Packages changed:
  MozillaFirefox (136.0 -> 136.0.1)
  SDL3
  apache2-mod_php8 (8.3.17 -> 8.3.19)
  cryptsetup
  exempi
  ffmpeg-7
  gdb
  git (2.48.1 -> 2.49.0)
  glibc
  glslang (15.1.0 -> 15.2.0)
  grub2
  gstreamer-plugins-bad (1.24.12 -> 1.26.0)
  kernel-firmware-iwlwifi (20250206 -> 20250312)
  kernel-firmware-realtek (20250224 -> 20250313)
  kmod
  libbacktrace (1.0+git20241025 -> 1.0+git20250210)
  libgnome-games-support (2.0.0 -> 2.0.1)
  liblouis
  libqt5-qtwebengine
  libxslt (1.1.42 -> 1.1.43)
  mtools
  ncurses
  openSUSE-release (20250314 -> 20250316)
  openblas_openmp
  openblas_pthreads
  patterns-base
  patterns-server (20250225 -> 20250313)
  pciutils
  php8 (8.3.17 -> 8.3.19)
  pipewire (1.4.0 -> 1.4.1)
  psmisc
  python311
  python311-core
  re2c (4.0.2 -> 4.1)
  shaderc
  spirv-tools
  suse-module-tools (16.0.57 -> 16.0.59)
  systemd (257.3 -> 257.4)
  virt-manager
  vulkan-loader (1.4.304 -> 1.4.309)
  vulkan-tools (1.4.304 -> 1.4.309)
  webkit2gtk3
  wpa_supplicant
  xfsprogs
  yast2 (5.0.12 -> 5.0.13)
  zypper (1.14.87 -> 1.14.88)

=== Details ===

==== MozillaFirefox ====
Version update (136.0 -> 136.0.1)
Subpackages: MozillaFirefox-branding-upstream

- Mozilla Firefox 136.0.1
  * Fixed an issue where a cookie size limit caused problems with
    website cookie management when using the CookieStore API.
    This could cause login and other state-related issues. (bmo#1950565)
  * Fixed an issue where Control/Command+L did not focus the
    address bar in new windows. (bmo#1947723)

==== SDL3 ====

- Trim extraneous X11 dependencies from SDL3-devel [boo#1239635]

==== apache2-mod_php8 ====
Version update (8.3.17 -> 8.3.19)

- version update to 8.3.19
    BCMath:
    Fixed bug GH-17398 (bcmul memory leak).
    Core:
    Fixed bug GH-17623 (Broken stack overflow detection for variable compilation).
    Fixed bug GH-17618 (UnhandledMatchError does not take zend.exception_ignore_args=1 into account).
    Fix fallback paths in fast_long_{add,sub}_function.
    Fixed bug GH-17718 (Calling static methods on an interface that has `__callStatic` is allowed).
    Fixed bug GH-17797 (zend_test_compile_string crash on invalid script path).
    Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)
    DOM:
    Fixed bug GH-17847 (xinclude destroys live node).
    FFI:
    Fix FFI Parsing of Pointer Declaration Lists.
    FPM:
    Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
    GD:
    Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
    LDAP:
    Fixed bug GH-17704 (ldap_search fails when $attributes contains a non-packed array with numerical keys).
    LibXML:
    Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
    Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
    MBString:
    Fixed bug GH-17503 (Undefined float conversion in mb_convert_variables).
    Opcache:
    Fixed bug GH-17654 (Multiple classes using same trait causes function JIT crash).
    Fixed bug GH-17577 (JIT packed type guard crash).
    Fixed bug GH-17899 (zend_test_compile_string with invalid path when opcache is enabled).
    Fixed bug GH-17868 (Cannot allocate memory with tracing JIT).
    PDO_SQLite:
    Fixed GH-17837 ()::getColumnMeta() on unexecuted statement segfaults).
    Fix cycle leak in sqlite3 setAuthorizer().
    Phar:
    Fixed bug GH-17808: PharFileInfo refcount bug.
    PHPDBG:
    Partially fixed bug GH-17387 (Trivial crash in phpdbg lexer).
    Fix memory leak in phpdbg calling registered function.
    Reflection:
    Fixed bug GH-15902 (Core dumped in ext/reflection/php_reflection.c).
    Standard:
    Fixed bug #72666 (stat cache clearing inconsistent between file:// paths and plain paths).
    Streams:
    Fixed bug GH-17650 (realloc with size 0 in user_filters.c).
    Fix memory leak on overflow in _php_stream_scandir().
    Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
    Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
    Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
    Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
    Windows:
    Fixed phpize for Windows 11 (24H2).
    Fixed GH-17855 (CURL_STATICLIB flag set even if linked with shared lib).
    Zlib:
    Fixed bug GH-17745 (zlib extension incorrectly handles object arguments).
    Fix memory leak when encoding check fails.
    Fix zlib support for large files.

