------------------------------------------------------------------ --- Changelog.all ----------- Sat Sep 6 00:57:47 UTC 2025 ------ ------------------------------------------------------------------ ------------------------------------------------------------------ ------------------ 2025-12-20 - Dec 20 2025 ------------------- ------------------------------------------------------------------ ++++ tinygo: - Update to version 0.35.0. Improved error messages, and also a new HTML size report. Several CGo improvements, such as support for function-like macros. New hardware support for the new RP2350 microcontroller, with the Raspberry Pi Pico2 and Pimoroni Tiny2350 boards. And we are excited to bring our first software RISC-V running on FPGA to TinyGo with the newly added Tillitis TKey hardware device. * all: version 0.35.0 * builder: show files in size report table * builder: write HTML size report * properly handle unix read on directory * feature: make RNG implementation shared for rp2040/rp2350 * reflect: fix incorrect comment on elemType * targets: add support for Pimoroni Tiny2350 board * feature: make SPI implementation shared for rp2040/rp2350 * feature: make i2c implementation shared for rp2040/rp2350 * Add RP2350 support (#4459) * fix: add build tags to ensure that tkey target has stubs for runtime/interrupt package * feature: modify i2s interface/implementation to better match specification * runtime: make channels parallelism-safe * targets: add implementation for Tillitis TKey device (#4631) * compiler: report error instead of crashing on missing function body * fix: specify ubuntu-22.04 during GH actions transition period to ubuntu-24.04 * test: make tests deterministic with -scheduler=threads * sync: make Cond MT-safe * make: modify smoketest for nintendoswitch target to build something that includes the 'os' package * fix: allow nintendoswitch target to compile * sync: implement WaitGroup using a futex * internal/task: add cooperative implementation of Futex * internal/task: add non-atomic atomic operations * runtime: remove Cond * ci: cache the Go cache across builds * mips: fix a bug when scanning the stack * runtime: lock output in print/println * runtime: make signals parallelism-safe * runtime: implement Goexit * examples: use default UART settings in echo example * runtime: use uint32 for the channel state and select index * builder: add testing for -size=full * builder: fix wasi-libc path names on Windows with -size=full * builder: work around bug in DWARF paths in Clang * builder: fix cache paths in -size=full output * cgo: fix build warnings on Windows ARM * Fix invalid assembler syntax from gen-device-svd * Update cmsis-svd library * sync: make Pool thread-safe * sync: only use a lock in the Map implementation when needed * runtime: prepare the leaking GC for concurrent operations * internal/task: implement PMutex * interp: align created globals * runtime: fix regression introduced by merging conflicting PRs * runtime: implement race-free signals using futexes * runtime: use SA_RESTART when registering a signal * fix: add updated test output to match recent changes * runtime: rewrite channel implementation * cgo: add support for `#cgo noescape` lines * compiler: add //go:noescape pragma * runtime: move scheduler code around * cgo: support errno value as second return parameter * compiler: Fix wasmimport -> wasmexport in error message * windows: don't return, exit via exit(0) instead * syscall: use wasi-libc tables for wasm/js target * syscall: refactor environment handling * cgo: support function-like macros * cgo: define idents referenced only from macros * runtime: heapptr only needs to be initialized once * ci: run at least some tests on older Go/LLVM versions * linux: add runtime.fcntl function * builder: whitelist temporary directory env var for Clang invocation * compiler, runtime: move constants into shared package * support to parse devl version * wasm: tidy up wasm_exec.js a bit * ci: use TinyGo version in artifact files * runtime: optimize findHead * targets/wasm_exec: call process.exit() when go.run() returns * reflect: fix Copy of non-pointer array with size > 64bits * reflect: add Value.Clear; support anytype->interface{}, Slice->(*)Array in Value.Convert * goenv: read git hash embedded in the binary * wasm: correctly return from run() in wasm_exec.js * wasm: support `//go:wasmexport` functions after a call to `time.Sleep` * runtime: remove unnecessary check for negative sleepTicks duration * runtime: don't call sleepTicks with a negative duration * os: implement StartProcess * internal/wasm-tools, syscall: update to wasm-tools-go@v0.3.1 (#4577) * goenv: update to new v0.35.0 development version * runtime/trace: stub all public methods * compiler: allow deferred panic * main: parse extldflags early so we can report the error message * interrupt: fix bug in interrupt lowering * test: show output even when a test binary didn't exit cleanly * test: run TestWasmExportJS tests in parallel * tinygo: revise and simplify wasmtime argument handling (#4555) * sync: don't use `volatile` in Mutex * ci: remove 'shell: bash' lines from MacOS build ------------------------------------------------------------------ ------------------ 2025-9-5 - Sep 5 2025 ------------------- ------------------------------------------------------------------ ++++ Aeon-release: - automatically generated by openSUSE-release-tools/pkglistgen ++++ Kalpa-release: - automatically generated by openSUSE-release-tools/pkglistgen ++++ MicroOS-release: - automatically generated by openSUSE-release-tools/pkglistgen ++++ axis: - Do not require the jaxp_parser_impl, but xerces-j2 directly ++++ gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-aarch64-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-arm-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-arm-none-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-arm-none-gcc7-bootstrap: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-avr-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-avr-gcc7-bootstrap: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-hppa-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-i386-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-m68k-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-mips-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-nvptx-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-ppc64-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-ppc64le-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-rx-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-rx-gcc7-bootstrap: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-s390x-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-sparc-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ cross-sparc64-gcc7: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ firefox-esr: - Update MozillaFirefox.desktop from a fresh Factory/Tumbleweed build. ++++ gcc7-testresults: - Add gcc7-libsanitizer-termio.patch, removing uses of termio from libsanitizer to fix build with glibc 2.24 ++++ python314-core: - Move compression folder to python-base where it should be. This module is used internally in gzip.py. ++++ python314-nogil-nogil-core: - Move compression folder to python-base where it should be. This module is used internally in gzip.py. ++++ libsixel: - add 0001-Fix-a-heap-buffer-overflow-problem-reported-by-err2z.patch (bsc#1248454, CVE-2025-9300) ++++ libtorrent: - Update to release 0.16.0 * The ``network.block.*`` commands now work properly for IPv4/6, although IPv6 support still has some issues. * Converted curl/http to be thread-safe. ++++ python-nanobind: - update to release 2.9.2 * for details about changes see github.com/wjakob/nanobind/blob/master/docs/changelog.rst - adapt nanobind-installationpath.patch to fit 2.9.2 ++++ newsboat: - spec: mv web-browser to Suggests so that the user need not explicitely invoke the zypper --recommends flag ++++ openSUSE-release: - automatically generated by openSUSE-release-tools/pkglistgen ++++ python-Django4: - Convert to libalternatives on SLE-16-based and newer systems - Hotfix the installcheck failure ++++ python-google-cloud-storage: - Update to 3.3.1 * Provide option to user to set entire object checksum at "initiate a resumable upload session" and send the same (#1525) * Send part's checksum for XML MPU part upload (#1529) - from version 3.3.0 * Add support for bucket IP filter (#1516) * Add logs on AssertionError for issue (#1512) * Update the documentation of move_blob function (#1507) - from version 3.2.0 * Adding support of single shot download (#1493) - from version 3.1.1 * Add a check for partial response data (#1487) * Add trove classifier for Python 3.13 (0100916) * **deps:** Require google-crc32c >= 1.1.3 (0100916) * **deps:** Require protobuf >= 3.20.2, < 7.0.0 (0100916) * **deps:** Require requests >= 2.22.0 (0100916) * Remove setup.cfg configuration for creating universal wheels (#1448) * Resolve issue where pre-release versions of dependencies are installed (0100916) * Segmentation fault in tink while writing data (#1490) * Move quickstart to top of readme (#1451) * Update README to break infinite redirect loop (#1450) - Add %{python_sitelib}/google/cloud/storage_v2 in %files section - Update BuildRequires and Requires from setup.py ++++ python-i3ipc: - Add pytest-asyncio dependency and test-aio.patch to fix tests - Skip some misbehaving tests ++++ python-kombu: - Refresh support-pyro-5.patch to no longer use Pyro 4 compatability. ++++ python-msal: - Update to version 1.34.0b1 * Use lowercase environment value during searching by @rayluo in (#831) * Add claims challenge parameter in initiate_device_flow by @ashok672 in (#839) - Override upstream version with 1.34.0~b1 ++++ python-pytest-timeout: - update to 2.4.0: * Detect debuggers registered with sys.monitoring. * Make it clear the timeout message comes from pytest-timeout. ++++ python-qcs-api-client: - Upgrade to 0.26.5: * Switch to pydantic v2, including pydantic-settings. * Use tenacity rather than retrying. - Drop patch continue-to-use-pydantic-1.patch, no longer required. - Refresh switch-to-pyrfc3339.patch, make it smaller and easier to rebase. - Add patches: * switch-to-poetry-core.patch * support-new-pydantic-settings.patch ++++ python-regex: - update to 2025.9.11: * Git PR 585: Fix AttributeError: 'AnyAll' object has no attribute '_key' ++++ python-robotframework: - Explain why we cannot run tests. ++++ python-ruff: - update to 0.12.12: * Show fixes by default * [`airflow`] Convert `DatasetOrTimeSchedule(datasets=...)` to `AssetOrTimeSchedule(assets=...)` (`AIR311`) * [`airflow`] Improve the `AIR002` error message * [`airflow`] Move `airflow.operators.postgres_operator.Mapping` from `AIR302` to `AIR301` * [`flake8-async`] Implement `blocking-input` rule (`ASYNC250`) * [`flake8-use-pathlib`] Make `PTH119` and `PTH120` fixes unsafe because they can change behavior * [`pylint`] Add U+061C to `PLE2502` * [`ruff`] Fix false negative for empty f-strings in `deque` calls (`RUF037`) * Less confidently mark f-strings as empty when inferring truthiness * [`fastapi`] Fix false positive for paths with spaces around parameters (`FAST003`) * [`flake8-comprehensions`] Skip `C417` when lambda contains `yield`/`yield from` * [`perflint`] Handle tuples in dictionary comprehensions (`PERF403`) ++++ python-wcwidth: - add 0001-Don-t-use-codecs.open-on-Python-3.patch to fix deprecations for python 3.14 ++++ python-xhtml2pdf: - python-pyhanko-cert-validator is included in python-pyHanko now ++++ python314: - Move compression folder to python-base where it should be. This module is used internally in gzip.py. ++++ python314-documentation: - Move compression folder to python-base where it should be. This module is used internally in gzip.py. ++++ python314-nogil: - Move compression folder to python-base where it should be. This module is used internally in gzip.py. ++++ rtorrent: - Update to release 0.16.0 * Added ``network.block.ipv4in6.set`` command. * Inverted color of focus ui