Packages changed: MicroOS-release (20250514 -> 20250522) SDL3 (3.2.12 -> 3.2.14) aalib cloud-init (23.3 -> 25.1.1) exfatprogs (1.2.8 -> 1.2.9) iputils kernel-firmware-intel (20250419 -> 20250512) kernel-firmware-sound (20250502 -> 20250512) kf6-kirigami mpdecimal open-vm-tools (12.5.0 -> 12.5.2) openSUSE-build-key openssh passt (20250503.587980c -> 20250512.8ec1341) patterns-microos pcr-oracle (0.5.5 -> 0.5.6) pipewire polkit-default-privs (1550+20250407.fdb02a6 -> 1550+20250514.1208790) python313-packaging python313-setuptools (78.1.0 -> 78.1.1) rootlesskit (2.3.4 -> 2.3.5) sqlite3 (3.49.1 -> 3.49.2) wireplumber === Details === ==== MicroOS-release ==== Version update (20250514 -> 20250522) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== SDL3 ==== Version update (3.2.12 -> 3.2.14) - Update to release 3.2.14 * Fixed crash querying the name of logical audio devices. * Fixed thread-local storage related black screen issue when pulseaudio audio output is active. * Reverted dead key reporting on X11, which introduced bugs with IME handling. * Fixed incorrect destination usage mode for storage buffer read/write bindings on Vulkan. ==== aalib ==== - FIx changelog format: the dashed indicates the beginning of a change, thus there is content supposed to follow. ==== cloud-init ==== Version update (23.3 -> 25.1.1) - Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414) + Removed included upstream - pep-594-drop-pipes.patch - cloud-init-fix-python313.patch - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch - cloud-init-direxist.patch - cloud-init-wait-for-net.patch - cloud-init-usr-sudoers.patch - cloud-init-no-nmcfg-needed.patch - cloud-init-keep-flake.patch - cloud-init-lint-fixes.patch - cloud-init-pckg-reboot.patch - cloud-init-ds-deterministic.patch - cloud-init-write-routes.patch - cloud-init-skip-empty-conf.patch + Forward port - cloud-init-no-tempnet-oci.patch - cloud-init-no-openstack-guess.patch - cloud-init-lint-set-interpreter.patch + Add - cloud-init-ssh-usrmerge.patch (bsc#1237764) - cloud-init-lint-set-interpreter.patch - cloud-init-lint-fix.patch - cloud-init-no-single-process.patch - cloud-init-needs-action.patch + Drop hidesensitivedata in 16 & greater + test: pytestify cc_chef tests, add migration test + chef: migrate files in old config directories for backups and cache + fix: correct the path for Chef's backups (#5994) + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113) + fix(azure): handle unexpected exceptions during obtain_lease() (#6092) [Ksenija Stanojevic] + Allow to set mac_address for VLAN subinterface (#6081) [jumpojoy] (GH: 5364) + fix: Remove erroneous EC2 reference from 503 warning (#6077) + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha] + fix: stop warning on dual-stack request failure (#6044) + fix: install_method: pip cannot find ansible-pull command path (#6021) [Hasan Aliyev] (GH: 5720) + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066) + fix: Update OauthUrlHelper to use readurl exception_cb signature (GH: 6065) + test: add OauthUrlHelper tests + test: Remove CiTestCase from test_url_helper.py + test: pytestify test_url_helper.py + fix: track more removed modules (#6043) - From 25.1 + ci: fix post-merge packaging CI (#6038) + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic] + ci: check for sorted patches (#6036) + feat: aliyun datasource support crawl metadata at once (#5942) [jinkangkang] + docs: document /usr merge breaking change (#6032) + test: Add integration test for /var mounts (#6033) + test: Ensure pre-24.2 custom modules work (#6034) + doc: Update references to older keys (#6022) [Pedro Ribeiro] + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023) [Romain] + fix: don't reference PR in post-merged CI (#6019) + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs] + tests(oracle): fix test_install_missing_deps apt race condition (#5996) [a-dubs] + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs] + test(oracle): fix test_frequency_override integration test (#5996) [a-dubs] + chore: add type hint to IntegrationCloud's cloud_instance field (#5996) [a-dubs] + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996) [a-dubs] + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs] + net/sysconfig: do not remove all existing settings of /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990) + fix: remove wrong return when checking if network necessary (#6013) + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985) [MostafaTarek124eru] + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687) + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993) [MKhatibzadeh] (GH: 5989) + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun] + ci: add upstream post-merge test + ci: check if upstream commit causes ubuntu patch conflicts + ci: organize cla tests together + test: eliminate obsolete cases, add non-error case + chore: remove redundant manual schema validation + doc: clarify subiquity docs + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi] + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti] + Fixes GH-5997 + fix: correct the path for Chef's cache (#5994) [MostafaTarek124eru] (GH: 5090) + fix: Run ansible with run_user instead of root for distro install_method (#5986) [Amirhossein Shaerpour] (GH: 4092) + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373) + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988) [Alec Warren] + feat(integration-tests): set boto3 and botocore to INFO to prevent log spamming [a-dubs] + ci: add 'tox -e integration-tests-fast' command [a-dubs] + chore: Add feature flag for manual network waiting (#5977) ... changelog too long, skipping 1230 lines ... + integration tests: Fix cgroup parsing (#4402) ==== exfatprogs ==== Version update (1.2.8 -> 1.2.9) - Update to 1.2.9: * dump.exfat: support dumping directory entry sets, which