Packages changed: 389-ds (3.1.2~git24.744df65e -> 3.1.2~git55.7fbd4526) AppStream AppStream-qt6 Mesa Mesa-drivers abseil-cpp (20250127.0 -> 20250127.1) bind (9.20.5 -> 9.20.7) ca-certificates-mozilla cfitsio cnf (0.6.0~0 -> 0.7.1~0) cpio dbus-1-glib dvd+rw-tools evince fuse3 (3.16.2 -> 3.17.1) gcc15 gdb gegl (0.4.56 -> 0.4.58) gimp (3.0.0 -> 3.0.2) git gnome-calculator (48.0 -> 48.0.2) gnome-control-center (47.4 -> 48.0) gnome-maps (48.0 -> 48.1) gnome-remote-desktop (48.rc -> 48.0) gnome-shell (48.0 -> 48.0+6) gnome-text-editor (48.1 -> 48.2) gnutls grub2 gtk2 gtkmm3 (3.24.9 -> 3.24.10) gtkmm4 (4.17.0 -> 4.18.0) harfbuzz (10.4.0 -> 11.0.0) hwdata (0.392 -> 0.393) jasper (4.2.4 -> 4.2.5) kernel-firmware-amdgpu (20250318 -> 20250322) kernel-firmware-ath10k kernel-firmware-bluetooth kernel-firmware-media kernel-firmware-mediatek kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qcom kernel-firmware-sound (20250318 -> 20250321) kernel-source (6.13.7 -> 6.13.8) libarchive (3.7.7 -> 3.7.8) libcap (2.73 -> 2.75) libevdev (1.13.3 -> 1.13.4) libffi (3.4.6 -> 3.4.7) libidn (1.42 -> 1.43) libinput (1.27.1 -> 1.28.0) liblognorm libmaxminddb (1.10.0 -> 1.12.2) libostree (2025.1 -> 2025.2) librist (0.2.10 -> 0.2.11) libsoup (3.6.4 -> 3.6.5) libusb-1_0 (1.0.27 -> 1.0.28) libvirt libwacom (2.14.0 -> 2.15.0) libxfce4ui (4.20.0 -> 4.20.1) libxfce4util (4.20.0 -> 4.20.1) linux-glibc-devel (6.13 -> 6.14) meson microos-tools (4.0+git10 -> 4.0+git11) mousepad (0.6.3 -> 0.6.4) nautilus (47.2 -> 48.0) ncurses (6.5.20250308 -> 6.5.20250315) openSUSE-release (20250324 -> 20250329) openssl-3 ovmf (202411 -> 202502) patterns-base patterns-gnome perl poppler (25.02.0 -> 25.03.0) poppler-qt6 (25.02.0 -> 25.03.0) python-Pillow python-cryptography (44.0.1 -> 44.0.2) python-cssselect (1.2.0 -> 1.3.0) python-linux-procfs python-pyinotify rasqal rsyslog salt sdbootutil (1+git20250311.8d3db8b -> 1+git20250327.9714cbd) selinux-policy (20250318 -> 20250324) sendmail snappy soxr spiel srt sscep strace (6.13 -> 6.14) suitesparse (7.8.3 -> 7.10.1) texlive tiff timezone (2025a -> 2025b) tpm2.0-abrmd tuned uchardet vid_stab vim (9.1.1176 -> 9.1.1244) woff2 xdg-desktop-portal-gtk (1.15.2 -> 1.15.3) xfce4-panel (4.20.3 -> 4.20.4) xfce4-session (4.20.0 -> 4.20.2) xscreensaver yaml-cpp === Details === ==== 389-ds ==== Version update (3.1.2~git24.744df65e -> 3.1.2~git55.7fbd4526) Subpackages: lib389 libsvrcore0 - Add python-psutil requires (boo#1240340). - bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service - Update to version 3.1.2~git55.7fbd4526: * Security fix for CVE-2025-2487 * Issue 6500 - Fix covscan and ASAN issue * Issue 6571 - Nested group does not receive memberOf attribute (#6679) * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677) * Issue 6671 - tombstone_fixup_test sometime fails on bdb * Issue 6680 - instance read-only mode is broken (#6681) * Issue 6683 - test_healthcheck_replication_out_of_sync_broken mail fail (#6684) * Ignore replica busy condition in healthcheck (#6630) * Issue 6613 - test_reindex_task_creates_abandoned_index_file fails (#6674) * Issue 6663 - CLI - add error log JSON settings to dsconf * Issue 6663 - RFE - Add option to write error log in JSON * Issue 6665 - UI - Need to refresh log settings after saving * Issue 6639 - Fix crash in upgrade when removing subtree name attribute * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657) * Issue 6655 - fix replication release replica decoding error * Issue 6653 - Cleanup error messages * Issue 6639 - remove all the code related to entryrdn_get_switch * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610) * Issue 6632 - Replication init fails with ASAN build * Issue 6625 - UI - various fixes part 3 * Revert "Issue #6562 - Prevent undefined behaviour in in filter_stuff_func (#6563)" (#6634) * Issue 6625 - UI - fix next round of bugs * Issue 6599 - Access JSON logging - lib389/CI/minor fixes * Issue #6562 - Prevent undefined behaviour in in filter_stuff_func (#6563) * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602) * Issue 6327 - Fix incorrect sizeof() usage for pointer in get_ip_str() function (#6629) * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607) * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620) * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618) * Issue 6625 - UI - fix various issues with LDAP browser, etc * Issue 6623 - UI - Generic updates (#6624) ==== AppStream ==== Subpackages: libappstream5 - build with PIE mode also when using gcc13 (bsc#1239941) ==== AppStream-qt6 ==== - build with PIE mode also when using gcc13 (bsc#1239941) ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1 - Fix regression in winsys/amdgpu (boo#1239657) revert_8c91624614c1f939974fe0d2d1a3baf83335cecb.patch https://gitlab.freedesktop.org/mesa/mesa/-/issues/12809 https://gitlab.freedesktop.org/mesa/mesa/-/commit/8c91624614c1f939974fe0d2d1a3baf83335cecb ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva - Fix regression in winsys/amdgpu (boo#1239657) revert_8c91624614c1f939974fe0d2d1a3baf83335cecb.patch https://gitlab.freedesktop.org/mesa/mesa/-/issues/12809 https://gitlab.freedesktop.org/mesa/mesa/-/commit/8c91624614c1f939974fe0d2d1a3baf83335cecb ==== abseil-cpp ==== Version update (20250127.0 -> 20250127.1) Subpackages: libabsl_2501_0_0 libabsl_lite_2501_0_0 - Update to 20250127.1: * Improved Bazel support * Added ABSL_ATTRIBUTE_VIEW and ABSL_ATTRIBUTE_OWNER for diagnosing certain lifetime issues * Many performance improvements * potential integer overflow in hash container create/resize fixed again - boo#1236438 ==== bind ==== Version update (9.20.5 -> 9.20.7) Subpackages: bind-doc bind-utils - Upgrade to release 9.20.7 New Features: * Implement the min-transfer-rate-in configuration option. A new option min-transfer-rate-in has been added to the view and zone configurations. It can abort incoming zone transfers that run very slowly due to network-related issues, for example. The default value is 10240 bytes in five minutes. [GL [#3914]] * Add HTTPS record query to host command line tool. The host command was extended to also query for the HTTPS RR type by default. * Implement sig0key-checks-limit and sig0message-checks-limit. Previously, a hard-coded limitation of a maximum of two key or message verification checks was introduced when checking a message’s SIG(0) signature, to protect against possible DoS attacks. Two as a maximum was chosen so that more than a single key should only be required during key rotations, and in that case two keys are enough. It later became apparent that there are other use cases where even more keys are required; see the related GitLab issue for examples. This change introduces two new configuration options for the views: sig0key-checks-limit and sig0message-checks-limit. They define how many keys can be checked to find a matching key, and how many message verifications are allowed to take place once a matching key has been found. The former provides slightly less “expensive” key parsing operations and defaults to 16. The latter protects against expensive cryptographic operations when there are keys with colliding tags and algorithm numbers; the default is 2. [GL #5050] * Adds support for EDE code 1 and 2. Support was added for EDE codes 1 and 2, which might occur during DNSSEC validation in the case of an unsupported RRSIG algorithm or DNSKEY digest. [GL #2715] * Add an rndc command to toggle jemalloc profiling. The new command is rndc memprof; the memory profiling status is also reported inside rndc status. The status shows whether named can toggle memory profiling, and whether the server is built with jemalloc. [GL #4759] * Add support for multiple extended DNS errors. The Extended DNS Error (EDE) mechanism may raise errors during a DNS resolution. named is now able to add up to three EDE codes in a DNS response. If there are duplicate error codes, only the first one is part of the DNS response. [GL #5085] * Print the expiration time of stale records. BIND now prints the expiration time of any stale RRsets in the cache dump. Bug Fixes: * Fix dual-stack-servers configuration option. The dual-stack-servers