element. * Block ipv4/6 now sets the resolve type. * Fix file descriptor leak in session file saving with ``system.files.session.fdatasync`` set to no. * Fixed DHT bind address and converted to using sockaddr. * Fixed uninitialized rpc slots when SCGI is not used. * Fixed closing of external fd's and potential race-conditions in CurlStack::close_get(). ++++ syncthing: - Update to 2.0.7 * Fixes fix(model): earlier free-space check (fixes #10347) by @calmh in #10348 fix(api): redact device encryption passwords in support bundle config by @pixelspark in #10359 fix(sqlite): revert to default page cache size by @calmh in #10362 fix(tlsutil): support HTTP/2 on GUI/API connections by @calmh in #10366 fix(sqlite): avoid rowid on kv table by @calmh in #10367 * Other chore(model): adjust folder state logging (fixes #10350) by @calmh in #10353 build: package for illumos using vmactions/omnios-vm by @trisk in #10328 chore(slogutil): add configurable logging format (fixes #10352) by @calmh in #10354 ++++ wsdl4j: - Do not require the jaxp_parser_impl, but xerces-j2 directly ++++ xmlunit: - Use diretly the xalan-j2 jar instead of the jaxp_transform_impl alternative (bsc#1245931 and bsc#1245914) ------------------------------------------------------------------ ------------------ 2025-9-4 - Sep 4 2025 ------------------- ------------------------------------------------------------------ ++++ 7zip: - Update to 25.01 (boo#1249130) * The code for handling symbolic links has been changed to provide greater security when extracting files from archives * Command line switch -snld20 can be used to bypass default security checks when creating symbolic links. - includes changes from 25.00: * bzip2 compression speed was increased by 15-40%. * deflate (zip/gz) compression speed was increased by 1-3%. * improved support for zip, cpio and fat archives. * CVE-2025-53816 : 7-Zip could work incorrectly for some incorrect RAR archives (boo#1246706) * CVE-2025-53817 : 7-Zip could crash for some incorrect COM (Compound File) archives (boo#1246707) ++++ QMPlay2: - Update to version 25.09.03: * add support for YouTube audio multi-language and DRC streams, * add VP9 Vulkan decoder (requires FFmpeg 8.0), * yt-dlp fixes. ++++ bird: - Update to version 2.17.2 * ASPA check fix for AS_SET * Invalid check fix in text_or_ipa grammar ++++ bird3: - Update to version 3.1.3 * ASPA check fix for AS_SET ++++ busybox-links: - Set net-tools conflict version properly. ++++ lagrange: - update to 1.19.0 - New features: - Sidebar tab for exploring the directory structure of a capsule. All known URLs (from page links, history, feed entries) are compiled into one navigable hierarchy. This provides an alternative view of capsule contents, for quick access and an overview. - Sidebar tab for listing all open tabs ("vertical tabs"). The list indicates which tabs have not been seen yet. Drag-and-drop can be used to reorder tabs. There are status icons for page loading and audio playback. - Filter text field in the Bookmarks sidebar: filters bookmarks based on titles, URLs, and tags. Built-in tags like ".subscribed" can be used to find bookmarks with special behavior (see Help section 1.4.4). - Sidebar tab for managing feed subscriptions. Unlike the Feeds tab that shows feed entries, the Subscriptions tab shows higher-level information about each subscription, like the latest post date. - Subscriptions sidebar context menu action "Reset Known Entries" for clearing the local cache of known entries. On next refresh, only the entries present in the source(s) are stored. (This is equivalent to manually deleting the "feeds.txt" file.) - Setting for permanently hiding the horizontal tab bar. You can manage open tabs using the sidebar. - Setting for showing quote text without italics. - Link context menu action for copying the label text. - Keyboard shortcuts for sidebar modes and moving current tab to a new window. - JPEG XL image decoding is supported via libjxl (optional). (Courtesy of Christoph Liebender.) - Changes and enhancements: - Individual sidebar tabs can be shown and hidden. You can configure the tabs separately for the left and right bars. - The left and right sidebars have different tabs by default (previously the same tabs were on both sides). - A dropdown menu in the sidebar header allows switching to any mode. - Reorganized settings: the Fonts tab has returned, and there is now a Theme tab for page theme settings. - X11: Restore window positions in their previous workspaces. (Courtesy of @norayr.) - Fixes: - Moving a tab to a new window or opening a link in a new window sometimes confused which window was the target. - Clearing history did not update sidebars. - Updating navbar back/forward buttons when switching tabs. - Update link numbers/keys after a scroll stops, if numbering was activated during the scroll. - When parsing a username from a URL, require the name appears at the start of the path. - Crash when opening a malformed Titan URI. - Potential crash when minimizing a window. - Gopher: Encode % in the selector when forming a link URI. - TUI: Handling non-printable characters in the text renderer. ++++ cnf: - Update to version 0.9.0~0: * mark 0.9.0 version * Documented what configuration variables are relied on. * Change rust code to say 'dnf' instead of 'dnf4' * Fixed some grammar errors in README.md * (ci): run zypper dnf5 and dnf integration tests in a parallel * Added fish support. * Added instructions for .zsh * Updated documentation to mention dnf5 support * Updated documentation examples. * Check if zypper is installed. * Look for dnf5 repos in /etc/dnf/repos.d * Add CI tests for dnf4 * Updated documentation to mention dnf4 support * Adds support for dnf4. * Added CI tests for dnf5. * Rename docker images with -zypper suffix. * Allow manually triggering the ci tests. * Added fish support. * Added instructions for .zsh * Updated documentation to mention dnf5 support * Updated documentation examples. * Check if zypper is installed. * Look for dnf5 repos in /etc/dnf/repos.d * Use dnf5 if it's installed. * Translated using Weblate (Portuguese (Brazil)) ++++ crmsh: - Update to version 5.0.0+20250904.957a78bf: * Dev: unittests: Adjust unit test for previous commit * Dev: sbd: Minor refactor enable_sbd_service method in SBDManager ++++ docker: - Update to docker-buildx v0.28.0. Upstream changelog: - Update to Docker 28.4.0-ce. See upstream changelog online at - Rebased patches: * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch ++++ feedbackd: - Update to version 0.8.1: + Avoid critical when `lfb_uninit()` isn't paired with `lfb_init()` - Changes from version 0.8.0: + New `VibraPattern` feedbackd + Allow to configure max haptic strength + Allow to configure magnitude of `VibraRumble` feedback + Use `[0.0, 1.0]` as magnitude in `VibraPeriodic` too + Add haptic event for `notification-new-generic` + Make `button-press` feedback less intrusive + More internal fixes - Changes from version 0.7.0: + Allow clients to pass a custom sound file for events. Useful for custom ring tone feedback or custom notification sounds. - Changes from version 0.6.0 + feedbackd: Add vibration API + spec: Clarify use of notification related events + Fix crash in fbd-lectrl when group doesn't exist + Don't fail tests with newer json-glib + Allow to use (camera) flash LEDs as notification LED ++++ fence-agents: - Update to version 4.16.0+git.1755594293.5cf006ff: * fence_aws: Add new skip_os_shutdown flag (#632) * fence_ibm_vpc: add apikey file support ++++ file: - Add patch file-5.46-tcgets2.patch from https://bugs.astron.com/view.php?id=678 but disable hunk 1 to avoid conflict with file-seccomp-ppc.patch This should fix bug boo#1249071 - Modify patch file-seccomp-ppc.patch that is use on all architectures ++++ helmfile: - Update to version 1.1.6: What's Changed * build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 by @dependabot[bot] in #2139 * build(deps): bump github.com/zclconf/go-cty from 1.16.3 to 1.16.4 by @dependabot[bot] in #2145 * build: update helm to v3.18.6 by @yxxhero in #2144 * build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #2150 * Add missing --timeout flag to helmfile sync command with documentation by @Copilot in #2148 * Fix enableDNS flag missing in diff command and refactor duplicate logic by @Copilot in #2147 * build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in #2151 * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.14 by @dependabot[bot] in #2154 * Bump github.com/ulikunitz/xz from v0.5.14 to v0.5.15 by @Copilot in #2159 * build(deps): bump github.com/helmfile/vals from 0.42.0 to 0.42.1 by @dependabot[bot] in #2161 * build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9 by @dependabot[bot] in #2160 * build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in #2162 * Fix error propagation in helmfile diff when Kubernetes is unreachable by @Copilot in #2149 ++++ hugo: - Update to version 0.149.1: * releaser: Bump versions for release of 0.149.1 * Remove noindex meta tag from alias.html * Fix nilpointer on ToC heading * tpl/collections: Require collections.D args to be ints * Upgrade to Go 1.25.1 * Fix config env handling for some slice options * minifiers: Update deprecation handling * Update README.md * releaser: Prepare repository for 0.150.0-DEV ++++ kernel-firmware-ath12k: - Update to version 20250903 (git commit 577ee67ffca2): * ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 ++++ kernel-firmware-media: - Update to version 20250903 (git commit 577ee67ffca2): * qcom: vpu: update firmware binaries to fix encoder drain handling ++++ kernel-firmware-mediatek: - Update to version 20250903 (git commit 577ee67ffca2): * linux-firmware: update firmware for MT7925 WiFi device * mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. ++++ resource-agents: - Update to version 4.16.0+git92.52e588f2: * Fix shellcheck errors on output redirection [SC2328] ++++ libqt5-qtwebengine: - Change the way we pin to ffmpeg-7: set maximum versions for the libav* buildrequires insteaf of hardcoding ffmpeg-7-*devel. This allows OBS to still shortcut through the mini packages. ++++ podofo-0_10: - Grmpf. Fix package name in spec. ++++ wayfire: - Update to version 0.10.0: * animate: Add squeezimize animation. * core: improve gesture and touch focus APIs. * animate: Add zap animation. * animate: Add spin animation. * core: Make exit binding configurable. * core: Add wlroots version to wayfire --version output. * fix ipc not writeable. * Fix clicking on open dialogs in scale and expo. * core: Add legacy wayland drm option. * ender-manager: Don't paint when session is not active. * Enable session-lock plugin by default. * render-manager: do not crash if running nested (no wlr_session). * Make socket path unique. * Input method: update input method popup positions on text input commit. * window-manager: Ignore fullscreen requests for current state. * move: Use post input signal for touch move grabs. * grid: restore unfulscreened views to their correct position. * layer-shell: save the initial state when a view is mapped. * animate: allow 3rd party plugins to provide additional animations. * Wayfire.ini. * squeezimize: remove transformer at the appropriate time. * layer-shell: do not grab focus if keyboard interactivity is set to ON_DEMAND. * xdg-shell: fix potential crash with inert popups. * foreign-toplevel: Fix potential crash when app-id mode is 'full'. * core: Bump plugin API/ABI version. * view-impl: add view dummy node when setting the surface root node. * nonstd: fix source file encoding. * animate: Respect minimize duration setting. * core: Add option to run as root. * Small fixes. * workarounds: Add force frame sync option. * Update subprojects/wf-touch. * Add to log message which plugin failed to load. * resize: Respect client minimum and maximum sizes. * Handle syscall failures in wf::compositor_core_impl_t::run. * Fixes #2582. * Input device updates. * decoration: do not schedule unnecessary transactions. * config-backend: fallback to normal [input]. * Allow Vendored Configuration