Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20260318 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.2.16 -> 7.1.2.17) aws-lc (1.68.0 -> 1.70.0) blog (2.35 -> 2.36) brltty (6.8 -> 6.9) container-selinux (2.246.0 -> 2.247.0) elfutils (0.192 -> 0.194) elfutils-debuginfod (0.192 -> 0.194) gimp (3.0.8 -> 3.2.0) gpg2 (2.5.17 -> 2.5.18) grub2 gspell (1.14.2 -> 1.14.3) kbd (2.7.1 -> 2.9.0) kdump (2.1.6 -> 2.1.7) kernel-source (6.19.7 -> 6.19.8) kirigami-addons6 (1.10.0 -> 1.12.0) libgsf (1.14.55 -> 1.14.56) libspelling libupnp (1.18.0 -> 1.18.3) nvidia-open-driver-G06-signed-cuda nvidia-open-driver-G07-signed nvidia-open-driver-G07-signed-cuda openSUSE-build-key openSUSE-release (20260316 -> 20260318) ovmf pipewire (1.6.1 -> 1.6.2) python-cffi python-gssapi (1.10.1 -> 1.11.1) python-markdown-it-py (3.0.0 -> 4.0.0) python-requests python311 python311-core ruby4.0 (4.0.1 -> 4.0.2) salt sendmail zlib-ng-compat (2.3.2 -> 2.3.3) === Details === ==== ImageMagick ==== Version update (7.1.2.16 -> 7.1.2.17) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version lupdate to 7.1.2.17 * Add cast to unsigned char helper method to check for out of band data * eliminate compiler warning * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rwgm-46rq-f86h * ImageMagick/ImageMagick#8609 * ImageMagick/ImageMagick#8608 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-354p-2qx7-jg9g * Corrected out of bounds write of a single zero byte (GHSA-gc62-2v5p-qpmp) * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-354p-2qx7-jg9g * ImageMagick/ImageMagick#8603 * ImageMagick/ImageMagick#5807 * Apply correct patch for GHSA-cqw9-w2m7-r2m2. - modified patches * ImageMagick-library-installable-in-parallel.patch (refreshed) - fixes CVE-2026-32259 [bsc#1259612] ==== aws-lc ==== Version update (1.68.0 -> 1.70.0) Subpackages: libcrypto-awslc0 libssl-awslc0 - Update to version 1.70.0: * Cache peer CA names on client side after handshake * Add NULL checks for MakeUnique in SSL cipher list inheritance * Fix gRPC integration * Latent memory leaks in KEM_KEY setter functions * Fix PKCS8_decrypt to handle all negative pass_len values * Fix PKCS12_verify_mac OOB read with invalid password_len * Cleanup EVP_DH asn1 parsing * Add INT_MAX bounds check before EVP_CipherUpdate in PKCS8/PKCS12 encryption * Fix PKCS8_encrypt crash when pass is NULL with negative pass_len_in * IWYU: guard stdint.h in fips_shared_support.c * Use proper function type for different callback types * Zeroize intermediate values for ed25519 * Fix sizeof-on-pointer bugs in FIPS assertion failure messages * Remove dead declarations in public headers * TLS Transfer Serialization Findings * XOF fixes * Add a test that arbitrary curves can be wrapped in EVP_PKEY * Improve type safety and bounds checking in EVP cipher ctrl handlers * Fix uninitialized EVP_MD_CTX and harden bn_dup_into * Add ACVP Support for KAS-ECC * Add ACVP Support for KTS-IFC * Various Small Additions to ACVP Tool - Update to version 1.69.0: * Fix FIPS delocator handling of floating-point immediates on aarch64 * Fix link in README.md * Various PKCS7 fixups * Fix error reporting and document EC explicit params single-cert behaviour * Fix PKCS7 verify content memleak * Retain flag after custom critical extensions check * Update ACVP documentation * Fix error return values for no-op UI_xxx stub functions * Key state consistency in PQDSA_KEY setter functions * Simplify d2i_PKCS7 by removing redundant BER-to-DER conversion * Ensure all signer certificate chains are verified * Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification * Return correct error value when parsing PKCS7 authenticated attributes fails ==== blog ==== Version update (2.35 -> 2.36) Subpackages: libblogger2 - Update to version 