==== cryptsetup ====
Subpackages: cryptsetup-doc libcryptsetup12

- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.

==== exempi ====

- Ignore testcore test failure on s390x. It is known to fail on
  big endian architectures.

==== ffmpeg-7 ====
Subpackages: libavcodec61 libavfilter10 libavformat61 libavutil59 libpostproc58 libswresample5 libswscale8

- Add 0001-avcodec-libsvtav1-unbreak-build-with-latest-svtav1.patch
  to build with SVT-AV1 3.0.0.

==== gdb ====

- Patches added:
  * gdb-record-fix-out-of-bounds-write-in-aarch64_record.patch
  * gdb-tdep-backport-i386_canonicalize_syscall-rewrite-.patch
- Maintenance script qa.sh:
  * Remove PR32770 kfail.
  * Move PR32678 from kfail_i586 to kfail_factory.
- Maintenance script qa.sh:
  * Add PR32688 and PR32770 kfails.
- Patches added:
  * gdb-testsuite-fix-gdb.base-step-over-syscall.exp-with-m32-for-amd.patch
  * gdb-testsuite-fix-gdb.base-step-over-syscall.exp-with-glibc-2-41.patch
- Patches dropped:
  * gdb-testsuite-fix-gdb.base-step-over-syscall.exp-with-m32-amd-case.patch
- Drop "BuildRequires: libgo23".
- Patches added (jsc#PED-10305):
  * s390-align-opcodes-to-lower-case.patch
  * s390-simplify-dis-assembly-of-insn-operands-with-con.patch
  * s390-relax-risbg-n-z-risb-h-l-gz-rns-ros-rxs-bgt-ope.patch
  * s390-add-arch15-instructions.patch
  * opcodes-fix-std-gnu23-compatibility-wrt-static_asser.patch
  * s390-add-arch15-instruction-names.patch
  * s390-add-arch15-concurrent-functions-facility-insns.patch
  * s390-fix-disassembly-of-optional-addressing-operands.patch
  * s390-treat-addressing-operand-sequence-as-one-in-dis.patch
  * gdb-testsuite-add-gdb.arch-s390-disassemble.exp.patch

==== git ====
Version update (2.48.1 -> 2.49.0)
Subpackages: git-core git-email git-svn git-web perl-Git

- update to 2.49.0
  https://about.gitlab.com/blog/2025/03/14/whats-new-in-git-2-49-0/
  https://raw.githubusercontent.com/git/git/refs/tags/v2.49.0/Documentation/RelNotes/2.49.0.adoc
- switch to zlib-ng for code 16
- docs switched to asciidoc

==== glibc ====
Subpackages: glibc-devel glibc-extra glibc-gconv-modules-extra glibc-locale glibc-locale-base

- Do not build libnsl1 (bsc#1239459)

==== glslang ====
Version update (15.1.0 -> 15.2.0)

- Update to release 15.2
  * Emit error if using in/out with struct pointer
  * Emit SPV_EXT_opacity_micromap if GL extension is present
  * Support GL_NV_linear_swept_spheres, GLSL_EXT_nontemporal_keyword,
    GL_NV_cluster_acceleration_structure, GL_NV_cooperative_vector,
    GL_EXT_texture_offset_non_const, EXT_integer_dot_product
  * Check SparseTextureOffset non-const parameters
  * Revert cross-stage check for missing outputs
  * Add support for OpTypeRayQueryKHR and
    OpTypeAccelerationStructureKHR to SPVRemapper
- Make build recipe POSIX sh compatible
- Switch Leap compiler to gcc 13 following the rest of the
  Vulkan stack

==== grub2 ====
Subpackages: grub2-arm64-efi grub2-common grub2-snapper-plugin grub2-systemd-sleep-plugin

- Update the patch to fix "SRK not matched" errors when unsealing
  the key (bsc#1232411)
  * 0001-tpm2-Add-extra-RSA-SRK-types.patch

==== gstreamer-plugins-bad ====
Version update (1.24.12 -> 1.26.0)
Subpackages: libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0

