Packages changed:
MicroOS-release (20250423 -> 20250424)
PackageKit-Qt6 (1.1.1 -> 1.1.2)
augeas
btrfsprogs
crypto-policies
ethtool
gnome-shell
grub2
iptables
libedit (20210910.3.1 -> 20250104.3.1)
libgcrypt
libraw (0.21.3 -> 0.21.4)
nghttp2 (1.64.0 -> 1.65.0)
sdbootutil (1+git20250421.7ffd25a -> 1+git20250423.61ca94f)
=== Details ===
==== MicroOS-release ====
Version update (20250423 -> 20250424)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd
- automatically generated by openSUSE-release-tools/pkglistgen
==== PackageKit-Qt6 ====
Version update (1.1.1 -> 1.1.2)
- Update to 1.1.2
* offline: Make sure we allow for interactive authorization
* Allow Transaction::setHints before the transaction has started
* Fix check for PackageKit D-Bus specs
* Add missing info enum values
==== augeas ====
Subpackages: libaugeas0 libfa1
- Add patch, fix for bsc#1239909 / CVE-2025-2588:
* CVE-2025-2588.patch
==== btrfsprogs ====
Subpackages: btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1
- Fix name clash of parse_range between common/parse-utils.c and
libblkid.a from util-linux-2.41
(btrfsprogs-libblkid-static-lib-clash.patch).
==== crypto-policies ====
- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
==== ethtool ====
- fix AppStream metainfo XML file
* misc-fix-AppStream-metainfo-XML.patch
==== gnome-shell ====
Subpackages: gnome-shell-calendar
- Drop gnome-shell-executable-path-not-absolute.patch: The original
patch did not work as expected, and assuming gsettings is in the
bin dir of gnome-shell is not correct, so keep relative path
(bsc#1241666).
==== grub2 ====
Subpackages: grub2-common grub2-i386-efi grub2-i386-efi-bls grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi grub2-x86_64-efi-bls
- Fix reading bls fragments in file-system dependent order that is not
predictable (bsc#1241046)
* 0001-blscfg-read-fragments-in-order.patch
- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
* 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
==== iptables ====
Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins
- Remove legacy backend from SLES16
==== libedit ====
Version update (20210910.3.1 -> 20250104.3.1)
- update to 20250104:
* all: sync with upstream source
* doc/Makefile.am: fix regression. Name all manpage links as
el_* (e.g. el_history.3) to avoid conflicts.
* src/chartype.c: Add missing stdint.h
* src/sys.h, src/reallocarr.c: Remove unused sys/cdefs.h
include, to compile against musl libc
* src/sys.h: Add __sun guard around sys/types.h in sys.h
- drop libedit-20180525-manpage-conflicts.patch and
libedit-hidden-symbols.patch: upstreamed
- no need for autoreconf and it's BuildRequires:
==== libgcrypt ====
- Differentiate use of SHA1 in the service level indicator [jsc#PED-12227]
* Include upstream SLI revamp and fips certification fixes
* Add patches:
- libgcrypt-fips-Introduce-an-internal-API-for-FIPS-service-indicator.patch
- libgcrypt-fips-Introduce-GCRYCTL_FIPS_SERVICE_INDICATOR-and-the-macro.patch
- libgcrypt-fips-kdf-Implement-new-FIPS-service-indicator-for-gcry_kdf_derive.patch
- libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_hash_.patch
- libgcrypt-fips-tests-Add-t-digest.patch
- libgcrypt-fips-Change-the-internal-API-for-new-FIPS-service-indicator.patch
- libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_open-API.patch
- libgcrypt-fips-tests-Add-tests-for-md_open-write-read-close-for-t-digest.patch
- libgcrypt-fips-mac-Implement-new-FIPS-service-indicator-for-gcry_mac_open.patch
- libgcrypt-fips-cipher-Implement-new-FIPS-service-indicator-for-cipher_open.patch
- libgcrypt-tests-fips-Add-gcry_mac_open-tests.patch
- libgcrypt-tests-fips-Rename-t-fips-service-ind.patch
- libgcrypt-tests-fips-Move-KDF-tests-to-t-fips-service-ind.patch
- libgcrypt-tests-fips-Add-gcry_cipher_open-tests.patch
- libgcrypt-fips-md-gcry_md_copy-should-care-about-FIPS-service-indicator.patch
- libgcrypt-fips-cipher-Implement-FIPS-service-indicator-for-gcry_pk_hash_-API.patch
- libgcrypt-fips-Introduce-GCRYCTL_FIPS_REJECT_NON_FIPS.patch
- libgcrypt-Fix-the-previous-change.patch
