Packages changed: b43-fwcutter (019 -> 021) libconfig (1.8.2 -> 1.8.3) libp11 (0.4.17 -> 0.4.21) libstorage-ng (4.5.363 -> 4.5.365) libwacom (2.19.1 -> 2.20.0) openSUSE-release (20261024 -> 20261026) patterns-base patterns-desktop patterns-kde transmission (4.1.3 -> 4.1.4) usbutils (019 -> 020) zvbi (0.2.45 -> 0.2.46) === Details === ==== b43-fwcutter ==== Version update (019 -> 021) - Update to version 021: * Support extracting firmware from two more Broadcom driver blobs (wl_apsta.o, wlDSL-3580_EU.o_save) * Fix possible firmware filename truncation in driver identification output * Port the mklist.py helper script to Python 3 * Upstream tarball format changed to .tar.xz; adjust Source URL accordingly - Spec cleanup: drop obsolete Group, BuildRoot and %defattr, use %make_build, declare missing gcc and make BuildRequires - Fix Supplements grouping: ssb rev02 belongs to b43legacy, both pcmcia IDs to b43 ==== libconfig ==== Version update (1.8.2 -> 1.8.3) - Update to release 1.8.3 * Preserve 32-bit width when writing negative binary integers * Preserve explicit 64-bit suffixes when parsing nondecimal integers * Preserve double precision when auto-converting integer assignments * Improve handling of file read errors in the lexer ==== libp11 ==== Version update (0.4.17 -> 0.4.21) - update to 0.4.21: * Added PKCS#11 provider support for `openssl genpkey` * Added the PKCS11_generate_key_ext() API * Added the PKCS11_CTX_set_pkey_callback() API * Removed incorrect `fips=yes` properties from provider algorithms * Isolated ENGINE EVP_PKEY methods from unrelated OpenSSL keys * Fixed ENGINE EVP_PKEY method races and lifetime issues * Fixed public-key association for generated key pairs with duplicate CKA_ID values * Added all-zero shared-secret checks for X25519 and X448 * Fixed a provider EC public-point NULL dereference with affected OpenSSL 3.x versions * Fixed building with OpenSSL 1.0.2 * Improved Git build and RSA-OAEP documentation * Added PKCS#11 3.2 interface discovery and updated the bundled header to version 3.2 * Added PKCS#11 provider support for ML-KEM-512, ML-KEM-768 and ML-KEM-1024 key generation, encapsulation and decapsulation * Added the PKCS11_evp_pkey_decapsulate() API * Added provider signature AlgorithmIdentifier support, including RSA-PSS parameters and correct default salt length handling * Fixed RSA-PSS salt length parsing and spurious OpenSSL errors * Fixed session-pool races and deadlocks during concurrent key generation and cryptographic operations * Fixed key-cache and OpenSSL 1.x RSA object use-after-free bugs * Fixed provider EC parameter lifetime handling and resource leaks during EC, RSA, EdDSA and XDH operations and context cleanup * Added native KEYMGMT, SIGNATURE and ASYM_CIPHER operations to the PKCS#11 provider, enabling OpenSSL 4.x support and improving RSA interoperability * Added support for ML-DSA, SLH-DSA and FALCON key generation, signing and verification * Added PQC key generation examples and provider tests * Added PKCS#11 provider support for ECDH, X25519 and X448 key exchange, including X25519 and X448 key generation * Improved Ed25519 and Ed448 public-key resolution with certificate fallback * Fixed use-after-free crashes after enumerating additional PKCS#11 keys * Fixed a potential out-of-bounds write while parsing PKCS#11 URI attributes ==== libstorage-ng ==== Version update (4.5.363 -> 4.5.365) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Greek) (bsc#1149754) - 4.5.365 - Translated using Weblate (Indonesian) (bsc#1149754) - 4.5.364 ==== libwacom ==== Version update (2.19.1 -> 2.20.0) Subpackages: libwacom-data libwacom9 - Update to 2.20.0: * New devices: Lenovo Yoga 9 2-in-1 14IPH11, IdeaPad 5 14AHP9 and ThinkBook 14s Yoga (ISDv4 526b), Huion HS610 (new USB PID), XP-Pen Deco SE, Gaomon S620, Ugee M808 * tools: stay quiet when /dev/input is not present - Bump meson floor to >= 0.58.0 and add glib >= 2.68 floor, matching the minimums declared upstream - Spec cleanup: drop obsolete Group tags, canonical