prints all fields of directory entries and cluster chains. See a man page. * exfatprogs: update the Github action for build test with Debain + clang + lld. ==== iputils ==== - Security fix [bsc#1242300, CVE-2025-47268] * integer overflow in RTT calculation can lead to undefined behavior * Add iputils-CVE-2025-47268.patch ==== kernel-firmware-intel ==== Version update (20250419 -> 20250512) - Update to version 20250512 (git commit 9f8e520fd736): * intel_vpu: Update NPU firmware ==== kernel-firmware-sound ==== Version update (20250502 -> 20250512) - Update to version 20250512 (git commit 9f8e520fd736): * intel: avs: Update topology file for Digital Microphone Array (bsc#1243030) ==== kf6-kirigami ==== Subpackages: kf6-kirigami-imports libKirigamiPlatform6 - Add upstream changes: * 0001-WheelHandler-remove-std-clamp-assert-crash.patch * 0002-WheelHandler-Only-apply-scrollview-event-filtering-t.patch * 0004-WheelHandler-remove-std-clamp-assert-crash-part-2.patch * 0005-WheelHandler-use-std-min-and-std-max-instead-of-qMin.patch ==== mpdecimal ==== - Fix LDXXFLAGS (thank you Stefan Krah for providing the patch) ==== open-vm-tools ==== Version update (12.5.0 -> 12.5.2) Subpackages: libvmtools0 - update to 12.5.2 (bsc#1243106): https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog This release resolves CVE-2025-22247. For more information on this vulnerability and its impact on Broadcom products, see VMSA-2025-0007 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683 ==== openSUSE-build-key ==== - added gpg-pubkey-25db7ae0-645bae34.asc: RSA 4k SLE15 Backports key. - removed gpg-pubkey-65176565-61a0ee8f.asc: old RSA 2k Backports key. (bsc#1243135) ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Enable --with-logind to call the SetTTY dbus method in systemd in SLE15 too. This allows "wall" to print messages in ssh ttys (bsc#1239671) - Small fixes to unref the dbus session when any error occurs: * logind_set_tty.patch ==== passt ==== Version update (20250503.587980c -> 20250512.8ec1341) Subpackages: passt-selinux - Update to version 20250512.8ec1341: * flow: close socket fd on error * flow: fix wrong macro name in comments - Update to version 20250507.eea8a76: * flow: fix podman issue #26073 ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Change removing tlp from the kde pattern, and making tuned-ppd optional ==== pcr-oracle ==== Version update (0.5.5 -> 0.5.6) - Update to 0.5.6 + rsa: adopt OpenSSL 3.0 API to generate RSA key + Drop the code for openSSL < 3.0.0 + Look for signing authority in alternative database (bsc#1241957) - Bump the requirement of libopenssl-devel to 3.0.0 ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Better use "Suggests" instead of Recommends otherwise wireplumber-video-only-provides gets pulled in when libjack0 is already installed. - Don't use wireplumber-audio in Recommend package expression since the wireplumber-audio doesn't exist anymore and wireplumber (which now provides it) is expected to be installed in all cases. ==== polkit-default-privs ==== Version update (1550+20250407.fdb02a6 -> 1550+20250514.1208790) - Update to version 1550+20250514.1208790: * profiles: add flatpak override-parental-controls-update (bsc#1243046) ==== python313-packaging ==== - skip primary build only for Tumbleweed (adjust version) ==== python313-setuptools ==== Version update (78.1.0 -> 78.1.1) - update to 78.1.1: * More fully sanitized the filename in PackageIndex._download. - switch build-exclusion to be tumbleweed only ==== rootlesskit ==== Version update (2.3.4 -> 2.3.5) - Update to version 2.3.5: * v2.3.5 * Dockerfile: update test deps * Build(deps): Bump github.com/moby/vpnkit from 0.5.0 to 0.6.0 * Build(deps): Bump github.com/containernetworking/plugins * Build(deps): Bump golang.org/x/sys from 0.31.0 to 0.32.0 * Build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 * Parameter for ISA of binaries * Build(deps): Bump golang.org/x/net from 0.33.0 to 0.36.0 * v2.3.4+dev ==== sqlite3 ==== Version update (3.49.1 -> 3.49.2) - Update to release 3.49.2: * Fix a bug in the NOT NULL optimization of version 3.40.0 that can lead to a memory error if abused. * Fix the count-of-view optimization so that it does not give an incorrect answer for a DISTINCT query. * Fix a possible incorrect answer that can result if a UNIQUE constraint of a table contains the PRIMARY KEY column and that UNIQUE constraint is used by an IN operator. * Fix obscure problems with the generate_series() extension function. * Incremental improvements to the configure/make. ==== wireplumber ==== Subpackages: libwireplumber-0_5-0 - Use Supplements: pulseaudio in wireplumber-video-only-profile to get it automatically installed in systems using pulseaudio. - Add patch and rework how we enable/disable audio support in pipewire/wireplumber to use upstream provided profiles instead of custom config files modifications. We now support audio with the default wireplumber package and only when the wireplumber-video-only-profile package is installed, wireplumber will not use audio (allowing to use pulseaudio instead). This means we now set the profile using an environment variable in the wireplumber user service that has a default value of "main" and is set in /usr/etc/wireplumber.conf to "video-only" by the mentioned package . A user can override the value in /etc/wireplumber.conf. * set-profile-in-service.patch - Add patches from upstream to fix various issues. * 0001-internal-comp-loader-generate-a-provides-for-components.patch * 0002-wpctl-fix-default-device-name-leak.patch * 0003-wpctl-fix-types-in-variadic-arguments.patch * 0004-monitor-utils-Support-devices-without-any-device-ids.patch * 0005-v4l2_monitor-scripts-fix-for-deduplicate-devices-with-the.patch * 0006-monitors_libcamera-fix-deduplicating-devices-with-the-same.patch * 0007-monitors_alsa-fix-nil-table-indexing.patch