configuration option was not working as expected; the specified servers were not being used when they should have been, leading to resolution failures. This has been fixed. [GL #5019] * Fix a data race causing a permanent active client increase. Previously, a data race could cause a newly created fetch context for a new client to be used before it had been fully initialized, which would cause the query to become stuck; queries for the same data would be either paused indefinitely or dropped because of the clients-per-query limit. This has been fixed. [GL #5053] * Fix deferred validation of unsigned DS and DNSKEY records. When processing a query with the “checking disabled” bit set (CD=1), named stores the invalidated result in the cache, marked “pending”. When the same query is sent with CD=0, the cached data is validated and either accepted as an answer, or ejected from the cache as invalid. This deferred validation was not attempted for DS and DNSKEY records if they had no cached signatures, causing spurious validation failures. The deferred validation is now completed in this scenario. Also, if deferred validation fails, the data is now re-queried to find out whether the zone has been corrected since the invalid data was cached. [GL #5066] * Fix RPZ race condition during a reconfiguration. With RPZ in use, named could terminate unexpectedly because of a race condition when a reconfiguration command was received using rndc. This has been fixed. [GL #5146] * “CNAME and other data check” not applied to all types. An incorrect optimization caused “CNAME and other data” errors not to be detected if certain types were at the same node as a CNAME. This has been fixed. [GL #5150] * Relax private DNSKEY and RRSIG constraints. DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to allow empty key and signature material after the algorithm identifier for PRIVATEOID and PRIVATEDNS. It is arguable whether this falls within the expected use of these types, as no key material is shared and the signatures are ineffective, but these are private algorithms and they can be totally insecure. [GL #5167] * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse(). Previously, when parsing responses, named incorrectly rejected responses without matching RRSIG records for NSEC/DS/NSEC3 records in the authority section. This rejection, if appropriate, should have been left for the validator to determine and has been fixed. [GL #5185] * Fix TTL issue with ANY queries processed through RPZ “passthru”. Answers to an “ANY” query which were processed by the RPZ “passthru” policy had the response-policy’s max-policy-ttl value unexpectedly applied. This has been fixed. [GL #5187] * dnssec-signzone needs to check for a NULL key when setting ... changelog too long, skipping 49 lines ... situations. This has been fixed. [GL #5137] ==== ca-certificates-mozilla ==== - Fix awk to compare (missing a =) and give the following output: [#] NSS_BUILTINS_LIBRARY_VERSION "2.74" - pass file argument to awk (bsc#1240009) ==== cfitsio ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS on cmake4 ==== cnf ==== Version update (0.6.0~0 -> 0.7.1~0) Subpackages: cnf-bash cnf-zsh - do not auto update vendored dependencies - fixes Leap 15.6 build problem - Update to version 0.7.1~0: * Leap 15.6 compatibility - Update to version 0.7.0~0: * added esperanto translations (#16) * Problem: dependabot alert for shlex (#9) * Powershell note (#11) * Problem #14: es (Esperanto) file is in Greek language (#15) * fix all clippy warnings (#17) * Update dependencies and raise version (#18) * Update README.md (#12) ==== cpio ==== Subpackages: cpio-mt - Use -std=gnu11 to avoid extra diagnostics when calling an unprototyped function which is no longer possible with C23, the new default with GCC 15. ==== dbus-1-glib ==== - Fix build with GCC 15 via exporting -std=gnu17 to cflags. GCC 15 defaults to C23, but the latest release is from 2021, and this is deprecated upstream and no longer under development. ==== dvd+rw-tools ==== - add 10-blue-ray-bug713016.patch * Fix spurious "CLOSE SESSION failed" on BD-R ==== evince ==== Subpackages: evince-plugin-pdfdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Add evince-kpathsea.patch: Fix build with gcc 15 (patch lifted from fedora). ==== fuse3 ==== Version update (3.16.2 -> 3.17.1) - Update to release 3.17.1 * Added support for filesystem passthrough read/write when FUSE_PASSTHROUGH capability is enabled * New API: fuse_passthrough_open() and fuse_passthrough_close() * Added fmask and dmask options to high-level API for separate permission masks for files and directories * Added signal handling with backtrace printing (fuse_set_fail_signal_handlers()) * Added syslog support for fuse_log() messages * New API: fuse_log_enable_syslog() and fuse_log_close_syslog() * Added thread names to libfuse threads ==== gcc15 ==== Subpackages: cpp15 libasan8 libatomic1 libgcc_s1 libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libstdc++6 libstdc++6-pp libtsan2 libubsan1 - Disable build of glibc cross to loongarch64 and hppa in SLFO. ==== gdb ==== - Patches added: * gdb-testsuite-fix-gdb.threads-access-mem-running-thr.patch - Patches updated (bsc#1240047): * gdb-add-rpm-suggestion-script-suse.patch - Patches added (bsc#1240047): * gdb-6.6-buildid-locate-tests-suse.patch - Update to fedora rawhide @ 8d5adc7. - Maintenance script import-fedora.sh: * Remove gdb-6.6-buildid-locate-misleading-warning-missing-debuginfo-rhbz981154.patch and gdb-remove-use-of-py-isascii from skip_patches. - Patches dropped: * gdb-6.6-buildid-locate-solib-missing-ids.patch * gdb-6.6-buildid-locate.patch * gdb-python-avoid-depending-on-the-curses-library.patch * gdb-6.6-buildid-locate-rpm-suse.patch - Patches added: * gdb-6.6-buildid-locate-tests.patch * gdb-add-deprecated-settings-py-script.patch * gdb-backport-buildid-related-changes.patch * gdb-remove-qnx-neutrino-support.patch * fixup-gdb-add-rpm-suggestion-script.patch * gdb-add-rpm-suggestion-script-suse.patch * gdb-build-fix-unused-var-in-corelow.c.patch - Patches updated: * gdb-add-rpm-suggestion-script.patch - Mention bsc#1216488. ==== gegl ==== Version update (0.4.56 -> 0.4.58) Subpackages: gegl-0_4 libgegl-0_4-0 typelib-1_0-Gegl-0_4 - Update to version 0.4.58: - dither: fixed crash when applied to pixels with negative pixel coordinates. ==== gimp ==== Version update (3.0.0 -> 3.0.2) Subpackages: gimp-plugin-aa gimp-plugin-python3 libgimp-3_0-0 libgimpui-3_0-0 - Update to 3.0.2 This is a bug-fix only release. - Core: - Mark some strings translatable. - Fix crash when choosing a brush in grid view. - Windows: temporary revert of some Input Device handling code which was breaking pressure sensitivity for some graphics tablets (though this revert may make issues with the eraser tip). - Fix crash when choosing a non-existing font in text tool options. - Tools: - Reorder Line Art Detection options per design decision. - Graphical User Interface: - Keep headerbar color consistent when out of focus. - Histogram uses the luminance value of the foreground color as a threshold to lighten or darken the border color for contrast with the histogram itself. - Improve separation between panels in dark theme. - Add default response for GimpQueryBox dialogues. - Spacing between toolbox widgets improved. - GimpSpinScale slider colors inverted. - New icons: "gimp-toggle-on" and "gimp-toggle-off" and using them in the Search Action's list as icons for toggle actions. - Plug-ins: - Python Console uses the luminance of the background color for error text. - Metadata Editor: fix buffer overflow. - Gradient Flare: fix crash when setting the size to 0. - Screenshot: X11 implementation is bypassed (in favor of portals) when running on XWayland. - Build: - Various packaging fixes and cleanup. - The Windows installer now prompts (only in user installation) about deleting GIMP config files when uninstalling. - GEGL 0.4.58 is now our minimum requirement. - Windows installer: create Restore Point on system-wide install. ==== git ==== Subpackages: git-core git-email git-svn git-web perl-Git - Add support of SHA256 git repo for gitk (bsc#1239989): 0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch 0002-gitk-Add-auto-select-length-preference-for-SHA256.patch ==== gnome-calculator ==== Version update (48.0 -> 48.0.2) Subpackages: gnome-shell-search-provider-gnome-calculator - Update to version 48.0.2: + Fix building with non-nightly vala. - Update to version 48.0.1: + Code cleanup and minor improvements. + Allow scrolling the display using scroll wheel. + Fixed conversions not working. ==== gnome-control-center ==== Version update (47.4 -> 48.0) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces gnome-control-center-users - Drop gnome-control-center-users-page-Don-t-show-the-system-accounts.patch: fixed upstream. - Rebase gnome-control-center-bring-back-firewall-zone.patch (bsc#1239711). - Drop gnome-control-center-info-fix-distro-logo.patch: not needed any more. - Update to version 48.0 + Display - Improve accessibility of HDR Brightness row. - Fix setting luminance scale adjustment on rebuild. + Power: Add power consumption notice when disabling suspend (EU regulation). + Various translation updates. + Various CI fixes. - Drop use of sle_version in favor of is_opensuse and suse_version. Sle_version is no longer used in SLE 16. - Update to version 48.rc.1: + Include subprojects/libgxdp in the release tarball + Pin the revision of libgxdp wrap file + Wellbeing: Fix type in a gtk_widget_dispose_template() call + Updated translations. - Update to version 48.rc: + Applications: Add Global Shortcuts Provider frontend dialog + Displays: Add HDR luminance settings UI + Power: - Add a translator comment about "Battery Charging" string - Use new UPower power-profiles-daemon DBus API + Sound: Fix styling of sound test button + Users: Synchronize fingerprint enrollment feedback strings with fprintd + Wellbeing: - Fix translatability of ‘average $weekday’ strings - Support locales where the week starts on a Saturday - Add missing includes for _NL_TIME_FIRST_WEEKDAY code path - Block settings change notifications while updating them - Fix delayed-apply of movement break settings + Wifi: Disable activation for rows in Saved Wi-Fi Networks dialog + Updated translations. - Add new libgxdp-0 git submodule following upstream changes. - Update to version 48.beta: + Make search bar always grab focus with shortcuts + Fix a memory leak in CcMaskPaintable (used for illustrations) + Fix missing icons in Mouse/Wacom/WWAN settings (ship our own icons) + Add single-panel-mode for distros to launch Settings in a single panel (without sidebar) + Use static hostname instead of pretty hostname (hostnamed) in URLs + Dependency updates: gnome-settings-daemon >= 48.alpha.1 + Device Security: Don't hardcode height of "help" dialog + Display: Add monitor HDR setting + Keyboard: - Rename old "logout" media key name to "Power Off" - Add new media keys shortcuts for "Restart" and "Logout" - Port shortcuts dialog to AdwDialog + Mouse: Use AdwToggleGroup in the "Primary Button" settings + Region: - Port Format Chooser to AdwPreferencesPage - Inform accountsservice of all configured languages + Sound: Filter out NULL stream names in Volume Levels settings + Thunderbolt: Fix unescaped string in device status dialog + Wellbeing: - Add screen time support - Use gtk_widget_set_child_visible in allocate - Various accessibility/navigation/esthetic improvements - Split data collection and limits settings + Updated translations. ==== gnome-maps ==== Version update (48.0 -> 48.1) - Update to version 48.1: + Fix correctly calculating timezone offsets in MOTIS results, so timestamps gives correct values for daylight savings time. + Updated translations. ==== gnome-remote-desktop ==== Version update (48.rc -> 48.0) - Update to version 48.0: + Updated translations. ==== gnome-shell ==== Version update (48.0 -> 48.0+6) Subpackages: gnome-extensions gnome-shell-calendar - Update to version 48.0+6: * slider: Align handle size with with pixel grid * slider: Use correct handle size when calculating rightmost position * Revert "ci: Disable container building temporarily" * Revert "ci: Disable sysext temporarily" * Updated translations. ==== gnome-text-editor ==== Version update (48.1 -> 48.2) - Update to version 48.2: + Break out of recursive Policy-Kit authorization requests from user-cancellation. + Do not re-display position label as side-effect of auto-save. + Updated translations. ==== gnutls ==== Subpackages: libgnutls-dane0 libgnutls30 - FIPS: Mark SHA-1 as non-approved in the SLI for all operations. [jsc#PED-12224] * Add gnutls-FIPS-disable-mac-sha1.patch - bsc#1237101, FIPS selfcheck fails on tumbleweed * Match dependent library names ( nettle, gmp, hogweed ) even when they include full verison in soname * Add gnutls-fips-sonames-check.patch ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-common grub2-snapper-plugin grub2-systemd-sleep-plugin - Filter out the non-subvolume btrfs mount points when creating the relative path (bsc#1239674) * grub2-btrfs-filter-non-subvol-mount.patch ==== gtk2 ==== Subpackages: gtk2-data gtk2-tools libgtk-2_0-0 - Export -std=gnu99 to cflags, fix build with gcc 15. GCC 15 defaults to C23. gtk+ 2.x entered maintenance mode upstream prior to C11, is now no longer under development, and therefore should not be expected to compile to newer standards. ==== gtkmm3 ==== Version update (3.24.9 -> 3.24.10) - Update to version 3.24.10: + Documentation: - gtkmm.h: Don't link to library.gnome.org/devel. - Don't link to library.gnome.org or removed parts of developer.gnome.org. - Gtk::AboutDialog: Update the image. + Meson build: - Require meson >= 0.60 - Use the Python installation that Meson uses. - If GTKMM_NO_DIST_TESTS is defined, 'meson dist' does not run test programs. - Drop gtkmm3-docs-without-timestamp.patch: no longer needed. ==== gtkmm4 ==== Version update (4.17.0 -> 4.18.0) - Update to version 4.18.0: + Gdk: - CairoContext: Deprecate cairo_create(). - Device: Add get/property_active_layout_index(), get/property_layout_names(). - Surface: Add translate_coordinates(), deprecate create_cairo_context(). + Gtk: - Accessible: Add update_platform_state(). - HeaderBar, WindowControls: Add get/set/property_use_native_controls(). - Widget: Add get/set/property_limit_events(). + Documentation: - Gtk::SignalListItemFactory: Remove errroneous links. - Gtk::AboutDialog: Update the image. - Gtk::ConstraintLayout: Add a link to the description of GtkConstraintLayout. - Gdk::Pixbuf, PixbufFormat, PixbufLoader: Add class descriptions. + Build: - Require gtk4 >= 4.17.5 - Meson build: Use the Python installation that Meson uses. ==== harfbuzz ==== Version update (10.4.0 -> 11.0.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 11.0.0: + There are three new font-functions implementations (integrations) in this release: - hb-coretext has gained one, calling into the CoreText library. - hb-directwrite has gained one, calling into the DirectWrite library. - hb-fontations has gained one, calling into the Skrifa Rust library. - All three are mostly useful for performance and correctness testing, but some clients might find them useful. + An API is added to use them from a single API by providing a backend name string: hb_font_set_funcs_using() + Several new APIs are added, to load a font-face using different "face-loaders", and a single entry point to them all using a loader name string: - hb_ft_face_create_from_file_or_fail() and hb_ft_face_create_from_blob_or_fail(). - hb_coretext_face_create_from_file_or_fail() and hb_coretext_face_create_from_blob_or_fail(). - hb_directwrite_face_create_from_file_or_fail() and hb_directwrite_face_create_from_blob_or_fail(). - hb_face_create_from_file_or_fail_using() + All drawing and painting operations using the default, hb-ot functions have become memory allocation-free. + Several performance optimizations have been implemented. + Application of the trak table during shaping has been improved. + The directwrite shaper now supports font variations, and correctly applies user features. + The hb-directwrite API and shaper has graduated from experimental. + Various bug fixes and other improvements. ==== hwdata ==== Version update (0.392 -> 0.393) - Update to version 0.393: * Update pci, usb and vendor ids * Fix usb.ids encoding and a couple of typos * Fix configure to honor --prefix ==== jasper ==== Version update (4.2.4 -> 4.2.5) - Update to 4.2.5: * Made a change to a configuration header file in order to avoid undesirable compiler warnings when JasPer is used in C++ code (#393). ==== kernel-firmware-amdgpu ==== Version update (20250318 -> 20250322) - Fix a typo in download URL - Update to version 20250322 (git commit 710a336b3198): * amdgpu: update dcn 4.01 firmware to 0.1.3.0 * amdgpu: update dcn 3.5 firmware to 0.1.0.0 - Update kernel-firmware-tools scripts to be downloadable ==== kernel-firmware-ath10k ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-bluetooth ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-media ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-mediatek ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-nvidia ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-platform ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-qcom ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-sound ==== Version update (20250318 -> 20250321) - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update to version 20250321 (git commit e61b8981aeef): * cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - Update to version 20250320 (git commit a60087f7c925): * cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - Update kernel-firmware-tools scripts to be downloadable ==== kernel-source ==== Version update (6.13.7 -> 6.13.8) Subpackages: kernel-64kb kernel-default - Revert "Update config files. Disable OVPN temporarily." This reverts commit bca56f08ab2271cfe4d6ff271d57fb773cca295c. The issue has been fixed. - commit 7089702 - Refresh patches.suse/drm-amd-display-Use-HW-lock-mgr-for-PSR1-when-only-o.patch. Update upstream status. - commit 614d9ea - Revert "gre: Fix IPv6 link-local address generation." (git-fixes). - commit 5d9714b - Linux 6.13.8 (bsc#1012628). - mm: fix kernel BUG when userfaultfd_move encounters swapcache (bsc#1012628). - userfaultfd: fix PTE unmapping stack-allocated PTE copies (bsc#1012628). - mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq (bsc#1012628). - virt: sev-guest: Move SNP Guest Request data pages handling under snp_cmd_mutex (bsc#1012628). - fbdev: hyperv_fb: iounmap() the correct memory when removing a device (bsc#1012628). - pinctrl: bcm281xx: Fix incorrect regmap max_registers value (bsc#1012628). - pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw (bsc#1012628). - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template (bsc#1012628). - ice: do not configure destination override for switchdev (bsc#1012628). - ice: fix memory leak in aRFS after reset (bsc#1012628). - ice: Fix switchdev slow-path in LAG (bsc#1012628). - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around (bsc#1012628). - netfilter: nf_tables: make destruction work queue pernet (bsc#1012628). - sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1012628). - wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms (bsc#1012628). - wifi: mac80211: don't queue sdata::work for a non-running sdata (bsc#1012628). - wifi: cfg80211: cancel wiphy_work before freeing wiphy (bsc#1012628). - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (bsc#1012628). - Bluetooth: hci_event: Fix enabling passive scanning (bsc#1012628). - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" (bsc#1012628). - net/mlx5: Fill out devlink dev info only for PFs (bsc#1012628). - net: dsa: mv88e6xxx: Verify after ATU Load ops (bsc#1012628). - net: mctp i3c: Copy headers if cloned (bsc#1012628). - net: mctp i2c: Copy headers if cloned (bsc#1012628). - netpoll: hold rcu read lock in __netpoll_send_skb() (bsc#1012628). - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed (bsc#1012628). - fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs (bsc#1012628). - fbdev: hyperv_fb: Simplify hvfb_putmem (bsc#1012628). - fbdev: hyperv_fb: Allow graceful removal of framebuffer (bsc#1012628). - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (bsc#1012628). - net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1012628). - eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1012628). - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (bsc#1012628). - eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic (bsc#1012628). - eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1012628). - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (bsc#1012628). - eth: bnxt: fix memory leak in queue reset (bsc#1012628). - net: switchdev: Convert blocking notification chain to a raw one (bsc#1012628). - net: mctp: unshare packets when reassembling (bsc#1012628). - bonding: fix incorrect MAC address setting to receive NS messages (bsc#1012628). - selftests: bonding: fix incorrect mac address (bsc#1012628). - rtase: Fix improper release of ring list entries in rtase_sw_reset (bsc#1012628). - wifi: mac80211: fix MPDU length parsing for EHT 5/6 GHz (bsc#1012628). - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1012628). - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (bsc#1012628). - net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1012628). - netfilter: nft_exthdr: fix offset with ipv4_find_option() (bsc#1012628). - gre: Fix IPv6 link-local address generation (bsc#1012628). - net: openvswitch: remove misbehaving actions length check (bsc#1012628). - Revert "openvswitch: switch to per-action label counting in conntrack" (bsc#1012628). ... changelog too long, skipping 325 lines ... - commit 41f5788 ==== libarchive ==== Version update (3.7.7 -> 3.7.8) - Update to 3.7.8: * 7zip reader: add SPARC and POWERPC filter support for non-LZMA compressors * tar reader: Ignore ustar size when pax size is present * tar writer: Fix bug when -s/a/b/ used more than once with b flag * libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter * libarchive: Adding missing seeker function to archive_read_open_FILE() - inludes the previously patched security fixes, dropping: CVE-2025-1632.patch, CVE-2025-25724.patch, CVE-2024-57970.patch ==== libcap ==== Version update (2.73 -> 2.75) - update to 1.2.75: * go related fixes - includes changes from 1.2.74: * Group syntax parsing bugfix for pam_cap * Doc typo fix for cap_get_proc.3 * Fix transitive include in capsh.c * go related changes ==== libevdev ==== Version update (1.13.3 -> 1.13.4) - update to 1.13.4 * Always push changed mt events when syncing ==== libffi ==== Version update (3.4.6 -> 3.4.7) - Update to 3.4.7: - Drop upstreamed patch: * 830.patch ==== libidn ==== Version update (1.42 -> 1.43) - update to 1.43: * The release tarball is now reproducible * A use of uninitialized value bug was fixed in idna_to_unicode_4z4z * Unicode tables are now rebuilt from source again * Update gnulib files and build fixes ==== libinput ==== Version update (1.27.1 -> 1.28.0) Subpackages: libinput-udev libinput10 - Update to release 1.28 * Support for three-finger drag for touchpads. * On tablets the pressure range is now correctly tracked per tablet. - Use %udev_hwdb_update in %posttrans to update udev hwdb. On recent distros such as TW, this should not be necessary at all as the hwdb is automatically updated via the rpm file triggers mechanism. However, the explicit call to update the hwdb is kept in case the spec file is also used for older ditros. The call is also done from %posttrans where we know that udev is fully functional without the need of `Requires(post): udev`. ==== liblognorm ==== - build with pcre2, add liblognorm-2.0.6-pcre2.patch ==== libmaxminddb ==== Version update (1.10.0 -> 1.12.2) - update to 1.12.2: * fix memory leaks * MMDB_get_entry_data_list() now always sets the passed entry_data_list parameter to either NULL or valid memory. This makes it safe for callers to use MMDB_free_entry_data_list() on it even in case of error. * more build system tweaks ==== libostree ==== Version update (2025.1 -> 2025.2) Subpackages: libostree-1-1 - Update to version 2025.2: + sign: Support generic "spki" type of commit signatures + boot: Drop ostree-finalize-staged.path + bug fixes ==== librist ==== Version update (0.2.10 -> 0.2.11) - update to 0.2.11: * Adds support for ephemeral listening ports, which allows for adding or taking down ports, primarily for new connections, after initialization * Adds a sender function rist_sender_npd_get to obtain current status of null_packet_deletion in client code * Adds a new function rist_peer_get_cname to allow for the extraction of the private cname property of a peer * various bug fixes and code improvements ==== libsoup ==== Version update (3.6.4 -> 3.6.5) Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0 - Update to version 3.6.5: + session: Strip authentication credentials on cross-origin redirects + build: Use pkg-config instead of krb5-config for the gssapi dependency + http1: When using chunked encoding report an error in case of unexpected stream end + http2: - When a message has no content still respect its Content-Type - Revert manual window size management temporarily, as it could stall + sniffer: Fix potential overflows + hsts: Fix minor leak + headers: Fix a few parsing edge cases that could be an out of bound read + connection: Avoid ever calling disconnect twice + auth-digest: Fix handling when a nonce isn't present + cookies: - Limit max size of max-age, path, and domain attributes to 1024 bytes - Limit max size of name and value to 4096 bytes + docs: Remove references to old libsoup domain + Reintroduce some thread-safety to SoupSession (see https://libsoup.gnome.org/libsoup-3.0/client-thread-safety.html) Numerous API have been changed which is documented on https://libsoup.gnome.org - Replace pkgconfig(krb5) with pkgconfig(krb5-gssapi) BuildRequires: Following upstream changes, and stop passing krb5_config="$(which krb5-config)" to meson setup, no longer needed nor recognized. ==== libusb-1_0 ==== Version update (1.0.27 -> 1.0.28) - Update to version 1.0.28 * New libusb_get_ssplus_usb_device_capability_descriptor API for query of SuperSpeed+ Capability Descriptors * API support for reporting USB 3.2 Gen2x2 speeds * macOS: Fix Zero-Length Packet for multiple packets per frame * Windows: Base HID device descriptor on OS-cached values * Build fixes for Haiku and SunOS * Many code correctness fixes ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-libs - spec: Disable rbd storage driver for SLFO bsc#1239836 ==== libwacom ==== Version update (2.14.0 -> 2.15.0) Subpackages: libwacom-data libwacom9 - update to 2.15.0 * New devices: - Still more tablet definitions (#841) - add XP Pen Innovator 16 definition & layout - Support for XP-Pen Deco Pro S - Add Lenovo Slim Pen - Add the XP Pen Deco01 v3 - Add 3rd gen Intuos Pro devices * Device fixes: - fix duplicate button listing for the DTI-520 - Remove duplicate of the ISDv4 2d1f 0040 tablet * Device other: - Add AliasOf keyword to wacom.stylus - prefix all styli with a vendor ID - prefix the wacom 2d1f ISDv4 devices with wacom - Allow for a bustype of 0 on real devices - Add support for getting the target mode for a modeswitch button ==== libxfce4ui ==== Version update (4.20.0 -> 4.20.1) Subpackages: libxfce4kbd-private-3-0 libxfce4ui-2-0 libxfce4ui-lang libxfce4ui-tools typelib-1_0-Libxfce4ui-2_0 - Update to version 4.20.1 * clipboard-manager: Fix memory leak * I18n: Update po/LINGUAS list * build: Automate copyright year management * build: Remove libxfce4ui-config.h from GI * clipboard-manager: Preserve all image formats when taking ownership * Delete obsolete file libxfce4ui-1.pc.in * build: Include local header libxfce4ui/libxfce4ui.h * build: Fix include guard position * Add variadic functions to Vala * Fix namespace for GObject introspection * Translation Updates - Refresh 0001-relax-x11-version.patch ==== libxfce4util ==== Version update (4.20.0 -> 4.20.1) Subpackages: libxfce4util-lang libxfce4util7 typelib-1_0-Libxfce4util-1_0 - Update to version 4.20.1 * autotools-build: Search for xdt-gen-visibility also in the working tree * meson-build: Bump meson min version * build: Automate copyright year management * Replace deprecated exo with libxfce4ui 4.21.0 * docs: Ignore visibility header and align build systems * build: Remove libxfce4util-config.h from GI * xfce-i18n: Use g_strlcpy instead of falling back to it * meson-build: Add missing check for varargs.h * xfce-rc: Fix C locale handling * meson-build: Use SPDX license expression * meson-build: Update debug/optimization flag management * build: Use VERSION_FULL intead of VERSION or PACKAGE_VERSION * meson-build: Let pkg.generate() fill in required libs * meson-build: Use relative path in gtk-doc * meson-build: Check for libintl only if required * meson-build: Remove duplicated CFLAGS * meson-build: Gobject introspection cleanup * Fix namespace for GObject introspection in meson build too * Fix namespace for GObject introspection * Removed extra ';' in header files. * build: Remove unused check for XDT_CHECK_ABI * build: Add missing update of --enable-visibility flag * docs: Don't run gtkdoc-check * build: Bump xdt required version * docs: Remove generated types from repository * Add libxfce4util/meson.build to Makefile.am EXTRA_DIST * Translation Updates ==== linux-glibc-devel ==== Version update (6.13 -> 6.14) - Update to kernel headers 6.14 ==== meson ==== Subpackages: meson-vim - Add 14337.patch: get_llvm_tool_names: add llvm 20. ==== microos-tools ==== Version update (4.0+git10 -> 4.0+git11) - Update to version 4.0+git11: * Only parse section with at minimum two arguments (#42) ==== mousepad ==== Version update (0.6.3 -> 0.6.4) Subpackages: libmousepad0 - Update to version 0.6.4 Meson has been added as a build system in this release, and the associated archive has been generated by 'meson dist'. Although autotools has been retained for the time being and can still be used via 'autogen.sh', meson is now the preferred build system, and autotools will be removed in a future release. * flatpak: Updates from flathub and use meson when possible * file: Fix GError leak in mousepad_file_autosave_delete_finish * build: Automate copyright year management * history: Save session when an inactive tab is closed * file: Fix possible dereference of null pointer * Extend saved state comparison to auto-saved modified files * window: Avoid unnecessary switching to the tab to be closed * Use build system-independent macro for mousepad name * flatpak: Updates from Flathub and git * meson-build: Compile gsettings schemas * history: Fix -Wmaybe-uninitialized * meson-build: Fix statement not under conditional * Add meson build * Remove unused .in level in desktop files * file: Don't use G_FILE_MONITOR_WATCH_HARD_LINKS * dialogs: Set current name in save-as dialog for deleted files too * Add parentheses to parameterized actions in accels.scm * Fix broken shortcut for reload action * Hide the launcher for mousepad-settings * CSD: Drop custom code for decoration layout * prefs-dialog: Make widgets focusable again * Translation Updates ==== nautilus ==== Version update (47.2 -> 48.0) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 - Update to version 48.0: + Reversals: Replace uselocale with Glib gettext variant + Bugfixes: - Generate thumbnails by order in view - Try more icons before using generic fallback - Focus filename entry in save mode by default - Fix tree view and outdated file info crashes introduced in 48.rc - Use colored icon for filesystem root properties - Set search popover row heights + Cleanups: - Various performance enhancements around sorting, hidden files and image decoding - Add build summary + Fix shell search result order + Updated translations. - Update to version 48.rc: + Enhancements: - Run code formatting in parallel - Rework CI image job to freedesktop template - Rework and speedup adding of files to view - Add basic unit tests for files view - Load thumbnail info separate from other file infos + Reversals: Revert port of properties dialog to AdwDialog due to outstanding issues + Bugfixes: - Fix app chooser widget sizing - Fix free space calculation for archive extraction - Fix shell sesrch result order - Fix floating bar style when unfocused + Cleanups: - Rework view switching code of window-slot - Use AdwSpinner in floating