Packages changed:
Mesa
Mesa-drivers
MicroOS-release (20250325 -> 20250326)
abseil-cpp (20250127.0 -> 20250127.1)
ca-certificates-mozilla
cpio
dbus-1-glib
gnutls
kernel-firmware-amdgpu (20250318 -> 20250322)
kernel-firmware-ath10k
kernel-firmware-bluetooth
kernel-firmware-media
kernel-firmware-mediatek
kernel-firmware-nvidia
kernel-firmware-platform
kernel-firmware-qcom
kernel-firmware-sound (20250318 -> 20250321)
kernel-source (6.13.7 -> 6.13.8)
libcap (2.73 -> 2.75)
librist (0.2.10 -> 0.2.11)
passt (20250217.a1e48a0 -> 20250320.32f6212)
poppler (25.02.0 -> 25.03.0)
poppler-qt6 (25.02.0 -> 25.03.0)
rebootmgr (3.2+git20250213.bff65b1 -> 3.2+git20250317.27192cc)
sdbootutil (1+git20250311.8d3db8b -> 1+git20250324.c1cd393)
soxr
spiel
timezone (2025a -> 2025b)
=== Details ===
==== Mesa ====
Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1
- Fix regression in winsys/amdgpu (boo#1239657)
revert_8c91624614c1f939974fe0d2d1a3baf83335cecb.patch
https://gitlab.freedesktop.org/mesa/mesa/-/issues/12809
https://gitlab.freedesktop.org/mesa/mesa/-/commit/8c91624614c1f939974fe0d2d1a3baf83335cecb
==== Mesa-drivers ====
Subpackages: Mesa-dri Mesa-gallium
- Fix regression in winsys/amdgpu (boo#1239657)
revert_8c91624614c1f939974fe0d2d1a3baf83335cecb.patch
https://gitlab.freedesktop.org/mesa/mesa/-/issues/12809
https://gitlab.freedesktop.org/mesa/mesa/-/commit/8c91624614c1f939974fe0d2d1a3baf83335cecb
==== MicroOS-release ====
Version update (20250325 -> 20250326)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd
- automatically generated by openSUSE-release-tools/pkglistgen
==== abseil-cpp ====
Version update (20250127.0 -> 20250127.1)
Subpackages: libabsl_2501_0_0 libabsl_lite_2501_0_0
- Update to 20250127.1:
* Improved Bazel support
* Added ABSL_ATTRIBUTE_VIEW and ABSL_ATTRIBUTE_OWNER for
diagnosing certain lifetime issues
* Many performance improvements
* potential integer overflow in hash container create/resize
fixed again - boo#1236438
==== ca-certificates-mozilla ====
- Fix awk to compare (missing a =) and give the following output:
[#] NSS_BUILTINS_LIBRARY_VERSION "2.74"
- pass file argument to awk (bsc#1240009)
==== cpio ====
- Use -std=gnu11 to avoid extra diagnostics when calling an
unprototyped function which is no longer possible with C23,
the new default with GCC 15.
==== dbus-1-glib ====
- Fix build with GCC 15 via exporting -std=gnu17 to cflags. GCC 15
defaults to C23, but the latest release is from 2021, and this is
deprecated upstream and no longer under development.
