Packages changed: MozillaFirefox (136.0.1 -> 136.0.4) aalib cogl crypto-policies file gawk gcc14 gcc15 (15.0.1+git8082 -> 15.0.1+git9001) gdm gpm iio-sensor-proxy (3.6 -> 3.7) libXau libguestfs libuv (1.48.0 -> 1.50.0) luajit (5.1.2.1.0+git.1731601260.fe71d0f -> 5.1.2.1.0+git.1741730670.538a821) m4 open-vm-tools openSUSE-release (20250329 -> 20250331) pam pam-full-src pixman (0.43.4 -> 0.44.2) ristretto (0.13.3 -> 0.13.4) rpm screen systemd-presets-common-SUSE upower xdm xdp-tools xfce4-session xfce4-terminal (1.1.4 -> 1.1.5) zstd === Details === ==== MozillaFirefox ==== Version update (136.0.1 -> 136.0.4) Subpackages: MozillaFirefox-branding-upstream - Mozilla Firefox 136.0.4 MFSA 2025-19 (bsc#1240084) * CVE-2025-2857, CVE-2025-2783 (bmo#1956398) Incorrect handle could lead to sandbox escapes 136.0.3 * Significantly improved responsiveness on TikTok by improving the speed of date formatting. (bmo#1954323) 136.0.2 * Fixed a bug where "Cookies and site data" and "Temporary cached files and pages" were unexpectedly enabled after updating to Firefox 136 for users with "History" and/or "Site settings" set to clear on shutdown in previous versions. (bmo#1952564) * Fixed an issue where the Primary Password prompt appeared in unexpected situations. (bmo#1946121) * Fixed visibility issues with radio buttons on dark backgrounds (bmo#1951930) * Fixed high CPU usage on Windows when the screen was locked or the laptop lid was closed. (bmo#1924932) - Use default clang version. (by Aaron Puchert) ==== aalib ==== - Use -std=gnu11 to avoid the strict C23 default from GCC 15. ==== cogl ==== Subpackages: libcogl-pango20 libcogl20 typelib-1_0-Cogl-1_0 typelib-1_0-CoglPango-1_0 - Export -std=gnu17 to cflags, fix build with gcc 15. Cogl is deprecated upstream, and we can not expect this to be fixed from there, so use older gcc standard until we can remove the package from distro. - Refresh patches from upstream, keep the bots happy. ==== crypto-policies ==== Subpackages: crypto-policies-scripts - Relax the nss version requirement since the mlkem768secp256r1 enablement has been reverted. ==== file ==== Subpackages: file-magic libmagic1 - baselibs.conf: drop it - Change patch file-seccomp.patch * Remove the dumb prctl allow rule as for glibc malloc the prctl PR_SET_VMA with flag PR_SET_VMA_ANON_NAME is already allowed - Require at build zlib-devel to enable direct uncompresion of zip'ed files as well - Add patch file-seccomp-ppc.patch * Minimal patch to work around of wrong provide of used TCGETS ==== gawk ==== - Mark profiling as non-deterministic (boo#1040589, jsc#PED-12137) ==== gcc14 ==== - Add gcc14-bsc1239938.patch to allow GCC executables to be built PIE. [bsc#1239938] - Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops required for user-space livepatching on powerpc. ==== gcc15 ==== Version update (15.0.1+git8082 -> 15.0.1+git9001) Subpackages: cpp15 libasan8 libatomic1 libgcc_s1 libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libstdc++6 libstdc++6-pp libtsan2 libubsan1 - Update to GCC trunk head, 15.0.1+git9001 * includes -msplit-patch-nops required for user-space livepatching on powerpc * includes fix for Ada build with --enable-host-pie - Adjust for removed avx10_2roundingintrin.h intrinsic header. - Build GCC executables PIE on SLE. [bsc#1239938] ==== gdm ==== Subpackages: gdm-schema gdm-xdm-integration gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Update systemd xdm migration * Change display-manager to display-manager-legacy * Actually detect gdm instead of xdm * Upgrade xdm first if installed to run the systemd migration ==== gpm ==== Subpackages: libgpm2 - Use -std=gnu11 to avoid the C23 default of GCC 15 which no longer supports calling unprototyped functions. ==== iio-sensor-proxy ==== Version update (3.6 -> 3.7) - Update to version 