Packages changed: Mesa (25.1.6 -> 25.1.7) Mesa-drivers (25.1.6 -> 25.1.7) MozillaFirefox dracut-pcr-signature (0.6+2 -> 0.6+3) grub2 libstorage-ng (4.5.270 -> 4.5.271) libvirt (11.5.0 -> 11.6.0) libzypp (17.37.14 -> 17.37.15) llvm20 lua54 nfs-utils openSUSE-release (20250801 -> 20250803) sssd (2.10.2 -> 2.11.1) wget === Details === ==== Mesa ==== Version update (25.1.6 -> 25.1.7) Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1 - Update to release 25.1.7 - -> https://docs.mesa3d.org/relnotes/25.1.7 - Bump required versions of the wayland packages. ==== Mesa-drivers ==== Version update (25.1.6 -> 25.1.7) Subpackages: Mesa-dri Mesa-gallium Mesa-libva Mesa-vulkan-device-select libvulkan_lvp libxatracker2 - Update to release 25.1.7 - -> https://docs.mesa3d.org/relnotes/25.1.7 - Bump required versions of the wayland packages. ==== MozillaFirefox ==== Subpackages: MozillaFirefox-branding-upstream MozillaFirefox-translations-common - Update memory constraints ==== dracut-pcr-signature ==== Version update (0.6+2 -> 0.6+3) - Update to version 0.6+3: * Use installkernel() only to install kernel modules ==== grub2 ==== Subpackages: grub2-common grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-efi-bls - Fix CVE-2024-56738: side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959) * grub2-constant-time-grub_crypto_memcmp.patch ==== libstorage-ng ==== Version update (4.5.270 -> 4.5.271) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#1035 - handle exception of BlkDevice::set_name() in bindings - split internal file and consistent coding style - 4.5.271 ==== libvirt ==== Version update (11.5.0 -> 11.6.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-libs - Update to libvirt 11.6.0 - Revert commit c2c165ea6c to fix build with old libattr in SLE15 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v11-6-0-2025-08-01 ==== libzypp ==== Version update (17.37.14 -> 17.37.15) - Append RepoInfo::path() to the mirror URLs in Preloader (bsc#1247054) - version 17.37.15 (35) ==== llvm20 ==== - Enable lldb on riscv64 ==== lua54 ==== - Switch from update-alternatives to libalternatives (and dependency on lua-interpreter) - improve .gitignore and overall improve the packaging. - this package also provides devel symlink directly and conflicts other -devel packages ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - update to 2.8.3: - https://kernel.org/pub/linux/utils/nfs-utils/2.8.3/2.8.3-Changelog * nfs(5): Add new rdirplus functionality, clarify * nfsdcld: fix cld pipe read size * gssd: do not use krb5_cc_initialize * gssd: unconditionally use krb5_get_init_creds_opt_alloc * nfsdctl: ensure autostart honors the default nfs.conf versX.Y settings * nfsdctl: dont ignore rdma listener return * nfsdctl: add necessary bits to configure lockd * nfsdctl: fix host-limited add listener * nfsdctl: cleanup listeners if some failed * nfsdctl: fix autostart * nfsdctl: fix update_listeners * systemd: mount nfsd after load kernel module * mountstats/nfsiostat: merge and rework the infinite and counted loops * mountstats/nfsiostat: Move the checks for empty mountpoint list into the print function * mountstats: filter for nfs mounts in a function, each iostat iteration * nfsiostat: fix crash when filtering mountstats after unmount * nfsiostat: mirror how mountstats iostat prints the stats * mountstats: when printing iostats, verify that old and new types are the same * mountstats/nfsiostat: add a function to return the fstype * nfsiostat: skip argv[0] when parsing command-line * nfsd: fix version sanity check * nfsdctl: tweak the nfs.conf version handling * nfsdctl: tweak the version subcommand behavior * NFS export symlink vulnerability fix * conffile: add 'arg' argument to conf_remove_now() - Removed obsolete patch from this release: - nfs-utils-1.0.7-bind-syntax.patch - Added upstream patches: - nfs-utils-Fix-build-with-glibc-2.42.patch - nfs-utils-nfsdctl-fix-lockd-config-during-autostart.patch ==== openSUSE-release ==== Version update (20250801 -> 20250803) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== sssd ==== Version update (2.10.2 -> 2.11.1) Subpackages: libnfsidmap-sss libsss_certmap0 libsss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.11.1 * Fixed AD users in external groups not being cleared once the cache expires. * Fixed `cache_credentials=true` not having any effect. * Fixed socket activation not having an effect for sssd_pam. - Add logrotate.patch [boo#1246537] - Install file in krb5.conf.d to include sssd krb5 config snippets; (bsc#1244325); - Update to release 2.11 * The deprecated tool `sss_ssh_knownhostsproxy` was finally removed. * Support for `id_provider = files` was removed. * SSSD doesn't create any more missing path components of DIR:/FILE: ccache types while acquiring user's TGT. * New generic id and auth provider for Identity Providers (IdPs) for Keycloak/EntraID. [Not enabled in openSUSE for now.] - Run mkdir/rm with verbose mode for the build log ==== wget ==== Subpackages: wget-lang - adjust gpgme (and other) build dependencies for future-proofing - drop unused build dependency