Packages changed:
bash
cfitsio (4.5.0 -> 4.6.2)
gnome-settings-daemon (48.0+3 -> 48.1)
irqbalance
kernel-firmware-bluetooth (20250408 -> 20250422)
kernel-firmware-media (20250408 -> 20250422)
kernel-firmware-platform (20250220 -> 20250422)
kernel-firmware-qcom (20250408 -> 20250422)
kernel-firmware-realtek (20250313 -> 20250422)
kernel-firmware-sound (20250415 -> 20250422)
kernel-source (6.14.2 -> 6.14.3)
krb5
libgpg-error (1.53 -> 1.54)
libsoup2
libxml2 (2.13.7 -> 2.13.8)
libxml2-python (2.13.7 -> 2.13.8)
mariadb-connector-c (3.3.13 -> 3.4.5)
nftables (1.1.2 -> 1.1.3)
patterns-gnome
python-gevent
python-rich
sbc (1.5 -> 2.1)
snapper (0.12.1 -> 0.12.2)
snappy
tinysparql (3.9.1 -> 3.9.2)
=== Details ===
==== bash ====
Subpackages: bash-lang bash-sh
- add -std=gnu17 to CFLAGS to fix gcc15 compile time error
==== cfitsio ====
Version update (4.5.0 -> 4.6.2)
- Update to version 4.6.2:
* Updated autotools configure script to use AM_MAINTAINER_MODE;
disables automatic regeneration of the build system unless
configure is invoked with '--enable-maintainer-mode'
- Changes from version 4.6.1:
* Updated CMake configuration to use GNUInstallDirs module and
to use CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR;
fixes bug in 4.6.0 that led to an empty 'includedir' in
cfitsio.pc.
- Changes from version 4.6.0:
* Improved the empty primary data test performed in
fits_open_file.
* Correction to eval_defs.h typedefs to allow for compilation on
old gcc compilers.
* The fitsverify utility tool now distinguishes between
alternate coordinate systems when testing positions of WCSAXES
keywords.
* Updates made for greater C23 compatibility as required for
gcc-15.
* Possible memory vulnerabilities patched.
* Fix to a possible heap buffer overflow in a utility tool.
* Negative size parameter vulnerability patched in utility tool.
- Drop cfitsio-nullptr.patch: incorporated upstream.
- Drop cfitsio-cmake-devel-scripts-destination.patch: fixed
upstream (also fixes boo#1236985).
==== gnome-settings-daemon ====
Version update (48.0+3 -> 48.1)
Subpackages: gnome-settings-daemon-lang
- Update to version 48.1:
+ Cleanups and fixes
+ Power:
- Ensure the backlight interface signal gets emitted on startup
- Avoid using uninitialized value when restoring brightness
+ Sharing: Fixes to shutdown of sharing services
+ Updated translations.
- Drop gnome-settings-daemon-fix-stop-service.patch, 411.patch and
413.patch, fixed upstream.
- Rebase patches with quilt.
==== irqbalance ====
Subpackages: irqbalance-ui
- Adopt license to GPL-2.0-only according to COPYING as suggested
by licensedigger
==== kernel-firmware-bluetooth ====
Version update (20250408 -> 20250422)
- Update to version 20250422 (git commit 944acaa23457):
* rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
==== kernel-firmware-media ====
Version update (20250408 -> 20250422)
- Update to version 20250422 (git commit 944acaa23457):
* qcom: vpu: add video firmware binary for qcm6490
==== kernel-firmware-platform ====
Version update (20250220 -> 20250422)
- Update to version 20250422 (git commit 944acaa23457):
* bmi260: Add BMI260 IMU initial configuration data file
==== kernel-firmware-qcom ====
Version update (20250408 -> 20250422)
- Update to version 20250422 (git commit 944acaa23457):
* qcom: add QUPv3 firmware for QCS9100 platform
==== kernel-firmware-realtek ====
Version update (20250313 -> 20250422)
- Update to version 20250422 (git commit 944acaa23457):
* rtw89: 8922a: update element RF TXPWR to R40
* rtw89: 8852c: update element RF TXPWR to R78
* rtw89: 8852c: add fw v0.27.125.0 with format version 2
* Revert "rtw89: 8852c: update fw to v0.27.125.0"
==== kernel-firmware-sound ====
Version update (20250415 -> 20250422)
- Update to version 20250422 (git commit 944acaa23457):
* ASoC: tas2781: Swap channel for SPI projects.
==== kernel-source ====
Version update (6.14.2 -> 6.14.3)
- Bluetooth: qca: fix NV variant for one of WCN3950 SoCs
(git-fixes).
- commit 493ad77
- Linux 6.14.3 (bsc#1012628).