spec-cleaner style ==== openSUSE-release ==== Version update (20261024 -> 20261026) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced - Stop pulling YaST into default Tumbleweed installations: * enhanced_base: drop the Recommends on pattern() = yast2_basis * x11_enhanced: drop the Recommends on pattern() = x11_yast, pattern() = yast2_desktop, yast2-control-center-gnome and yast2-network * apparmor: drop the Recommends on yast2-apparmor Drop YaST from the pattern recommendations. The YaST patterns and packages stay in the repository for anyone who has them or wants them; new installations simply come without YaST. Completes code-o-o#leap/features/173 for Tumbleweed defaults. ==== patterns-desktop ==== Subpackages: patterns-desktop-books patterns-desktop-imaging patterns-desktop-mobile patterns-desktop-multimedia - Stop pulling YaST into default Tumbleweed installations: drop the Recommends on yast2-sound from the multimedia pattern. Drop YaST from the pattern recommendations. The YaST patterns and packages stay in the repository for anyone who has them or wants them; new installations simply come without YaST. ==== patterns-kde ==== Subpackages: patterns-kde-kde patterns-kde-kde_edutainment patterns-kde-kde_games patterns-kde-kde_ide patterns-kde-kde_imaging patterns-kde-kde_internet patterns-kde-kde_multimedia patterns-kde-kde_office patterns-kde-kde_pim patterns-kde-kde_plasma patterns-kde-kde_utilities patterns-kde-kde_utilities_opt patterns-kde-kde_yast - Drop the Tumbleweed-only Recommends on yast2-control-center-qt and pattern() = kde_yast from the kde pattern. [edited by fabian@ritter-vogt.de] ==== transmission ==== Version update (4.1.3 -> 4.1.4) Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Update to version 4.1.4: * All Platforms: + Fixed a potential RCE vulnerability in the macOS client. It requires local write access to the user's preferences, so it is not remotely exploitable. (GHSA-v7mp-fpv3-jf5r) + Fixed a Transmission 4.1.0 regression that could cause torrents with zero-byte files to be handled incorrectly, sometimes losing downloaded progress + Hardened the torrent-add RPC method against malformed requests. + Unified launch and delegation between the Qt and GTK clients: If either is already running and then you or a browser's mime-type handler tries to start the other to add a new torrent, that new torrent will get handed off to the pre-existing session. + Fixed a build failure that happened when building Transmission with - Wnull-dereference -Werror in gcc 12.15. + Fixed a rare bug could leave Transmission hung but running on shutdown. + Fixed a rare bug that could prevent downloading webseeds from finishing. + Fixed a bug where setting TR_CURL_PROXY_SSL_NO_VERIFY broke origin server SSL verification. + Fixed per-torrent session speed-limit overrides so they apply to both downloads and uploads. * Qt Client: Improved UI code to use less CPU. (#9161) * GTK Client: + The torrent list now re-sorts and re-applies its filter when the torrent's top folder's name changes, eg after a rename or after a magnet link's metadata arrives. + Opening a torrent's folder now opens the correct folder when a single-file torrent uses a directory structure. + Fixed a bug that prevented transmission-gtk's app icon from being found on some desktops. * Web Client: Fixed a display bug that sometimes listed torrent names as 'Unknown'. * transmission-remote: + Fixed a 4.0.0 bug that broke transmission-remote --list-groups. - Migrate package to _service for easier management. ==== usbutils ==== Version update (019 -> 020) - Update to version 020: * lsusb: Add support for FWStatus Capability decoding. * desc-dump: fix operator precedence bug in bit-to-byte conversion. * usbmisc: fix NULL dereference on getcwd() failure in get_absolute_path(). * usbmisc: check malloc() return in get_dev_string_ascii(). * usbmisc: check malloc() return in usb_string_to_native(). * usbmisc: fix unbounded recursion and strncpy issues in readlink_recursive(). * names: replace