Packages changed: libnbd (1.20.3 -> 1.22.2) nbdkit (1.40.4 -> 1.42.3) selinux-policy (20250507 -> 20250512) === Details === ==== libnbd ==== Version update (1.20.3 -> 1.22.2) Subpackages: libnbd0 - Update to version 1.22.2: * Version 1.22.2. * copy: Test --allocated + --destination-is-zero options together * copy: Test --destination-is-zero option * copy: Test --allocated option more thoroughly * copy: Add a test of the --flush option * copy: Remove output file in a few tests * build: Print rustc version in ./configure output * rust: Use nbd.is_uri in examples * ci: Skip go on FreeBSD 14 * ci: Update to latest * copy: Fix file allocation when using --allocated * copy: Fix file_sync_zero when allocate == true * copy: Consider options when zeroing in synch mode * copy: Hard error if sync_file_range fails * info/info-uri-nbds.sh: Fix test if compiled without GnuTLS * copy: Set the total size in bytes copied * copy: progress: Add a comment about size and pipes * info: Use magenta for export headings, instead of black * Version 1.22.1. * ocaml/{examples,tests}: Don't try to run OCAMLFIND if --disable-ocaml * docs/libnbd-release-notes-1.22.pod: Set release date * Version 1.22.0. * ci: Update FreeBSD builds * copy: Include pthread.h * docs: Small revisions to the release notes * golang: Replace () with correct argument decl, for GCC 15 * docs: Add outline release notes for libnbd 1.22 * ci: Update to latest * dump: Add a test of --length and --offset * dump: Add --offset for further limiting the dump * dump: Document --length * examples: Add simple program to benchmark connections * Version 1.21.6. * build: Use 'tar ztf' instead of 'zcat | tar' * Revert "ci: Skip maintainer-check-extra-dist test on macOS" * ci: Skip maintainer-check-extra-dist test on macOS * ci: Install bash (from homebrew) in the CI environment * configure: Check that bash is sufficiently new * ci: Dump out failed log files when the tests fail * golang, rust: Use env bash for FreeBSD * python: Skip Python tests on macOS * tests/newstyle-limited.c: Check truncate is GNU truncate before using * ocaml/tests/test_220_opt_list.ml: Use correct nbdkit binary * ocaml/tests/test_580_aio_connect.ml: Skip this test on macOS * build: Test for GnuTLS certtool on macOS * build: Use GNU alternatives on macOS and FreeBSD * copy/copy-file-to-nbd.sh: Remove test for 'truncate' * lib/test-fork-safe-execvpe.sh: Skip this test on macOS * ci/build.sh: Set os_id on macOS which lacks /etc/os-release * ci: Don't skip tests on non-Linux * Version 1.21.5. * interop: Skip nbd-server test on Alpine * ci: Update CI files * vsock: Document limitations and reserved vsock port numbers * rust: Parse perlpod L (external links) to rust markup * generator: connect_uri: Document differences with qemu parsing * podwrapper: Add some simple checks for cross-references within manual pages. * docs/libnbd-release-notes-1.10.pod: Remove broken link to "nbd_connect(3)" * docs/nbd_create.pod: Cross-reference nbd_shutdown(3) * Version 1.21.4. * docs: Use "oldstyle servers" in preference to "older servers" * docs: Mention newstyle and oldstyle servers in main docs * docs: Mention nbd_is_uri under "Connecting to an NBD URI" in main docs * README: Fix bold markdown * README: Mention 'make install DESTDIR=...' * README: Mention the ./run script * lib: Add nbd_get_subprocess_pid to return h->pid * docs/libnbd-security.pod: Assign CVE-2024-7383 * Version 1.21.3. * build: Prefer "for developers" in ./configure --help output * build: Fix ./configure --help output for --enable-python-code-style * copy: Fix URI detection * lib: Add new nbd_is_uri API * tests/requires.c: Don't fail to compile if NBDKIT is not defined * Version 1.21.2. * lib: Implement nbd+ssh:// and nbds+ssh:// URIs * tests/connect-uri.c: Replace -DREQUIRES_NBDKIT_TLS_VERIFY_PEER=1 * lib/uri.c: Change socket required boolean into an enum * generator/states-newstyle.c: Don't sign extend escaped chars * rust: Add os-ext feature to get mio::unix * generator/states-newstyle.c: Quote untrusted string from the server * generator: Restore assignment to local 'err' * .gitignore: Remove unused line * lib: Don't overwrite error in nbd_opt_{go,info} * generator: Print full error in handle_reply_error * ci: Drop Alma Linux 8 * lib/crypto.c: Check works before including it * lib/uri.c: Append tls-hostname and tls-verify-peer when getting URI * Version 1.21.1. * docs: security: Add link to TLS server certificate checking announcement * lib/uri.c: Allow tls-hostname to be overridden in URIs * lib/uri.c: Allow tls-verify-peer to be overridden in URIs * lib/crypto.c: Add API functions to get/set TLS hostname ==== nbdkit ==== Version update (1.40.4 -> 1.42.3) Subpackages: nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin nbdkit-vddk-plugin - Update to version 1.42.3: * Version 1.42.3. * file: Change confusing comment * file: Implement BLKDISCARD for trim * file: Don't ignore most errors on trim * file: Fix check for errno EOPNOTSUPP * Update TODO with file plugin vs block device issues * file: zero: Use BLKDISCARD method if may_trim is set * file: zero: Document implicit order that we will try zeroing methods * file: Rename h->can_zeroout to h->can_blkzeroout to reflect ioctl * file: Fix do_fallocate debugging on Alpine * rust: Fix clippy uninlined-format-args warning * file: Fix comment style in a few places * file: Add more debugging when -D file.zero=1 is used * file: Fix minor typo in debug message * curl: Remove extra whitespace character * tests: More robust check for nbdsh --base-allocation * ci: Update to latest * docs: Explain how debug flags work * tests/test-layers.c: Replace realloc with nbdkit string type * docs: Simplify and clarify the standard text about magic parameters * docs: Use POD macro for all magic parameters * curl: Move AC_DEFINE upwards * tests/test-pycodestyle.sh: Print paths relative to top source directory * python: Remove unneeded global statements * random, sparse-random: Link to nbdkit-pattern-plugin * file: Improve documentation for cache=none * file: Annotate a few local variables with 'const' * server: Turn flush into a controlpath message * file: Document implicit assumption about eviction windows * file: Reduce the size of the lock around write eviction * file: Hard error if sync_file_range fails * file: If sync_file_range fails to start, don't add window to list * file: Add debugging if sync_file_range / posix_fadvise fails * blocksize: Fix 32-bit overflow in .extents [CVE-2025-47712] bsc#1243108 * server: Fix off-by-one for maximum block_status length [CVE-2025-47711] bsc#1243110 - Update to version 1.42.2: * Version 1.42.2. * tests: Add test file to EXTRA_DIST even if !HAVE_LZIP * common/protocol: Add a test of protocol string conversion functions * common/protocol: Use thread-local storage for "unknown" string * common/protocol/protostrings.h: Fix name_of_nbd_reply prototype * protostrings: Use correct path to nbd-protocol.h * docs: Add a note to --log entry about using nbdkit_error * docs/nbdkit_error.pod: Describe interaction with --log option * docs: Remove incorrect information about syslog * docs: Simplify documentation for --log option * server/log.c: Fix comment * golang: Don't use '()' for no-argument C functions * build: Mark libfuzzer as a developer only option * rust: Disable clippy warnings unless --enable-gcc-warnings is used * ci: Move FreeBSD from Tcl 8.7 to 9.0 * ci: Drop alpine-319, add alpine-321 * Version 1.42.1. * golang: Add a note about breakage when plugins run in the background * README: New location for Wine AF_UNIX patches * build: Disable -Wunused-command-line-argument on FreeBSD * gitlab: make rust jobs honour the gitlab workflow rules * docs/nbdkit-release-notes-1.42.pod: Add release date * Version 1.42.0. * golang: Support GCC 15 * ci: Update FreeBSD builds * docs: Small revisions to the release notes * server: Add vsock_option=yes|no to --dump-config output * openbsd: curl: Include pthread.h * server: Define timeout_option=yes|no in --dump-config output * openbsd: server: Fix detection of --timeout option * docs: Add outline release notes for nbdkit 1.42 * Revert "build: Disable -Wunused-command-line-argument on FreeBSD" * ci: In rawhide-clang test, use clang++ to compile C++ (eg. filters/stats) * build: Disable -Wunused-command-line-argument on FreeBSD * rust: Fix "overindented" list in comment * rust: Declare explicit extern "C" API * curl: Fix configure-time checks for enums * ci: Update to latest * Version 1.41.9. * vddk: do_extents: Avoid reading partial chunk beyond the end of the disk * vddk: do_extents: Exit the function if we hit req_one condition * vddk: do_extents: Mark some local variables const * vddk: Cache the disk size in the handle * vddk: Include * curl: Remove unnecessary checks for CURL_SSLVERSION_MAX_* macros * docs: Link to a couple of "alternate" plugins * python: examples: Fix comment above API_VERSION constant * TODO: Document problems with -p 0 option and picking a port * tcl: Fix for Tcl 9.0 compatibility * Version 1.41.8. * build: Use 'tar ztf' instead of 'zcat | tar' * ci: Dump out failed log files when the tests fail * tests/test-ocaml-dump-plugin.sh: Temporarily skip test on FreeBSD * ci/build.sh: Set os_id on macOS which lacks /etc/os-release * ci: Don't skip tests on non-Linux * tests: Check that C tests using requires/skip include "requires.h" * tests: Add requires.[ch] as dependencies of test-ocaml * tests: Skip all OCaml tests on macOS * server: Turn synopsis.c into a standalone top level source file * server: Add description of nbdkit to --help output ... changelog too long, skipping 70 lines ... * vddk: Print the default list of transports in --dump-plugin output ==== selinux-policy ==== Version update (20250507 -> 20250512) Subpackages: selinux-policy-targeted - Update to version 20250512: * healthchecker: allow capability sys_admin (bsc#1240138) * slapd needs dac_override for ldapi socket (bsc#1242252) * Allow slapd_t nnp_transition for NoNewPrivileges (bsc#1242252) - Move manpages to selinux-policy-doc package (bsc#1241391) - Update to version 20250508: * Enable mysql_run_under_different_user for (open)SUSE (bsc#1240949) * Introduce mysql_run_under_different_user boolean (bsc#1240949) * Revert "Set mysqld_t permissive until we have tested it thorougly (bsc#1240949)"