Packages changed: Mesa (25.2.6 -> 25.2.7) Mesa-drivers (25.2.6 -> 25.2.7) MozillaFirefox (144.0.2 -> 145.0) btrfsprogs (6.17 -> 6.17.1) clamav dconf flatpak openSUSE-release (20251113 -> 20251114) python-MarkupSafe (3.0.2 -> 3.0.3) python-psutil (7.1.2 -> 7.1.3) python-pyzmq salt udisks2 === Details === ==== Mesa ==== Version update (25.2.6 -> 25.2.7) Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1 - Update to release 25.2.7 - -> https://docs.mesa3d.org/relnotes/25.2.7 ==== Mesa-drivers ==== Version update (25.2.6 -> 25.2.7) Subpackages: Mesa-dri Mesa-libva Mesa-vulkan-device-select libvulkan_lvp - Update to release 25.2.7 - -> https://docs.mesa3d.org/relnotes/25.2.7 ==== MozillaFirefox ==== Version update (144.0.2 -> 145.0) Subpackages: MozillaFirefox-branding-upstream MozillaFirefox-translations-common - Mozilla Firefox 145.0 * New: Add, edit, and delete comments to make your own notes in PDFs (summaries, questions, tasks, etc.). The comment sidebar helps you scan all your comments and quickly jump to them, which is handy for long or heavily marked-up PDFs. * New: This version introduces a new phase of privacy protections, building on our research on reducing browser fingerprinting. These new defenses cut the percentage of users seen as unique almost in half, ensuring a safer and more private browsing experience in Private Browsing or when using *Enhanced Tracking Protection* set to *Strict*. * New: Need a reminder of what tabs are in a group? Hover over the tab group name to get a preview of the tabs inside without opening it. (bmo#1992228) * New: You can now access and manage your saved passwords right from the sidebar—no need to open a new tab or window. Stay on the page you’re on and get to your logins faster. * New: Copy Link to Highlight allows users to share arbitrary sections of a page with others by copying a link through the context menu with a given selection * New: The Translations feature has an improved experience when translating between languages with different script directions. * New: New brand-inspired wallpapers are available for New Tab on desktop, with versions for both light and dark mode. * New: With the new Open links from apps next to your active tab setting, you can have links from other applications open next to your active tab instead of at the end of the tab strip. * New: Enhanced Bounce Tracking Protection’s stateless mode is now enabled by default in ETP Strict, blocking more advanced tracking techniques based on redirection * New: For most Windows users, the existing desktop shortcut for launching Firefox has been replaced with the desktop launcher, a small program that will launch Firefox if it is installed, but if it is not installed will prompt the user to install Firefox. This will provide an easy installation point for Firefox users who acquire a new Windows device, where Firefox will not be installed by default, but the desktop launcher program may have synced via OneDrive or other cloud storage product. Learn more. * Changed: Firefox no longer supports 32-bit Linux systems. We recommend installing the 64-bit version for continued updates and support. * Changed: Horizontal tabs are now slightly more rounded to match the look of vertical tabs. Buttons and text inputs, including the address bar, have also been updated for consistency. (bmo#1988794) * Changed: When no extensions are installed, clicking the Extensions button now shows a message highlighting how extensions can enhance your browsing, with links to the Firefox Add-ons store. (bmo#1778684) * Changed: Local translation models are now compressed with Zstandard, reducing download sizes and on-device storage consumption. As always, all Firefox translations happen securely and privately on your local device, unlike other browsers that translate using cloud services. * Changed: We updated default automation preferences to better support Agentic browsing, reducing the steps agents need to complete a task and chances for the agent to get stuck. (bmo#1991970) * HTML5: Support has been added for the `Atomics.waitAsync` proposal, which