- Disable nvcodec/cuda on aarch64 and %arm as it fails to build
- Update to version 1.26.0:
  + Highlights
  - H.266 Versatile Video Coding (VVC) codec support
  - Low Complexity Enhancement Video Coding (LCEVC) support
  - Closed captions: H.264/H.265 extractor/inserter,
    cea708overlay, cea708mux, tttocea708 and more
  - New hlscmafsink, hlssink3, and hlsmultivariantsink; HLS/DASH
    client and dashsink improvements
  - New AWS and Speechmatics transcription, translation and TTS
    services elements, plus translationbin
  - Splitmux lazy loading and dynamic fragment addition support
  - Matroska: H.266 video and rotation tag support, defined
    latency muxing
  - MPEG-TS: support for H.266, JPEG XS, AV1, VP9 codecs and
    SMPTE ST-2038 and ID3 meta; mpegtslivesrc
  - ISO MP4: support for H.266, Hap, Lagarith lossless codecs;
    raw video support; rotation tags
  - SMPTE 2038 ancillary data streams support
  - JPEG XS image codec support
  - Analytics: New TensorMeta; N-to-N relationships; Mtd to carry
    segmentation masks
  - ONVIF metadata extractor and conversion to/from relation
    metas
  - New originalbuffer element that can restore buffers again
    after transformation steps for analytics
  - Improved Python bindings for analytics API
  - Lots of Vulkan integration and Vulkan Video decoder/encoder
    improvements
  - OpenGL integration improvements, esp. in glcolorconvert,
    gldownload, glupload
  - Qt5/Qt6 QML GL sinks now support direct DMABuf import from
    hardware decoders
  - CUDA: New compositor, Jetson NVMM memory support,
    stream-ordered allocator
  - NVCODEC AV1 video encoder element, and nvdsdewarp
  - New Direct3D12 integration support library
  - New d3d12swapchainsink and d3d12deinterlace elements and
    D3D12 sink/source for zero-copy IPC
  - Decklink HDR support (PQ + HLG) and frame scheduling
    enhancements
  - AJA capture source clock handling and signal loss recovery
    improvements
  - RTP and RTSP: New rtpbin sync modes, client-side MIKEY
    support in rtspsrc
  - New Rust rtpbin2, rtprecv, rtpsend, and many new Rust RTP
    payloaders and depayloaders
  - webrtcbin support for basic rollbacks and other improvements
  - webrtcsink: support for more encoders, SDP munging, and a
    built-in web/signalling server
  - webrtcsrc/sink: support for uncompressed audio/video and NTP
    & PTP clock signalling and synchronization
  - rtmp2: server authentication improvements incl. Limelight
    CDN (llnw) authentication
  - New Microsoft WebView2 based web browser source element
  - The GTK3 plugin has gained support for OpenGL/WGL on Windows
  - Many GTK4 paintable sink improvements
  - GstPlay: id-based stream selection and message API
    improvements
  - Real-time pipeline visualization in a browser using a new
    dots tracer and viewer
  - New tracers for tracking memory usage, pad push timings, and
    buffer flow as pcap files
  - VA hardware-acclerated H.266/VVC decoder, VP8 and JPEG
    encoders, VP9/VP8 alpha decodebins
  - Video4Linux2 elements support DMA_DRM caps negotiation now
  - V4L2 stateless decoders implement inter-frame resolution
    changes for AV1 and VP9
  - Editing services: support for reverse playback and audio
    channel reordering
  - New QUIC-based elements for working with raw QUIC streams,
    RTP-over-QUIC (RoQ) and WebTransport
  - Apple AAC audio encoder and multi-channel support for the
    Apple audio decoders
  - cerbero: Python bindings and introspection support; improved
    Windows installer based on WiX5
  - Lots of new plugins, features, performance improvements and
    bug fixes
  + VA plugin
  - New VA elements:
  * H.266 / VVC video decoder
  * VP8 video encoder
  * JPEG encoder
  * VP9 + VP8 alpha decodebin
    Remember that the availability of these elements depends on
    your platform and driver.
  - There are a lot of improvements and bug fixes, to hightlight
    some of them:
  * Improved B pyramid mode for both H264 and HEVC encoding
    when reference frame count exceeds 2, optimizing pyramid
    level handling.
  * Enabled ICQ and QVBR modes for several encoders, including
    H264, H265, VP9 and AV1.
  * Updated rate control features by setting the quality factor
    parameter, while improving bitrate change handling.
  * Improved VP9 encoder’s ability to avoid reopening or
    renegotiating encoder settings when parameters remain
    stable.
  * Added functionality to adjust the trellis parameter in
    ... changelog too long, skipping 14 lines ...
- Use noun phrase for descriptions (not two noun phrases)

