Packages changed: MicroOS-release (20250626 -> 20250627) apparmor (4.1.0 -> 4.1.1) busybox-links curl kernel-source kmod libapparmor (4.1.0 -> 4.1.1) libssh (0.11.1 -> 0.11.2) lilv (0.24.24 -> 0.24.26) numactl open-vm-tools (12.5.2 -> 13.0.0) util-linux (2.41 -> 2.41.1) util-linux-systemd (2.41 -> 2.41.1) === Details === ==== MicroOS-release ==== Version update (20250626 -> 20250627) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== apparmor ==== Version update (4.1.0 -> 4.1.1) - update to ApppArmor 4.1.1 - unix-chkpwd: allow dac_read_search (boo#1241678) - extend mesa, wutmp and nameservice abstractions - utils: add support for priority rule prefix - various bugfixes - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1 for the detailed upstream changelog ==== busybox-links ==== Subpackages: busybox-coreutils busybox-diffutils busybox-grep busybox-gzip busybox-hostname busybox-sed busybox-xz - Blacklist creating links for halt, reboot, shutdown commands to avoid accidental use in a fully booted system (bsc#1243201) ==== curl ==== Subpackages: libcurl4 - Build with experimental OpenSSL based QUIC support to enable --http3 ==== kernel-source ==== - Refresh patches.suse/drm-amd-display-Add-debugging-message-for-brightness.patch. - Refresh patches.suse/drm-amd-display-Fix-default-DC-and-AC-levels.patch. Update upstream info. - commit 0b2be4d - video: screen_info: Relocate framebuffers behind PCI bridges (bsc#1240696). Update to upstream version (v3). - commit 28b2fa0 - Remove host-memcpy-hack.h This might have been usefult at some point but we have more things that depend on specific library versions today. - commit 0396c23 - Remove compress-vmlinux.sh /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in pesign-obs-integration during SLE12 RC. This workaround can be removed. - commit 19caac0 - Remove try-disable-staging-driver The config for linux-next is autogenerated from master config, and defaults filled for missing options. This is unlikely to enable any staging driver in the first place. - commit a6f21ed - Delete patches.suse/Revert-percpu-x86-enable-strict-percpu-checks-via-na.patch. Fixes accepted to libbpf: https://build.suse.de/requests/379919 https://build.suse.de/requests/379920 https://build.opensuse.org/requests/1283405 - commit c3b942c - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (git-fixes). - commit 1a6b27d - Rename to patches.rpmify/powerpc-boot-Fix-build-with-gcc-15.patch. Ie. fix also kernel-vanilla. - commit b84d501 ==== kmod ==== Subpackages: libkmod2 - Fix testsuite on Leap 16.0 (bsc#1240126) * Revert-build-check-for-__xstat-declarations.patch ==== libapparmor ==== Version update (4.1.0 -> 4.1.1) - update to ApppArmor 4.1.1 - unix-chkpwd: allow dac_read_search (boo#1241678) - extend mesa, wutmp and nameservice abstractions - utils: add support for priority rule prefix - various bugfixes - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1 for the detailed upstream changelog ==== libssh ==== Version update (0.11.1 -> 0.11.2) Subpackages: libssh-config libssh4 - Update to version 0.11.2 * Security: * CVE-2025-4877 - Write beyond bounds in binary to base64 conversion (bsc#1245309) * CVE-2025-4878 - Use of uninitialized variable in privatekey_from_file() (bsc#1245310) * CVE-2025-5318 - Likely read beyond bounds in sftp server handle management (bsc#1245311) * CVE-2025-5351 - Double free in functions exporting keys (bsc#1245312) * CVE-2025-5372 - ssh_kdf() returns a success code on certain failures (bsc#1245314) * CVE-2025-5449 - Likely read beyond bounds in sftp server message decoding (bsc#1245316) * CVE-2025-5987 - Invalid return code for chacha20 poly1305 with OpenSSL (bsc#1245317) * Compatibility * Fixed compatibility with CPM.cmake * Compatibility with OpenSSH 10.0 * Tests compatibility with new Dropbear releases * Removed p11-kit remoting from the pkcs11 testsuite * Bugfixes * Implement missing packet filter for DH GEX * Properly process the SSH2_MSG_DEBUG message * Allow escaping quotes in quoted arguments to ssh configuration * Do not fail with unknown match keywords in ssh configuration * Process packets before selecting signature algorithm during authentication * Do not fail hard when the SFTP status message is not sent by noncompliant servers - Removed libssh-CmakeLists-Fix-multiple-digit-major-version-for-OpenSSH.patch - Removed libssh-misc-Fix-OpenSSH-banner-parsing.patch ==== lilv ==== Version update (0.24.24 -> 0.24.26) - Update to version 0.24.26: * Add lint option with project metadata and code quality tests * Avoid use of VLAs in lv2apply * Clean up and isolate platform-specific code * Fix C++ test build on MacOS * Fix library current_version on MacOS * Fix test suite when TMPDIR has no trailing slash * Fully separate library code from programs * Improve const correctness * Replace more platform-specific code with use of zix ==== numactl ==== - Fix Node0 does not exist (bsc#1244492) A 4abeee1aac20a7a2552870e0359b8df013ae9037.patch ==== open-vm-tools ==== Version update (12.5.2 -> 13.0.0) Subpackages: libvmtools0 - Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169): There are no new features in the open-vm-tools 13.0.0 release. This is primarily a maintenance release that addresses a few issues, including: - The vm-support script has been updated to collect the open-vm-tools log files from the Linux guest and information from the systemd journal. - Github pull requests has been integrated and issues fixed. Please see the Resolved Issues