- ASoC: Intel: adl: add 2xrt1316 audio configuration
(bsc#1012628).
- cgroup/cpuset: Fix incorrect isolated_cpus update in
update_parent_effective_cpumask() (bsc#1012628).
- cgroup/cpuset: Fix error handling in remote_partition_disable()
(bsc#1012628).
- cgroup/cpuset: Fix race between newly created partition and
dying one (bsc#1012628).
- tracing: fprobe: Cleanup fprobe hash when module unloading
(bsc#1012628).
- gpiolib: of: Fix the choice for Ingenic NAND quirk
(bsc#1012628).
- selftests/futex: futex_waitv wouldblock test should fail
(bsc#1012628).
- ublk: fix handling recovery & reissue in ublk_abort_queue()
(bsc#1012628).
- drm/virtio: Fix flickering issue seen with imported dmabufs
(bsc#1012628).
- drm/i915: Disable RPG during live selftest (bsc#1012628).
- x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to
disabled ACPI (bsc#1012628).
- net: ethtool: fix ethtool_ringparam_get_cfg() returns a
hds_thresh value always as 0 (bsc#1012628).
- drm/xe/hw_engine: define sysfs_ops on all directories
(bsc#1012628).
- drm/xe: Restore EIO errno return when GuC PC start fails
(bsc#1012628).
- ata: pata_pxa: Fix potential NULL pointer dereference in
pxa_ata_probe() (bsc#1012628).
- objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
(bsc#1012628).
- tipc: fix memory leak in tipc_link_xmit (bsc#1012628).
- codel: remove sch->q.qlen check before
qdisc_tree_reduce_backlog() (bsc#1012628).
- net: tls: explicitly disallow disconnect (bsc#1012628).
- octeontx2-pf: qos: fix VF root node parent queue index
(bsc#1012628).
- tc: Ensure we have enough buffer space when sending filter
netlink notifications (bsc#1012628).
- net: ethtool: Don't call .cleanup_data when prepare_data fails
(bsc#1012628).
- drm/tests: modeset: Fix drm_display_mode memory leak
(bsc#1012628).
- drm/tests: helpers: Create kunit helper to destroy a
drm_display_mode (bsc#1012628).
- drm/tests: cmdline: Fix drm_display_mode memory leak
(bsc#1012628).
- drm/tests: modes: Fix drm_display_mode memory leak
(bsc#1012628).
- drm/tests: probe-helper: Fix drm_display_mode memory leak
(bsc#1012628).
- net: libwx: handle page_pool_dev_alloc_pages error
(bsc#1012628).
- cifs: Fix support for WSL-style symlinks (bsc#1012628).
- ata: sata_sx4: Add error handling in pdc20621_i2c_read()
(bsc#1012628).
- drm/i915/huc: Fix fence not released on early probe errors
(bsc#1012628).
- s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
(bsc#1012628).
- nvmet-fcloop: swap list_add_tail arguments (bsc#1012628).
- net_sched: sch_sfq: use a temporary work area for validating
configuration (bsc#1012628).
- net_sched: sch_sfq: move the limit validation (bsc#1012628).
- smb: client: fix UAF in decryption with multichannel
(bsc#1012628).
- net: phy: move phy_link_change() prior to
mdio_bus_phy_may_suspend() (bsc#1012628).
- net: phy: allow MDIO bus PM ops to start/stop state machine
for phylink-controlled PHY (bsc#1012628).
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
(bsc#1012628).
- nft_set_pipapo: fix incorrect avx2 match of 5th field octet
(bsc#1012628).
- ethtool: cmis_cdb: Fix incorrect read / write length extension
(bsc#1012628).
- iommu/exynos: Fix suspend/resume with IDENTITY domain
(bsc#1012628).
- iommu/mediatek: Fix NULL pointer deference in
mtk_iommu_device_group (bsc#1012628).
- net: libwx: Fix the wrong Rx descriptor field (bsc#1012628).
- perf/core: Simplify the perf_event_alloc() error path
(bsc#1012628).
- perf: Fix hang while freeing sigtrap event (bsc#1012628).
- fs: consistently deref the files table with
rcu_dereference_raw() (bsc#1012628).
- umount: Allow superblock owners to force umount (bsc#1012628).
- srcu: Force synchronization for srcu_get_delay() (bsc#1012628).
- pm: cpupower: bench: Prevent NULL dereference on malloc failure
(bsc#1012628).
- irqchip/gic-v3: Add Rockchip 3568002 erratum workaround
(bsc#1012628).
- x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear
_PAGE_RW (bsc#1012628).
- x86/percpu: Disable named address spaces for UBSAN_BOOL with
... changelog too long, skipping 749 lines ...