==== kernel-firmware-iwlwifi ====
Version update (20250206 -> 20250312)

- Update to version 20250312 (git commit 89ba9b7ce05c):
  * iwlwifi: add Bz/gl FW for core94-91 release
  * iwlwifi: update ty/So/Ma firmwares for core94-91 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release

==== kernel-firmware-realtek ====
Version update (20250224 -> 20250313)

- Update to version 20250313 (git commit 1d4c88ee96ec):
  * rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  * rtw89: 8922a: update fw to v0.35.64.0
  * rtw89: 8922a: update fw to v0.35.63.0
  * rtw89: 8852c: update fw to v0.27.125.0

==== kmod ====
Subpackages: libkmod2

- tests: drop ppc64 workaround, print failed test results if any

==== libbacktrace ====
Version update (1.0+git20241025 -> 1.0+git20250210)

- Update to version 1.0+git20250210:
  * libbacktrace: add cast to avoid undefined shift
  * libbacktrace: add casts to avoid undefined shifts
  * arm: libbacktrace: Check if the compiler supports __sync atomics
- Update to version 1.0+git20241129:
  * libbacktrace: use WIN32_LEAN_AND_MEAN, not WIN32_MEAN_AND_LEAN

==== libgnome-games-support ====
Version update (2.0.0 -> 2.0.1)

- Update to version 2.0.1:
  + Bugs fixed: Best times are not translated.
  + Updated translations.

==== liblouis ====
Subpackages: liblouis-data liblouis20 python3-louis

- Update license to GPL-3.0-or-later AND LGPL-2.1-or-later, based on
  legal review feedback.

==== libqt5-qtwebengine ====

- Add patch to fix the sandbox on 32-bit x86:
  * sandbox_recvmsg.patch

==== libxslt ====
Version update (1.1.42 -> 1.1.43)
Subpackages: libexslt0 libxslt-tools libxslt1

- Update to 1.1.43:
  * Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default. These features can be
    enabled by passing --with-crypto or --with-plugins to configure.
    In a future release, these features will be removed.
  - Debug output and the debugger are disabled by default and can be
    enabled by passing --with-debug or --with-debugger.
  * Security:
  - [bsc#1239625, CVE-2025-24855] Fix use-after-free of XPath context node
  - [bsc#1239637, CVE-2024-55549] Fix UAF related to excluded namespaces
  * Bug fixes:
  - variables: Fix non-deterministic generated IDs
  * libxml2 related cleanup:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: always include stdlib.h (Hugo Beauzée-Luyssen)
  - extensions: Don't use libxml2's "modules" feature
  * Code cleanup:
  - numbers: Make static variables const
  - variables: Remove debug code
  * Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  * Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config (Alessandro Astone)
  * Remove patches fixed in the update:
  - libxslt-reproducible.patch
  - libxslt-test-compile-with-older-libxml2-versions.patch

==== mtools ====

- Require glibc-gconv-modules-extra only if glibc >= 2.39

==== ncurses ====
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen

- Add _c++ library subpackages to libncurses5, libncurses6 & libncurses6-compat
  This removes libstdc++ from the ncurses dependency chain unless a binary or
  librarly explicitly depends on libncurses++ or libncurses++w

==== openSUSE-release ====
Version update (20250314 -> 20250316)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== openblas_openmp ====

- Use upstream patch for bsc#1239134 which is more friendly to the
  non-affected power9 and power10 sub-architectures:
  Replace:
  Revert-ba47c7f4f301aad100ed166de338b86e01da8465.patch
  by:
  Restore-the-non-vectorized-code-from-before-PR4880-for-POWER8.patch

==== openblas_pthreads ====

- Use upstream patch for bsc#1239134 which is more friendly to the
  non-affected power9 and power10 sub-architectures:
  Replace:
  Revert-ba47c7f4f301aad100ed166de338b86e01da8465.patch
  by:
  Restore-the-non-vectorized-code-from-before-PR4880-for-POWER8.patch

==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced

- Remove setserial, stty is the tool for this since a long time

==== patterns-server ====
Version update (20250225 -> 20250313)
Subpackages: patterns-server-dhcp_dns_server patterns-server-directory_server patterns-server-file_server patterns-server-kvm_server patterns-server-kvm_tools patterns-server-lamp_server patterns-server-mail_server patterns-server-printing