2.36 * If SYS_pidfd_open is not defined use a fallback Include <asm/unistd.h> to get __NR_pidfd_open for the definition of SYS_pidfd_open. * Changes to let systemd find plymouth replacements which means to add the appropiate Alias in systemd-ask-password-blog.path and also in systemd-ask-password-blog.service with new Install sections. Also change description in systemd-ask-password-blog.path to hint for blogd as replacement. * Rework password asking method to be asynchronous ==== brltty ==== Version update (6.8 -> 6.9) Subpackages: brltty-driver-at-spi2 brltty-driver-brlapi brltty-driver-speech-dispatcher brltty-driver-xwindow libbrlapi0_8 python3-brlapi system-user-brltty xbrlapi - Update to version 6.9: + Too many changes; please read ChangeLog - API version is now 0.8.8. - Add brltty-handytech-crash-fix.patch: fix crash with some HandyTech displays via USB. ==== container-selinux ==== Version update (2.246.0 -> 2.247.0) - Update to version 2.247.0: * Allow user_u users to run podman containers * Allow staff_t and user_t to start podman.socket via systemd * Add missing type transitions for overlay-containers directories * container_t: allow listen on smc_socket * Condition ptrace permission on deny_ptrace boolean ==== elfutils ==== Version update (0.192 -> 0.194) Subpackages: libasm1 libdw1 libelf1 - Add elfutils-fix-const-correctness.patch to fix build with new glibc - update to 0.194 elfclassify: New options --has-debug-sections and --any-ar-member. elflint: Presence of vendor- and application-specific ELF note types no longer triggers compliance errors. libdwfl_stacktrace: New function dwflst_sample_getframes. The libdwfl_stacktrace library interface is experimental and may be subject to API/ABI changes. Experimental new library interface for unwinding stack samples into call chains, and tracking and caching Elf data for multiple processes, building on libdwfl. Initially supports perf_events stack sample data. libelf: Manual pages have been added for many libelf library functions. Additional manual pages are planned for future releases. elf_scnshndx has been rewritten to be more robust, particularily for ELF files with more than 64K sections. readelf: Up to 13% faster when using the -N option. Improved handling of corrupt ELF data. - -section-headers output now includes a "Key to Flags" explaining section flag meanings. libdw: Add dwarf_language and dwarf_language_lower_bound functions. Improved support for DWARF6 language metadata as well as DWARF language constants for Nim, Dylan, Algol68, V and Mojo. dwarf_srclang is now forward-compatible with DWARF6 language constants. - Drop no longer necessary fix-static-linking.patch ==== elfutils-debuginfod ==== Version update (0.192 -> 0.194) Subpackages: debuginfod-client debuginfod-profile libdebuginfod1 - Add elfutils-fix-const-correctness.patch to fix build with new glibc - update to 0.194 debuginfod: Add CORS (webapp access) support to webapi and --cors option. Add --listen-address option for binding the HTTP listen socket to a specific IPv4 or IPv6 address. debuginfod client now caches x-debuginfod-* HTTP headers alongside downloaded files. debuginfod-find: Fixed caching bug preventing user-cancelled downloads from being re-downloaded at a later time. ==== gimp ==== Version update (3.0.8 -> 3.2.0) Subpackages: gimp-plugin-aa gimp-plugin-python3 libgimp-3_0-0 libgimpui-3_0-0 - Update to 3.2.0 https://www.gimp.org/news/2026/03/14/gimp-3-2-released/ - drop gimp-CVE-2026-2239.patch: included in update ==== gpg2 ==== Version update (2.5.17 -> 2.5.18) Subpackages: dirmngr - Update to 2.5.18: * gpg: Support deleting a composite secret key in gpg-agent * gpg: Fix armor parsing when no CRC is found * gpgsm: New option --assert-validsig * agent: Fix the recent