Packages changed: MicroOS-release (20250707 -> 20250708) container-selinux (2.238.0 -> 2.239.0) hwinfo (24.0 -> 24.1) kirigami-addons6 (1.8.1 -> 1.9.0) libgphoto2 (2.5.31 -> 2.5.32) libheif (1.19.8 -> 1.20.1) libsolv (0.7.33 -> 0.7.34) libxml2 libzypp (17.37.9 -> 17.37.10) poppler (25.04.0 -> 25.06.0) poppler-qt6 (25.04.0 -> 25.06.0) python-pyzmq (25.1.2 -> 27.0.0) systemd vulkan-tools wayland (1.23.1 -> 1.24.0) yast2 (5.0.13 -> 5.0.14) === Details === ==== MicroOS-release ==== Version update (20250707 -> 20250708) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== container-selinux ==== Version update (2.238.0 -> 2.239.0) - Update to version 2.239.0: * Allow containers to use hsa devices for ROCM ==== hwinfo ==== Version update (24.0 -> 24.1) Subpackages: libhd24 - merge gh#openSUSE/hwinfo#167 - fix usb network card detection (bsc#1245950) - 24.1 ==== kirigami-addons6 ==== Version update (1.8.1 -> 1.9.0) Subpackages: libKirigamiAddonsStatefulApp6 - Update to 1.9.0 https://carlschwan.eu/2025/07/06/kirigami-addons-1.9.0/ * Finished the addition of the file and folder form delegate * Minor fixes and improvements ==== libgphoto2 ==== Version update (2.5.31 -> 2.5.32) Subpackages: libgphoto2-6 libgphoto2_port12 - libgphoto2 2.5.32 release quicktake1x0: * New Apple Quicktake (serial camera) driver pentax: * Added Pentax K1II, K3III * sync with pktriggercord fixes ptp2: * Big code and (canon eos) debug outout cleanups by Axel W * --summary output format changed to be more condensed * Canon EOS: imageformat output changed * Canon: added disablemodedial * Canon: keepdeviceon send less often to speed up * Sony: Now officially documented by Sony. Changes imported from the documentation. * Sony: support newer sony property format * Sony: added capturemode, focalposition, magnifysetting, spotfocusarea, * Sony: fixed crash in movie option * Panasonic: bugfixes * Fuji: configurations added, af drive manual, availableshots, graineffect, rawcompression * Fuji: bugfixes * Nikon: support 32bit properties * Added ids: - Canon EOS R100, R3, R8, R50, G7 X Mark 3, - Sony Alpha A6100, ZV-E10, A6700, NEX-5N, SLT A99V, ILCE-9M3, ILX-LR1 - Nikon Zf, Z6 III - Olympus OM-1Mark2 - Fuji X-H2S, X100V1, GFX100 II - Ricoh GR III - Leica Q3, M11 Monochrome ports/usb: * added more Android support (passing in filedescriptor) ports/serial: * some fixes, needed for quicktake all: * IOLIBS and CAMLIBS now runtime configurable * Builds use silent rules by default now * Meson buildsupport, parallel to automake * print-camera-list can now print camera list in JSON format * added new functions: gp_setting_set_get_func, gp_setting_set_set_func for user defined settings setters * added new port functions: gp_port_usb_set_sys_device, gp_port_usb_get_sys_device used for Android translations: * added georgian, friulian, polish, romanian, ukrainian, chinese, brazilian - remove libgphoto2-c99.patch: upstream ==== libheif ==== Version update (1.19.8 -> 1.20.1) - update to 1.20.1: - Fixes a bug in decoder plugin loading. - Changes from 1.20.0: - Sequences: - API for reading and writing image sequences. You can read and write sequences for all codecs (not just H.265 / AV1, but also JPEG-2000, ISO-23001-17 uncompressed, ...). Currently only intra-coded sequences are supported. - API for reading and writing metadata sequences. The metadata tracks can contain any raw timed data. - Support for SAI (sample auxiliary information). Timed samples (from image sequences or metadata) can have auxiliary data attached. Currently we support TAI timestamps and GIMI content description IDs. - Support for track references. - The API for sequences is described here: https://github.com/strukturag/libheif/wiki/Reading-and-Writing-Sequences - New command line tool heif-view to show HEIF sequences (requires libSDL). - Other new features: - You can specify a security limit for the maximum total memory libheif may use for decoding. This is easier to handle than specifying limits on the maximum image size or single memory allocations. - Support for TAI timestamps (in images and sequences) has been promoted from experimental to stable. - FFMPEG plugin now supports HDR decoding - Header files are now split into individual headers by topic. However, it should still be backwards compatible with heif.h being a catch-all covering the old content. For new functionality (sequences, TAI), you will need to include the specific headers. - All struct names of the API are now also typedefs. - add build requires for brotli which it looks for since 1.18 - prepare building heif-view ==== libsolv ==== Version update (0.7.33 -> 0.7.34) - add support for product-obsoletes() provides in the product autopackage generation code - bump version to 0.7.34 ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - security update - added patches CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS) CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS) + libxml2-CVE-2025-49794,49796.patch CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS) + libxml2-CVE-2025-49795.patch - security update fix CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash fix CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 + libxml2-CVE-2025-6170,6021.patch ==== libzypp ==== Version update (17.37.9 -> 17.37.10) - BuildRequires: %{libsolv_devel_package} >= 0.7.34 (bsc#1243486) Newer rpm versions no longer allow a ':' in rpm package names or obsoletes. So injecting an Obsoletes: product:oldproductname < oldproductversion into the -release package to indicate a product rename is no longer possible. Since libsolv-0.7.34 you can and should use: Provides: product-obsoletes(oldproductname) < oldproductversion in the -release package. libsolv will then inject the appropriate Obsoletes into the Product. - version 17.37.10 (35) ==== poppler ==== Version update (25.04.0 -> 25.06.0) - version update to 25.06.0 [bsc#1245625] (CVE-2025-52886) Release 25.06.0: core: * Fix writing dates back to file * Internal code improvements * Fix crashes in malformed documents glib: * Add the ink annotation type * Add missing autopointers definitions utils: * pdfsig: Add assert-signer feature * pdfsig: Return error code on error Release 25.05.0: core: * Fix re-fetching after xref reconstruction. Issue #1584 * Fix compilation with ENABLE_ZLIB_UNCOMPRESS=ON * Various annotation improvements. Issues #642, #1558, #1055 * CairoFontEngine: invalidate broken embedded fonts. Issue #1453 * Splash: Performance improvements * Internal code improvements glib: * Small signature improvements - modified patches % reduce-boost-required-version.patch (refreshed) % reduce-libtiff-required-version.patch (refreshed) ==== poppler-qt6 ==== Version update (25.04.0 -> 25.06.0) - version update to 25.06.0 [bsc#1245625] (CVE-2025-52886) Release 25.06.0: core: * Fix writing dates back to file * Internal code improvements * Fix crashes in malformed documents glib: * Add the ink annotation type * Add missing autopointers definitions utils: * pdfsig: Add assert-signer feature * pdfsig: Return error code on error Release 25.05.0: core: * Fix re-fetching after xref reconstruction. Issue #1584 * Fix compilation with ENABLE_ZLIB_UNCOMPRESS=ON * Various annotation improvements. Issues #642, #1558, #1055 * CairoFontEngine: invalidate broken embedded fonts. Issue #1453 * Splash: Performance improvements * Internal code improvements glib: * Small signature improvements - modified patches % reduce-boost-required-version.patch (refreshed) % reduce-libtiff-required-version.patch (refreshed) ==== python-pyzmq ==== Version update (25.1.2 -> 27.0.0) - Update to 27.0.0 * The Cython backend has been rewritten using Cython 3’s pure Python mode. * The build system has been rewritten to use CMake via scikit-build-core instead of setuptools * Bundled libzmq is updated to 4.3.5, which changes its license from LGPL to MPL. * Many smaller changes, see upstream chngelog ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-boot systemd-experimental udev - Move the workaround which consists in converting /var/lib/machines as a separate subvolume in cases where it was incorrectly created inside a snapshot. Relocating the workaround from the systemd-container sub-package to the main package ensures it's applied on old systems where it's still needed [1] even if the systemd-container sub-package is not installed. This change should allow us to eventually drop the workaround in the future. [1] The workaround is required on legacy installations (those made more than eight years ago) where /var was not a separate subvolume. - triggers.systemd: skip update of hwdb, journal-catalog if executed during an offline update. ==== vulkan-tools ==== - Add cmake.patch ==== wayland ==== Version update (1.23.1 -> 1.24.0) Subpackages: libwayland-client0 libwayland-cursor0 libwayland-egl1 libwayland-server0 - Update to release 1.24 * A new wl_fixes interface to add a request to destroy a wl_registry object. * A new wl_keyboard.key repeated state, to allow compositors to take over the responsibility of repeating keys, which is useful for remote desktop. * wl_display_dispatch_queue_timeout() and wl_display_dispatch_timeout(), to set a timeout when dispatching events. * wl_shm_buffer_ref() and wl_shm_buffer_unref(), to access wl_shm_buffer underlying storage after the protocol object has been destroyed (e.g. when a client is shutting down). * wl_proxy_get_interface() and wl_resource_get_interface(), to fetch the wl_interface of an object. * wl_resource_post_error_vargs(), as an alternative to wl_resource_post_error() when the compositor already has a va_list. ==== yast2 ==== Version update (5.0.13 -> 5.0.14) - Improved checking TPM2 device. (bsc#1245247) - 5.0.14