- don't require virt-install and tigervnc on transactional system

==== pciutils ====
Subpackages: libpci3

- Synchronize SLE-12 and openSUSE:Factory [jsc#PED-4587].
  The following patches are now obsolete in version 3.13.0:
  * add-decoding-of-vendor-specific-vpd-fields.patch
  * pciutils-3.1.7-fix-memory-leak-in-get_cache_name.patch
  * pciutils-3.2.0_update-dist.patch
  * pciutils-3.5.1-add-support-for-32-bit-pci-domains.patch
  * pciutils-lspci-Correct-Root-Capabilities-CRS-Software-Visibil.patch
  * show-gen4-speed-properly.patch

==== php8 ====
Version update (8.3.17 -> 8.3.19)
Subpackages: php8-ctype php8-dom php8-iconv php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter

- version update to 8.3.19
    BCMath:
    Fixed bug GH-17398 (bcmul memory leak).
    Core:
    Fixed bug GH-17623 (Broken stack overflow detection for variable compilation).
    Fixed bug GH-17618 (UnhandledMatchError does not take zend.exception_ignore_args=1 into account).
    Fix fallback paths in fast_long_{add,sub}_function.
    Fixed bug GH-17718 (Calling static methods on an interface that has `__callStatic` is allowed).
    Fixed bug GH-17797 (zend_test_compile_string crash on invalid script path).
    Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)
    DOM:
    Fixed bug GH-17847 (xinclude destroys live node).
    FFI:
    Fix FFI Parsing of Pointer Declaration Lists.
    FPM:
    Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
    GD:
    Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
    LDAP:
    Fixed bug GH-17704 (ldap_search fails when $attributes contains a non-packed array with numerical keys).
    LibXML:
    Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
    Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
    MBString:
    Fixed bug GH-17503 (Undefined float conversion in mb_convert_variables).
    Opcache:
    Fixed bug GH-17654 (Multiple classes using same trait causes function JIT crash).
    Fixed bug GH-17577 (JIT packed type guard crash).
    Fixed bug GH-17899 (zend_test_compile_string with invalid path when opcache is enabled).
    Fixed bug GH-17868 (Cannot allocate memory with tracing JIT).
    PDO_SQLite:
    Fixed GH-17837 ()::getColumnMeta() on unexecuted statement segfaults).
    Fix cycle leak in sqlite3 setAuthorizer().
    Phar:
    Fixed bug GH-17808: PharFileInfo refcount bug.
    PHPDBG:
    Partially fixed bug GH-17387 (Trivial crash in phpdbg lexer).
    Fix memory leak in phpdbg calling registered function.
    Reflection:
    Fixed bug GH-15902 (Core dumped in ext/reflection/php_reflection.c).
    Standard:
    Fixed bug #72666 (stat cache clearing inconsistent between file:// paths and plain paths).
    Streams:
    Fixed bug GH-17650 (realloc with size 0 in user_filters.c).
    Fix memory leak on overflow in _php_stream_scandir().
    Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
    Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
    Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
    Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
    Windows:
    Fixed phpize for Windows 11 (24H2).
    Fixed GH-17855 (CURL_STATICLIB flag set even if linked with shared lib).
    Zlib:
    Fixed bug GH-17745 (zlib extension incorrectly handles object arguments).
    Fix memory leak when encoding check fails.
    Fix zlib support for large files.

==== pipewire ====
Version update (1.4.0 -> 1.4.1)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools

- Update to version 1.4.1:
  * Highlights
  - Handle SplitPCM wrong channels specifications. This fixes
    some problems with disappearing devices.
  - Add backwards compatibility support for when the kernel does
    not support UMP. Also fix UMP output. This restores MIDI
    support for older kernels/ALSA.
  - Fix a crash in audioconvert because the resampler was not
    using the right number of channels.
  - Some compilation fixes and small improvements.
  * PipeWire
  - Don't emit events when disconnecting a stream. (#3314)
  - Fix some compilation problems. (#4603)
  * Modules
  - Bump the ROC requirement to version 0.4.0
  * SPA
  - Handle SplitPCM too few or too many channels. Add an error
    string to the device names when the UCM config has an error.
  - Add backwards compatibility support for when the kernel does
    not support UMP.
  - Configure the channels in the resampler correctly in all
    cases. (#4595)
  - Fix UMP output.
  - Use the right samplerate of the filter-graph in audioconvert
    in all cases.
  * Bluetooth
  - Fix a crash with an incomming call.