File. * plugin-loader: check API/ABI version with RTLD_LAZY|RTLD_LOCAL. * Add an option to disable tap-and-drag gesture. * xdg-activation: add options to make it more strict. * Add an option to enable 3fg/4fg drag gesture. * session-lock: lock the screen even if the client provides no lock surface. * Decoration plugin optionally force decorations. * add get_cursor_position ipc method to fetch cursor coordinates. * ipc-rules: fix wset-index garbage values. * Fix crash when applying window rules to constrained dialogs. * layer-shell: notify scenegraph of geometry changes. * resize: handle overflow due to margins. * Fix the ipc header include paths. * Bugfix: use view_id.value() instead of view_id.has_value() when finding the view. * animate: Improve squeezimize shader. * ipc-rules: Fix view-fullscreen event. * Misc improvements. * ipc-rules: add events and methods to query keyboard layout. * Vulkan & Pixman support. * ipc-rules: Only allow subscriptions for valid signal names. * improve owned texture. * unmapped-view-node: report bbox with logical size, not physical. * Try to avoid crashing when loading a plugin with invaERROR: Automatic wrap-based subproject downloading is disabledlid options. * xwayland: add core option for XWayland startup script. * Extend wayfire/get-config-option to return compound options. * squeezimize: create gles2 texture before gles2 subpass. * Optimize setting cursors. * wayfire-portals.conf for xdg-desktop-portal. * wayfire-portals.conf: Fix idle inhibit. * workaround to disable middle click. * scene-render: update a docstring comment to match function parameters. * Add min-width and min-height options to the resize plugin. * avoid scheduling a configure for an uninitialized xdg_surface. * fix: decoration plugin title-bar/border height size issue. * workarounds: add focus_main_surface_instead_of_popup. * idle: Fix disable-initially option functionality. * don't try uninitialized surfaces in wlr_layer_surface_v1_configure. * Add ipc method to send view to workspace. * Fix double slash in XDG metadata path construction. * Decoration plugin - add font color option. * Rendering fixes. * standardized warnings when GLES2 plugins attempt to run on unsupported renderers. * Add an option "core/auto_reload" to control whether to auto reload the config file. * expo: handle workspace grid changes when expo is active. * zoom: add safety checks for texture source box. * oswitch add directions to output switching. * core: set state to running a bit earlier. * render-manager: set output damage properly. * feat: Add config reload delay option and refactor reload logic. * animate: Improve squeezimize animation. * cube: Invert y input coordinate. * output-layout: Use the same transform for output as configured. * core: plugins: s/mediump/highp/. * Squeezimize: horizontal version. * render: fix auxiliary buffer move constructor. * core: handle suggested output for virtual-pointer. * layer-shell: disconnect from unmapped commit handler on destroy. * only bring toplevels to front. * xdg-toplevel: guard request_native_size for non-existent or not initialized toplevels. * wsets: handle null old wset in send_view_to_wset. * window-manager: add function to directly store windowed geometry. * fix 2734. * surface-node: do not send frame events to unmapped surfaces. * workarounds: add keep_last_toplevel_activated option. * output-node: auto-set limit region. * window-manager: do not ignore fullscreen requests when already fullscreen. * window-manager: Ignore unfullscreen requests if already windowed. * move-drag-interface: Fix move drag maximize snap off. * Add an extra app-id to full mode which is the same as the ID used for…. * Fix drawing tablets not mapping to output. * subsurfaces: Only damage where the client requests. * core: Print the same full version string for log, -h and -v. * xwayland: offer focus in global active cases. * scene: add helper for managing render instances. * output-layout: Move output request state handler from render-manager to output-layout. * output/layout: move 'loaded mode' message to debug logging. * pointer: re-start implicit grab on subsequent button press. ++++ miriway: - Update version 25.10: * New miriway-shell.settings configuration file to contain configuration options that will be reloaded when the file is updated. If the file does not exist when miriway starts, it will be populated with comments describing the available options. * Support for Wayland protocol extension ext-workspace-v1 * All the accessibility options supported by Mir 2.22 are available via the miriway-shell.settings configuration file. * Miriway Changes: - ext-workspace-v1 integrates Miriway's workspaces with shell components (gh#Miriway/Miriway#160) - Wire up "live config" options for accessibility, input and keymap (gh#Miriway/Miriway#168) ++++ net-tools: - Set net-tools conflict version properly. ++++ netty: - Upgrade to upstream version 4.1.126 * Fixes + Decompression codecs vulnerable to DoS via zip bomb style attack (bsc#1249134, CVE-2025-58057) + Request smuggling due to incorrect parsing of chunk extensions (bsc#1249116, CVE-2025-58056) + Fix IllegalReferenceCountException on invalid upgrade response + Drop unknown frame on missing stream + Don't try to handle incomplete upgrade request + Make org.graalvm.nativeimage:svm optional in netty-common - Modified patches: * 0001-Remove-optional-dep-Blockhound.patch * 0002-Remove-optional-dep-conscrypt.patch * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch * 0004-Disable-Brotli-and-ZStd-compression.patch + rediff ++++ openQA: - Update to version 5.1757005118.aac56dbc: * CI: Fix SLE_15_SP6_Backports repo lookup order * Add perl(MCP) dependency in preparation for AI support * build(deps-dev): bump @humanfs/node from 0.16.6 to 0.16.7 * Revert "MCP: Add MCP support as an optional feature" * Fix typo on Contributing documentation * Add MCP support as an optional feature * Reword `can't write` to `Cannot write` as suggested by review comment * Ensure destination dir for