==== gnutls ====
- FIPS: Mark SHA-1 as non-approved in the SLI for all operations. [jsc#PED-12224]
* Add gnutls-FIPS-disable-mac-sha1.patch
- bsc#1237101, FIPS selfcheck fails on tumbleweed
* Match dependent library names ( nettle, gmp, hogweed ) even when they include full verison in soname
* Add gnutls-fips-sonames-check.patch
==== kernel-firmware-amdgpu ====
Version update (20250318 -> 20250322)
- Fix a typo in download URL
- Update to version 20250322 (git commit 710a336b3198):
* amdgpu: update dcn 4.01 firmware to 0.1.3.0
* amdgpu: update dcn 3.5 firmware to 0.1.0.0
- Update kernel-firmware-tools scripts to be downloadable
==== kernel-firmware-ath10k ====
- Fix a typo in download URL
- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable
==== kernel-firmware-bluetooth ====
- Fix a typo in download URL
- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable
==== kernel-firmware-media ====
- Fix a typo in download URL
- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable
==== kernel-firmware-mediatek ====
- Fix a typo in download URL
- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable
==== kernel-firmware-nvidia ====
- Fix a typo in download URL
- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable
==== kernel-firmware-platform ====
- Fix a typo in download URL
- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable
==== kernel-firmware-qcom ====
- Fix a typo in download URL
- Correct aliases with comma (bsc#1239877)
- Update spec to make kernel-firmware-tools downloadable
==== kernel-firmware-sound ====
Version update (20250318 -> 20250321)
- Fix a typo in download URL
- Correct aliases with comma (bsc#1239877)
- Update to version 20250321 (git commit e61b8981aeef):
* cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- Update to version 20250320 (git commit a60087f7c925):
* cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- Update kernel-firmware-tools scripts to be downloadable
==== kernel-source ====
Version update (6.13.7 -> 6.13.8)
- Revert "Update config files. Disable OVPN temporarily."
This reverts commit bca56f08ab2271cfe4d6ff271d57fb773cca295c.
The issue has been fixed.
- commit 7089702
- Refresh
patches.suse/drm-amd-display-Use-HW-lock-mgr-for-PSR1-when-only-o.patch.
Update upstream status.
- commit 614d9ea
- Revert "gre: Fix IPv6 link-local address
generation." (git-fixes).
- commit 5d9714b
- Linux 6.13.8 (bsc#1012628).
- mm: fix kernel BUG when userfaultfd_move encounters swapcache
(bsc#1012628).
- userfaultfd: fix PTE unmapping stack-allocated PTE copies
(bsc#1012628).
- mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq (bsc#1012628).
- virt: sev-guest: Move SNP Guest Request data pages handling
under snp_cmd_mutex (bsc#1012628).
- fbdev: hyperv_fb: iounmap() the correct memory when removing
a device (bsc#1012628).
- pinctrl: bcm281xx: Fix incorrect regmap max_registers value
(bsc#1012628).
- pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
(bsc#1012628).
- netfilter: nft_ct: Use __refcount_inc() for per-CPU
nft_ct_pcpu_template (bsc#1012628).
- ice: do not configure destination override for switchdev
(bsc#1012628).
- ice: fix memory leak in aRFS after reset (bsc#1012628).
- ice: Fix switchdev slow-path in LAG (bsc#1012628).
- netfilter: nf_conncount: garbage collection is not skipped
when jiffies wrap around (bsc#1012628).
- netfilter: nf_tables: make destruction work queue pernet
(bsc#1012628).
- sched: address a potential NULL pointer dereference in the
GRED scheduler (bsc#1012628).
- wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
(bsc#1012628).
- wifi: mac80211: don't queue sdata::work for a non-running sdata
(bsc#1012628).
- wifi: cfg80211: cancel wiphy_work before freeing wiphy
(bsc#1012628).
- Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready
(bsc#1012628).
- Bluetooth: hci_event: Fix enabling passive scanning
(bsc#1012628).
- Revert "Bluetooth: hci_core: Fix sleeping function called from
invalid context" (bsc#1012628).
- net/mlx5: Fill out devlink dev info only for PFs (bsc#1012628).
- net: dsa: mv88e6xxx: Verify after ATU Load ops (bsc#1012628).
- net: mctp i3c: Copy headers if cloned (bsc#1012628).
- net: mctp i2c: Copy headers if cloned (bsc#1012628).
- netpoll: hold rcu read lock in __netpoll_send_skb()
(bsc#1012628).
- drm/hyperv: Fix address space leak when Hyper-V DRM device is
removed (bsc#1012628).
- fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V
Gen 2 VMs (bsc#1012628).
- fbdev: hyperv_fb: Simplify hvfb_putmem (bsc#1012628).