3.7: + This update fixes a regression of 3.6 regarding the fallback for buffer sensors with and without triggers. + Do not hardcode trigger names. + Enable ring buffers only when sensor is claimed. + Confirm if buffer is usable before using it. + Fix doublefree in input-proximity driver. - Drop iio-sensor-proxy-compass-check-claim-perm.patch: Fixed upstream. ==== libXau ==== - replaced fix-sed-for-manpages.patch with upstream patch U_meson-fix-generation-of-shadow-man-pages.patch - fix-sed-for-manpages.patch: sed need to replace all occurences of the string, not only the first one. Else e.g. .so references are broken (.so man3/Xau.__libmansuffix__) ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-winsupport libguestfs-xfs libguestfs0 - libguestfs-appliance: drop incorrect requireson libpcre1, package was converted to pcre2 by 1.44.2 ==== libuv ==== Version update (1.48.0 -> 1.50.0) - update to 1.50.0: * misc: implement uv_getrusage_thread * linux: always use io_uring for epoll batching ==== luajit ==== Version update (5.1.2.1.0+git.1731601260.fe71d0f -> 5.1.2.1.0+git.1741730670.538a821) - Update to version 5.1.2.1.0+git.1741730670.538a821: * Change handling of nil value markers in template tables. * REVERT: Change handling of nil value markers in template tables. * macOS: Fix Apple hardened runtime support and put behind build option. * macOS: Fix support for Apple hardened runtime. * Fix handling of nil value markers in template tables. * Avoid unpatching bytecode twice after a trace flush. * Fix state restore when recording __concat metamethod. * Windows: Allow mixed builds with msvcbuild.bat. * macOS: Add suport for Apple hardened runtime. * Add compatibility string coercion for fp:seek() argument. * Windows: Clarify installation directory layout. * Remove Cygwin from docs, since it's not a supported target. * Improve CLI signal handling on POSIX. * FFI: Add pre-declared int128_t, uint128_t, __int128 types. * Use dylib extension for iOS installs, too. * Change handling of nil value markers in template tables. * Fix recording of BC_VARG. * Reject negative getfenv()/setfenv() levels to prevent compiler warning. * Bump copyright date. * Force fallback source name for stripped bytecode. * Remove dependency on . * Restore state when recording __concat metamethod throws OOM. * MIPS64: Fix pcall() error case. * Fix detection of inconsistent renames due to sunk values. ==== m4 ==== - Skip PGO with %want_reproducible_builds (boo#1040589) ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service are set to enabled by default. Do this by removing vmblock-fuse.service from the %pre section in the spec file. vmblock-fuse.service still remains in the %pre desktop section. ==== openSUSE-release ==== Version update (20250329 -> 20250331) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pam ==== - Remove unix2_chkpwd, no consumer left ==== pam-full-src ==== Subpackages: pam-extra pam-manpages - Remove unix2_chkpwd, no consumer left ==== pixman ==== Version update (0.43.4 -> 0.44.2) - Update to version 0.44.2: + meson: require Meson >= 1.3.0 + vmx: Fix is_opaque, is_zero, is_transparent functions + RISC-V: - Fix rvv auto-detection on `gcc-13` - Force spec 1p0 in architecture definiton - Changes from version 0.44.0: + arm: add include guards on header + aarch64: support PAC and BTI + pixman-combine-float.c: - Fix inlining failed error - Fix typo in MAKE_NON_SEPARABLE_PDF_COMBINERS() + mmx: Fix compilation with clang-cl + pixman: - Add library destructor - Adjust arm assembly for binutils change + pixman-region: Make translate a no-op when using 0 offsets + mips: - Fix a typo in mips_dspr2_flags - Widen CPU family check for DSPr2 - Add option to force MIPS CPU feature discovery + iwmmxt: Drop support + ci: add workflow rules to allow for MR pipelines + RISC-V floating point operations + Fixed memory leak in tests - Drop all manual configuring of meson setup, pass - -auto-features=auto instead. ==== ristretto ==== Version update (0.13.3 -> 0.13.4) Subpackages: ristretto-lang - Update to version 0.13.4 Meson has been added as a build system in this release, and the associated archive has been generated by 'meson dist'. Although autotools has been retained for the time being and can still be used via 'autogen.sh', meson is now the preferred build system, and autotools will be removed in a future release. * flatpak: Updates from flathub and use meson when possible * meson-build: Remove check for xdt-csource * autotools-build: Be sure gdbus-codegen files are regenerated * build: Replace xdt-csource with glib-compile-resources * build: Automate copyright year management * Replace deprecated exo with libxfce4ui 4.21.0 * Completely hide pointer when fullscreen-timeout is set to 0 * viewer: Reset adjustments when switching file * Revert "viewer: Reset viewer geometry data when setting file" * Store adjustment values and restore them when switching file * viewer: Reset viewer geometry data when setting file * flatpak: Updates from Flathub and git * icon-bar: Silence -Wmaybe-uninitialized warning * Add meson build * icons: Remove old app icon * viewer: Don't set adjustement values if unchanged * Add support for showing containing folder * Translation Updates - Add BuildRequires: pkgconfig(exo-2) ==== rpm ==== Subpackages: librpmbuild10 - Backport check_c_compiler_flag cmake tests fix from upstream The old code would pick up -fhardened by accident * new patch: cmake_fhardened.diff ==== screen ==== - K&R source is not ready for C23 used by default with GCC 15. Use -std=gnu89 instead. ==== systemd-presets-common-SUSE ==== - Change display-manager.service to display-manager-legacy.service (rename for future systemd control of display manager choice) ==== upower ==== Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 - Make dependency on libimobile and libplist optional and disbled by default: Reading out battery and charging state of USB connected iPod/iPad does not justify the introduction of these dependencies for this core package. ==== xdm ==== Subpackages: displaymanager-sysconfig - Move display-manager.service to display-manager-legacy.service to prepare for systemd control of display manager choice (needs systemd-presets-common-SUSE update) - Create xdm.service to allow XDM to be used in systemd only mode - Order systemd-presets-common-SUSE before xdm ==== xdp-tools ==== - Add fix-clang20-build.patch to fix build with Clang 20. ==== xfce4-session ==== Subpackages: xfce4-session-lang - Build sub-package wayland-experimental only on Tumbleweed or Slowroll; Leap does not provide labwc (yet). ==== xfce4-terminal ==== Version update (1.1.4 -> 1.1.5) Subpackages: xfce4-terminal-lang - Update to version 1.1.5 Meson has been added as a build system in this release, and the associated archive has been generated by 'meson dist'. Although autotools has been retained for the time being and can still be used via 'autogen.sh', meson is now the preferred build system, and autotools will be removed in a future release. * build: Automate copyright year management * window: Add dnd support outside screen * Apply .clang-format file * Sort includes * clang-format: Add file * Add meson build * Add hidden setting to resize window when zoomed in/out * Revert "Cancel by default in unsafe past dialog" * build: Add missing dep flags * Hide the launcher for xfce4-terminal-settings * screen: Don't overwrite VteTerminal:allow-hyperlink binding * Translation Updates - Remove obsolete relax-x11-version.patch ==== zstd ==== Subpackages: libzstd1 - Add patch (non-upstreamable): * 0001-Don-t-export-libzstd_static-CMake-target.patch