Packages changed: bind (9.20.13 -> 9.20.15) gcc15 ipw-firmware libinput (1.28.1 -> 1.29.2) libphonenumber libplacebo libxkbcommon (1.11.0 -> 1.12.2) openSUSE-release (20251022 -> 20251023) perl-IO-String (1.08 -> 1.80.0) perl-Net-Patricia (1.230.0 -> 1.240.0) perl-TimeDate (2.33 -> 2.330.0) perl-URI (5.320.0 -> 5.340.0) selinux-policy (20251016 -> 20251021) sqlite3 suitesparse (7.10.3 -> 7.11.0) un-fonts virtualbox (7.2.0 -> 7.2.4) virtualbox-kmp (7.2.0_k6.17.3_1 -> 7.2.4_k6.17.4_1) === Details === ==== bind ==== Version update (9.20.13 -> 9.20.15) Subpackages: bind-doc bind-utils - Upgrade to release 9.20.15 Security Fixes: * DNSSEC validation fails if matching but invalid DNSKEY is found. [CVE-2025-8677, bsc#1252378] * Address various spoofing attacks. [CVE-2025-40778, bsc#1252379] * Cache-poisoning due to weak pseudo-random number generator. [CVE-2025-40780, bsc#1252380] New Features: * Add dnssec-policy keys configuration check to named-checkconf. Bug Fixes: * Missing DNSSEC information when CD bit is set in query. * rndc sign during ZSK rollover will now replace signatures. * Use signer name when disabling DNSSEC algorithms. * Preserve cache when reload fails and reload the server again. ==== gcc15 ==== Subpackages: cpp15 gcc15-locale libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Add gcc15-pr120424.patch to backport fix that cures a miscompile of libgo on arm. [bsc#1252306] ==== ipw-firmware ==== - properly install license files ==== libinput ==== Version update (1.28.1 -> 1.29.2) Subpackages: libinput-udev libinput10 - Update to release 1.29.2 * A potential crasher caused by abort if the dial/ring/strip pad mode group was not found, was fixed. * A zero delta timestamp caused the custom pointer acceleration to jump to 0/0 when clicking a button. * A missing forced proximity out event could cause two tablet tools to be in proximity at the same time. This could cause GTK applications to crash. - Update to release 1.29 * High-resolution scroll wheels have better heuristics to avoid inadvertent scrolls. This should also help with lesser-resolution scroll wheels which can skip those heuristics now, resulting in better responsiveness. * Virtual devices (e.g. uinput) are now detected in libinput and some internal heuristics are disabled for those (e.g. tablet smoothing). * Tablet tools with an fixed eraser button (almost all these days) can now configure that eraser button to be a regular button instead. * Jumping cursors on Asus "ASUE..." touchpads have lost their excitement and are no longer jumping. * libinput debug-tablet-pad is a new tool for interactive tablet pad debugging. - Delete pkgconf.patch (merged) ==== libphonenumber ==== - Fix libphonenumber-devel dependencies. libphonenumber::phonenumber-shared's INTERFACE_LINK_LIBRARIES contains Boost::date_time and Boost::thread ==== libplacebo ==== - Grab 12509c0f1ee8c22ae163017f0a5e7b8a9d983a17.patch from upstream repository Drops 12509c0f.patch - Drop Leap < 16 (does not meet libplacebo build requirements) - Use RPM 4.20 BuildSystem declaration - Clean up spec file ==== libxkbcommon ==== Version update (1.11.0 -> 1.12.2) Subpackages: libxkbcommon-x11-0 libxkbcommon0 libxkbregistry0 - Update to release 1.12.2 * About 1.6× speedup at serializing with default options. * About 1.7× speedup at parsing keymaps serialized by libxkbcommon, otherwise aruond 1.1×. * Added fallback to the legacy X11 path for misconfigured setups where the canonical XKB root is not available. ==== openSUSE-release ==== Version update (20251022 -> 20251023) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== perl-IO-String ==== Version update (1.08 -> 1.80.0) - Normalize CPAN version See https://github.com/openSUSE/cpanspec/issues/47 for details - Add cpanspec.yml to override description length ==== perl-Net-Patricia ==== Version update (1.230.0 -> 1.240.0) - updated to 1.240.0 (1.24) see /usr/share/doc/packages/perl-Net-Patricia/Changes 1.24 2025-10-05 09:32:28 CEST - update the COPYING file - add a license heading to the documentation - fix the POD encoding - remove a test that fails in certain