- fbdev: hyperv_fb: Allow graceful removal of framebuffer
(bsc#1012628).
- Drivers: hv: vmbus: Don't release fb_mmio resource in
vmbus_free_mmio() (bsc#1012628).
- net/mlx5: handle errors in mlx5_chains_create_table()
(bsc#1012628).
- eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1012628).
- eth: bnxt: return fail if interface is down in
bnxt_queue_mem_alloc() (bsc#1012628).
- eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in
queue restart logic (bsc#1012628).
- eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
(bsc#1012628).
- eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx |
tx} (bsc#1012628).
- eth: bnxt: fix memory leak in queue reset (bsc#1012628).
- net: switchdev: Convert blocking notification chain to a raw
one (bsc#1012628).
- net: mctp: unshare packets when reassembling (bsc#1012628).
- bonding: fix incorrect MAC address setting to receive NS
messages (bsc#1012628).
- selftests: bonding: fix incorrect mac address (bsc#1012628).
- rtase: Fix improper release of ring list entries in
rtase_sw_reset (bsc#1012628).
- wifi: mac80211: fix MPDU length parsing for EHT 5/6 GHz
(bsc#1012628).
- netfilter: nf_conncount: Fully initialize struct
nf_conncount_tuple in insert_tree() (bsc#1012628).
- ipvs: prevent integer overflow in do_ip_vs_get_ctl()
(bsc#1012628).
- net_sched: Prevent creation of classes with TC_H_ROOT
(bsc#1012628).
- netfilter: nft_exthdr: fix offset with ipv4_find_option()
(bsc#1012628).
- gre: Fix IPv6 link-local address generation (bsc#1012628).
- net: openvswitch: remove misbehaving actions length check
(bsc#1012628).
- Revert "openvswitch: switch to per-action label counting in
conntrack" (bsc#1012628).
... changelog too long, skipping 325 lines ...
- commit 41f5788
==== libcap ====
Version update (2.73 -> 2.75)
- update to 1.2.75:
* go related fixes
- includes changes from 1.2.74:
* Group syntax parsing bugfix for pam_cap
* Doc typo fix for cap_get_proc.3
* Fix transitive include in capsh.c
* go related changes
==== librist ====
Version update (0.2.10 -> 0.2.11)
- update to 0.2.11:
* Adds support for ephemeral listening ports, which allows for
adding or taking down ports, primarily for new connections,
after initialization
* Adds a sender function rist_sender_npd_get to obtain current
status of null_packet_deletion in client code
* Adds a new function rist_peer_get_cname to allow for the
extraction of the private cname property of a peer
* various bug fixes and code improvements
==== passt ====
Version update (20250217.a1e48a0 -> 20250320.32f6212)
Subpackages: passt-selinux
- Update to version 20250320.32f6212:
* Makefile: Enable -Wformat-security
* conf: Include libgen.h for basename(), fix build against musl
* tcp: Flush socket before checking for more data in active close state
* migrate: Bump migration version number
* migrate, tcp: Migrate RFC 7323 timestamp
* migrate, tcp: More careful marshalling of mss parameter during migration
* passt-repair: Fix build with -Werror=format-security
* tcp, flow: Better use flow specific logging heleprs
* conf: Unify several paths in conf_ports()
* test/perf: Simplify iperf3 server lifetime management
* conf: Limit maximum MTU based on backend frame size
* pcap: Correctly set snaplen based on tap backend type
* Simplify sizing of pkt_buf
* tap: Use explicit defines for maximum length of L2 frame
* packet: Remove redundant TAP_BUF_BYTES define
* packet: Give explicit name to maximum packet size
* conf: Detect vhost-user mode earlier
* conf: Move mode detection into helper function
* conf: Use the same optstring for passt and pasta modes
* flow, repair: Wait for a short while for passt-repair to connect
* passt-repair: Add directory watch
* cppcheck: Add suppressions for "logically" exported functions
* vhost_user: Don't export several functions
* tcp: Don't export tcp_update_csum()
* checksum: Don't export various functions