is a non-blocking, asynchronous version of `Atomics.wait`. This allow synchronization of threads based upon the value in a shared memory location, for more details please consult our MDN documentation. * HTML5: Firefox now supports the new `Integrity-Policy` header for enforcing sub-resource integrity for scripts. Further implementation of this header is underway. * HTML5: Added Matroska support for the most commonly used codecs: AVC, HEVC, VP8, VP9, AV1, AAC, Opus, and Vorbis. (bmo#1991752) * HTML5: The text-autospace property is now supported, allowing automatic spacing adjustments between characters from different scripts. * HTML5: The WebGPU DOM API (spec; MDN) is now available on macOS 26 (Tahoe) on Apple Silicon. For details, see the Mozilla Graphics Team Blog. * Developer: Microsoft UI Automation phased release rollout at 100%. Microsoft UI Automation is the new accessibility framework for Microsoft Windows. This will provide better assistive technology (AT) support and performance on Windows for current and future assistive technologies. * Enterprise: You can find information about policy updates and enterprise specific bug fixes in the Firefox for Enterprise 145 Release Notes. * Fixed: Various security fixes. MFSA 2025-87 (bsc#1253188) * CVE-2025-13021 (bmo#1986431) Incorrect boundary conditions in the Graphics: WebGPU component * CVE-2025-13022 (bmo#1988488) Incorrect boundary conditions in the Graphics: WebGPU component * CVE-2025-13012 (bmo#1991458) Race condition in the Graphics component * CVE-2025-13023 (bmo#1992032) Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component ... changelog too long, skipping 28 lines ... - Remove upstreamed patch mozilla-bmo998749.patch ==== btrfsprogs ==== Version update (6.17 -> 6.17.1) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - Removed patch: btrfsprogs-libblkid-static-lib-clash.patch (upstream) - update to 6.17.1 * dump-tree: print compat-ro bit for fs-verity * check: add ability to repair orphan device extents so kernel does not refuse to mount such filesystem due to strict checks * convert: * print label if it's being copied from the source filesystem * drop alignment check of chunk length, kernel workaround is in place * scrub and device replace: document behaviour in 6.19+ that freezing/suspend will cancel the operation * other: * documentation fixes and updates * updated tests ==== clamav ==== Subpackages: libclamav12 libclammspack0 libfreshclam4 - Add clamav-workaround.patch to work around symbol removals in version 1.5.0 and 1.5.1. ==== dconf ==== Subpackages: gsettings-backend-dconf libdconf1 - Fix requires for dbus daemon, it's dbus-service, not dbus-1 ==== flatpak ==== Subpackages: flatpak-remote-flathub flatpak-selinux libflatpak0 system-user-flatpak - Drop support to build against dbus < 1.9.18: this was back from 2015 and we are not even guaranteed to use dbus-1 over dbus-broker in all cases. ==== openSUSE-release ==== Version update (20251113 -> 20251114) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-MarkupSafe ==== Version update (3.0.2 -> 3.0.3) - Update to 3.0.3 * __version__ raises DeprecationWarning instead of UserWarning. #487 * Adopt multi-phase initialization PEP 489 for the C extension. #494 * Build Windows ARM64 wheels. #485 * Build Python 3.14 wheels. #503 * Build riscv64 wheels. #505 ==== python-psutil ==== Version update (7.1.2 -> 7.1.3) Subpackages: python311-psutil python313-psutil - Update to 7.1.3 * Replace strlcat/strlcpy with safe str_copy/str_append * Introduce PSUTIL_TESTING mode. Terminate execution if str_* funcs fail * Replace unsafe sprintf/snprintf/sprintf_s calls with str_format() * Fix BSD compilation err ==== python-pyzmq ==== - Copy tests to a temporary directory so they can be imported. - Drop pytest.ini, it is now shipped in the tarball. ==== salt ==== Subpackages: python311-salt salt-master salt-minion - Require Python dependencies only for used Python version ==== udisks2 ==== Subpackages: libudisks2-0 libudisks2-0_btrfs udisks2-bash-completion udisks2-lang - Fix dbus daemon requires, it's dbus-service, not dbus-1