Packages changed:
  Mesa (26.0.0 -> 26.0.1)
  Mesa-drivers (26.0.0 -> 26.0.1)
  MozillaFirefox (147.0.4 -> 148.0)
  btrfsprogs (6.17.1 -> 6.19)
  evolution-data-server
  gom (0.5.5 -> 0.5.6)
  leancrypto
  libstorage-ng (4.5.301 -> 4.5.303)
  mozilla-nss (3.119.1 -> 3.120.1)
  mozjs140 (140.7.1 -> 140.8.0)
  ncurses (6.6.20260207 -> 6.6.20260221)
  nvidia-settings (580.119.02 -> 580.126.18)
  openSUSE-release (20260224 -> 20260226)
  ovmf (202511 -> 202602)
  permissions (1699_20260109 -> 1699_20260217)
  python-numpy (2.3.3 -> 2.4.2)
  qemu (10.2.0 -> 10.2.1)
  samba (4.23.5+git.458.200d9061a31 -> 4.23.5+git.463.513487e87f1)
  suse-module-tools (16.1.3 -> 16.1.4)
  sysconfig (0.90.3 -> 0.90.4)
  util-linux
  util-linux-systemd
  virglrenderer (1.1.1 -> 1.3.0)
  xkeyboard-config (2.46 -> 2.47)

=== Details ===

==== Mesa ====
Version update (26.0.0 -> 26.0.1)
Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1

- Update to Mesa 26.0.1 bugfix and security release
  * prevent out-of-bounds memory access in WebGPU (bsc#1258910)
  * various bugfixes
  - -> https://docs.mesa3d.org/relnotes/26.0.1

==== Mesa-drivers ====
Version update (26.0.0 -> 26.0.1)
Subpackages: Mesa-dri Mesa-libva Mesa-vulkan-device-select libvulkan_lvp

- Update to Mesa 26.0.1 bugfix and security release
  * prevent out-of-bounds memory access in WebGPU (bsc#1258910)
  * various bugfixes
  - -> https://docs.mesa3d.org/relnotes/26.0.1

==== MozillaFirefox ====
Version update (147.0.4 -> 148.0)
Subpackages: MozillaFirefox-branding-upstream MozillaFirefox-translations-common

- Mozilla Firefox 148.0
  * https://www.firefox.com/en-US/firefox/148.0/releasenotes
  MFSA 2026-13 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video component
  * CVE-2026-2794 (bmo#2008365)
    Information disclosure due to uninitialized memory in Firefox
    and Firefox Focus for Android
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib component
  * CVE-2026-2795 (bmo#2010940)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2796 (bmo#2013165)
    JIT miscompilation in the JavaScript: WebAssembly component
  * CVE-2026-2797 (bmo#2013561)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2798 (bmo#2014136)
    Use-after-free in the DOM: Core & HTML component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2799 (bmo#2014551)
    Use-after-free in the DOM: Core & HTML component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core & HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core & HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR component
  * CVE-2026-2800 (bmo#1988145)
    Spoofing issue in the WebAuthn component in Firefox for Android
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2801 (bmo#2009901)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2802 (bmo#2011069)
    Race condition in the JavaScript: GC component
  * CVE-2026-2803 (bmo#2012012)
    Information disclosure, mitigation bypass in the Settings UI
    component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2804 (bmo#2013584)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2805 (bmo#2014549)
    Invalid pointer in the DOM: Core & HTML component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP component
    ... changelog too long, skipping 18 lines ...
- added mozilla-breakpad.patch to fix build

==== btrfsprogs ====
Version update (6.17.1 -> 6.19)
Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1