DNS setups ==== perl-TimeDate ==== Version update (2.33 -> 2.330.0) - Normalize CPAN version See https://github.com/openSUSE/cpanspec/issues/47 for details ==== perl-URI ==== Version update (5.320.0 -> 5.340.0) - updated to 5.340.0 (5.34) see /usr/share/doc/packages/perl-URI/Changes 5.34 2025-09-17 11:00:27Z - Add WebSocket (ws, wss) URI (GH#158) (david-dick) 5.33 2025-09-17 03:23:13Z - Add smtp scheme (GH#156) (SineSwiper) ==== selinux-policy ==== Version update (20251016 -> 20251021) Subpackages: selinux-policy-targeted - Update to version 20251021: * Allow snapper sdbootutil plugin read emmc devices (bsc#1231354) * Allow pcrlock to delete pid entries * Allow systemd_pcrlock_t to manage its pid files * Mark snapper_sdbootutil_plugin_t as permissive * Drop unnamed filetrans, should be done upstream (bsc#1241964) * Label pcrlock pid file correctly (bsc#1241964) * Allow snapper sdbootutil plugin send msg to system bus (bsc#1241964) * snapper takes output from stdout/err, allow pcrlock to write * Add tpm2_getcap permissions to snapper sdbootutil (bsc#1244573) * Allow snapper sdbootutil plugin to read snapper data and conf * Allow snapper sdbootutil plugin to grep /proc/stat (bsc#1241964) * Replace snapper tmp file access for pcrlock (bsc#1241964) * Allow snapper sdbootutil read kernel module dirs (bsc#1241964) * Allow snapper sdbootutil plugin use bootctl (bsc#1241964) * Allow snapper sdbootutil plugin to list and read sysfs (bsc#1241964) * Allow snapper sdbootutil sys_admin (bsc#1241964) * Allow snapper sdbootutils plugin to findmnt (bsc#1241964) * Allow snapper sdbootutil plugin rw tpm (bsc#1233358) * Move manage dos permissions and dontaudit execmem to snapper sdbootutils plugin (bsc#1241964) * Move snapper domtrans to sdbootutil to plugin (bsc#1241964) * Revert snapper access to keys, move to sdbootutils plugin policy (bsc#1241964) * Add initial seperate policy for sdbootutil called by snapper (bsc#1233358) * Allow sort in snapper_grub_plugin_t read cpu.max (bsc#1252095) ==== sqlite3 ==== Subpackages: libsqlite3-0 libsqlite3-0-x86-64-v3 sqlite3-tcl - bsc#1252217: Add a %license file. ==== suitesparse ==== Version update (7.10.3 -> 7.11.0) Subpackages: libamd3 libcamd3 libccolamd3 libcholmod5 libcolamd3 libsuitesparseconfig7 libumfpack6 - Update to 7.11.0 * LAGraph v1.2: many new experimental algorithms, LAGraph_Random in src/ * GraphBLAS v10.1.1: risc-V vectorization, GRAPHBLAS_VANILLA (optional; to disable GxB extensions), and workaround for gcc compiler bug on Power and s390x processors. ==== un-fonts ==== - Stop marking un-fonts as essential for the Korean locale (and thus essential enough to be on the openSUSE DVD) ==== virtualbox ==== Version update (7.2.0 -> 7.2.4) - Update to release 7.2.4 * GUI: Fixed VBox Manager crash when some VM has a lot of snapshots. * GUI: Fixed VBox Manager crash while attempting to show error notifications too early. * GUI: Fixed VBox Manager freeze on Linux hosts at startup or while attempting to add a VM. * Network: Added a new experimental type of e1000 adapter. (82583V). It requires the ICH9 chipset, since MSIs are not supported by PIIX3. * USB Webcam: The virtual USB webcam is now part of the open source base package. * GUI: Fixed VirtualBox VM Manager crash when host was resuming from sleep. * Support for Linux 6.18 - Drop logic for building and installing on pre-Leap 15. ==== virtualbox-kmp ==== Version update (7.2.0_k6.17.3_1 -> 7.2.4_k6.17.4_1) - Update to release 7.2.4 * GUI: Fixed VBox Manager crash when some VM has a lot of snapshots. * GUI: Fixed VBox Manager crash while attempting to show error notifications too early. * GUI: Fixed VBox Manager freeze on Linux hosts at startup or while attempting to add a VM. * Network: Added a new experimental type of e1000 adapter. (82583V). It requires the ICH9 chipset, since MSIs are not supported by PIIX3. * USB Webcam: The virtual USB webcam is now part of the open source base package. * GUI: Fixed VirtualBox VM Manager crash when host was resuming from sleep. * Support for Linux 6.18 - Drop logic for building and installing on pre-Leap 15.