asset downloads exists when cloning jobs * build(deps): bump ace-builds from 1.43.2 to 1.43.3 - Update to version 5.1756962167.74f0204f: * Dependency cron 2025-09-04 ++++ opi: - Version 5.8.7 * Fix ocenaudio url * Add LocalSend plugin * Run all tests in verbose mode * Print written repo files in verbose mode * Increase timeouts in test/06_install_non_interactive.py * Remove DNF references from README.md ++++ python-Django: - Update to 5.2.6 (bsc#1248810) * CVE-2025-57833: Potential SQL injection in FilteredRelation column aliases * Fixed a bug where using QuerySet.values() or values_list() with a ForeignObject composed of multiple fields returned incorrect results instead of tuples of the referenced fields - Rebased test_strip_tags.patch ++++ python-Django4: - Update to 4.2.24 (bsc#1248810) * CVE-2025-57833: Potential SQL injection in FilteredRelation column aliases - Add upstream patches test_strip_tags.patch and support-msgfmt-0.25.patch to fix build ++++ python-uv: - update to 0.8.15 * Enhancements * Add uv auth commands for credential management * Add pyx support to uv auth commands * Add uv tree --show-sizes to show package sizes * Add --python-platform riscv64-unknown-linux * Add --python-platform to uv run and uv tool * Add uv publish --dry-run * Add zstandard support for wheels * Allow registries to pre-provide core metadata * Retry streaming Python and binary download errors * Bug fixes * Fix settings rendering for extra-build-dependencies * Skip non-existent directories in bytecode compilation * Error messages * Add error trace to invalid package format ++++ runc: - Update to runc v1.3.1. Upstream changelog is available from - Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11. ++++ tik: - Update to version 1.3.17: * [15-encrypt] Add new tpm2-measure-pcr=yes crypttab opt for sdbootutil ++++ wayfire-plugins-extra: - Update to version 0.10.0: * Add extra-animations plugin. * Add suitable headers to various plugins. * json: switch to yyjson. * Update filters subproject. * Add option 'names' to workspace-names. * update for new wayfire rendering API. * plugins: s/mediump/highp/. * water: Only change blend state once instead of each pass. * water: Free extra buffers when plugin is unloaded. * workspace-names: Fix stuck rendering on screen. * annotate: fix unloading. * Update subprojects. * showrepaint: use new render-agnostic APIs in core. * ghost: Drop redundant ipc- prefix from script file name. * view-shot: Add ipc script. * extra-animations: Add melt animation. * extra-animations: Reduce melt animation damage area to improve performance. * extra-animations: Use sigmoid for melt alpha fade. * obs: Fix rendering. * Add workspace-names setter script and update plugin to allow usage. * workspace-names fixup. * scripts: Add more scripts to drive workspace-names plugin. ++++ wcm: - Update to version 0.10.0: * Fix typo in desktop file. * Patch to add cli option for launching wcm directly to plugins. * Use default app-id for .desktop file name. * Do not bundle wdisplays by default for packaging reasons. * Get rid of redundant wdisplays subproject. * Don't show 'not found' icon for plugins without an icon. ++++ wf-shell: - Update to version 0.10.0: * fix(example): show proper way to change panel background color. * Fix & refactor notifications. ++++ xpad-noone: - Initial version 0+git20250526.b8e98f3: * Sync with upstream devices from Linux kernel ++++ xwmfs: - update to version v1.10: * fix bad stat (size) information for directories, issue was introduced in version 1.00. * major refactoring of the codebase based on newly introduced libcosmos and libxpp Git sub-modules: * this should not cause much user visible changes. * switch to C++20. * adjusted coding style to the one found in libcosmos. * improved spelling in comments and type names. * use strong types from libcosmos and libxpp to increase robustness. * drop redundant xwmfs code portions no longer needed. ------------------------------------------------------------------ ------------------ 2025-9-3 - Sep 3 2025 ------------------- ------------------------------------------------------------------ ++++ aaa_base: - Update to version 84.87+git20250903.33e5ba4: * Correct fix for boo#1247495 (boo#1248158) ++++ amdgpu_top: - Update to version 0.11.0: * v0.11.0 * update dependencies * remove dependency on anyhow * update README.md * update docs/dump.json * json: add some info to json_info dump * lib: fix get_rocm_version for TheRock * lib: add supports_gpu_metrics field to AppDeviceInfo * lib: fix logic for transitioning to D3hot * lib: update logic for dropping device handle ++++ certmonger: - Disable failing tests with NSS 3.115.1: 007-certsave-dbm and 007-certsave-sql 025-casave-dbm * patch disable_some_tests.patch ++++ go1.25: - go1.25.1 (released 2025-09-03) includes security fixes to the net/http package, as well as bug fixes to the go command, and the net, os, os/exec, and testing/synctest packages. Refs boo#1244485 go1.25 release tracking CVE-2025-47910 * go#75160 go#75054 boo#1249141 security: fix CVE-2025-47910 net/http: CrossOriginProtection insecure bypass patterns not limited to exact matches * go#74822 cmd/go: "get toolchain@latest" should ignore release candidates * go#74999 net: WriteMsgUDPAddrPort should accept IPv4-mapped IPv6 destination addresses on IPv4 UDP sockets * go#75008 os/exec: TestLookPath fails on plan9 after CL 685755 * go#75021 testing/synctest: bubble not terminating * go#75083 os: File.Seek doesn't set the correct offset with Windows overlapped handles ++++ goreleaser: - Update to version 2.12.0: * docs: update for v2.12 * chore(deps): bump code.gitea.io/sdk/gitea from 0.21.0 to 0.22.0 (#6029) * docs: update * docs: update * docs: update * fix(docker/v2): custom publisher * docs: update * chore(deps): bump github.com/charmbracelet/fang from 0.3.0 to 0.4.0 (#6042) * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.87.2 to 1.87.3 (#6041) * chore(deps): bump github.com/goreleaser/nfpm/v2 from 2.43.0 to 2.43.1 (#6040) * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.4 