- update to 6.19
  * mkfs:
  * make block-group-tree default (support since linux 6.1), use -O ^bgt to
  * unset it for backward compatibility
  * speed up initial device discard by procesing the ranges in order
  * disable block-grooup-tree feature if a dependent feature is explicitly
    unselected (like disabling no-holes), instead of erroring out
  * check:
  * add ability to detect and fix missing orphan items in deleted subvolumes
  * add ability to fix inode refs from directory items
  * enhance detection on unknown inode keys
  * libbtrfsutil:
  * minor version update to 1.4.0
  * add missing aliases for API updates done in 0.1.3, C and python
  * libbtrfs:
  * patchlevel version update 0.1.5
  * error handling updates
  * fixes:
  * with DUP profile and mixed sequential and conventional zoned make sure
    to track the right write pointers
  * scrub: fix ETA wraparound calculations, when many files get deleted
    during the operation bytes_scrubbed and bytes_total get too much out of
    sync, the ETA will be 0
  * corrupt-block: add ability to specify key value when corrupting item keys
  * experimental features:
  * initial remap tree support (new logical-to-logical mapping layer),
    coming in linux 7.0
  * other:
  * error handling improvements
  * CI updates
  * code cleanups and refactoring
  * documentation updates

==== evolution-data-server ====
Subpackages: evolution-data-server-lang libcamel-1_2-66 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-3 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4

- Add eds-CVE-2026-2604.patch: canonicalize path before local
  cache file removal (bsc#1258307 CVE-2026-2604
  glgo#GNOME/evolution-data-server#627).

==== gom ====
Version update (0.5.5 -> 0.5.6)

- Update to version 0.5.6:
  + Build: Use python install_sources (adds support for options
    such as python.bytecompile)

==== leancrypto ====
Subpackages: libleancrypto1 libleancrypto1-32bit

- Add upstream patch to fix build with kernel 6.19 on aarch64:
  * 0469d92f.patch

==== libstorage-ng ====
Version update (4.5.301 -> 4.5.303)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- Translated using Weblate (German) (bsc#1149754)
- 4.5.303
- merge gh#openSUSE/libstorage-ng#1060
- update %suse_version use (jsc#PED-15799)
- 4.5.302

==== mozilla-nss ====
Version update (3.119.1 -> 3.120.1)
Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools

- update to NSS 3.120.1
  * no upstream releasenotes
- update to NSS 3.120
  * bmo#2008768 - Fix docs generation bug.
  * bmo#2007908 - CID 1678226: Dereferencing null pointer plaintext.data().
  * bmo#2004694 - Run PKCS12 fuzz target with --fuzz=tls in CI.
  * bmo#1978603 - Allowing RT be started several times.
  * bmo#2005751 - move linux decision and build tasks to d2g worker pools.
- Revert back to original naming scheme of tarballs

==== mozjs140 ====
Version update (140.7.1 -> 140.8.0)

- Update to version 140.8.0:
  + Security Vulnerabilities fixed in Firefox ESR 140.8
  + See https://www.firefox.com/en-US/firefox/140.8.0/releasenotes/

==== ncurses ====
Version update (6.6.20260207 -> 6.6.20260221)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen

- Add ncurses patch 20260214
  + add ech to screen terminfo (Debian #707308).
  + review/update screen5, adding screen5.xterm-new and
    screen4.xterm-new -TD
- Add ncurses patch 20260221
  + correct strikeout for iterm2 -TD
  + add some xterm-style modified special-keys to iterm2 -TD
  + modify configure script regex check to provide for Windows libraries
    having regcomp (report by Juergen Pfeifer).
  + modify configure script --with-pcre2 option to allow specifying the
    pkgconfig name for pcre2 (prompted by discussion with George Goffe).

==== nvidia-settings ====
Version update (580.119.02 -> 580.126.18)

- update to version 580.126.18 (boo#1258154)
- update to version 580.126.09 (boo#1255858)

==== openSUSE-release ====
Version update (20260224 -> 20260226)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== ovmf ====
Version update (202511 -> 202602)
Subpackages: qemu-ovmf-x86_64

