Update to version 20260731 (git commit a968c5c2962e): * cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - Update to version 20260728 (git commit 543b8f5f987c): * linux-firmware: Add firmware for new soundwire projects ==== kernel-firmware-ueagle ==== Version update (20260610 -> 20260703) - Update to version 20260703 (git commit c95059a3774b): * ueagle-atm: sadly drop unlicensed files ==== libheif ==== Version update (1.23.1 -> 1.23.2) - Update to version 1.23.2: * CVE-2026-XXXXX (GHSA-g89c-p67h-r497) Heap buffer overflow in scale_nearest_neighbor() via duplicate alpha planes from nested iden/auxl items. (critical) * (GHSA-2jg2-4ch7-h545) Out-of-bounds read and write in derived- item and pixel-plane handling. Through iden and auxl item chains, a crafted file could attach pixel planes whose size differs from the image geometry; crop, scale, and plane- extraction code then indexed those planes with the wrong size. A working code-execution exploit was confirmed. Plane sizes are now validated wherever they are consumed. (critical) * CVE-2026-XXXXX (GHSA-24wx-9w62-c96w) brotli/zlib decompression of mime metadata and unci image data had no effective output- size limit, so a decompression bomb could exhaust memory. Decompressed output is now bounded by the security limits. (high) * CVE-2026-XXXXX (GHSA-x8xm-cm2c-cfc8) Chains of derived-image references (grid, iovl, iden) bypassed decode caching and memory limits, causing CPU and memory amplification. (high) * CVE-2026-XXXXX (GHSA-xw34-mjcp-jqh8) Sequence sample-timing initialization could produce non-terminating decode loops and unbounded memory, bypassing max_sequence_frames. (high) * CVE-2026-XXXXX (GHSA-j264-xvrp-5v7q) Out-of-bounds write in the unci encoder when heif_context_add_image_tile() is given a tile whose planes do not match its declared size. (high) * CVE-2026-XXXXX (GHSA-p58j-h3vm-3fp5) Heap out-of-bounds read in the inline-mask region API when mask_data_len does not match the region geometry. (medium) * C++ exceptions such as std::bad_alloc can no longer escape the C API read/decode entry points; they are returned as a heif_error instead of aborting the process * assert()s in the pixel-image plane allocation were replaced by runtime errors * stts/ctts tables describing more samples than the track can have are rejected * pclr (JPEG 2000 palette) box: the number of palette entries is bounded by the box size * BitReader::skip_bytes() is now constant time (fixes a fuzzer timeout on bogus alignment values) * iden items now validate the decoded image size like all other items * The uncompressed (unci) encoder rejects images without pixel planes * meta, mini, and moov boxes with size 0 (extending to the end of the file) are now parsed correctly * Fixed an integer overflow when probing the file size * Fixed undefined behavior (signed shift) when reading the NAL unit length in the OpenH264 decoder * heif_region_item_add_region_inline_mask_data() now requires non-zero width and height and the mask_data_len must equal the expected (width * height + 7) / 8; otherwise it returns an error instead of storing the mask * heif_image_add_plane() returns an error instead of aborting for bit depths outside 1..128 or interleaved component counts outside 1..255 ==== patterns-kde ==== Version update (20260428 -> 20260830) - Drop Leap 15 recommends from spec file - Recommend libreoffice-qt6 when installing the KDE Office pattern rather than libreoffice-qt5 (boo#1277445) ==== qca-qt6 ==== Version update (2.3.10 -> 2.3.12) Subpackages: libqca-qt6-2 - Update to version 2.3.12: * Update rootcerts.pem * Increase version number * CI: gitlab-templates/linux.yml is gone * qca-ossl: do not dereference a DH key that failed to generate * qca-ossl: load the default OpenSSL provider explicitly (kde#482819) * CI: Add build with openssl4 * Update rootcerts.pem * CI: A bit of janitoring * Increase version number * Define QCA_FULL_INCLUDE_INSTALL_DIR after USE_RELATIVE_PATHS has been processed * Compile with openssl4 * CI: Remove fedora 34 build * Remove FreeBSD Qt5 build ==== zvbi ==== Version update (0.2.44 -> 0.2.45) - update to 0.2.45: * Update Swedish translations. * Update Cyrillic characters for Bulgarian/Russian/Ukranian. * Fix missing subtitles, revert C4_ERASE_PAGE patch from libzvbi 0.2.42. * Apply security updates.