Packages changed: MicroOS-release (20250611 -> 20250612) curl dracut (059+suse.725.g1df2cbe1 -> 059+suse.732.g739e1c2f) gnome-branding-Aeon libarchive (3.7.9 -> 3.8.1) libgcrypt libimobiledevice (1.3.0+263git.20250123 -> 1.3.0+283git.20250610) pcre2 pipewire (1.4.4 -> 1.4.5) qemu (10.0.0 -> 10.0.2) === Details === ==== MicroOS-release ==== Version update (20250611 -> 20250612) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== curl ==== Subpackages: libcurl4 - Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056] * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error when building the curl-mini package in SLE. * Add libssh minimum version requirements. * Use ldconfig_scriptlets when available. * Remove unused option --disable-ntlm-wb. ==== dracut ==== Version update (059+suse.725.g1df2cbe1 -> 059+suse.732.g739e1c2f) Subpackages: dracut-ima - Update to version 059+suse.732.g739e1c2f: * ci(suse.conf.example): change log levels (jsc#PED-12922) * fix(rngd): adjust license to match the license of the whole project * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680) ==== gnome-branding-Aeon ==== - Rename "openSUSE Aeon" to "Aeon" in zenity titles to follow Aeon's Brand Guidelines. ==== libarchive ==== Version update (3.7.9 -> 3.8.1) - update to 3.8.1: * libarchive: fix FILE_skip regression * compress: Prevent call stack overflow * iso9660: always check archive_string_ensure return value * tar: Support negative time values with pax * tar: Reset accumulated header state after reading macOS metadata blob * tar: Keep block alignment after pax error * tar: Handle extra bytes after sparse entries - includes changes from 3.8.0: * bsdtar: support --mtime and --clamp-mtime * 7-zip reader: improve self-extracting archive detection * xar: xmllite support for the XAR reader and writer * zip writer: added XZ, LZMA, ZSTD and BZIP2 support * zip writer: added LZMA + RISCV BCJ filter * rar: do not skip past EOF while reading (boo#1244159) * rar: fix double free with over 4 billion nodes (boo#1244160) * rar: fix heap-buffer-overflow (boo#1244161) * warc: prevent signed integer overflow (boo#1244162) * tar: fix overflow in build_ustar_entry (boo#1244163) * bsdtar: don't hardlink negative inode files together * gz: allow setting the original filename for gzip compressed files * lib: improve lseek handling * lib: support @-prefixed Unix epoch timestamps as date strings * rar: support large headers on 32 bit systems * tar reader: Improve LFS support on 32 bit systems - drop lib-suffix.patch, different implementation upstream - spec file clean-up, removing currently unused -static ==== libgcrypt ==== - Security fix [bsc#1221107, CVE-2024-2236] * Add --enable-marvin-workaround to spec to enable workaround * Fix timing based side-channel in RSA implementation ( Marvin attack ) * Add libgcrypt-CVE-2024-2236.patch ==== libimobiledevice ==== Version update (1.3.0+263git.20250123 -> 1.3.0+283git.20250610) - Update to version 1.3.0+283git.20250610: * Use updated libplist API if available * Use SHA256 signature instead of SHA1 for iOS 4 and newer when creating and signing pairing certificates ==== pcre2 ==== Subpackages: libpcre2-16-0 libpcre2-8-0 - Mark profiling as non-deterministic (boo#1040589) ==== pipewire ==== Version update (1.4.4 -> 1.4.5) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.4.5: * Highlights - Fix negotiation errors when using multichannel output. Fixes audio in some games and mpv in some cases. - 1 Small fix and 1 improvement. * SPA - Fix another bug caused by reversing the filter default value preference. (#4722) * pulse-server - Implement STREAM_DONT_INHIBIT_AUTO_SUSPEND flags. This can reduce power in pavucontrol when monitoring inactive streams. (#4255 #4726) * ALSA - Fix a potential deadlock when calling _drop and _drain at the same time. (#4728) ==== qemu ==== Version update (10.0.0 -> 10.0.2) - Update to stable release 10.0.2: Full list of backports here: https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/ A selection of them is reported here too: Revert "Drop support for Python 3.8" Update version for 10.0.1 release Drop support for Python 3.8 target/hppa: Fix FPE exceptions linux-user/hppa: Send proper si_code on SIGFPE exception target/hppa: Copy instruction code into fr1 on FPU assist fault migration: Allow caps to be set when preempt or multifd cap enabled migration/multifd: Don't send device state packets with zerocopy flag qapi/misc-target: Fix the doc to distinguish query-sgx and query-sgx-capabilities hw/pci-host: Remove unused pci_host_data_be_ops hw/pci-host/gt64120: Fix endianness handling i386/hvf: Make CPUID_HT supported i386/tcg: Make CPUID_HT and CPUID_EXT3_CMP_LEG supported target/riscv/kvm: do not read unavailable CSRs target/riscv/kvm: add kvm_csr_cfgs[] target/riscv/kvm: turn kvm_riscv_reg_id_ulong() into a macro target/riscv/kvm: turn u32/u64 reg functions into macros target/riscv/kvm: fix leak in kvm_riscv_init_multiext_cfg() target/riscv/kvm: minor fixes/tweaks target/riscv: Fix vslidedown with rvv_ta_all_1s target/riscv: Fix the rvv reserved encoding of unmasked instructions ...