section of the Release Notes. For a more complete list of issues resolved in this release, see the Resolved Issues section of the Release Notes. For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0 Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md The granular changes that have gone into the 13.0.0 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog - Add patch: 0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch Currently the "telinit 6" command is used to reboot a Linux VM following Guest OS Customization. As the classic Linux init system, SysVinit, is deprecated in favor of a newer init system, systemd, the telinit command may not be available on the base Linux OS. This change adds support to Guest OS Customization for the systemd init system. If the modern init system, systemd, is available, then a "systemctl reboot" command will be used to trigger reboot. Otherwise, the "telinit 6" command will be used assuming the traditional init system, SysVinit, is still available. - Drop patch now contained in 13.0.0: open-vm-tools-12.5.0-gcc15.patch - Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes file where source validator was failing. ==== util-linux ==== Version update (2.41 -> 2.41.1) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Update to version 2.41.1: * cfdisk: fix memory leak and possible NULL dereference * fdisk: fix possible memory leak * findmnt: fix -k option parsing regression (boo#1242705, drop util-linux-libblkid-econf-parse.patch) * hardlink: fix performance regression * include/cctype: fix string comparison * libblkid: * Fix crash while parsing config with libeconf * befs fix underflow * avoid strcasecmp() for ASCII-only strings * libblkid/src/topology/dm: fix fscanf return value check to match expected number of parsed items * libmount: * (subdir) restrict for real mounts only * (subdir) remove unused code * avoid calling memset() unnecessarily * fix --no-canonicalize regression (boo#1244251, drop libmount-fix-no-canonicalize-regression.patch) * lsblk: * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE * avoid strcasecmp() for ASCII-only strings * lscpu: * fix possible buffer overflow in cpuinfo parser * Fix loongarch op-mode output with recent kernel * lsfd: * scan the protocol field of /proc/net/packet as a hex number * fix the description for PACKET.PROTOCOL column * lsns: * enhance compilation without USE_NS_GET_API * fix undefined reference to add_namespace_for_nsfd #3483 * more: * fix broken ':!command' command key * fix implicit previous shell_line execution #3508 * tests: (test_mkfds::mapped-packet-socket) add a new parameter, protocol * treewide: * add ul_ to parse_timestamp() function name (drop util-linux-rename-common-symbols-4.patch) * add ul_ to parse_switch() function name (drop util-linux-rename-common-symbols-3.patch) * add ul_ to parse_size() function name (drop util-linux-rename-common-symbols-2.patch) * add ul_ to parse_range() function name (drop util-linux-rename-common-symbols-1.patch) * fix optional arguments usage * avoid strcasecmp() for ASCII-only strings * Wipefs: improve --all descriptions for whole-disks * Misc: Do not call exit() on code ending in shared libraries * Other fixes. For complete list see https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes - Fix problem with uname26 listed twice. ==== util-linux-systemd ==== Version update (2.41 -> 2.41.1) Subpackages: lastlog2 liblastlog2-2 - Update to version 2.41.1: * cfdisk: fix memory leak and possible NULL dereference * fdisk: fix possible memory leak * findmnt: fix -k option parsing regression (boo#1242705, drop util-linux-libblkid-econf-parse.patch) * hardlink: fix performance regression * include/cctype: fix string comparison * libblkid: * Fix crash while parsing config with libeconf * befs fix underflow * avoid strcasecmp() for ASCII-only strings * libblkid/src/topology/dm: fix fscanf return value check to match expected number of parsed items * libmount: * (subdir) restrict for real mounts only * (subdir) remove unused code * avoid calling memset() unnecessarily * fix --no-canonicalize regression (boo#1244251, drop libmount-fix-no-canonicalize-regression.patch) * lsblk: * use ID_PART_ENTRY_SCHEME as fallback for PTTYPE * avoid strcasecmp() for ASCII-only strings * lscpu: * fix possible buffer overflow in cpuinfo parser * Fix loongarch op-mode output with recent kernel * lsfd: * scan the protocol field of /proc/net/packet as a hex number * fix the description for PACKET.PROTOCOL column * lsns: * enhance compilation without USE_NS_GET_API * fix undefined reference to add_namespace_for_nsfd #3483 * more: * fix broken ':!command' command key * fix implicit previous shell_line execution #3508 * tests: (test_mkfds::mapped-packet-socket) add a new parameter, protocol * treewide: * add ul_ to parse_timestamp() function name (drop util-linux-rename-common-symbols-4.patch) * add ul_ to parse_switch() function name (drop util-linux-rename-common-symbols-3.patch) * add ul_ to parse_size() function name (drop util-linux-rename-common-symbols-2.patch) * add ul_ to parse_range() function name (drop util-linux-rename-common-symbols-1.patch) * fix optional arguments usage * avoid strcasecmp() for ASCII-only strings * Wipefs: improve --all descriptions for whole-disks * Misc: Do not call exit() on code ending in shared libraries * Other fixes. For complete list see https://kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes - Fix problem with uname26 listed twice.