sprintf() with snprintf() for modalias formatting. * lsusb-t: replace sprintf() with snprintf() in lanes_to_str(). * desc-dump: fix NULL pointer dereference for unknown audio terminal types. * desc-dump: fix integer underflow in get_array_entry_count(). * names: fix missing null termination in get_vendor_product_with_fallback(). * sysfs: fix buffer handling in read_sysfs_prop(). * sysfs: check initial snprintf() return value in get_sysfs_name(). * lsusb: fix out-of-bounds array access in dump_encryption_type() * lsusb: fix out-of-bounds reads in video EXTENSION_UNIT descriptor parsing. * lsusb: fix unaligned memory access in dump_printer_device(). * lsusb: fix out-of-bounds read in video HEADER descriptor parsing. * lsusb: fix out-of-bounds read in HID report descriptor parsing. * lsusb: replace sprintf() with snprintf() in get_guid(). * lsusb: fix out-of-bounds read in MIDI streaming endpoint descriptor. * lsusb: fix out-of-bounds read in STILL_IMAGE_FRAME descriptor parsing. * lsusb-t: fix buffer handling in read_sysfs_file_string(). * lsusb: fix wrong variable in FORMAT_TYPE_II descriptor length calculation. * lsusb: fix out-of-bounds reads in video INPUT_HEADER and OUTPUT_HEADER. * lsusb: fix out-of-bounds reads in video PROCESSING_UNIT descriptor. * lsusb: fix out-of-bounds reads in video terminal and selector descriptors. * lsusb: fix undefined behavior in convert_le_u32() signed shift. * lsusb: fix OOB reads in UAC1 audio FORMAT_TYPE descriptor parsing. * lsusb: fix out-of-bounds read in SuperSpeedPlus capability descriptor. * lsusb: fix OOB reads in audio FORMAT_SPECIFIC descriptor parsing * lsusb: fix out-of-bounds reads in IPP printer descriptor parsing * lsusb: add missing length checks in dump_wire_adapter and dump_rc_interface. * lsusb: add missing length checks in dump_security and dump_encryption_type. * lsusb: fix OOB read in dump_dfu_interface on short descriptors. * lsusb: add missing length check in dump_association(). * lsusb: fix out-of-bounds reads in dump_hid_device() on short descriptors. * lsusb: fix OOB reads in UAC2 FORMAT_TYPE descriptor parsing. * lsusb: fix OOB reads in MIDI HEADER and MIDI_IN_JACK descriptor parsing. * lsusb: fix OOB read in dump_videocontrol_interrupt_endpoint(). * lsusb: fix OOB reads in video streaming format descriptors. * lsusb: fix OOB reads in video FRAME descriptor parsing. * lsusb: fix remaining OOB read in MIDI_OUT_JACK initial fields. * lsusb: fix remaining OOB reads in video descriptor warn-and-continue paths. * lsusb: fix OOB reads in video INPUT_HEADER and OUTPUT_HEADER data loops. * lsusb: fix OOB read in STILL_IMAGE_FRAME compression pattern loop. * lsusb: fix OOB read in FORMAT_MPEG2TS descriptor on short descriptors. * lsusb: zero hub descriptor buffer to prevent reading uninitialized data. * lsusb: fix OOB read in FORMAT_STREAM_BASED descriptor parsing. * lsusb: fix unsigned integer underflow in dump_bytes calls for short descriptors. * lsusb: fix wrong byte printed for CCID bClassEnvelope. * lsusb: bounds-check MIDI ELEMENT bNrInputPins/bElCapsSize against bLength. * lsusb: bounds-check UVC INPUT_TERMINAL bControlSize against bLength. * lsusb.py: strip control characters from device-supplied sysfs strings. * usbreset: refuse ambiguous selectors that match more than one device. * usbmisc, usb-devices: strip control characters from device-supplied strings. * lsusb: don't loop forever in find_otg() on a zero-bLength sub-descriptor. * desc-defs: fix off-by-one in UAC1 wFormatTag string lookup. * lsusb: bounds-check the BOS device-capability walk. * usbhid-dump: skip interfaces with bInterfaceNumber 0xff. * usb-devices: use printf instead of echo for device-supplied strings. * usb-devices: fix default case in class_decode(). * lsusb: strip control characters from the WebUSB landing-page URL. * lsusb: bound the report-fetch loop in dump_hid_device() too. ... changelog too long, skipping 30 lines ... dump. ==== zvbi ==== Version update (0.2.45 -> 0.2.46) - update to 0.2.46: * Apply security updates.