Packages changed:
MicroOS-release (20250501 -> 20250502)
at-spi2-core (2.56.1 -> 2.56.2)
docker (27.5.1_ce -> 28.1.1_ce)
gstreamer (1.26.0 -> 1.26.1)
gstreamer-plugins-bad (1.26.0 -> 1.26.1)
gstreamer-plugins-base (1.26.0 -> 1.26.1)
gstreamer-plugins-good (1.26.0 -> 1.26.1)
mozilla-nss (3.109 -> 3.110)
=== Details ===
==== MicroOS-release ====
Version update (20250501 -> 20250502)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd
- automatically generated by openSUSE-release-tools/pkglistgen
==== at-spi2-core ====
Version update (2.56.1 -> 2.56.2)
Subpackages: libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0
- Update to version 2.56.2:
+ Fix the build with glib < 2.76.
+ a11y-manager-device: Fix unmap_keysym_modifier.
==== docker ====
Version update (27.5.1_ce -> 28.1.1_ce)
Subpackages: docker-buildx docker-rootless-extras
- Update to Docker 28.1.1-ce. See upstream changelog online at
<
https://docs.docker.com/engine/release-notes/28/#2811> bsc#1242114
Includes upstream fixes:
- CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
devicemapper and AUFS storage drivers. AUFS was removed in v24, and
devicemapper was removed in v25.
<
https://docs.docker.com/engine/deprecated/#aufs-storage-driver>
- Rebase patches:
* 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
* 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
* 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
* 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
* 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
- 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- cli-0001-docs-include-required-tools-in-source-tree.patch
- Update to docker-buildx v0.23.0. Upstream changelog:
<
https://github.com/docker/buildx/releases/tag/v0.23.0>
==== gstreamer ====
Version update (1.26.0 -> 1.26.1)
Subpackages: libgstreamer-1_0-0 typelib-1_0-Gst-1_0
- Update to version 1.26.1:
+ Highlighted bugfixes:
- awstranslate and speechmatics plugin improvements
- decodebin3 fixes and urisourcebin/playbin3 stability
improvements
- Closed captions: CEA-708 generation and muxing fixes, and
H.264/H.265 caption extractor fixes
- dav1d AV1 decoder: RGB support, plus colorimetry,
renegotiation and buffer pool handling fixes
- Fix regression when rendering VP9 with alpha
- H.265 decoder base class and caption inserter SPS/PPS
handling fixes
- hlssink3 and hlsmultivariantsink feature enhancements
- Matroska v4 support in muxer, seeking fixes in demuxer
- macOS: framerate guessing for cameras or capture devices
where the OS reports silly framerates
- MP4 demuxer uncompressed video handling improvements and
sample table handling fixes
- oggdemux: seeking improvements in streaming mode
- unixfdsrc: fix gst_memory_resize warnings
- Plugin loader fixes, especially for Windows
- QML6 GL source renegotiation fixes
- RTP and RTSP stability fixes
- Thread-safety improvements for the Media Source Extension
(MSE) library
- v4l2videodec: fix A/V sync issues after decoding errors
- Various improvements and fixes for the fragmented and
non-fragmented MP4 muxers
- Video encoder base class segment and buffer timestamp
handling fixes
- Video time code support for 119.88 fps and
drop-frames-related conversion fixes
- WebRTC: Retransmission entry creation fixes and better audio
level header extension compatibility
- YUV4MPEG encoder improvments
- dots-viewer: make work locally without network access
- gst-python: fix compatibility with PyGObject >= 3.52.0
- Cerbero: recipe updates, compatibility fixes for Python <
3.10; Windows Android cross-build improvements
- Various bug fixes, build fixes, memory leak fixes, and other
stability and reliability improvements
+ gstreamer:
- Correctly handle whitespace paths when executing
gst-plugin-scanner
- Ensure properties are freed before (re)setting with
g_value_dup_string() and during cleanup
- cmake: Fix PKG_CONFIG_PATH formatting for Windows
cross-builds
- macos: Move macos function documentation to the .h so the
introspection has the information
- meson.build: test for and link against libatomic if it exists
- pluginloader-win32: Fix helper executable path under devenv
- pluginloader: fix pending_plugins Glist use-after-free issue
- unixfdsrc: Complains about resize of memory area
- tracers: dots: fix debug log
==== gstreamer-plugins-bad ====
Version update (1.26.0 -> 1.26.1)
Subpackages: libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0
- Update to version 1.26.1:
+ Add missing Requires in pkg-config
+ Ensure properties are freed before (re)setting with
g_value_dup_string() and during cleanup
+ Update docs
+ aja: Use the correct location of the AJA NTV2 SDK in the docs
+ alphacombine: De-couple flush-start/stop events handling
+ alphadecodebin: use a multiqueue instead of a couple of queues
+ avfvideosrc: Guess reasonable framerate values for some 3rd
party devices
+ codecalpha: name both queues
+ d3d12converter: Fix cropping when automatic mipmap is enabled
+ dashsink: Make sure to use a non-NULL pad name when requesting
a pad from splitmuxsink
+ docs: Fix GstWebRTCICE* class documentation
+ h264ccextractor, h265ccextractor: Handle gap with unknown pts
+ h265decoder, h265ccinserter: Fix broken SPS/PPS link
+ h265parser: Fix num_long_term_pics bound check
+ Segmentation fault in H265 decoder
+ h266decoder: fix leak parsing SEI messages
+ meson.build: test for and link against libatomic if it exists
+ mse: Improved Thread Safety of API
+ mse: Revert ownership transfer API change in
gst_source_buffer_append_buffer()
+ tensordecoders: updating element classification
+ unixfd: Fix wrong memory size when offset > 0
+ uvcsink: Respond to control requests with proper error handling
+ v4l2codecs: unref frame in all error paths of end_picture
+ va: Skip codecs that report maximum width or height lower than
minimum
+ vapostproc: fix wrong video orientation after restarting the
element
+ vavp9enc: fix mem leaks in _vp9_decide_profile
+ vkformat: fix build error
+ vtenc: Avoid deadlocking when changing properties on the fly
+ vulkan: fix memory leak at dynamic registering
+ webrtc: enhance rtx entry creation
+ webrtcbin: add missing warning for caps missmatch
+ ZDI-CAN-26596: New Vulnerability Report (Security)
- Drop va-codecs-check-size.patch: Fixed upstream.
