Packages changed: MicroOS-release (20250630 -> 20250701) crypto-policies curl gcc15 (15.1.1+git9739 -> 15.1.1+git9866) glslang (15.3.0 -> 15.4.0) gpg2 kernel-firmware-amdgpu (20250623 -> 20250627) kernel-firmware-bnx2 (20250206 -> 20250627) kernel-firmware-chelsio (20250206 -> 20250627) kernel-firmware-media (20250424 -> 20250627) kernel-firmware-network (20250603 -> 20250627) kernel-firmware-platform (20250520 -> 20250627) kernel-firmware-radeon (20250206 -> 20250627) kernel-firmware-serial (20250206 -> 20250627) kernel-firmware-sound (20250613 -> 20250627) kernel-source (6.15.3 -> 6.15.4) libnettle (3.10.1 -> 3.10.2) ncurses (6.5.20250621 -> 6.5.20250628) numactl (2.0.19.13.g63e0223 -> 2.0.19.14.g690a72c) openldap2 (2.6.8 -> 2.6.10) setools toolbox (2.4+git20250429.b335d1b -> 2.4+git20250630.5e08e45) udisks2 === Details === ==== MicroOS-release ==== Version update (20250630 -> 20250701) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== crypto-policies ==== - Allow openssl to load when using the DEFAULT policy, and also other policies, in FIPS mode. [bsc#1243830, bsc#1242233] * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch ==== curl ==== Subpackages: libcurl4 - Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960] - split wcurl into a subpackage so that upgrade works (wcurl used to be a separate package) ==== gcc15 ==== Version update (15.1.1+git9739 -> 15.1.1+git9866) Subpackages: cpp15 libgcc_s1 libgfortran5 libgomp1 libquadmath0 libstdc++6 - Update to GCC 15 branch head, 15.1.1+git9866 - Fix PR120827, ICE due to splitter emitting constant loads directly ==== glslang ==== Version update (15.3.0 -> 15.4.0) - Update to release 15.4 * Implement GL_NV_gpu_shader5 and enable GL_ARB_gpu_shader5 completely * Add the GLSL_QCOM_tile_shading support * Implement GL_EXT_float8_e5m2_e4m3 (bits for exponent/mantissa) * Add variadic function support for builtin functions * Add argument default values support for builtin functions * Add GL_ARM_tensors ==== gpg2 ==== - fix build of qgpgme >= 2.0.0 [T7083] boo#1244605 add gnupg-2.5.8-re-add-revocation-reason.patch ==== kernel-firmware-amdgpu ==== Version update (20250623 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * amdgpu: DMCUB updates for DCN401 ==== kernel-firmware-bnx2 ==== Version update (20250206 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * WHENCE: extract license texts ==== kernel-firmware-chelsio ==== Version update (20250206 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * WHENCE: extract license texts ==== kernel-firmware-media ==== Version update (20250424 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * WHENCE: extract license texts * qcom: update firmware binary for SM8550 - Update to version 20250624 (git commit b05fabcd6f2a): * qcom: venus-5.4: add the firmware binary for qcs615 ==== kernel-firmware-network ==== Version update (20250603 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * WHENCE: extract license texts ==== kernel-firmware-platform ==== Version update (20250520 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * WHENCE: expand the advansys license statement * WHENCE: some older AMD drivers are MIT licensed ==== kernel-firmware-radeon ==== Version update (20250206 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * WHENCE: some older AMD drivers are MIT licensed ==== kernel-firmware-serial ==== Version update (20250206 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * WHENCE: extract license texts ==== kernel-firmware-sound ==== Version update (20250613 -> 20250627) - Update to version 20250627 (git commit f40eafe21683): * WHENCE: extract license texts ==== kernel-source ==== Version update (6.15.3 -> 6.15.4) - io_uring: gate REQ_F_ISREG on !S_ANON_INODE as well (io_uring-regression). - commit 55e70a8 - Linux 6.15.4 (bsc#1012628). - alloc_tag: handle module codetag load errors as module load failures (bsc#1012628). - configfs: Do not override creating attribute file failure in populate_attrs() (bsc#1012628). - crypto: marvell/cesa - Do not chain submitted requests (bsc#1012628). - gfs2: move msleep to sleepable context (bsc#1012628). - sched/rt: Fix race in push_rt_task (bsc#1012628). - sched/fair: Adhere to place_entity() constraints (bsc#1012628). - crypto: qat - add shutdown handler to qat_c3xxx (bsc#1012628). - crypto: qat - add shutdown handler to qat_420xx (bsc#1012628). - crypto: qat - add shutdown handler to qat_4xxx (bsc#1012628). - crypto: qat - add shutdown handler to qat_c62x (bsc#1012628). - crypto: qat - add shutdown handler to qat_dh895xcc (bsc#1012628). - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (bsc#1012628). - firmware: cs_dsp: Fix OOB memory read access in KUnit test (bsc#1012628). - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (bsc#1012628). - ASoC: amd: amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (bsc#1012628). - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (bsc#1012628). - io_uring: account drain memory to cgroup (bsc#1012628). - io_uring/kbuf: account ring io_buffer_list memory (bsc#1012628). - powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states (bsc#1012628). - powerpc64/ftrace: fix clobbered r15 during livepatching (bsc#1012628). - powerpc/bpf: fix JIT code size calculation of bpf trampoline (bsc#1012628). - s390/pci: Fix __pcilg_mio_inuser() inline assembly (bsc#1012628). - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (bsc#1012628). - s390/pci: Prevent self deletion in disable_slot() (bsc#1012628). - s390/pci: Allow re-add of a reserved but not yet removed device (bsc#1012628). - s390/pci: Serialize device addition and removal (bsc#1012628). - regulator: max20086: Fix MAX200086 chip id (bsc#1012628). - regulator: max20086: Change enable gpio to optional (bsc#1012628). - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (bsc#1012628). - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (bsc#1012628). - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (bsc#1012628). - wifi: mt76: mt7925: fix host interrupt register initialization (bsc#1012628). - anon_inode: use a proper mode internally (bsc#1012628). - anon_inode: explicitly block ->setattr() (bsc#1012628). - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - fs: add S_ANON_INODE (bsc#1012628). - wifi: ath11k: fix rx completion meta data corruption (bsc#1012628). - wifi: rtw88: usb: Upload the firmware in bigger chunks (bsc#1012628). - wifi: ath11k: fix ring-buffer corruption (bsc#1012628). - NFSD: unregister filesystem in case genl_register_family() fails (bsc#1012628). - NFSD: fix race between nfsd registration and exports_proc (bsc#1012628). - NFSD: Implement FATTR4_CLONE_BLKSIZE attribute (bsc#1012628). - nfsd: fix access checking for NLM under XPRTSEC policies (bsc#1012628). - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (bsc#1012628). - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (bsc#1012628). - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (bsc#1012628). - NFS: always probe for LOCALIO support asynchronously (bsc#1012628). - NFSv4: Don't check for OPEN feature support in v4.1 (bsc#1012628). - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (bsc#1012628). - wifi: ath12k: fix ring-buffer corruption (bsc#1012628). - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (bsc#1012628). - svcrdma: Unregister the device if svc_rdma_accept() fails (bsc#1012628). - wifi: rtw88: usb: Reduce control message timeout to 500 ms (bsc#1012628). - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (bsc#1012628). - jfs: validate AG parameters in dbMount() to prevent crashes (bsc#1012628). - media: ov8856: suppress probe deferral errors (bsc#1012628). - media: ov5675: suppress probe deferral errors (bsc#1012628). - media: i2c: change lt6911uxe irq_gpio name to "hpd" (bsc#1012628). ... changelog too long, skipping 917 lines ... - commit 0952b8c ==== libnettle ==== Version update (3.10.1 -> 3.10.2) Subpackages: libhogweed6 libnettle8 - update to 3.10.2: * Fix missing prototypes in getopt.h and getopt.c * For powerpc64, avoid using v9 (ISA v3.0) instructions lxvb16x, lxv and stxv in powerpc64/p8/ files. * For powerpc64, add configure check for __VSX__, and disable use of assembly if not defined. Nettle's powerpc64 assembly requires at least v7 (ISA v2.06) - drop libnettle-powerpc64-skip-AES-GCM-test.patch ==== ncurses ==== Version update (6.5.20250621 -> 6.5.20250628) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20250628 + fix a few compiler-warnings. + simplify include for wchar.h in Windows port by removing the platform ifdef's (report by Karl Knechtel). + regen Ada95/configure (report by Sven Joachim). ==== numactl ==== Version update (2.0.19.13.g63e0223 -> 2.0.19.14.g690a72c) - Update to version 2.0.19.14.g690a72c: * numastat command fails on LPAR which is not having node0 Patch is now upstream: https://github.com/numactl/numactl/pull/246 D 4abeee1aac20a7a2552870e0359b8df013ae9037.patch Patches are wrong or not needed anymore: https://github.com/numactl/numactl/pull/246 D 0001-Fixed-segfault-when-no-node-could-be-found-in-sysfs-.patch D numactl-clearcache-pie.patch ==== openldap2 ==== Version update (2.6.8 -> 2.6.10) - Update to release 2.6.10 * ldap.conf:TIMEOUT and NETWORK_TIMEOUT config directives now have the desired effect for TLS connections (previously ignored) * Reject attempts to modify cn=schema,cn=config objects * Fixed a slapo-nestgroup leak in nestgroup_memberFilter * Fixed a slapo-translucent regression with subordinate databases / and when requesting attributes * Adjusted slappw-argon2 defaults to be more secure * Added slapd microsecond timestamp format for local logging * Fixed libldap ldap_result behavior with LDAP_MSG_RECEIVED ==== setools ==== - Drop legacy %python_build and %python_install macros and switch to pyproject macros instead as requested by packaging team ==== toolbox ==== Version update (2.4+git20250429.b335d1b -> 2.4+git20250630.5e08e45) - Update to version 2.4+git20250630.5e08e45: * Forbid --user if running as root ==== udisks2 ==== Subpackages: libudisks2-0 - Moved /etc/udisks2/modules.conf.d/udisks2_lsm.conf and /etc/udisks2/udisks2.conf do /usr/etc. (patch usr_etc.patch)