regression in pkdecrypt with TPM RSA * scdaemon: Add support for D-Trust Card 6.1/6.4 * dirmngr: Let KS_SEARCH print all uid records for a key Fixes regression since 2015 * gpg-authcode-sign.sh: Keep the log file even on success * Remove patch upstream: - gnupg-gpgscm-New-operator-long-time-t-to-detect-proper-tim.patch ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-arm64-efi-bls grub2-common grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix RAID scenarios stopped being able to boot in Power (bsc#1259631) * 0001-mdraid1x-fix-raid_disks-decoding-on-big-endian-syste.patch ==== gspell ==== Version update (1.14.2 -> 1.14.3) - Update to version 1.14.3: + Updated translations. ==== kbd ==== Version update (2.7.1 -> 2.9.0) Subpackages: libkbdfile1 libkeymap1 libkfont0 - Fix conversion of h and H fr-afnor xkb keymap (boo#1259269). - Replace setfont --quiet (kbd-setfont-quiet.patch) by upstream solution: add setfont --check that checks for setfont availability without logging errors (boo#1212970, kbd-setfont-check.patch). - Update to version 2.9.0: * keymaps: + Add Georgian font (LatCyrHebKa-16_GIA.psfu) and keymap (i386/qwerty/ge). + Add new i386 azerty afnor keymap (i386/azerty/fr-afnor). + Disable characters >=U+F000 in qwertz/de_alt_UTF-8 (drop kbd-unicode-fxxx.patch). + Add console keymap for Mac swiss german keyboards. * libkeymap: + Support KT_DEAD2 diacritics. + Fix memory leaks. * libkbdfile: + Detect archive type based on content. + Add support for decompressing files without using utilities. Use ELF_DLOPEN_METADATA if possible. * utils: + kbd_mode: support Disabled mode (K_OFF). + loadkeys: Add --tkeymap to dump the keymap as text. - Drop kbd-2.7.1-reproducible-gzip.patch, now handled by the upstream. ==== kdump ==== Version update (2.1.6 -> 2.1.7) - upgrade to version 2.1.7 * fix VLAN interface naming (bsc#1255300) * fix bonding options for VLAN slaves * fix return value of kdumptool commandline -d (bsc#1257471) * use primary IP address (bsc#1259058) * dracut: avoid error message if /etc/sysctl.conf does not exist * dracut: update dracut hooks path from /lib/dracut to /var/lib/dracut ==== kernel-source ==== Version update (6.19.7 -> 6.19.8) Subpackages: kernel-64kb kernel-default - Linux 6.19.8 (bsc#1012628). - apparmor: fix race between freeing data and fs accessing it (bsc#1012628). - apparmor: fix race on rawdata dereference (bsc#1012628). - apparmor: fix differential encoding verification (bsc#1012628). - apparmor: fix unprivileged local user can do privileged policy management (bsc#1012628). - apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1012628). - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1012628). - apparmor: fix side-effect bug in match_char() macro usage (bsc#1012628). - apparmor: fix: limit the number of levels of policy namespaces (bsc#1012628). - apparmor: replace recursive profile removal with iterative approach (bsc#1012628). - apparmor: fix memory leak in verify_header (bsc#1012628). - apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1012628). - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1012628). - net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1012628). - commit 5a5a4f4 - Update patches.kernel.org/6.19.1-003-smb-client-split-cached_fid-bitfields-to-avoid.patch (bsc#1012628 CVE-2026-23230 bsc#1258430). - Update patches.kernel.org/6.19.1-004-ksmbd-fix-infinite-loop-caused-by-next_smb2_rc.patch (bsc#1012628 CVE-2026-23220 bsc#1258432). - Update patches.kernel.org/6.19.1-005-ksmbd-add-chann_lock-to-protect-ksmbd_chann_li.patch (bsc#1012628 CVE-2026-23226 bsc#1258820). - Update patches.kernel.org/6.19.1-006-smb-server-fix-leak-of-active_num_conn-in-ksmb.patch (bsc#1012628 CVE-2026-23228 bsc#1258431). - Update