- Update to edk2-stable202602
  - Patches (git log --oneline --date-order edk2-stable202511..edk2-stable202602):
    b7a715f7c03c MdeModulePkg: Add Unmap Callback
    0e8dc1693d4e MdeModulePkg: Code/Comment cleanup
    3457388b7cec MdeModulePkg: Use EFI_PAGES_TO_SIZE macro in ArmFfaSecRxTxMap
    ea8447eec78c MdeModulePkg: Remove global usage from ArmFfaSecRxTxMap
    7416ebda09de MdeModulePkg: Remove global usage in ArmFfaCommon
    16d9ba7275d4 MdeModulePkg: Add helper to check if FF-A is supported
    7baa358e2cdd ArmPlatformPkg/PL011UartLib : Fix incorrect control bit validation
    12f785f10621 Revert "BaseTools: Add support for out-of-tree builds"
    e1c56cf5d54f Revert "BaseTools/Source/C/Makefile: Update OBJECTS using OS specific SEP"
    756d5fb0aba8 EmbeddedPkg/PrePiMemoryAllocationLib: Update memory hob page alignment
    ade5fdb8e3cb Maintainers.txt: Highlight maintainer opportunities
    95a1f4fc4d16 UefiPayloadPkg: Update wiki links
    7ac719710c06 SignedCapsulePkg: Update wiki links
    d60aab664a16 PrmPkg: Update wiki links
    863d89f31f00 OvmfPkg: Update wiki links
    eb1e2f5434bd BaseTools: Update wiki links
    743a5e91dc61 ArmVirtPkg: Update wiki links
    26caa77a1294 .pytool: Update wiki links
    ae73ab7c7dcf .github: Update wiki links
    feefaba102b8 Global: Update wiki links in workspace root files
    be6ff0f289f4 MdeModulePkg/HiiDatabaseDxe: Fix parser issue in GetNameElement()
    f0542ae07d5e BaseTools/Source/C/Makefile: Update OBJECTS using OS specific SEP
    e092122653c0 ArmPlatformPkg/PL011UartLib : Fix SetControl() SCT conformance
    cf513a57cc6c UefiCpuPkg: Update exception vector for LoongArch64
    6d4b80aab3ac ArmPkg/Library: update xferlist version to 2
    96572d4d72be ShellPkg: SMBIOS type 20 Extended Starting/Ending Address print type error
    de6f1e885c02 Maintainers.txt: Add Kun Qin as maintainer for StandaloneMmPkg
    25462a6ab249 MdeModulePkg: MmVariablePei: Populate correct v3 header
    11d04a2975e4 StandaloneMmPkg: StandaloneMmIplPei: MM Communicate v3 header check fix
    f0eade598462 StandaloneMmPkg: StandaloneMmCore: Log MM Entry/Exit Protocol at Verbose
    ffa6fc362aaf StandaloneMmPkg: StandaloneMmCore: Don't Print Entry/Exit Logs
    3a46febf9b82 Maintainers.txt: Add Doug Flick as maintainer for CryptoPkg
    3fe1d56cc98e BaseTools: Add support for out-of-tree builds
    f39883ea115f BaseTools: Refactor shell BinWrappers/PosixLike wrappers
    4cfa0c4911a2 BaseTools: Remove unused rules and dependencies
    388a817120f3 BaseTools/Tests: Generate interim files in temp directory
    522b18190a26 BaseTools/Tests: Fix clean target
    f5f4e9b76462 MdeModulePkg/SetupBrowserDxe: Check Form parameter in RuleIdToExpression()
    5a414b5ef7de MdeModulePkg/revertSetupBrowserDxe: Fix code issue in ParseOpCodes()
    e0f8dc155fa5 ArmPkg: Replace non-ASCII characters with ASCII
    83271a185ad8 EmbeddedPkg: Replace non-ASCII characters with ASCII
    23d5ddfe2d48 MdePkg: Replace non-ASCII characters with ASCII
    64ad6f20d883 MdeModulePkg: BdsDxe: Introduce infinite boot retries
    ff69be351986 MdeModulePkg/CapsuleOnDiskLoadPei: fix gcc 16 warning
    e01df5228113 MdeModulePkg/VarCheckHiiLib: fix gcc 16 warning
    8992abde26b2 MdeModulePkg/DisplayEngineDxe: fix gcc 16 warning
    21441cdf2996 MdeModulePkg/SmbiosMeasurementDxe: fix gcc 16 warning
    0f451f6e1ff9 MdeModulePkg/CustomizedDisplayLib: fix gcc 16 warning
    9af06ef3cbb0 BaseTools/EfiRom: fix compiler warning
    359730619129 BaseTools/StringFuncs: fix gcc 16 warning