* log: Don't export passt_vsyslog()
* treewide: Mark assorted functions static
* udp: create and send ICMPv6 to local peer when applicable
* tap: break out building of udp header from tap_udp6_send function
* udp: create and send ICMPv4 to local peer when applicable
* tap: break out building of udp header from tap_udp4_send function
* conf: Be more precise about minimum MTUs
* tcp: Send RST in response to guest packets that match no connection
* tap: Consider IPv6 flow label when building packet sequences
* ip: Helpers to access IPv6 flow label
* migrate, tcp: Don't flow_alloc_cancel() during incoming migration
* tcp: Unconditionally move to CLOSED state on tcp_rst()
* tcp: Correct error code handling from tcp_flow_repair_socket()
* migrate, flow: Don't attempt to migrate TCP flows without passt-repair
* migrate, flow: Trivially succeed if migrating with no flows
* selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage
* seccomp.sh: Silence stty errors
* tap: always set the no_frag flag in IPv4 headers
* contrib/fedora: Actually install passt-repair SELinux policy file
* dhcp: Add option code byte in calculation for OPT_MAX boundary check
* Makefile: Use mmap2() as alternative for mmap() in valgrind extra syscalls
* conf: Use 0 instead of -1 as "unassigned" mtu value
* conf: More thorough error checking when parsing --mtu option
* flow: Clean up and generalise flow traversal macros
* flow: Remove unneeded bound parameter from flow traversal macros
* flow: Remove unneeded index from foreach_* macros
* flow: Add flow_perror() helper
* tcp: Don't pass both flow pointer and flow index
* tcp: Remove spurious prototype for tcp_flow_migrate_shrink_window
* tcp: More type safety for tcp_flow_migrate_target_ext()
* tcp_vu: head_cnt need not be global
* tap: Remove unused ETH_HDR_INIT() macro
* packet: Don't pass start and offset separately to packet_check_range()
* packet: Use flexible array member in struct pool
* dhcp: Remove option 255 length byte
==== poppler ====
Version update (25.02.0 -> 25.03.0)
Subpackages: libpoppler-cpp2 libpoppler-glib8
- version update to 25.03.0
core:
* Fix opening some slightly malformed files
* Signing: Support custom PGP signing
* Signing: Do not embed fonts in the case of signatures
without appearance
* Signing: Improve error handling on bad passphrase
* Signing-GPGME: more correct validation handling
* Internal code improvements
glib:
* Fix default signature colors
* Check file attachment annotation for this class before
casting
- gcc12: build with PIE [bsc#1239939]
- Bump poppler sover following upstream changes.
==== poppler-qt6 ====
Version update (25.02.0 -> 25.03.0)
- version update to 25.03.0
core:
* Fix opening some slightly malformed files
* Signing: Support custom PGP signing
* Signing: Do not embed fonts in the case of signatures
without appearance
* Signing: Improve error handling on bad passphrase
* Signing-GPGME: more correct validation handling
* Internal code improvements
glib:
* Fix default signature colors
* Check file attachment annotation for this class before
casting
- gcc12: build with PIE [bsc#1239939]
- Bump poppler sover following upstream changes.
==== rebootmgr ====
Version update (3.2+git20250213.bff65b1 -> 3.2+git20250317.27192cc)
- Update to version 3.2+git20250317.27192cc:
* Set c_std to gnu17
==== sdbootutil ====
Version update (1+git20250311.8d3db8b -> 1+git20250324.c1cd393)
Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit
- Update to version 1+git20250324.c1cd393:
* Use filesystem order in grub2-bls
==== soxr ====
- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used
==== spiel ====
Subpackages: libspeech-provider-1_0 libspiel-1_0
- Add 42ad1741.patch: prevent crash when the host has no voice
provider installed.
==== timezone ====
Version update (2025a -> 2025b)
- Update to 2025b:
* New zone for Aysén Region in Chile (America/Coyhaique) which
moves from -04/-03 to -03