- commit 607aeeb
==== krb5 ====
Subpackages: krb5-32bit krb5-client
- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
still allow build on Leap 15.6
==== libgpg-error ====
Version update (1.53 -> 1.54)
Subpackages: libgpg-error0 libgpg-error0-32bit
- Update to 1.54:
* Fix a regression in 1.52 which did not allow to open UNC
specified files on Windows. [rE28ae4ee194]
* Ignore log file specification from the Registry in the gpg-error
tool.
==== libsoup2 ====
Subpackages: libsoup-2_4-1 libsoup2-lang
- Add more CVE fixes:
+ ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
+ 96c22b67.patch (boo#1240750 CVE-2025-2784)
+ 19124679.patch (boo#1240752 CVE-2025-32050)
+ a5b86bfc.patch (boo#1240756 CVE-2025-32052)
+ 5739a090.patch (boo#1240757 CVE-2025-32053)
==== libxml2 ====
Version update (2.13.7 -> 2.13.8)
Subpackages: libxml2-2 libxml2-tools
- Update to version 2.13.8:
+ Security:
- [CVE-2025-32415] schemas: Fix heap buffer overflow in
xmlSchemaIDCFillNodeTables.
- [CVE-2025-32414] python: Read at most len/4 characters.
- bug references: [bsc#1241453], [bsc#1241551]
==== libxml2-python ====
Version update (2.13.7 -> 2.13.8)
- Update to version 2.13.8:
+ Security:
- [CVE-2025-32415] schemas: Fix heap buffer overflow in
xmlSchemaIDCFillNodeTables.
- [CVE-2025-32414] python: Read at most len/4 characters.
- bug references: [bsc#1241453], [bsc#1241551]
==== mariadb-connector-c ====
Version update (3.3.13 -> 3.4.5)
- Update to 3.4.5:
*
https://mariadb.com/kb/en/mariadb-connector-c-3-4-5-release-notes/
*
https://mariadb.com/kb/en/mariadb-connector-c-3-4-4-release-notes/
*
https://mariadb.com/kb/en/mariadb-connector-c-3-4-3-release-notes/
*
https://mariadb.com/kb/en/mariadb-connector-c-3-4-2-release-notes/
*
https://mariadb.com/kb/en/mariadb-connector-c-3-4-1-release-notes/
*
https://mariadb.com/kb/en/mariadb-connector-c-3-4-0-release-notes/
- Refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch
==== nftables ====
Version update (1.1.2 -> 1.1.3)
Subpackages: libnftables1 python313-nftables
- Update to release 1.1.3
* Fix incorrect bytecode for vlan pcp mangling from netdev family
chains such as ingress/egress: `... vlan pcp set 6 counter`
* Fix bogus element in large concatenated set ranges, leading to:
``16777216 . 00:11:22:33:44:55 . 10.1.2.3 comment "123"``
instead of:
``"lo" . 00:11:22:33:44:55 . 10.1.2.3 comment "123"``
* Restore set auto-merge feature with timeouts, disabled in the
previous v1.1.2 release.
==== patterns-gnome ====
Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome
- Switch to Loupe and Papers for TW.
==== python-gevent ====
- Handle BrokenPipeError in src/gevent/ssl.py [bsc#1241037]
* Upstream PR:
https://github.com/gevent/gevent/pull/2103
* Add gevent-openssl35-test-fix.patch
==== python-rich ====
- Add test dependency on attrs
==== sbc ====
Version update (1.5 -> 2.1)
Subpackages: libsbc1
- Update to version 2.1
* Fix issue when compiling without SBC_BUILD_WITH_SSE_SUPPORT.
- Update to version 2.0
* Fix issue with SSE primitives on non-x86.
- Drop patch:
* fix-build-on-non-x86.patch (not longer needed)
- Use ldconfig_scriptlets macro
- Use correct Group tags
- Specfile cleanup
==== snapper ====
Version update (0.12.1 -> 0.12.2)
Subpackages: libsnapper7 snapper-zypp-plugin
- use correct btrfs binary for target commands in snbk
(gh#openSUSE/snapper#998)
- version 0.12.2
- avoid running 'btrfs qgroup clear-stale' if quota is disabled
(gh#openSUSE/snapper#987)
- avoid build dependency e2fsprogs-devel
==== snappy ====
- Update summary of the most prominently installed (sub)package.
==== tinysparql ====
Version update (3.9.1 -> 3.9.2)
Subpackages: libtracker-sparql-3_0-0 tinysparql-lang typelib-1_0-Tracker-3_0
- Update to version 3.9.2:
+ Fix installing pre-generated documentation in tarballs
+ Performance improvements in handling parser errors
+ Fixes for issues reported by OSS Fuzz