- Drop cuda_nvdec conditional, builds fine for aarch64/armv7 now.
==== gstreamer-plugins-base ====
Version update (1.26.0 -> 1.26.1)
Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0
- Update to version 1.26.1:
+ Ensure properties are freed before (re)setting with
g_value_dup_string() and during cleanup
+ alsadeviceprovider: Fix leak of Alsa longname
+ audioaggregator: fix error added in !8416 when chaining up
+ audiobasesink: Fix custom slaving driftsamples calculation and
add custom audio clock slaving callback example
+ decodebin3:
- Don't avoid parsebin even if we have a matching decoder
- Doesn't plug parsebin for AAC from tsdemux
+ gl: eglimage: warn the reason of export failure
+ glcolorconvert:
- Fix YUVA<->RGBA conversions
- Regression when rendering alpha vp9
+ gldownload: Unref glcontext after usage
+ meson.build: test for and link against libatomic if it exists
+ oggdemux: Don't push new packets if there is a pending seek
+ urisourcebin:
- Make parsebin activation more reliable
- Deadlock between parsebin and typefind
+ videoencoder: Use the correct segment and buffer timestamp in
the chain function
+ videotimecode: Fix conversion of timecode to datetime with
drop-frame timecodes and handle 119.88 fps correctly in all
places
==== gstreamer-plugins-good ====
Version update (1.26.0 -> 1.26.1)
- Update to version 1.26.1:
+ Ensure properties are freed before (re)setting with
g_value_dup_string() and during cleanup
+ gst-plugins-good: Matroska mux v4 support
+ matroska-demux: Prevent corrupt cluster duplication
+ qml6glsrc: update buffer pool on renegotiation
+ qt6: Add a missing newline in unsupported platform message
+ qtdemux:
- Fix stsc size check in qtdemux_merge_sample_table()
- Next Iteration Of Uncompressed MP4 Decoder
- Unref simple caps after use
+ rtspsrc:
- Do not emit signal 'no-more-pads' too early
- Don't error out on not-linked too early
+ rtpsession:
- Do not push events while holding SESSION_LOCK
- Deadlock when gst_rtp_session_send_rtcp () is forwarding eos
+ v4l2: drop frame for frames that cannot be decoded
+ v4l2videodec: AV unsync for streams with many frames that
cannot be decoded
+ v4l2object:
- Fix memory leak
- Fix type mismatch when ioctl takes int
+ y4menc:
- Fix Y41B format
- Handle frames with GstVideoMeta
==== mozilla-nss ====
Version update (3.109 -> 3.110)
Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs
- update to NSS 3.110
* bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
* bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
* bmo#1953429 - Remove Crl templates from ASN1 fuzz target
* bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
* bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
* bmo#1930807 - NSS policy updates
* bmo#1951161 - Improve locking in nssPKIObject_GetInstances
* bmo#1951394 - Fix race in sdb_GetMetaData
* bmo#1951800 - Fix member access within null pointer
* bmo#1950077 - Increase smime fuzzer memory limit
* bmo#1949677 - Enable resumption when using custom extensions
* bmo#1952568 - change CN of server12 test certificate
* bmo#1949118 - Part 2: Add missing check in
NSS_CMSDigestContext_FinishSingle
* bmo#1949118 - Part 1: Fix smime UBSan errors
* bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
* bmo#1951491 - Don't build libpkix in static builds
* bmo#1951395 - handle `-p all` in try syntax
* bmo#1951346 - fix opt-make builds to actually be opt
* bmo#1951346 - fix opt-static builds to actually be opt
* bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch