Packages changed: AppStream (1.0.3 -> 1.0.4) AppStream-qt6 (1.0.3 -> 1.0.4) Mesa Mesa-drivers apache2-mod_php8 (8.3.14 -> 8.3.15) libdrm media-player-info (24 -> 26) openSUSE-release (20241220 -> 20241222) php8 (8.3.14 -> 8.3.15) postfix (3.9.0 -> 3.9.1) qemu (9.1.2 -> 9.2.0) xdg-desktop-portal-gnome yast2-bootloader (5.0.12 -> 5.0.13) === Details === ==== AppStream ==== Version update (1.0.3 -> 1.0.4) Subpackages: AppStream-lang libappstream5 - Update to 1.0.4 Features: * bundle: Add AS_BUNDLE_KIND_SYSUPDATE * desktop-style-ids: Add dark support for Plasma * desktop-style-ids: add pantheon:dark * qt: Expose branding color * sysinfo: Add memory size detection support for Illumos and Solaris * sysinfo: Add memory size detection support for GNU/Hurd * validator: Don't fail validation if a snapshot release is missing a time Specification: * docs: Note that support for some legacy path was dropped in 1.0 * docs: Update fd.o spec URLs * docs: Better explain desktop applications * Update ESRA website URL Bugfixes: * validator: Make sure we read an initialised variable * qt: Specify utc as the dates' timezone * tests: Ignore some tests on Windows * sysinfo: make uname() usage POSIX compliant * Only emit legacy compat tag developer_name for catalog data * compose: Allow file discovery even in symlinked directories * Avoid a race condition when loading GResource data * validator: Mention length limit in summary length warning message * utils: Explicitly set permissions on installed metadata files * as-vercmp: Fix gtkdoc to not start with '>' Miscellaneous: * desktop-style-ids: Remove Endless * ci: Fix FreeBSD build (update `py-gi-docgen`) * ci: Update to Ubuntu 24.04 for Debian Testing builds * utils: Assume 64px as size when installing an icon tarball of unknown size ==== AppStream-qt6 ==== Version update (1.0.3 -> 1.0.4) - Update to 1.0.4 Features: * bundle: Add AS_BUNDLE_KIND_SYSUPDATE * desktop-style-ids: Add dark support for Plasma * desktop-style-ids: add pantheon:dark * qt: Expose branding color * sysinfo: Add memory size detection support for Illumos and Solaris * sysinfo: Add memory size detection support for GNU/Hurd * validator: Don't fail validation if a snapshot release is missing a time Specification: * docs: Note that support for some legacy path was dropped in 1.0 * docs: Update fd.o spec URLs * docs: Better explain desktop applications * Update ESRA website URL Bugfixes: * validator: Make sure we read an initialised variable * qt: Specify utc as the dates' timezone * tests: Ignore some tests on Windows * sysinfo: make uname() usage POSIX compliant * Only emit legacy compat tag developer_name for catalog data * compose: Allow file discovery even in symlinked directories * Avoid a race condition when loading GResource data * validator: Mention length limit in summary length warning message * utils: Explicitly set permissions on installed metadata files * as-vercmp: Fix gtkdoc to not start with '>' Miscellaneous: * desktop-style-ids: Remove Endless * ci: Fix FreeBSD build (update `py-gi-docgen`) * ci: Update to Ubuntu 24.04 for Debian Testing builds * utils: Assume 64px as size when installing an icon tarball of unknown size ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - require llvm19/clang19 on sle15 >= sp6 ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - require llvm19/clang19 on sle15 >= sp6 ==== apache2-mod_php8 ==== Version update (8.3.14 -> 8.3.15) - version update to 8.3.15 Calendar: Fixed jdtogregorian overflow. Fixed cal_to_jd julian_days argument overflow. COM: Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults). Core: Fail early in *nix configuration build script. Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)). Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469). Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs). Fix is_zend_ptr() huge block comparison. Fixed potential OOB read in zend_dirname() on Windows. Curl: Fixed bug GH-16802 (open_basedir bypass using curl extension). Fix various memory leaks in curl mime handling. DOM: Fixed bug GH-16777 (Calling the constructor again on a DOM object after it is in a document causes UAF). Fixed bug GH-16906 (Reloading document can cause UAF in iterator). FPM: Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status). GD: Fixed GH-16776 (imagecreatefromstring overflow). GMP: Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)). Hash: Fixed GH-16711: Segfault in mhash(). Opcache: Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF). Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads). Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64). OpenSSL: Prevent unexpected array entry conversion when reading key. Fix various memory leaks related to openssl exports. Fix memory leak in php_openssl_pkey_from_zval(). PDO: Fixed memory leak of `setFetchMode()`. Phar: Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks). PHPDBG: Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()). SAPI: Fixed bug GH-16998 (UBSAN warning in rfc1867). SimpleXML: Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input). SOAP: Fix make check being invoked in ext/soap. Standard: Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties). Fixed bug GH-16957 (Assertion failure in array_shift with self-referencing array). Streams: Fixed network connect poll interuption handling. Windows: Fixed bug GH-16849 (Error dialog causes process to hang). - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) % php-date-regenerate-lexers.patch (refreshed) % php-systzdata-v24.patch (refreshed) ==== libdrm ==== Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - adjusted patches * n_libdrm-drop-valgrind-dep-generic.patch * n_libdrm-drop-valgrind-dep-intel.patch ==== media-player-info ==== Version update (24 -> 26) - Update to version 26: + Fix and validate generated AppStream metainfo file - Changes from version 25: + Generate AppStream metainfo file + Fix incorrect USB DeviceMatch= - Switch to source service git checkout. Following this, add libtool BuildRequires, and bootstrap build. ==== openSUSE-release ==== Version update (20241220 -> 20241222) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== php8 ==== Version update (8.3.14 -> 8.3.15) Subpackages: php8-ctype php8-dom php8-iconv php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.3.15 Calendar: Fixed jdtogregorian overflow. Fixed cal_to_jd julian_days argument overflow. COM: Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults). Core: Fail early in *nix configuration build script. Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)). Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469). Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs). Fix is_zend_ptr() huge block comparison. Fixed potential OOB read in zend_dirname() on Windows. Curl: Fixed bug GH-16802 (open_basedir bypass using curl extension). Fix various memory leaks in curl mime handling. DOM: Fixed bug GH-16777 (Calling the constructor again on a DOM object after it is in a document causes UAF). Fixed bug GH-16906 (Reloading document can cause UAF in iterator). FPM: Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status). GD: Fixed GH-16776 (imagecreatefromstring overflow). GMP: Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)). Hash: Fixed GH-16711: Segfault in mhash(). Opcache: Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF). Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads). Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64). OpenSSL: Prevent unexpected array entry conversion when reading key. Fix various memory leaks related to openssl exports. Fix memory leak in php_openssl_pkey_from_zval(). PDO: Fixed memory leak of `setFetchMode()`. Phar: Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks). PHPDBG: Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()). SAPI: Fixed bug GH-16998 (UBSAN warning in rfc1867). SimpleXML: Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input). SOAP: Fix make check being invoked in ext/soap. Standard: Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties). Fixed bug GH-16957 (Assertion failure in array_shift with self-referencing array). Streams: Fixed network connect poll interuption handling. Windows: Fixed bug GH-16849 (Error dialog causes process to hang). - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) % php-date-regenerate-lexers.patch (refreshed) % php-systzdata-v24.patch (refreshed) ==== postfix ==== Version update (3.9.0 -> 3.9.1) - update to 3.9.1 * The mail_version configuration parameter did not have a three-number value (3.9 instead of 3.9.0; it still had the two-number version from the development releases postfix-3.9-yyyymmdd). This broke pathnames derived from the mail_version value, such as shlib_directory. * Bugfix (defect introduced: Postfix 2.9, date 20111218): with "smtpd_sasl_auth_enable = no", the permit_sasl_authenticated feature ignored information that was received with the XCLIENT LOGIN command, so that the client was treated as unauthenticated. This was fixed by removing an unnecessary test. * Bugfix (defect introduced: postfix 3.0): the default master.cf syslog_name setting for the relay service did not preserve multi-instance information, which complicated logfile analysis. * Bugfix (defect introduced: Postfix 2.3, date 20051222): file descriptor leak after failure to connect to a Dovecot auth server. The impact is limited because Dovecot auth failures are rare, there are limits on the number of retries (one), on the number of errors per SMTP session (smtpd_hard_error_limit), on the number of sessions per SMTP server process (max_use), and on the number of file handles per process (managed with sysctl). * Bugfix (defect introduced: Postfix 3.4, date 20190121): the postsuper command failed with "open logfile '/path/to/file': Permission denied" when the maillog_file parameter specified a filename and Postfix was not running. This was fixed by opening the maillog_file before dropping root privileges. * Bugfix (defect introduced Postfix 3.0). No autodetection of UTF8 text when missing message headers were automatically added by Postfix (for example, a From: header with UTF8 full name information from the password file). This caused Postfix to send UTF8 in message headers without using the SMTPUTF8 protocol. ==== qemu ==== Version update (9.1.2 -> 9.2.0) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-vmsr-helper qemu-x86 - Update to latest upstream release, 9.2.0: The full list of changes are available at: https://wiki.qemu.org/ChangeLog/9.2 Highlights include: * virtio-gpu: support for 3D acceleration of Vulkan applications via Venus Vulkan driver in the guest and virglrenderer host library * crypto: GLib crypto backend now supports SHA-384 hashes * migration: QATzip-accelerated compression support while using multiple migration streams * Rust: experimental support for device models written in Rust (for development use only) * ARM: emulation support for FEAT_EBF16, FEAT_CMOW architecture features * ARM: support for two-stage SMMU translation for sbsa-ref and virt boards * ARM: support for CPU Security Extensions for xilinx-zynq-a9 board * ARM: 64GB+ memory support when using HVF acceleration on newer Macs * HPPA: SeaBIOS-hppa v17 firmware with various fixes and enhancements * RISC-V: IOMMU support for virt machine * RISC-V: support for control flow integrity and Svvptc extensions, and support for Bit-Manipulation extension on OpenTitan boards * RISC-V: improved performance for vector unit-stride/whole register ld/st instructions * s390x: support for booting from other devices if the previous ones fail * x86: support for new nitro-enclave machine type that can emulate * AWS Nitro Enclave and can boot from Enclave Image Format files. * x86: KVM support for enabling AVX10, as well as enabling specific AVX10 versions via command-line * and lots more... - Other changes: * Removed deprecated 'cris' support * Removed deprecated virtfs-proxy-helper * (`--enable-rust` not addressed yet) ==== xdg-desktop-portal-gnome ==== Subpackages: xdg-desktop-portal-gnome-lang - Add xdg-desktop-portal-gnome-gtk_init.patch: Call gtk_init before opening a display. ==== yast2-bootloader ==== Version update (5.0.12 -> 5.0.13) - Always filter out from installation parameters "root=" as it needs to be always changed to installed system (bsc#1234678) - 5.0.13