bar + Replace uselocale with Glib gettext variant + Fix opening the wrong directory when launching an instance + Tweak the floating bar background + Various minor UI fixes: - dynamically handle hierarchy changes in the path bar - Still offer rectangular selection when pressing ctrl and shift + Lots of cleanup + Fix occasional stuck grabs when rubberband selecting + Display more info in the progress dialog when preparing + Don't warn about mime-type mismatches if the handler is the same + Add close all windows to spatial window menu + Fixed help buttons in the preferences dialog + Extension system for emblem, property page, menu item + Add a context menu to the tree side pane. + Focus the next item after delete in list view + Improved the gutter-on-the-right problem. + Prefer existing windows from the command line in open-in-new-window view. + Updated translations. - Drop pkgconfig(gail-3.0) BuildRequires: Not used nor needed. - Update to version 48.beta: + Enhancements: - Improve directory loading performance - Use AdwDialog for list view column chooser and properties dialog - Change tab behavior for the sidebar - Create about dialog from appdata - Port various dialogs to AdwAlertDialog - Keep mount monitor around for caching in gvfs to work - Adjust to localsearch changes - Hide Trash banner when empty - Ellipsize sidebar labels in the middle - Add a CONTRIBUTING file - Allow removing bookmarks from pathbar - Various UI tweaks and label changes - Various speedups + Bugfixes: - Fix unintended grid relayouting on thumbnail loading - Fix double a11y presentation of the filename in grid view - Keep CI running - Fix query editor translation - Hide empty extensions list in properties - Fix NULL dereference with extensions + Cleanups: - Improve grid selection implementation - Avoid setting up unnecessary directory monitors - Replace setlocale hack with uselocale - Stop setting invisible menu icons + Updated translations. - Replace deprecated update-desktop-files with desktop-file-utils BuildRequires, and drop suse-update-desktop macros. ==== ncurses ==== Version update (6.5.20250308 -> 6.5.20250315) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20250315 + improve formatting/style of manpages (patches by Branden Robinson). ==== openSUSE-release ==== Version update (20250324 -> 20250329) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssl-3 ==== Subpackages: libopenssl3 - FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224] * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch ==== ovmf ==== Version update (202411 -> 202502) Subpackages: qemu-uefi-aarch64 - Update to edk2-stable202502 - New Features & Bug Fixes (https://github.com/tianocore/edk2/releases): - DynamicTablesPkg: Adds X64 support to SRAT table generator - DynamicTablesPkg: Generates X64 MADT and CPU SSDT Topology Table - Add RNG PPI - Update to openssl-3.4.x - Update CI to VS2022 - Produce EFI memory attribute protocol - UefiCpuPkg: Add TdxMeasurementLib - DxeRngLib: GetRandomNumber spurious success - SecurityPkg: Update libspdm - OvmfPkg: Use the OvmfPkg version of CcProbeLib - ShellPkg: Fix bug #3080, OOB, minor UefiShellLib fixes - MdePkg: Fix overflow issue in PeCoffLoaderRelocateImageForRuntime - Add Dynamic Stack Cookie Support to IA32/X64/AARCH64 - Patches (git log --oneline --date-order edk2-stable202411..edk2-stable202502): fbe0805b20 MdeModulePkg/HiiDatabaseDxe: Remove buffer error for string default. 0192f2d7cb MdeModulePkg/UsbBusPei: Improve PEI USB enumeration bc664d1830 Revert "FatPkg: Validate Reserved FAT Entries on Volume Open" 523dbb6d59 ArmPkg: ArmFfaStandaloneMmLib: Fix non-FFA path 96cf70951f MdePkg/DynamicStackCookieEntryPointLib: Drop execute-in-place versions 5c3dcef94c MdePkg/DynamicStackCookieEntryPointLib: Remove unused files 23007f7ae2 UefiPayloadPkg: Add StackCheckLib to fix FIT build issue 7308568dd6 StandaloneMmPkg StandaloneMmCoreMemoryAllocationLib: Rename gMmst 0d61f52fe3 Add MockVariablePolicyHelperLib 2b3ea9334f DynamicTablesPkg: Adds X64 support to SRAT table generator 1f1182c396 ArmVirtPkg: ArmVirtQemu: Add Custom Stack Cookies 861b91d975 ArmVirtPkg: Add RNDR Support to QEMU 30547859f2 OvmfPkg: OvmfIA32X64: Add Custom Stack Cookie Checking 6d741357c2 OvmfPkg: Add RDRAND Support To QEMU e6b6aa90d4 MdePkg: Add Dynamic Stack Cookie Support efbf5ed08c MdePkg: Move StackCheckLibStaticInit to StackCheckLib db03bf1d9d StandaloneMmPkg: Consume X64 StandaloneMmCoreEntryPoint From MdePkg 885bcca649 MdePkg: Add StandaloneMmCoreEntryPoint for X64 e63cdeebb8 MdePkg: Add StackCheckLib Library Class d9715c133f MdePkg: Centralize RNDR Register Definition 5c02a64823 Maintainers.txt: adding Ard and Michael to stewards team 1cb349e4bb IntelFsp2WrapperPkg: Remove inactive maintainer email edf1450f3e SecurityPkg: Add RngPei bcab6996a0 MdePkg: Add PeiRngLib de5c1198c1 MdePkg: Add Random Number Generator (RNG) PPI 7518b93f77 MdePkg: Split RNG protocol definitions 15e225d06a Maintainers.txt: add myself as PrmPkg maintainer 258f2d1563 ReadMe.rst: reflect bugzilla migration f7cf6ce299 License-History.txt: Reflect bugzilla migration fe5c2df49e SignedCapsulePkg: make Doxygen interpret ASCII art as verbatim text 259e1f04c6 BaseTools: Add @verbatim as allowed Doxygen tag 0664c4e3b9 UefiPayloadPkg: Revert 4KB alignment of CLANGDWARF build cd87106d26 BaseTools: Add /DRIVER to CLANGPDB link flags 074f61e4c6 MdePkg/IndustryStandard: add definitions for CXL CEDT 62b0698309 BaseTools/AutoGen: GenMake response file quotes strings 15a7d311a8 BaseTools/tools_def: Remove no-warn-rwx-segments linker options f2b42c83dd BaseTools/Scripts/GccBase.lds: Use separate R-W and RW- ELF segments e5d95c786b BaseTools/Scripts: Merge GCC and Clang ELF linker scripts f5d585b46b BaseTools/Scripts/ClangBase.lds: Move .entry into .text section 7fd3c89ff4 UefiPayloadPkg: Update Elf segment/section syncup process d844a7eab5 BaseTools/tools_def: Use no-warn-rwx-segments only for GCC5 09d4e6f7c7 MdePkg: Add Hot pluggable resource attribute 4ec3539e34 MdePkg: Add UEFI 2.11 specification macro 2e6359a088 MdePkg: Add Confidential Computing Extension for RISC-V AP-TEE 12ceee664a MdePkg: Add HotPlug Memory Attribute 62cd7d338b ArmPkg: Retire ArmDisassemblerLib fbe19844e0 Revert "ArmVirtPkg/ArmVirtQemu: Reduce MMIO region mapped by default" 4dd8b9e0f7 ArmVirtPkg: turn off debug logging for VirtioSerialDxe c1ab2d6397 Maintainers: update my email address e063f8b8a5 BaseTools/Pccts: set C standard c0796335d3 MdePkg/BaseFdtLib: fix build with gcc 15 7742247d1c MdePkg: Add SM3 crypto algorithm GUID definition d949ed05d4 Devcontainer: Use latest Fedora 40 image 31abbed237 .github/codeql.yml: Drop ArmPkg IA32 and X64 from build matrix 87f14322da ArmVirtPkg: Drop reference to ArmDisassemblerLib ef80dd8fad ArmPkg: Stop using ArmDisassemblerLib 74376f0b72 ArmPkg,ArmPkg/ArmExceptionLib: drop vector relocation variant/support 43233ff9f8 ArmVirtPkg/ArmVirtQemu: Reduce MMIO region mapped by default c558a3b18b ArmPkg/ArmGicDxe: Map GIC MMIO regions before use 3c4c7a0fc9 ArmPkg/ArmGicDxe: Remove pointless passing around of MMIO addresses e68e784649 ArmPkg/ArmGicDxe: Avoid pointless repeated iteration over GIC frames 387fcf4fa1 ArmPkg/ArmGicDxe: Replace CpuArch registration event with DEPEX fb7497cbf9 ArmPkg/CpuDxe: Replace DEPEX on h/w protocol with event notification 0422dd0669 ArmPkg/CpuDxe: Remove rudimentary vector handoff logic e5b56d6ef9 ArmPkg/CpuDxe: Use STATIC linkage where possible afdae789cd ArmPkg/CpuDxe: Fix error handling in driver initialization b64f735867 Maintainers.txt: Update EmulatorPkg maintainers 2cb8bf6c69 UnitTestFrameworkPkg: Fix false positives from address sanitizer 3600675368 MdePkg/BasePeCoffLib: Remove DEBUG() statements from runtime code 254937f0bc ShellPkg: fix warnings about uninitialized variable 755d4b9397 OvmfPkg: fix warning about uninitialized variable ceb87029c5 SecurityPkg/RngDxe: fix warning about uninitialized variable c58501aa1a MdeModulePkg: NvmExpressDxe: fix warning about uninitialized variable 0f12a5f722 MdeModulePkg: fix warning about uninitialized variable a5cb67fb8d MdeModulePkg: PeiMain: fix warning about uninitialized variable bba72ffbe1 OvmfPkg/QemuKernelLoaderFsDxe: use SIZE_OF_EFI_FILE_INFO df84bb5eda Resolved Coverity Issues in Http Dxe 428cd8a46f MdePkg: Fix Clang Build Error 18984b68fe OvmfPkg: make legacy direct kernel loader code nx clean 6d2143f685 BaseTools: Fix NoneType parent reference in FMMT operations 8c1e786e50 OvmfPkg/XenPvBlkDxe: Update disk size calculation 3cf7a644eb OvmfPkg/IndustryStandard/Xen: Update io/blkif.h 7c5ec51175 MdeModulePkg PeiMain: Remove return for PeiCoreBuildHobHandoffInfoTable() ... changelog too long, skipping 360 lines ... - Update openssl library to 3.4 ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced - On S390x plymouth is rather useless therefore replace it with blog-plymouth for similar services but without boot splash ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome - Recommend gnome-console instead of gnome-terminal. ==== perl ==== Subpackages: perl-base - Drop BerkeleyDB support from core perl [jsc#PED-12413] ==== poppler ==== Version update (25.02.0 -> 25.03.0) Subpackages: libpoppler-cpp2 libpoppler-glib8 poppler-tools - version update to 25.03.0 core: * Fix opening some slightly malformed files * Signing: Support custom PGP signing * Signing: Do not embed fonts in the case of signatures without appearance * Signing: Improve error handling on bad passphrase * Signing-GPGME: more correct validation handling * Internal code improvements glib: * Fix default signature colors * Check file attachment annotation for this class before casting - gcc12: build with PIE [bsc#1239939] - Bump poppler sover following upstream changes. ==== poppler-qt6 ==== Version update (25.02.0 -> 25.03.0) - version update to 25.03.0 core: * Fix opening some slightly malformed files * Signing: Support custom PGP signing * Signing: Do not embed fonts in the case of signatures without appearance * Signing: Improve error handling on bad passphrase * Signing-GPGME: more correct validation handling * Internal code improvements glib: * Fix default signature colors * Check file attachment annotation for this class before casting - gcc12: build with PIE [bsc#1239939] - Bump poppler sover following upstream changes. ==== python-Pillow ==== - Add patch libwebp150.patch to skip tests failing on s390x * reported: https://github.com/python-pillow/Pillow/issues/8831 ==== python-cryptography ==== Version update (44.0.1 -> 44.0.2) Subpackages: python311-cryptography python313-cryptography - update to 44.0.2: * We now build wheels for PyPy 3.11. ==== python-cssselect ==== Version update (1.2.0 -> 1.3.0) - Remove superfluous %python_module definition - Update to 1.3.0 * Dropped support for Python 3.7-3.8, added support for Python 3.12-3.13 and PyPy 3.10. * Removed ``_unicode_safe_getattr()``, deprecated in 1.2.0. * Added ``pre-commit`` and formatted the code with ``ruff``. * Many CI additions and improvements. - Limit Python files matched in %files section - Switch build system from setuptools to pyproject.toml * Add python-pip and python-wheel to BuildRequires * Replace %python_build with %pyproject_wheel * Replace %python_install with %pyproject_install ==== python-linux-procfs ==== - Use libalternatives instead of update-alternatives, bsc#1240096 ==== python-pyinotify ==== Subpackages: python311-pyinotify python313-pyinotify - Use libalternatives instead of update-alternatives, bsc#1240097 - No more greedy globs in %files. - Use python3 in pyinotify script ==== rasqal ==== - build with pcre2, add rasqal-0.9.33-pcre2.patch from upstream ==== rsyslog ==== - remove unused pcre build dependency ==== salt ==== Subpackages: python311-salt salt-master salt-minion - Small refactor on the spec file - Make "salt" package to obsolete "python3-salt" package on SLE15SP7+ - Fix issue requiring proper Python flavor for dependencies and recommended package. - Do not build "python3-salt" anymore for SLE15SP7+ ==== sdbootutil ==== Version update (1+git20250311.8d3db8b -> 1+git20250327.9714cbd) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper - Update to version 1+git20250327.9714cbd: * Get boot_dst from os-release NAME * Add --devices parameter - Update to version 1+git20250324.c1cd393: * Use filesystem order in grub2-bls ==== selinux-policy ==== Version update (20250318 -> 20250324) Subpackages: selinux-policy-targeted - Update to version 20250324: * Allow xenstored_t manage xend_var_lib_t files (bsc#1228540) ==== sendmail ==== Subpackages: libmilter1_0 - Update keyring ==== snappy ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Remove Group: declarations, no longer used ==== soxr ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: declarations, no longer used ==== spiel ==== Subpackages: libspeech-provider-1_0 libspiel-1_0 typelib-1_0-Spiel-1_0 - Add 42ad1741.patch: prevent crash when the host has no voice provider installed. ==== srt ==== - Replace gcc-c++ with generic c++_compiler BuildRequires. - Use ldconfig_scriptlets macro for post(un) handling. - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: declarations, no longer used ==== sscep ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: Declarations, No longer used ==== strace ==== Version update (6.13 -> 6.14) - Update to strace 6.14 * Added -e namespace=new option for printing the namespaces entered by the tracee. * Implemented decoding of FRA_FLOWLABEL and FRA_FLOWLABEL_MASK netlink attributes of RTM_{NEW,DEL,GET}RULE NETLINK_ROUTE messages. * Implemented decoding of RTM_{NEW,DEL}MULTICAST and RTM_{NEW,DEL}ANYCAST NETLINK_ROUTE messages. * Updated decoding of statx syscall. * Updated lists of AT_*, AUDIT_*, ETHTOOL_*, FAN_*, IORING_*, IPPROTO_*, KEY_*, NL80211_*, RWF_*, and SECBIT_* constants. * Updated lists of ioctl commands from Linux 6.14. ==== suitesparse ==== Version update (7.8.3 -> 7.10.1) Subpackages: libamd3 libcamd3 libccolamd3 libcholmod5 libcolamd3 libsuitesparseconfig7 libumfpack6 - update to version 7.10.1 * GraphBLAS v10.0.1: bug fix, when using user-defined monoids in GrB_mxm - update to version 7.10 * GraphBLAS v10.0.0: major upgrade, now supporting 32-bit/ 64-bit integer indices. - update to version 7.9 * GraphBLAS v9.4.5: Added the GxB_IndexBinaryOp. Added new JIT kernels. ==== texlive ==== - On 64bit architecures use only zzip_init_io - Update source-LuaTeX.dif * Accordingly to mailing list - Fine tuning asymptote * Really use OSMesa * Use libcurl * Use boost filesystem and boost thread - Autodetect if libzzip support large files on 32bit architectures - Update to TeXLive 2025 (20250308) - Update to biber-2.20 - Update to luametatex-2.11.05 - Add patch source-LuaTeX.dif * Latest upstream fix for LuaTeX - Remove obsolete patches * 0006-Fix-register-allocation-bug-in-arm64.patch * source-dvipdfm-x.dif * source-mesa24.dif * source-pdftex-gcc14.patch - Add patch source-euptex.dif * make eptex and euptex survive their trip tests - Port patches * source-64.dif * source-configure.dif * source-dviutils.dif * source-luacore.dif * source-ppc64.dif * source-warns.dif * source.dif ==== tiff ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: declarations, no longer used ==== timezone ==== Version update (2025a -> 2025b) Subpackages: tzselect - Update to 2025b: * New zone for Aysén Region in Chile (America/Coyhaique) which moves from -04/-03 to -03 ==== tpm2.0-abrmd ==== Subpackages: libtss2-tcti-tabrmd0 tpm2.0-abrmd-selinux - also enable SELinux features for SLE-16 (bsc#1240070). On SLE-16 abrmd does not work, because the SELinux configuration is missing and thus its operations are denied. Include SLE-16 to fix this. ==== tuned ==== - Add BuildRequires: * gobject-introspection-devel for test in check section to succeed * pyinotify in ppd ==== uchardet ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: declarations, no longer used ==== vid_stab ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: declarations, no longer used ==== vim ==== Version update (9.1.1176 -> 9.1.1244) Subpackages: vim-data vim-data-common xxd - Update to version 9.1.1244: * patch 9.1.1244: - part of patch v9.1.1242 was wrong - runtime(omnimark): update and rewrite syntax script in Vim9 script * patch 9.1.1243: diff mode is lacking for changes within lines * patch 9.1.1242: Crash when evaluating variable name * patch 9.1.1241: wrong preprocessort indentation in term.c * patch 9.1.1240: - Regression with ic/ac text objects and comment plugin - runtime(hyprlang): save and restore cpo setting in syntax script - runtime(solidity): update syntax script with error definitions - runtime(doc): add back help tag "pi_netrw.txt" * patch 9.1.1239: - if_python: no tuple data type support - runtime(doc): Add missing garbagecollect() hypertext link - Improve contributing guide by adding a section on signing off commits * patch 9.1.1238: wrong cursor column with 'set splitkeep=screen' * patch 9.1.1237: Compile error with C89 compiler in term.c * patch 9.1.1236: tests: test_comments leaves swapfiles around * patch 9.1.1235: cproto files are outdated * patch 9.1.1234: Compile error when SIZE_MAX is not defined * patch 9.1.1233: - Coverity warns about NULL pointer when triggering WinResized - runtime(doc): Fix an omission in the documentation. * patch 9.1.1232: - Vim script is missing the tuple data type - runtime(vim): Update base-syntax, match protected constructors - runtime(syntax-tests): Do not ignore failed screendumps * patch 9.1.1231: - filetype: SPA JSON files are not recognized - runtime(doc): update and correct str2blob() and blob2str() examples - runtime(hlyank): update the hlyank package - runtime(syntax-tests): Add non-Latin-1 character filters for C syntax tests - update to 9.1.1230 - refresh vim-7.3-sh_is_bash.patch * patch 9.1.1230: inconsistent CTRL-C behaviour for popup windows * patch 9.1.1229: the comment plugin can be improved * runtime(sh): consider sh as POSIX shell by default * patch 9.1.1228: completion: current position column wrong after got a match * runtime(hlyank): add the hlyank package * patch 9.1.1227: no tests for the comment package * patch 9.1.1226: "shellcmdline" completion doesn't work with input() * patch 9.1.1225: extra NULL check in VIM_CLEAR() * runtime(sh): remove invalid commented out line in syntax script * runtime(sh): update sh indent script * patch 9.1.1224: cannot :put while keeping indent * runtime(go): use :term for keywordprg for nvim/gvim * patch 9.1.1223: wrong translation used for encoding failures * patch 9.1.1222: using wrong length for last inserted string * patch 9.1.1221: Wrong cursor pos when leaving Insert mode just after 'autoindent' * patch 9.1.1220: filetype: uv.lock file not recognized * patch 9.1.1219: Strange error with wrong type for matchfuzzy() "camelcase" * patch 9.1.1218: missing out-of-memory check in filepath.c * patch 9.1.1217: tests: typos in test_matchfuzzy.vim * patch 9.1.1216: Pasting the '.' register multiple times may not work * runtime(keymap) Add forward slash (/) to russian-jcukenwin keymap * runtime(vim): Update base-syntax, match multiline return types * patch 9.1.1215: Patch 9.1.1213 has some issues * patch 9.1.1214: matchfuzzy() can be improved for camel case matches * patch 9.1.1213: cannot :put while keeping indent * runtime(syntax-tests): Support "wait-free" test failure * patch 9.1.1212: too many strlen() calls in edit.c * patch 9.1.1212: filetype: logrotate'd pacmanlogs are not recognized * runtime(prql): include prql syntax script * patch 9.1.1211: TabClosedPre is triggered just before the tab is being freed * patch 9.1.1210: translation(ru): missing Russian translation for the new tutor * patch 9.1.1209: colorcolumn not drawn after virtual text lines * patch 9.1.1208: MS-Windows: not correctly restoring alternate screen on Win 10 * patch 9.1.1207: MS-Windows: build warning in filepath.c * translation(ru): include Russian translation for chapter two of the tutorial * runtime(matchparen): line continuation causes failure in CI * patch 9.1.1206: tests: test_filetype fails when a file is a directory * runtime(doc): symlinking netrw.txt causes problems during install on Windows * patch 9.1.1205: completion: preinserted text not removed when closing pum * runtime(tutor): updated Russian translation for tutor chapter 1 * runtime(cs): Update C# runtime files * patch 9.1.1203: matchparen keeps cursor on case label in sh filetype * runtime(doc): fix a typo in gitrebase filetype * runtime(doc): Tweak documentation style a bit * runtime(vim): Sync syntax generator base file with output file. * runtime(doc): update a few minor omissions from 5876016 and 4d2c4b9 * patch 9.1.1202: Missing TabClosedPre autocommand * patch 9.1.1201: 'completefuzzycollect' does not handle dictionary correctly * runtime(doc): make :h 'completefuzzycollect' a bit clearer * runtime(doc): document gitrebase filetype * translation(it): update menu_it * translation(sr): Add chapter two of the new tutor * patch 9.1.1200: cmdline pum not cleared for input() completion * patch 9.1.1199: gvim uses hardcoded xpm icon file * runtime(indent-tests): GitHub Actions doesn't show why indent tests failed * patch 9.1.1198: [security]: potential data loss with zip.vim ... changelog too long, skipping 53 lines ... * runtime(doc): mention bzip3 in gzip plugin documentation ==== woff2 ==== Subpackages: libwoff2common1_0_2 libwoff2dec1_0_2 - Use ldconfig_scriptlets macro for post(un) handling. - Use cmake_build macro. - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: entries, no longer used ==== xdg-desktop-portal-gtk ==== Version update (1.15.2 -> 1.15.3) - Update to version 1.15.3: + Fix build against newer xdg-desktop-portal + Fix return value for the access portal ==== xfce4-panel ==== Version update (4.20.3 -> 4.20.4) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.20.4 * meson-build: Revert glib version change * build: Define xfce4 min version >= 4.18 * build: Search for xdt-gen-visibility also in the working tree * build: Replace xdt-csource with glib-compile-resources * build: Fix wrong macro for min version * panel: Show window in panel_application_new_window() * wayland: autohide: Mitigate lack of size_allocate() * systray: Use correct gtk functions to show/hide items * wayland: Set exclusive zone for autohide window * build: Remove libxfce4panel-config.h from GI * meson-build: Add missing check for sys/prctl.h * tasklist: Support window app changes * build: Automate copyright year management * item-dialog: Also search for plugins by their module name * I18n: Update po/LINGUAS list * wayland: wrapper: Set GtkProgressBar style properties to min values * systray: Fix legacy icons being drawn with offset * meson-build: Use SPDX license expression * autotools-build: Check for xfce4-dev-tools in configure.ac * Translation Updates ==== xfce4-session ==== Version update (4.20.0 -> 4.20.2) Subpackages: xfce4-session-lang - Update to version 4.20.2: * build: Fix include order on *BSD * autotools-build: Be sure gdbus-codegen files are regenerated - Remove obsolete 0003-fix-glib2_84-related-conditionals.patch - Update to version 4.20.1: * wayland: Use labwc's --session option if available * wayland: Don't pass xfce4-session to the optional compositor cmdline * build: Add missing dep flags * build: Automate copyright year management * build: Replace xdt-csource with glib-compile-resources * build: Define xfce4 min version >= 4.18 * scripts: Make xflock4 blocking again * startxfce4: Fix keyboard layout on wayland * scripts: Remove unused .in level in xinitrc * build: Add missing checks for headers * build: Fix wrong include guard * build: Add missing check for sigprocmask * autotools-build: Check for xfce4-dev-tools in configure.ac * build: Add missing dep flags * build: Get rid of maintainer mode where gdbus-codegen is used * Improve Wayland support * Translation Updates - Refresh xfce4-session-adapt-session-scripts-git.patch and xfce4-session-adapt-session-scripts.patch - Refresh 0002-relax-x11-version.patch * Add small hack to maintain the configure* files' modification time; otherwise the whole aclocal, autoconf, automake series will have to be run, which will fail. - Add 0003-fix-glib2_84-related-conditionals.patch to fix errors when building with glib2 < 2.84 ==== xscreensaver ==== Subpackages: xscreensaver-data xscreensaver-lang - Remove dependency on unused unix2_chkpwd ==== yaml-cpp ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section