Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20260512 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick gnome-text-editor (50.0 -> 50.1) ldns (1.8.4 -> 1.9.0) libgpg-error (1.60 -> 1.61) libksba (1.6.8 -> 1.7.0) ncurses (6.6.20260418 -> 6.6.20260509) openSUSE-release (20260511 -> 20260512) python-Twisted (25.5.0 -> 26.4.0) python-cryptography (47.0.0 -> 48.0.0) python-incremental (24.7.2 -> 24.11.0) python-pyOpenSSL (26.1.0 -> 26.2.0) === Details === ==== ImageMagick ==== Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - added patches fix overflow check (CVE-2026-31853, [bsc#1259528]) * ImageMagick-fix-overflow-check.patch ==== gnome-text-editor ==== Version update (50.0 -> 50.1) - Update to version 50.1: + Build/CI updates. + Fix high-contrast CSS properties. + Accessibility fix for preferences switch. + Updated translations. ==== ldns ==== Version update (1.8.4 -> 1.9.0) Subpackages: libldns3 - Add missing tarball for 1.9.0 release. - Update to version 1.9.0: * Fix ldns-verify-zone hangs with missing NSEC3 RRs (#287) * Exclude ZONEMD RRs in ldns-compare-zone (PR #220) * More clang static analysis fixes - ldns-1.8.4-swig-3.4.0.patch: removed, included upstream ==== libgpg-error ==== Version update (1.60 -> 1.61) - Update to 1.61: * Fix possible stack overflow in es_printf for %.100f format (boo#1263054) * Fix out-of-bounds read in vfnameconcat * Add cross compile support for wasm*-*-emscripten target * Update Japanese and Polish translations ==== libksba ==== Version update (1.6.8 -> 1.7.0) - Update to 1.7.0: * Add support for building AuthEnvelopedData * New function ksba_cms_add_attribute * Fix silent truncation of 64 bit length fields * Fix incorrect overflow guard condition in _ksba_ber_read_tl * Interface changes relative to the 1 ksba_cms_add_attribute NEW. ==== ncurses ==== Version update (6.6.20260418 -> 6.6.20260509) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20260509 + modify adjust_cancels() to allow for cancelled boolean extended capabilities. + cancel XF, XT in warp -TD + review kitty -TD + review contour -TD + eliminate vt100-style line drawing from xterm-utf8 -TD - Add ncurses patch 20260502 + add warp -TD + correct loop limit in lib_twait.c (OpenSUSE boo#1262780, cf: 20260411) - Add ncurses patch 20260425 + review screen4 vs screen5 -TD + review some XR/xr pairs -TD + fix a few gcc analyzer warnings. ==== openSUSE-release ==== Version update (20260511 -> 20260512) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-Twisted ==== Version update (25.5.0 -> 26.4.0) Subpackages: python311-Twisted python311-Twisted-tls - Update to 26.4.0: [#]# Security * Prevent a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. (CVE-2026-42304) [#]# Features * twisted.internet.ssl.CertificateOptions has a new constructor argument, contextForServerName, which takes a callback that will get invoked when a client sends a server name indication, with the sent servername, and returns a new OpenSSL.SSL.Context that the connection will switch to. * twisted.internet.endpoints.serverFromString now supports the tls endpoint type, which allows you to do twist web - -listen=tls:.../certbot-dir/config/live pointed at a certbot live configuration directory and have your certbot certificates automatically discovered and served appropriately. * twisted.internet.reactor now has type annotations and will appear to be an object of an appropriate type, allowing for idiomatic common usages with correct type information. * twisted.conch.ssh.SSHUserAuthServer now supports the security key ssh types "[email protected]" and "[email protected]" and extracting the application property from these new key types. [#]# Bugfixes * twisted.mail.smtp will now return a meaningful Failure when TLS validation fails. * TLS version range constraints passed to twisted.internet.ssl.CertificateOptions are now properly respected rather than excluding the version being passed as the desired constraint. * A potential reference cycle that might cause intermittent memory spikes while using twisted.internet.defer.inlineCallbacks