    50a00eb5d43c ArmPlatformPkg: Extend SpellCheck dictionary
    f9cd283aa110 OvmfPkg/Microvm: add memory debug log support
    d04e5c6c5284 OvmfPkg/AmdSev: add memory debug log support
    27143a8233f2 OvmfPkg: use MemDebugLogPeiCoreLib for PEIMs
    5ededcd630b4 ArmVirtPkg: use MemDebugLogPeiCoreLib for PEIMs
    37857f41c675 OvmfPkg/MemDebugLogPeiCoreLib: enable for PEIMs
    7916a6ccb732 OvmfPkg/MemDebugLogPeiLib: drop duplicate MemDebugLogWrite function
    370b689176cc OvmfPkg: Remove Hash2DxeCrypto if NETWORK_ENABLE=FALSE
    184058881431 EmulatorPkg/PlatformCI: Set WIN_MINGW32_BUILD
    fe436902cc60 EmulatorPkg: Remove Hash2DxeCrypto if NETWORK_ENABLE=FALSE
    c2915d24a183 BaseTools: Prevent Subsection PCDs from polluting global expressions
    1a261da766ef MdeModulePkg/UsbMassStorageDxe: Add retry mechanism to UsbMassReadBlocks
    f6489621b8ae MdeModulePkg: PciBusDxe: Degrade MEM64 to PMEM64 when bridge lacks MEM64
    300dada916aa MdeModulePkg/Core: Make PPI services spec complaint
    539c53375e84 ShellPkg/AcpiView: Adds FPDT Parser
    ccbee92b65a3 .azurepipelines/templates: Split out unit test jobs
    ea011c812fc5 BaseTools/Plugin/WindowsVsToolChain: Add WindowsSDKLibVersion
    0b867b65a2c1 BaseTools/Plugin/WindowsVsToolChain: CLANGPDB add IA32 DLLs to Path
    947bb30b1f0a .pytool/Plugin/HostUnitTestCompilerPlugin: Allow non VS20xx IA32
    8ca4de0982eb .pytool/Plugin/CompilerPlugin: Skip TARGET not supported by DSC
    d6bcf9d22c9d .pytool/Plugin/CompilerPlugin: Allow NOOPT builds
    d419725b2320 MdeModulePkg/Core/Dxe/Mem: Fix GetMemoryMap() Alignment Issues
    6834d4399174 MdeModulePkg/Core/Dxe/Mem: Align initial memory map entries
    377cdf06921b StandaloneMmPkg/Core/Page.c: Correct gMemoryMap typo
    a2aaab4553ac MdeModulePkg/Core/PiSmmCore/Page.c: Correct gMemoryMap typo
    97a81fd05c47 RedfishPkg/RedfishPlatformConfigDxe: reduce false alarm
    61c7b61fd7be RedfishPkg/RedfishPlatformConfigDxe: add missing HII handles
    0ba3897fb3d1 OvmfPkg: Move post-merge pipelines runs to a daily build
    f16447702c48 EmulatorPkg: Move post-merge pipelines runs to a daily build
    8d3d9d2f0ea6 ArmVirtPkg: Move post-merge pipelines runs to a daily build
    842720ed0943 .azurepipelines: Move post-merge to a daily build
    b7d0b8331fd5 UefiPayloadPkg: UniversalPayloadBuild.py -l add support for various bases
    3d8fb11bc222 UefiPayloadPkg: MkFitImage.py removes extra spaces
    c204f5402ea5 DynamicTablesPkg: Adds API to create method with Notify support
    f840501d1f86 OvmfPkg: Fix property typos in OvmfPkg
    d3dee93960cc MdePkg: Fix property typos in MdePkg
    491262f43106 MdeModulePkg/Library: Fix property typos
    1b70ffe81954 EmulatorPkg: Fix build failure with gcc when TLS is enabled
    229fbfde14a3 SignedCapsulePkg/Universal/RecoveryModuleLoadPei: 4KB alignment
    94a50ef550b9 UefiCpuPkg: Fix VS2022 NOOPT IA32 build issues
    811f56c9386b UefiCpuPkg/Library/CpuPageTableLib/UnitTest: Fix pointer compare
    6458470010c8 MdeModulePkg/LoadFileOnFv2: Fix typo in Buffer parameter description
    01cdc859e5ac MdePkg/LoadFile2: Fix typo in Buffer parameter description
    b55b3ae351b2 EmbeddedPkg/AndroidBootImgLib: Fix typo in Buffer parameter description
    4890db2abc93 NetworkPkg/UefiPxeBcDxe: Fix typo in Buffer parameter description
    8c3e181b79c6 MdeModulePkg/PciBusDxe: Fix typo in Buffer parameter description
    8ba64a9a9417 UefiPayloadPkg: Fix build failure with CLANGPDB
    ... changelog too long, skipping 329 lines ...
    9ccf8751a74f UefiCpuPkg/CpuExceptionHandlerLib: fix push instructions

