Packages changed: bind (9.20.12 -> 9.20.13) black-hole-solver (1.12.0 -> 1.14.0) chrony (4.7 -> 4.8) dracut (059+suse.749.g280c842e -> 059+suse.757.g0d1d426d) freecell-solver (6.12.0 -> 6.14.0) gdm grub2 openSUSE-release (20250911 -> 20250912) ovmf (202505 -> 202508) python-pycurl (7.45.3 -> 7.45.6) python-typing_extensions (4.14.1 -> 4.15.0) setools (4.5.1 -> 4.6.0) update-bootloader (1.25 -> 1.26) virtualbox virtualbox-kmp === Details === ==== bind ==== Version update (9.20.12 -> 9.20.13) Subpackages: bind-doc bind-utils - Upgrade to release 9.20.13 New Features: * Add a new option `manual-mode` to dnssec-policy. * Add a new option `servfail-until-ready` to response-policy zones. * Support for parsing HHIT and BRID records has been added. Removed Features: * Deprecate the `tkey-gssapi-credential` statement. * Obsolete the `tkey-domain` statement. Bug Fixes: * Prevent spurious SERVFAILs for certain 0-TTL resource records. * Fix unexpected termination if catalog-zones had undefined `default-primaries`. ==== black-hole-solver ==== Version update (1.12.0 -> 1.14.0) - update to 1.4.0: * Fixed running black_hole_solver_run with the same (or a smaller) iterations limit. It ran indefinetely then (Possible Denial-of-service?) * Fix some hypothetical rresource leaks (e.g.: with "fopen()"). * Cleanups: add "const"s , convert "int" to "bool", etc. * Add tests. ==== chrony ==== Version update (4.7 -> 4.8) Subpackages: chrony-pool-openSUSE - Update to version 4.8: * Add maxunreach option to limit selection of unreachable sources * Add -u option to chronyc to drop root privileges (default chronyc user is set by configure script) * Fix refclock extpps option to work on Linux >= 6.15 * Validate refclock samples for reachability updates * Obsoletes chrony-unix-socket.patch * Obsoletes chrony-remove-chmod.patch ==== dracut ==== Version update (059+suse.749.g280c842e -> 059+suse.757.g0d1d426d) - Update to version 059+suse.757.g0d1d426d: Additional fixes for PXE boot with filled-in NBFT (bsc#1238848): * fix(74nvmf): make sure autoconnect script is run at least once * fix(74nvmf): only set netroot if it's yet empty Other: * fix(dracut): library directory creation in --kernel-only * improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces * fix(kernel-modules-extra): remove stray \ before / * fix(dracut): use "-name" to avoid find matching temporary directory * feat(dracut.sh): output error message for --regenerate-all ==== freecell-solver ==== Version update (6.12.0 -> 6.14.0) Subpackages: freecell-solver-presets libfreecell-solver0 - Update to 6.14.0: - Require pysol_cards.gen_multi_cli and avoid requiring random2. - Add comments and documentation. - Apply add_tag("tests_may_fail") to more failing compile-time configurations. - Add “STRICT ⇒ 1” to Template Toolkit invocations. - clang-format and perltidy syntax fixes. ==== gdm ==== Subpackages: gdm-lang gdm-schema gdm-xdm-integration gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Create /run/gdm in case it would not exist yet; this could potentially happen on offline upgrades. ==== grub2 ==== Subpackages: grub2-common grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-efi-bls - Add support for `LoaderEntryDefault` EFI variable * grub2-bls-loader-entry-default.patch ==== openSUSE-release ==== Version update (20250911 -> 20250912) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ovmf ==== Version update (202505 -> 202508) Subpackages: qemu-ovmf-x86_64 - Update to edk2-stable202508 - New Features & Bug Fixes (https://github.com/tianocore/edk2/releases): - update to openssl 3.5.1 - MdeModule: Update oniguruma to v6.9.10 - Support Standalone MM on OVMF - MdePkg/IndustryStandard: update Tpm2Acpi table to revision 5 - Adding FF-A memory management library - Add UUID-GUID conversion interfaces in ArmFfaLib - BaseTools: Add support for mingw-w64 - Remove UGA support - Add support for ARM GICv5 - RISC-V: Support PEI booting - Patches (git log --oneline --date-order edk2-stable202505..edk2-stable202508): d46aa46c83 ShellPkg: Remove EmbeddedPkg dependency db5b28ed9e MdePkg, EmbeddedPkg: Move Fdt Table Guid to MdePkg 808f1f1f87 UefiPayloadPkg: Scan for Option ROMs 072ab3846c Revert "SecurityPkg: CodeQL Fixes." 8d984e6a57 MdeModulePkg: XhciDxe: Fix comment grammar in XhcMonitorAsyncRequests 6d37ca427e MdeModulePkg: XhciDxe: Fix USB reset issue: callback / update order e69d7653b9 MdeModulePkg: XhciDxe: Fix USB reset issue: use after free b58ce4c226 MdeModulePkg: Support conditional UFS initialization 9baa6193c2 Update reviewer for SecurityPkg: Tcg related modules and UefiCpuPkg 4488d4479a UefiPayloadPkg/BlSupportDxe: Drop manual reservations for APIC and HPET 44d88d5d0c MdeModulePkg: Remove obsolete PEI_USB_HOST_CONTROLLER_PPI 834586f316 MdeModulePkg/UsbBusPei: Drop support for obsolete host controller PPI 4e950950a4 MdeModulePkg/Usb: Remove UhciPei 9688712f1d MdeModulePkg: Usb cumulative codeql issues. d68f418300 MdeModulePkg: Variable cumulative codeql issues. 504a80c151 SecurityPkg/Tcg/OpalPasswordDxe: Fix logic for RemoveDevice() bd785cedc3 StandaloneMmPkg/MmCore: Correct EndOfDxe to EndOfPei in MmEndOfPeiHandler d192e7ea75 StandaloneMmPkg/MmIpl: Correct CreatMmHobList to CreateMmHobList 9418a9f1e7 .azurepipelines: Use Fedora 41 imagBug 1245454 - iSCSI boot support is disabled in OVMF imagese for Linux CI jobs 057a611ae6 SecurityPkg: Added basic DxeImageVerificationLib tests 5125e2d6b1 CryptoPkg: workaround for MSVC linking tolower d55642f537 MdePkg: added mocks for DevicePathLib and OpenProtocol 1c3a22059b MdeModulePkg: added SecurityManagementLib mock 3f453cd7aa Add Poncho Figueroa as BaseTools reviewer d1c1f7e354 StandaloneMmPkg/MmIpl: Call CreatMmHobList() with page aligned size 0662754134 MdePkg/Library: Remove MM_STANDALONE LibraryClass in UefiDevicePathLib.inf fdd6796d08 MdePkg/Library: Remove UefiDevicePathLibStandaloneMm.inf 80f9e3aa2f OvmfPkg/OvmfPkg.dsc:Update DevicePathLib mapping for MM_STANDALONE drivers 6e4bf7f934 .mergify: Set max parallel checks to 1 5c7ef27b96 MdeModulePkg: UefiBootManagerLib Change default alignment for ramdisk boot. 686f1e3ea8 CryptoPkg/BaseCryptLibMbedTls : Add strpbrk() support to MbedTls d2d8d38ee0 UefiCpuPkg/PiSmmCpuDxeSmm: Safe handling of IDT register on SMM entry 7fe3609022 DynamicTablesPkg: Add alias for EArchCommonObjPciConfigSpaceInfo a60334ad59 BaseTools: Fix FMMT FvHandler Padding operation issue 491530abaa MdeModulePkg: Change PCD type to support dynamic 3b48f8ccab UefiPayloadPkg: Fix calling convention 0d82e48221 DynamicTablesPkg: add Tpm2DeviceTableLib to generate Tpm2 device table faeedaa54b DynamicTablesPkg: add ArchCommonObjTpm2DeviceInfo 47e818016a ShellPkg/Library: Remove unecessary error check 97b0f1ea3b OvmfPkg/CloudHv: bump PcdCpuMaxLogicalProcessorNumber to 254 be6342d64f ShellPkg: Fixed Deadcode and Null field Coverity warnings. 