to 0.142.5 (#6039) * chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to 0.5.15 (#6038) * chore(deps): bump actions/attest-build-provenance from 2 to 3 (#6037) * docs: update * fix(makeself): lint issues * test: improve makeself tests * feat: makeself (#6023) * Revert "chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 in the go_modules group" (#6036) * chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 in the go_modules group (#6035) * chore(deps): update lipgloss (#6034) * chore(deps): bump mkdocs-include-markdown-plugin from 7.1.6 to 7.1.7 in /www (#6031) * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.87.1 to 1.87.2 (#6033) * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.2 to 0.142.4 (#6032) * chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#6030) * refactor: simplify function call * refactor: improved artifact filters (#6024) * docs: fix typo * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.1 to 0.142.2 (#6025) * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.0 to 0.142.1 (#6021) * test(docker/v2): fix broken test * fix(docker/v2): lint issues * feat(bun): support more targets (#6019) * test: fix * fix(docker/v2): tag suffix on windows * test(docker/v2): more tests * fix(docker/v2): dockerfile not being copied properly * refactor(docker/v2): move build to another func * refactor(docker/v2): rename func * fix(docker/v2): remove unneeded if * fix(digest): double space * chore(deps): bump mkdocs-material from 9.6.17 to 9.6.18 in /www (#6017) * chore(deps): bump github/codeql-action from 3.29.10 to 3.29.11 (#6018) * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.141.2 to 0.142.0 (#6016) * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.87.0 to 1.87.1 (#6015) * docs: update * docs: update * ci: fix windows build * fix(docker/v2): several fixes (#6013) * feat(docker/v2): support annotations (#6011) * feat(docker/v2): support arbitrary flags (#6012) * docs: improvements * chore: schema update * feat(docker/v2): initial implementation (#5793) * chore: update * docs: improve help around termux * feat: remove uber-go/automaxprocs (#6006) * chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in the go_modules group (#6009) * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.141.1 to 0.141.2 (#6008) * chore(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 (#6007) * feat(docker): create images digest file for attestation (#6001) * fix(cask): conflicts_with formula was deprecated (#5996) * chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.13 (#6004) * chore(deps): bump github.com/mark3labs/mcp-go from 0.37.0 to 0.38.0 (#6003) * chore(deps): bump golang from `77dd832` to `f18a072` (#6002) * chore(deps): bump mkdocs-material from 9.6.16 to 9.6.17 in /www (#6000) * chore(deps): bump github.com/jarcoal/httpmock from 1.4.0 to 1.4.1 (#5999) * chore(deps): bump github/codeql-action from 3.29.9 to 3.29.10 (#5998) * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.139.2 to 0.141.1 (#5997) * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.86.0 to 1.87.0 (#5969) * sec: update rekor to main for GHSA-vrw8-fxc6-2r93 (#5990) * test(cask): update golden file * docs(cask): improve example of homebrew casks (#5944) * fix(cask): pass audit (#5987) * fix(scoop): add newline to eof (#5985) * fix(brew): use && instead of and (#5986) * chore(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 (#5988) * fix(golang): only warn experimental/unstable targets if not filtered out * docs: Python in the homepage (#5984) * docs: update * ci: improve get-releases.sh * feat: retry docker manifest, retry configurations (#5978) * feat: update to go 1.25 (#5971) * chore(deps): bump golang from 1.24.6-alpine to 1.25.0-alpine (#5981) * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.139.0 to 0.139.2 (#5980) * chore(deps): bump github/codeql-action from 3.29.8 to 3.29.9 (#5973) * chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.137.0 to 0.139.0 (#5972) * ci: use go-version-file (#5976) * chore(deps): bump actions/checkout from 4 to 5 (#5968) * chore(deps): bump github/codeql-action from 3.29.7 to 3.29.8 (#5966) * chore(deps): bump golang.org/x/tools from 0.35.0 to 0.36.0 (#5959) * chore(deps): bump golang.org/x/text from 0.27.0 to 0.28.0 (#5961) * chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 (#5960) * chore(deps): bump actions/cache from 4.2.3 to 4.2.4 (#5958) * chore(deps): bump golang from 1.24.5-alpine to 1.24.6-alpine (#5957) * docs: fix link * docs: update * feat(upload,artifactory): allow to set a password field, tmpl username (#5949) * docs: update * chore: fix lint * docs: update * fix(mcp): brews is not deprecated anymore * feat(mcp): goreleaser_check gives instructions on how to fix deprecations (#5896) * feat(tmpl): readFile and mustReadFile (#5948) * feat(golang): update allowed targets (#5951) * chore(deps): bump github.com/mark3labs/mcp-go from 0.36.0 to 0.37.0 (#5956) * chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 (#5953) * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.85.1 to 1.86.0 (#5952) * fix(gitlab): missing PR footer (#5950) * chore: auto-update generated files * chore: auto-update generated files ++++ hawk2: - fix the mtime in manifest.json (bsc#1230275) ++++ highway: - Replace avx10_2.patch by a new one completely disabling AVX10.2 until upstream figures out how to the details of toolchain invocation. [boo#1248740] ++++ hwloc: - removed patches (fixed upstream) * 0001-x86-work-around-legacy_max_proc-being-0-while-HTT-fe.patch - update to 2.12.2 * .ignore: update * API + add hwloc_topology_get_default_nodeset() + bump HWLOC_API_VERSION to 0x20c00 + document that distances may only group if latencies + fix a comment about weighted interleave support bit + fix some typos in doxygen syntax and refs * Do not treat INTERSECT_LOCALITY as a superset of LARGER and SMALLER * Duplicate distance grouping info in hwloc_internal_distances_dup * Fix lstopo man page * Make hwloc_distances_get_by_name accept empty