==== permissions ====
Version update (1699_20260109 -> 1699_20260217)
Subpackages: permctl permissions-config

- Declare a BuildConflict instead of a build-dependency.
- Don't BuildRequire rpmlint, but rpmlint-mini, otherwise we re-introduce
  the build cycles that rpmlint-mini is supposed to break.
- BuildRequire a recent enough rpmlint to avoid rpmlint choking on the new
  :package: coupling syntax.
- Update to version 1699_20260217:
  * tests: catch errors in parsing package lines with space after comma
  * ProfileParser: increase robustness in package line parsing
  * TestBase: _checkForASANErrors: drop extra errors increment
  * profiles: introduce package coupling for existing entries
  * profiles: drop "disable set*id bits" entries
  * profiles: remove useless /etc/crontab entry
  * etc/permissions: add :package: coupling
  * tests: add coverage for package coupling syntax
  * TestBase: fix some typos
  * EntryProcessor::matchingPkg(): catch "not owned by any package" case
  * EntryProcessor::matchingPkg(): take multi-ownership into account
  * tests: drop m_ prefix on member variables
  * tests: fix flake8 findings
  * man pages: document new :package: syntax; general improvements
  * meson: switch to `install_emptydir()` for permissions.d directory
  * EntryProcessor: enforce package ownership limitation
  * ProfileParser: support parsing of :package: list specifications
  * profiles: remove extensive documentation from files in favor of man page
  * profiles: harmonize, simplify and update copyright statement
- Add Provides permissions-doc to config sub-package as is suggested by
  rpmlint.
- properly escape % in comments in %check section

==== python-numpy ====
Version update (2.3.3 -> 2.4.2)
Subpackages: python311-numpy python313-numpy

- Update to 2.4.2
  * Many annotation improvements.
  * New casting kwarg 'same_value' for casting by value.
  * New PyUFunc_AddLoopsFromSpec function that can be used to add
    user sort loops using the ArrayMethod API.
  * New __numpy_dtype__ protocol.
  * Setting the strides attribute is deprecated.
  * Positional out argument to np.maximum, np.minimum is deprecated.
  * align= must be passed as boolean to np.dtype().
  * Assertion and warning control utilities are deprecated.
  * np.fix is pending deprecation.
  * in-place modification of ndarray.shape is pending deprecation.
  * Deprecation of numpy.lib.user_array.container.
  * Removed deprecated MachAr runtime discovery mechanism.
  * Raise TypeError on attempt to convert array with ndim > 0 to
    scalar.
  * Removed numpy.linalg.linalg and numpy.fft.helper.
  * Removed interpolation parameter from quantile and percentile
    functions.
  * Removed numpy.in1d and numpy.ndindex.ndincr().
  * Removed fix_imports parameter from numpy.save.
  * Removal of four undocumented ndarray.ctypes methods.
  * Removed newshape parameter from numpy.reshape.
  * numpy.array2string and numpy.sum deprecations finalized.
  * Removed some other deprecated functions and arguments.
  * NumPy's C extension modules have begun to use multi-phase
    initialisation, as defined by PEP 489.
  * numpy.round now always returns a copy.
  * Type-checkers will no longer accept calls to numpy.arange with
    start as a keyword argument.
  * The Macro NPY_ALIGNMENT_REQUIRED has been removed.
  * Many more changes and fixes, see upstream changelog.
- Drop update-meson-1_5_2.patch, no longer needed

==== qemu ====
Version update (10.2.0 -> 10.2.1)
Subpackages: qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-vmsr-helper qemu-x86

- Update to stable release 10.2.1:
  Full backport list here:
  https://lore.kernel.org/qemu-devel/20260213060607.200695-1-mjt@tls.msk.ru/
  This release includes the fixes for (among others):
  bsc#1255400 (CVE-2025-14876)
  A selection of them is reported here below:
  scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
  Revert "tcg/user: do not set exit_request gratuitously"
  linux-user/syscall.c: Prevent acquiring clone_lock while fork()
  hw/cxl: Take into account how many media operations are requested for param check
  hw/cxl: Check for overflow on santize media as both base and offset 64bit.
  virtio-gpu: fix error handling in virgl_cmd_resource_create_blob
  virtio-pmem: ignore empty queue notifications
  virtio-gpu-virgl: correct parent for blob memory region
  cryptodev-builtin: Limit the maximum size
  hw/virtio/virtio-crypto: verify asym request size
  q35: Fix migration of SMRAM state
  pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit()
  virtio: Fix crash when sriov-pf is set for non-PCI-Express device
  virtio-dmabuf: Ensure UUID persistence for hash table insertion
  vdpa: fix vhost-vdpa suspended state not be shared
  hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address
  hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first
  hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC
  hw/i2c/aspeed_i2c.c: Add a check for dma_read
  hw/adc: Fix out-of-bounds write in Aspeed ADC model
  hw/uefi: fix size negotiation
  hw/nvme: Fix bootindex suffix use-after-free
  python: fix msys64 wheel directory specification
  tests/qtest/ufs-test: Add test for mcq completion queue wraparound
  hw/ufs: Fix mcq completion queue wraparound
  hw/ufs: fix CQE endianness and UPIU length
  hw/ufs: Ensure DBC of PRDT uses only lower 18 bits
  tests/functional: migrate sbsa_ref test images
  pc-bios/optionrom: Use 32-bit linker emulation for the optionroms
  gitlab: preserve base rules for container template
  target/i386/tcg: fix a few instructions that do not support VEX.L=1
  linux-user: fixup termios2 related things on PowerPC
  linux-user: Add missing termios baud rates
  linux-user: Add termios2 support to sparc target
  linux-user: Add termios2 support to sh4 target
  linux-user: Add termios2 support to mips target
  linux-user: Add termios2 support to hppa target
  linux-user: Add termios2 support to alpha target
  linux-user: Add termios2 support
  hw/intc: avoid byte swap fiddling in gicv3 its path
  ...
- Fix bsc#1257492:
  * [openSUSE][RPM] spec: Tie guest-agent supplements to the kernel package (bsc#1257492)

==== samba ====
Version update (4.23.5+git.458.200d9061a31 -> 4.23.5+git.463.513487e87f1)
Subpackages: libldb2 libldb2-32bit python3-ldb samba-ad-dc-libs samba-ad-dc-libs-32bit samba-client samba-client-32bit samba-client-lang samba-client-libs samba-client-libs-32bit samba-dcerpc samba-gpupdate samba-ldb-ldap samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit samba-winbind-libs-lang

- The "include system krb5 conf" option searchs for
  /usr/etc/krb5.conf if /etc/krb5.conf does not exist;
  (bsc#1257940);

==== suse-module-tools ====
Version update (16.1.3 -> 16.1.4)
Subpackages: suse-module-tools-scriptlets

- Update to version 16.1.4:
  * Remove erofs from the list of blacklisted file systems
    (jsc#PED-14573)
  * weak-modules2: don't remove symlinks in the rpm --reinstall case
    (bsc#1257055)

==== sysconfig ====
Version update (0.90.3 -> 0.90.4)
Subpackages: sysconfig-netconfig

- version 0.90.4
  - netconfig: adjust condition to disable nis on 16.x (jsc#PED-15809)

==== util-linux ====
Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang

- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).