- libgcrypt-fips-Rejection-by-GCRYCTL_FIPS_REJECT_NON_FIPS-not-by-open-flags.patch
- libgcrypt-fips-cipher-Add-behavior-not-to-reject-but-mark-non-compliant.patch
- libgcrypt-fips-ecc-Add-rejecting-or-marking-for-gcry_pk_get_curve.patch
- libgcrypt-tests-Add-more-tests-to-tests-t-fips-service-ind.patch
- libgcrypt-fips-ecc-Check-DATA-in-gcry_pk_sign-verify-in-FIPS-mode.patch
- libgcrypt-fips-cipher-Fix-memory-leak-for-gcry_pk_hash_sign.patch
- libgcrypt-build-Improve-__thread-specifier-check.patch
- libgcrypt-cipher-Check-and-mark-non-compliant-cipher-modes-in-the-SLI.patch
- libgcrypt-cipher-Rename-_gcry_cipher_is_mode_fips_compliant.patch
- libgcrypt-cipher-Don-t-differentiate-GCRY_CIPHER_MODE_CMAC-in-FIPS-mode.patch
- libgcrypt-cipher-rsa-Mark-reject-SHA1-unknown-with-RSA-signature-generation.patch
- libgcrypt-md-Fix-gcry_md_algo_info-to-mark-reject-under-FIPS-mode.patch
- libgcrypt-md-Use-check_digest_algo_spec-in-_gcry_md_selftest.patch
- libgcrypt-tests-Update-t-fips-service-ind-using-GCRY_MD_SHA256-for-KDF-tests.patch
- libgcrypt-fips-cipher-Do-the-computation-when-marking-non-compliant.patch
- libgcrypt-tests-Allow-tests-with-USE_RSA.patch
- libgcrypt-cipher-Add-KAT-for-non-rfc6979-ECDSA-with-fixed-k.patch
- libgcrypt-cipher-Differentiate-use-of-label-K-in-the-SLI.patch
- libgcrypt-cipher-Differentiate-igninvflag-in-the-SLI.patch
- libgcrypt-cipher-Differentiate-no-blinding-flag-in-the-SLI.patch
- libgcrypt-fips-cipher-Add-GCRY_FIPS_FLAG_REJECT_PK_FLAGS.patch
- libgcrypt-cipher-ecc-Fix-for-supplied-K.patch
- libgcrypt-cipher-visibility-Differentiate-use-of-random-override-in-the-SLI.patch
- libgcrypt-cipher-fips-Fix-for-random-override.patch
- libgcrypt-md-Make-SHA-1-non-FIPS-internally-for-1.12-API.patch
- libgcrypt-fips-Fix-GCRY_FIPS_FLAG_REJECT_MD.patch
- libgcrypt-doc-Add-about-GCRYCTL_FIPS_SERVICE_INDICATOR.patch
- libgcrypt-doc-Fix-syntax-error.patch
* Rebase patches:
- libgcrypt-FIPS-SLI-kdf-leylength.patch
==== libraw ====
Version update (0.21.3 -> 0.21.4)
- version update to 0.21.4
* additional checks in PhaseOne correction tag 0x412 processing
* Do not apply canon metadata crop to DNG files
* Make sure the profile_length is the same size as the allocated memory.
* fix: remove duplicated supported camera
* check split_col/split_row values in phase_one_correct
* Prevent out-of-bounds read in fuji 0xf00c tag parser
* prevent OOB reads in phase_one_correct
- modified sources
% baselibs.conf
- fixes:
* CVE-2025-43964 [bsc#1241584]
* CVE-2025-43962 [bsc#1241585]
* CVE-2025-43961 [bsc#1241643]
* CVE-2025-43963 [bsc#1241642]
==== nghttp2 ====
Version update (1.64.0 -> 1.65.0)
- version update to 1.65.0
* Change clang-format options by @tatsuhiro-t in #2240
* build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
* build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
* nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
* h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
* build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
* fix race condition on h1 connection close by @TuxInvader in #2249
* Gha ubuntu 24.04 by @tatsuhiro-t in #2254
* GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
* cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
* fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
* clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
* Remove extra semicolons by @tatsuhiro-t in #2260
* Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
* Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
* h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
* Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
* Update nghttp2_check_authority doc by @tatsuhiro-t in #2265
==== sdbootutil ====
Version update (1+git20250421.7ffd25a -> 1+git20250423.61ca94f)
Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit
- Update to version 1+git20250423.61ca94f:
* Revert "Use filesystem order in grub2-bls" (bsc#1241046)
- Update to version 1+git20250423.7e34390:
* Check if TPM2 is in lockout (bsc#1241168)
* Retry password when mismatch