patches.kernel.org/6.19.1-030-crypto-iaa-Fix-out-of-bounds-index-in-find_emp.patch (bsc#1012628 CVE-2025-71231 bsc#1258424). - Update patches.kernel.org/6.19.1-032-crypto-omap-Allocate-OMAP_CRYPTO_FORCE_COPY-sc.patch (bsc#1012628 CVE-2026-23222 bsc#1258484). - Update patches.kernel.org/6.19.1-033-crypto-virtio-Add-spinlock-protection-with-vir.patch (bsc#1012628 CVE-2026-23229 bsc#1258429). - Update patches.kernel.org/6.19.1-035-nilfs2-Fix-potential-block-overflow-that-cause.patch (bsc#1012628 CVE-2025-71237 bsc#1258467). - Update patches.kernel.org/6.19.1-036-hfs-ensure-sb-s_fs_info-is-always-cleaned-up.patch (bsc#1012628 CVE-2025-71230 bsc#1258413). - Update patches.kernel.org/6.19.1-037-wifi-rtw88-Fix-alignment-fault-in-rtw_core_ena.patch (bsc#1012628 CVE-2025-71229 bsc#1258415). - Update patches.kernel.org/6.19.1-038-scsi-qla2xxx-Validate-sp-before-freeing-associ.patch (bsc#1012628 CVE-2025-71236 bsc#1258442). - Update patches.kernel.org/6.19.1-040-scsi-qla2xxx-Delay-module-unload-while-fabric-.patch (bsc#1012628 CVE-2025-71235 bsc#1258469). - Update patches.kernel.org/6.19.1-041-scsi-qla2xxx-Free-sp-in-error-path-to-fix-syst.patch (bsc#1012628 CVE-2025-71232 bsc#1258422). - Update patches.kernel.org/6.19.1-043-sched-mmcid-Don-t-assume-CID-is-CPU-owned-on-m.patch (bsc#1012628 CVE-2026-23225 bsc#1258474). - Update patches.kernel.org/6.19.1-044-bus-fsl-mc-fix-use-after-free-in-driver_overri.patch (bsc#1012628 CVE-2026-23221 bsc#1258660). - Update patches.kernel.org/6.19.1-045-erofs-fix-UAF-issue-for-file-backed-mounts-w-d.patch (bsc#1012628 CVE-2026-23224 bsc#1258461). - Update patches.kernel.org/6.19.1-046-xfs-fix-UAF-in-xchk_btree_check_block_owner.patch (bsc#1012628 CVE-2026-23223 bsc#1258483). - Update patches.kernel.org/6.19.1-047-drm-exynos-vidi-use-ctx-lock-to-protect-struct.patch (bsc#1012628 CVE-2026-23227 bsc#1258472). - Update patches.kernel.org/6.19.1-048-PCI-endpoint-Avoid-creating-sub-groups-asynchr.patch (bsc#1012628 CVE-2025-71233 bsc#1258421). - Update patches.kernel.org/6.19.1-049-wifi-rtl8xxxu-fix-slab-out-of-bounds-in-rtl8xx.patch (bsc#1012628 CVE-2025-71234 bsc#1258419). - Update patches.kernel.org/6.19.3-001-scsi-qla2xxx-Fix-bsg_done-causing-double-free.patch (bsc#1012628 CVE-2025-71238 bsc#1259186). - Update patches.kernel.org/6.19.3-005-fbdev-smscufx-properly-copy-ioctl-memory-to-ke.patch (bsc#1012628 CVE-2026-23236 bsc#1259199). - Update patches.kernel.org/6.19.3-009-f2fs-fix-out-of-bounds-access-in-sysfs-attribu.patch (bsc#1012628 CVE-2026-23235 bsc#1259195). - Update patches.kernel.org/6.19.3-010-f2fs-fix-to-avoid-UAF-in-f2fs_write_end_io.patch (bsc#1012628 CVE-2026-23234 bsc#1259194). - Update patches.kernel.org/6.19.3-012-f2fs-fix-to-avoid-mapping-wrong-physical-block.patch ... changelog too long, skipping 14 lines ... - commit b7e70c1 ==== kirigami-addons6 ==== Version update (1.10.0 -> 1.12.0) Subpackages: libKirigamiAddonsStatefulApp6 libKirigamiApp6 - Update to 1.12.0. No changelog ==== libgsf ==== Version update (1.14.55 -> 1.14.56) Subpackages: gsf-office-thumbnailer libgsf-1-114 - Update to version 1.14.56: + Fix problems with ole files using codepage 1200 (unicode). + Restore check for ole cycles accidentally removed. ==== libspelling ==== - Update URL to current home. ==== libupnp ==== Version update (1.18.0 -> 1.18.3) Subpackages: libixml11 libupnp20 - Update to release 1.18.3 * Fix crash when mixing ns and non-ns attributes during freeing ==== nvidia-open-driver-G06-signed-cuda ==== - add 'Provides: open-driver-non-cuda-variant = %version' for non-CUDA variant to be able to distinguish between both variants; to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ... (boo#1259740) ==== nvidia-open-driver-G07-signed ==== Subpackages: nvidia-open-driver-G07-signed-kmp-64kb nvidia-open-driver-G07-signed-kmp-default - add 'Provides: open-driver-non-cuda-variant = %version' for non-CUDA variant to be able to distinguish between both variants; to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ... ==== nvidia-open-driver-G07-signed-cuda ==== Subpackages: nvidia-open-driver-G07-signed-cuda-kmp-64kb nvidia-open-driver-G07-signed-cuda-kmp-default - add 'Provides: open-driver-non-cuda-variant = %version' for non-CUDA variant to be able to distinguish between both variants; to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ... ==== openSUSE-build-key ==== - move the pqkeys out of gnupg, its not gpg style. ==== openSUSE-release ==== Version update (20260316 -> 20260318) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ovmf ==== Subpackages: qemu-uefi-aarch64 - Update mbedtls to 3.6.5 to fix CVE-2025-59438 (bsc#1252441) - Requires Mbed TLS 3.6.5 or higher to mitigate vulnerability. ==== pipewire ==== Version update (1.6.1 -> 1.6.2) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.6.2: * This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. * Highlights - Fix a potential crash when the wrong memory was freed. - Fix a optimization with shared memory over some links that could cause errors later on. - Fix SOFA filter and default control input in LADSPA and LV2. - Some other small fixes and improvements. * PipeWire - Remove an optimization to skip share mem in links, it causes problems later on. (#5159 (closed)) * Modules - Don't try to free invalid memory or close invalid fds when the client aborted before allocating buffer memory. (#5162 (closed)) * SPA - support ACP_IGNORE_DB in udev. - Use 0x as a prefix for hex values. - Mark Props as write-only in libcamera. - Small optimization in the audio mixer. - Fix initialization of control properties for SOFA and biquads in the filter-graph. (#5152 (closed)) - Fix min/max default values for LADSPA and LV2. * JACK - Fix jack_port_type_id(). Return values that are compatible with JACK1/2. ==== python-cffi ==== Subpackages: python311-cffi python313-cffi - Add patch support-pycparser-3.patch: * Support pycparser 3 exception message changes. ==== python-gssapi ==== Version update (1.10.1 -> 1.11.1) - update to 1.11.1: * Add Free-Threading and Limited API/Stable ABI * Fix up classifier from typo - update to 1.11.0: * Add Free-Threading and Limited API/Stable ABI * Bug: This was never pushed to PyPI due to a bug in the `setup.py` classifiers. The `v1.11.1` release contains the same changes here. ==== python-markdown-it-py ==== Version update (3.0.0 -> 4.0.0) - update to 4.0.0: * This primarily drops support for Python 3.9, adds support for Python 3.13, * and updates the parser to comply with Commonmark 0.31.2 and Markdown-It v14.1.0. * Improve performance of "text" inline rule in #347 * Use `str.removesuffix` in #348 * limit the number of autocompleted cells in a table in #364 * fix quadratic complexity in reference parser in #367 * Fix emphasis inside raw links bugs in #320 ==== python-requests ==== Subpackages: python311-requests python313-requests - Add fix-chardet-RequestsDependencyWarning.patch * Fix RequestsDependencyWarning with chardet (6.0.0dev0) on Factory/TW (gh#psf/requests#7219) (gh#psf/requests#7220) (gh#psf/requests#7239) ==== python311 ==== Subpackages: python311-curses python311-dbm - Add CVE-2026-2297-SourcelessFileLoader-io_open_code.patch ensuring that `SourcelessFileLoader` uses `io.open_code` when opening `.pyc` files (bsc#1259240, CVE-2026-2297). ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Add CVE-2026-2297-SourcelessFileLoader-io_open_code.patch ensuring that `SourcelessFileLoader` uses `io.open_code` when opening `.pyc` files (bsc#1259240, CVE-2026-2297). ==== ruby4.0 ==== Version update (4.0.1 -> 4.0.2) Subpackages: libruby4_0-4_0 - Update to 4.0.2 This is a routine update that includes a bugfix in YJIT for NoMethodError on Puma. - Bug #21941: Local variable becomes nil when YJIT enabled mid-method with fork/signal/ensure - Ruby - Ruby Issue Tracking System - Bug #21832: segfault with argument forwarding, when combined with splat & positional arg - Ruby - Ruby Issue Tracking System - Bug #21723: binding.irb raises a LoadError under bundle exec when Gemfile contains path: or git: - Ruby - Ruby Issue Tracking System - Bug #21847: Backport syntax_suggest 2.0.3 to supported branches - Ruby - Ruby Issue Tracking System - Bug #21866: Backport Fix for integer overflow checks in enumerator - Ruby - Ruby Issue Tracking System - Bug #21865: Crash on signal raise - Ruby - Ruby Issue Tracking System - Bug #21842: Encoding of rb_interned_str - Ruby - Ruby Issue Tracking System - Bug #21838: Rails seeing degradation (20% slowdown) related to Revision 079ef92b "Implement global allocatable slots and empty pages" (from Sep 5 2024) - Ruby - Ruby Issue Tracking System - Bug #21873: UnboundMethod#== returns false for methods from included/extended modules - Ruby - Ruby Issue Tracking System - ZJIT: Avoid runtime exceptions from RubyVM::ZJIT.stats_string by k0kubun · Pull Request #16139 - Bug #21931: GC Crash in String#% (backport 726205b354d1068147719fb42e1de743f1838ef1) - Ruby - Ruby Issue Tracking System - Bug #21944: "Cannot allocate memory" with M:N threads or Ractors on a low RAM Linux machine - Ruby - Ruby Issue Tracking System - Bug #21946: and? predicate confused for leading and keyword - Ruby - Ruby Issue Tracking System - Bug #21927: Prism: misleading error message for forwarding in lambda argument - Ruby - Ruby Issue Tracking System - Bug #21925: Prism misparses standalone "in" pattern matching in "case/in" - Ruby - Ruby Issue Tracking System - Bug #21828: An incorrect warning message related to benchmark is shown when using benchmark-ips - Ruby - Ruby Issue Tracking System - Bug #21917: Unable to build 4.0.1 on AIX 7.2 - Ruby - Ruby Issue Tracking System - Bug #21945: Ripper lexes newline between identifier and and? as ignored newline - Ruby - Ruby Issue Tracking System - Bug #21947: Timeout.timeout doesn't use Timeout::ExitException when Fiber scheduler is in use. - Ruby - Ruby Issue Tracking System - Bug #21926: Thread#value on popen3 wait thread hangs in finalizer - Ruby - Ruby Issue Tracking System - Bug #21880: The ultra_safe mode of pstore bundled with Ruby 4.0 is broken. - Ruby - Ruby Issue Tracking System - Bug #21097: x = a rescue b in c and def f = a rescue b in c parsed differently between parse.y and prism - Ruby - Ruby Issue Tracking System ==== salt ==== Subpackages: python311-salt salt-master salt-minion - Backport security patch for Salt vendored tornado (bsc#1259554): * CVE-2026-31958: Add limits on multipart form data parsing - Added: * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch - Add x86_64_v2 as a possible rpm package architecture - Make users with backslash working for salt-ssh (bsc#1254629) - Fix ansible.playbooks extra-vars quoting (bsc#1257831) - Fix virtualenv call in test helper to use proper python version - Added: * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch ==== sendmail ==== Subpackages: libmilter1_0 - Avoid permission checks below /var ==== zlib-ng-compat ==== Version update (2.3.2 -> 2.3.3) - update to 2.3.3: * Make deflate output deterministic if stream is reused after deflateReset #2102 * minigzip: Fix integer overflow in gz_compress_mmap #2110 * Use GCC's may_alias attribute for access to buffers in crc32_chorba #2078 * Fix false-positive infinite loop warning detected by GCC-14 static analyzer #2101 * Fix warning for potentially uninitialized local variable ft used. #2043