was removed. * Trial no longer emits the error RuntimeWarning: TestResult has no addDuration method when running PyUnit tests. * twisted.python.rebuild.rebuild() now handles changes to sys.modules gracefully. Prior to the change, it could possibly raise a "dictionary changed size during iteration" error if the module list changed. * twisted.internet.protocol.ReconnectingClientFactory: Don't multiply by factor for initial delay, but use initialDelay directly. * twisted.internet.ssl and twisted.protocols.tls no longer mutate the pyOpenSSL context after creating pyOpenSSL connections, maintaining compatibility with an upcoming version of pyOpenSSL and increasing reliability. * twisted.internet.testing.MemoryReactor.callWhenRunning now invokes the callback immediately, if already started. * Twisted now correctly detects EOF on OpenSSL 4. [#]# Deprecations and Removals * Support for the obsolete TLS "Next Protocol Negotiation" has been removed from twisted.protocols.tls. * Remove support for python3.8. - Dropped patches: * no-test_successResultOfWithFailureHasTraceback.patch, no longer required * py314.patch, merged upstream * createElement.patch, merged upstream - Rebased patches: * skip_MultiCast.patch * 1521_delegate_parseqs_stdlib_bpo42967.patch * no-cython_test_exception_raiser.patch * remove-dependency-version-upper-bounds.patch - Drop unneeded BuildRequires on setuptools and wheel. ==== python-cryptography ==== Version update (47.0.0 -> 48.0.0) Subpackages: python311-cryptography python313-cryptography - update to 48.0.0: * BACKWARDS INCOMPATIBLE: Support for Python 3.8 has been removed. cryptography now requires Python 3.9 or later. * BACKWARDS INCOMPATIBLE: Loading an X.509 CRL whose inner TBSCertList.signature algorithm does not match the outer signatureAlgorithm now raises ValueError. Previously, such CRLs were parsed successfully and only rejected during signature validation. * Added support for :doc:`/hazmat/primitives/asymmetric/mlkem` and :doc:`/hazmat/primitives/asymmetric/mldsa` when using OpenSSL 3.5.0 or later, in addition to the existing AWS-LC and BoringSSL support. This means post-quantum algorithms are now available to users of our wheels. Note: Going forward, we do not guarantee that all functionality in cryptography will be available when building against OpenSSL. See :doc:`/statements/state-of-openssl` for more information. * Note: Going forward, we do not guarantee that all functionality in cryptography will be available when building against OpenSSL. See :doc:`/statements/state-of-openssl` for more information. ==== python-incremental ==== Version update (24.7.2 -> 24.11.0) - update to 24.11.0: * Incremental now provides a CLI script, incremental, allowing you to run it with pipx run incremental. The incremental update subcommand offers the same functionality as python -m incremental.update. * Incremental now depends on packaging instead of setuptools at runtime * Add Python 3.13 and 3.14 to the test matrix. * Build Incremental itself with Hatchling, working around failures with certain versions of setuptools * Incremental's documentation now highlights its primary features: CalVer and indeterminate versions (NEXT). * Incremental's CLI no longer depends on Click, so you no longer need to install incremental[scripts] for it to function. The scripts extra is deprecated. * Drop support for Python 3.8, which has been end-of-life since October 2024. ==== python-pyOpenSSL ==== Version update (26.1.0 -> 26.2.0) Subpackages: python311-pyOpenSSL python313-pyOpenSSL - update to 26.2.0: * Maximum supported cryptography version is now 48.x. * Added OpenSSL.SSL.Connection.set_options to set options on a per-connection basis. * Removed deprecated OpenSSL.crypto.X509Extension, OpenSSL.crypto.X509Req.add_extension, OpenSSL.crypto.X509Req.get_extensions, OpenSSL.crypto.X509.add_extension, OpenSSL.crypto.X509.get_extensions. * It is now an error to calling any mutating method on OpenSSL.SSL.Context after it has been used to create a Connection. - refresh skip-networked-test.patch