==== psmisc ====

- fix build with gcc15
- added patches
  + psmisc-gcc15.patch

==== python311 ====
Subpackages: python311-curses python311-dbm

- Allow to disable PGO

==== python311-core ====
Subpackages: libpython3_11-1_0 python311-base

- Allow to disable PGO

==== re2c ====
Version update (4.0.2 -> 4.1)

- Update to version 4.1:
  * This release adds actions, a few backend-specific improvements
    in code generation and a bunch of bug fixes.
  * Benchmark code has been reworked in preparation to add
    multi-language benchmarks in the future.

==== shaderc ====

- Switch Leap build to newer gcc 13

==== spirv-tools ====

- Bump BuildRequires to match spirv-headers

==== suse-module-tools ====
Version update (16.0.57 -> 16.0.59)
Subpackages: suse-module-tools-scriptlets

- Update to version 16.0.59:
  * inkmp-script: fix "bad array subscript" error (bsc#1239550)
- Update to version 16.0.58:
  * mkosi-initrd: build initrds directly to /boot
  (gh#openSUSE/suse-module-tools#115)

==== systemd ====
Version update (257.3 -> 257.4)
Subpackages: libsystemd0 libudev1 systemd-boot systemd-container systemd-experimental udev

- triggers.systemd: more posix.fork() conversion (bsc#1238566)
- Import commit f133e5974e69708d7491d4823780690c913f7bda (merge v257.4)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/e03ffd74c4a30c1c75e05874ce18d31e503437b7...f133e5974e69708d7491d4823780690c913f7bda

==== virt-manager ====
Subpackages: virt-install virt-manager-common

- Upstream bug fix (bsc#1027942)
  010-virtManager-domain-fix-indentation.patch
- Upstream features from Lin Ma and others (jsc#PED-8910)
  021-cli-Add-memdev-target.dynamicMemslots-support-for-virtio-mem.patch
  022-cli-add-target.memReserve-for-pci-bridge-and-pcie-root-port-controllers.patch
  023-cli-Add-disk-driver.queue_size-support.patch
  024-cli-Add-poll-settings-for-iothread.patch
  025-test_cli-Fix-a-pycodestyle-E261-issue.patch
  026-gitignore-Ignore-coverage.xml.patch
  027-cli-Add-tpm-backend.profile.source-removeDisabled-support.patch
  028-cli-Add-nvram.templateFormat-to-indicate-template-format.patch
  029-cli-Add-features-hyperv.xmm_input.state-on-off.patch
  030-cli-Add-features-hyperv.emsr_bitmap.state-on-off.patch
  031-cli-Add-features-hyperv.tlbflush.direct.state-on-off.patch
  032-cli-Add-features-hyperv.tlbflush.extended.state-on-off.patch
  033-createvm-prioritize-riscv64.patch
  034-tests-uitests-handle-linux2020-going-EOL.patch

==== vulkan-loader ====
Version update (1.4.304 -> 1.4.309)

- Update to tag SDK-1.4.309.0
  * Make Xrandr not implicitly required when x11 is used
  * Make emulate_VK_EXT_surface_maintenance1 comply better with
    Vulkan spec
  * Support VK_GOOGLE_surfaceless_query

==== vulkan-tools ====
Version update (1.4.304 -> 1.4.309)

- Update to tag SDK-1.4.309.0
  * vulkaninfo: Add video profiles support
  * cube: Correctly apply sRGB OETF/EOTF
  * icd: Add VkPhysicalDeviceMaintenance3Properties

==== webkit2gtk3 ====
Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles

- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).

==== wpa_supplicant ====

- CVE-2025-24912: hostapd fails to process crafted RADIUS packets
  properly (bsc#1239461)
  [+ CVE-2025-24912.patch]

==== xfsprogs ====
Subpackages: libhandle1

- Modernize specfile: remove implicit %defattr, trim -n arguments

==== yast2 ====
Version update (5.0.12 -> 5.0.13)
Subpackages: yast2-logs

- Checking if a TPM2 device is available (has_tpm2). (jsc#PED-10703)
- 5.0.13

==== zypper ====
Version update (1.14.87 -> 1.14.88)
Subpackages: zypper-log zypper-needs-restarting

- Do not double encode URL strings passed on the commandline
  (bsc#1237587)
  URLs passed on the commandline must have their special chars
  encoded already. We just want to check and encode forgotten
  unsafe chars like a blank. A '%' however must not be encoded
  again.
- version 1.14.88