01295fd25b ShellPkg: DtbTableAddress via config in dmem f41cc8ac79 ArmVirtPkg: Introduce ArmTransferListLib to ArmVirtPkg adf345e27b ArmPlatformPkg: Introduce TransferList Guid Hob for SEC c1e3e71643 ArmPlatformPkg: Introduce gArmTransferListPpiGuid 0bad279bd4 ArmPkg: Add gArmTransferListPpiGuid 6a329eb853 ArmPlatformPkg: Capture TransferList Information for SEC 078414f045 ArmPlatformPkg: Introduce TransferList Guid Hob for PeilessSec 78d17ce5d2 ArmPkg: Add ArmTransferListHob Guid b1096651d8 ArmPlatformPkg: Capture TransferList information for PeilessSec e841099600 ArmPkg/ArmTransferListLib: Add utility functions 5fc1ba3f25 SecurityPkg/Tcg2Config: add Tcg2ConfigFfaPei f47216f159 SecurityPkg/Library: Tpm2DeviceSecLibFfa for PeilessSec ee9950d3fb SecurityPkg/Library: separate logics geting TPM2 information with FF-A ba6a8eb045 SecurityPkg: CodeQL Fixes. 690929c458 SecurityPkg: Tpm2DumpLib: Make All Prints at DEBUG_SECURITY 05c966e8f1 StandaloneMmPkg: Unify EfiFileName Parsing c3479204cc MdeModulePkg: Unify EfiFileName Parsing bcd8509640 StandaloneMmPkg: Always Print Driver Load Messages 1ec1f5d711 MdeModulePkg: Always Print Driver Load Messages 43d696a366 OvmfPkg/CpuHotplugSmm: hook up MSR_IA32_FEATURE_CONTROL with platform info 0e814e829e OvmfPkg/CpuHotplugSmm: set MSR_IA32_FEATURE_CONTROL in first SMI handler f92ba13a66 OvmfPkg/CpuHotplugSmm: add whitespace c37e2d38d6 OvmfPkg/PlatformPei: record "etc/msr_feature_control" presence explicitly c27552f343 ShellPkg: Shell Validate parameter before use. 04fe3f50d6 OvmfPkg/RiscVVirt: Adopt New CpuExceptionHandlerLib 4052e8f155 UefiCpuPkg: CpuExceptionHandlerLib: RISC-V: Support backtrace aee4d29d56 BaseTools/tools_def: Enable frame pointer for RISC-V 3a06b5dac9 OvmfPkg/RiscVVirt/PlatformSecLib: Clear s0 (fp) at entry point db299fa788 UefiCpuPkg: CpuExceptionHandlerLib: Support RISC-V c840e5f95b EmbeddedPkg: Fix incorrect define for hardware interrupt2 protocol 188f8c686e BaseTools/tools_def: Always link with -Wl,-z,notext for BFD/LLD d7ccf477f5 BaseTools/tools_def: Make linker warnings fatal for RISCV + LOONGARCH64 35a93babfb BaseTools/tools_def: Drop unused GCC IA32/X64 flag variables 1caa6a92ea ArmPlatformPkg/PL011UartLib: Prevent data loss in conversion. 6cb4523704 ArmPlatformPkg/PL011SerialPortLib: Support dynamic PCD type. 095bfacc9e DynamicTablesPkg: Implement X64-specific SsdtSerialPortFixupLib 7d8760875a DynamicTablesPkg: Adds AML code generation for serial UART RD d1f8485822 DynamicTablesPkg: Adds AML code generation for IRQ 10f0364b61 MdePkg/Acpi50: Add revision macro for Serial Bus UART structure 988162092b MdePkg: Acpi66: Update FADT and MADT versions b0fb8da1fa MdePkg: Acpi66: Add newly defined RISC-V affinity structure 6b8522d007 MdePkg: Acpi66: Add RISC-V MADT and