==== util-linux-systemd ====
Subpackages: lastlog2 liblastlog2-2

- Prevent leaking of NETLINK_ROUTE socket to login, which causes
  SELinux AVC denial (gh#util-linux/util-linux#4032,
  util-linux-lib-netlink-fix5.patch).

==== virglrenderer ====
Version update (1.1.1 -> 1.3.0)

- Version update to 1.3.0 (jsc#PED-14625)
  New features
    Add experimental implementation for Intel  and Panfrost virtual
    native contexts
  API and configuration changes:
    drop obsolete render-server option
    virglrenderer: introduce virgl_renderer_resource_map_fixed
    vkr: drop obsolete venus-validate build option
  New Vulkan features enabled:
    VK_EXT_mesh_shader
    VK_KHR_cooperative_matrix
    VK_KHR_robustness2
    VK_KHR_shader_bfloat16
    VK_KHR_shader_untyped_pointers
    VK_EXT_shader_float8
    VK_EXT_shader_uniform_buffer_unsized_array
  Fixes and enhancements:
    c11/threads: fix build on c23 (bsc#1258756)
    virgl: fix untyped resource mapping leak
    drm/amdgpu: implement resource_map
    virglrenderer: extend contexts to map OPAQUE_HANDLE
    virglrenderer: use same render node as qemu for native context
    vkr: align up opaque fd export alloc even for dedicated alloc
    vkr: plug leaks on ring destroy
    vrend: Add VIRGL_CCMD_GET_PIPE_RESOURCE_LAYOUT
    vrend: Add more 10bit RGB formats
    vrend: Correct eglGetPlatformDisplay argument type
    vrend: Correct minigbm definitions
    vrend: Prepare to utilize GBM allocation by default when using EGL
- Version 1.2.0 changes
  API changes:
    Add API to get drm device fd
    Add some APIs needed by vtest
  Fixes and enhancements:
    Add epoll-shim deps on FreeBSD for venus support
    Fix enable video build egl and drm error
    venus: enable loading vulkan symbols dynamically at runtime
    venus: fall back to "/tmp" if XDG_RUNTIME_DIR is not defined
    vkr: check dma-buf support for gbm and udmabuf backings
    vkr: improve suppport for QEMU
    vkr_allocator: enable required extensions
    vtest: add native context support
    drm: add asahi native-context implementation
    vrend: misc fixes

==== xkeyboard-config ====
Version update (2.46 -> 2.47)
Subpackages: xkeyboard-config-lang

- update to 2.47
  * Layouts / New
    + Added the Slavistic Phonetic Alphabet variant for Polish
  * Miscellaneous / Breaking changes
    + Made <ZEHA> behave like <FK24>
    On Linux Kernel before v6.17, the scancode for F24 was bound
    to the otherwise unused <ZEHA> keycode. v6.17 fixed this. To
    have a consistent behaviour across kernel versions, make both
    <ZEHA> and <FK24> behave the same.
  * New
    + Added keycodes from recent Linux kernels:
    `<I455>` for `KEY_LINK_PHONE`
    `<I709>` for `KEY_PERFORMANCE`
    + inet: Added mapping to the following new keysyms:
    `XF86LinkPhone`
    `XF86Fn_F1`
    `XF86Fn_F2`
    `XF86Fn_F3`
    `XF86Fn_F4`
    `XF86Fn_F5`
    `XF86Fn_F6`
    `XF86Fn_F7`
    `XF86Fn_F8`
    `XF86Fn_F9`
    `XF86Fn_F10`
    `XF86Fn_F11`
    `XF86Fn_F12`
    `XF86Fn_1`
    `XF86Fn_2`
    `XF86Fn_D`
    `XF86Fn_E`
    `XF86Fn_F`
    `XF86Fn_S`
    `XF86Fn_B`
    `XF86PerformanceMode`
    `XF86AudioBassBoost`
    + inet: Mapped `F19` for the rare occasion that it exists e.g.
    on custom keyboards.
    + inet: Mapped `F24`, which has a special alternative function
    as pressing the touchpad toggle key on some notebooks
    produces the key sequence `Super + Control + F24`.
- supersedes U_Make-ua-winkeysenhanced-compatible-with-ckbcomp.patch