RHCT structures 6f939cee32 UefiCpuPkg/MpInitLib: Rename FillExchangeInfoDataSevEs() 046ba401c2 UefiCpuPkg/MpInitLib: Fix random SEV-ES guest boot crash 0bb4cf0228 SecurityPkg: Clarify Is800155Event ... changelog too long, skipping 339 lines ... - Add build flag NETWORK_ISCSI_DEFAULT_ENABLE for x64 OVMF to enable iSCSI boot support by default ==== python-pycurl ==== Version update (7.45.3 -> 7.45.6) Subpackages: python311-pycurl python313-pycurl - Add patch handle-change-debug-curl-8.16.0.patch (bsc#1249448, gh#pycurl/pycurl@eb7f52eeef85) - Drop patch test-bottle-flask.patch, not needed anymore - Update to 7.45.6: * Re-enable building Linux wheels with CA bundle autodetection - 7.45.5 * Enable GSS-API and brotli support in wheels (patch by Scott Talbert). * Add support for calling getinfo with CURLOPT_*_T arguments (patch by Scott Talbert) * Change wheels to build using shared libraries (vice static libraries) (patch by Scott Talbert) * Build wheels with curl 8.12.1 (mainly for security fixes) - 7.45.4 * Add support for CURLOPT_HAPROXY_CLIENT_IP (patch by Scott Talbert). * Port tests from bottle to flask (patch by Miro Hrončok). * Add constant for CURL_HTTP_VERSION_3ONLY (patch by Pavel Horáček). * Add EFFECTIVE_METHOD info option (patch by Pavel Horáček). * Don't use `-flat_namespace` on macOS (patch by Michael Cho). * Add some missing GIL checks to callback functions (patch by Scott Talbert). * Fix assorted bugs in pycurl tests, including a segfault (patch by Scott Talbert). All tests should now pass on Linux and macOS. * Fix minor bug in examples/multi-socket_action-select.py (patch by Oleg Broytman). * Build all wheels using the latest version of libcurl and its dependencies (patch by Scott Talbert). All wheels should now have openssl, HTTP2, and SSH support. * Implement Certificate Authority path autodetection when building Linux wheels (patch by Scott Talbert). ==== python-typing_extensions ==== Version update (4.14.1 -> 4.15.0) - Update to 4.15.0 * Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. * Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14. * Fix behavior of type params in typing_extensions.evaluate_forward_ref. ==== setools ==== Version update (4.5.1 -> 4.6.0) Subpackages: python313-setools setools-console - Move tests to a test multibuild flavor - Update to version 4.6.0: - User Visible Changes * Add seinfo option to see roles allowed for a specified type. * Add sechecker module for asserting kernel modules are read-only. * Add support for the nlmsg extended permission. - Under The Hood Changes * Significant code quality and unit testing improvements. * Drop methods marked for deprecation. - Packaging Changes * Refactor packaging to use pyproject.toml. - Add %check section and run tests (Factory only) - Fix %fdupes call to clean up duplicates for all Python versions - Add minimum required dependency versions ==== update-bootloader ==== Version update (1.25 -> 1.26) - merge gh#openSUSE/perl-bootloader#193 - adjust test cases - 1.26 - merge gh#openSUSE/perl-bootloader#192 - Implement config for BLS (boo#1246013) ==== virtualbox ==== - Add curl-8.16.patch [boo#1249448] ==== virtualbox-kmp ==== - Add curl-8.16.patch [boo#1249448]