kinds * NEWS +: add distances bullet + add hwloc-calc improvement bullet + bullet about manpages + bullet about memattr fixes + bullet about syscalls + bullet about x86/flsl issues + bullets about L0 rework + bullets about heterogeneous memory improvements + mention systemd-dbus-api changes in hwloc-calc + reorder and improve 2.11.2 bullets + some fixes in 2.11 bullets + update about CUDA and NVML * Set the `obj` pointer of `hwloc_internal_location_s` in `to_internal_location()` * VERSION: bump lib soname from 23:0:8 to 23:1:8 for 2.11.2 * bitmap.h: fix/improve the doc about return values * bitmap: improve sscanf/snprintf doc * ci.inria.fr: move the v2.11 nightly build to a different time * ci.inria.fr: move the v2.12 nightly build to a different time * completion/bash: add missing INPUT_FORMAT definition in some functions * completion/bash: always initialize COMP_REPLY to empty * completion/bash: don't always return kind=* when completing --ancestor etc * completion/bash: fix the completion of lstopo --palette * completion/bash: hwloc-patch -R instead of --R * completion/test: only enable if bash is available * configure: error out if --with-foo doesn't have its mandatory argument * configure: hwloc-devel is dead, and add a link to github issues * contrib/android: add a link to the privacy policy inside the app * contrib/android: bump APK from 1.5.3 to 1.6.0 * contrib/android: bump APK to 1.6.1 * contrib/android: fix a typo in the website link box * contrib/android: fix case expressions must be constants expressions * contrib/android: force enable BuildConfig * contrib/android: merge privacy/website/github/ci links inside the main text * contrib/android: require cmake 3.18.1 * contrib/android: stop overriding versionCode with ABI's ones * contrib/android: update gradle, gradle plugin and ndk versions * contrib/android: update the namespace definition * contrib/ci.inria.fr/browse_jenkins_logs.sh: update to current jenkins webpages * contrib/ci.inria.fr/sonarqube: improve the matching of the github repo * contrib/ci.inria.fr/sonarqube: more updates to the config * contrib/ci.inria.fr: remove buildDiscarder option * contrib/ci.inria.fr: use a node with tag 'android2024' for android builds * contrib/ci/sonarqube: Fix some warnings * contrib/completion: add a test for bash completion * contrib/contrib: bump compile/targetSdkVersion to 34 * core+linux: generalize and improve Die filtering vs Packages * core: merge hwloc_topology_reconnect() and hwloc_filter_levels_keep_structure() * core: remove "from the OS" from the main insert error message * core: remove obsolete code about Machine object being ignored * cpukinds: fix register() after dup() * cuda: add FP32perCore info for CUDA capability 10.x and 12.0 * debug: check that !topology->modified during checks * distances: check internal distances NULLity before dereferencing * distances: clarify that distances must have one FROM and one MEANS kind * distances: clarify the general description of the structure * distances: don't enforce the matrix name for NVLink operations * distances: relax constraints on distance kinds * distances: transitive closure doesn't overwrite the existing direct bandwidth * doc+contrib: switch the website doc to doxygen layout * doc/readthedocs: move the doxygen doc to a subdirectory and redirect to it * doxy: NVIDIA Grace Hopper memory is also marked as GPUMemory * doxy: minor improvements to heteromem part * doxy: update build with CMake * doxygen: ignore the static keyword * fix#676 use hwloc_access instead of hwloc_accessat * fix(cmake): support win-arm64 * fix: multiple syntax errors / missing quotes in hwloc bash completions * freebsd: fix a node array leak when distances are available but ignored * gather-cpuid: update for latest intel leaves * gather-cpuid: update to Intel x86 manuel 2024/10 * hwloc/plugins.h: distances backend API shouldn't be in the PCI group * hwloc/plugins.h: merge discovery component and backend groups * hwloc/plugins.h: move hwloc_plugin_check_namespace() to the generic components group * hwloc_distrib(): error out if 0 is given * hwloc_type_sscanf: fix test when host has several levels with same type * include: fix the formatting of ending \0 in comments * levelzero.h+tests: update to both ZE and ZES API * levelzero.h: fix the lookup of parent pci devices * levelzero.h: we always return the root/parent device, not a subdevice * levelzero: abstract-out the querying of drivers/devices * levelzero: don't enforce ZES_ENABLE_SYSMAN=1 in the environment * levelzero: don't get device properties twice * levelzero: only get memory info from sysman * levelzero: remove the is_integrated variable * levelzero: require zesDriverGetDeviceByUuidExp() * levelzero: separate ZE and ZES device handles * levelzero: use zesDriverGetDeviceByUuidExp() to get ZES device handles * linux/arm: identify aarch64 as arm too * linux/cpukinds/freq: use acpi_cppc/nominal_freq when available * linux/cpukinds: add Intel "LowPower" PMU set * linux/cpukinds: fix support for offline CPUs * linux: add NUMA syscalls for hppa, s390, alpha, cris and m68k * linux: add affinity+NUMA syscalls for 3 MIPS common ABIs * linux: add affinity+NUMA syscalls for loongarch * linux: fix a verbose message about failure to read DMI memory info * linux: fix some NUMA syscall numbers on x86 * linux: move some common code out of the /proc/cpuinfo parsing loop * linux: move sparc NUMA syscalls above * linux: update Cray Slingshot detection to hsn->hsi device renaming * lstopo.1: fix a typo * lstopo.1: improve the COLORS section * memattr: document that locality and capacity values cannot be modified * memattr: locality requires a cpuset, capacity requires a NUMA node * memattr: make sure target_node parameter isn't NULL on input * memattrs.h: clarify the set of predefined+custom attribute IDs * memattrs.h: move get_targets/get_initiators to the main section * memattrs.h: some clarification in get_flags/name and register * memattrs: add INTERSECT flag for getting local NUMA nodes * memtiers: clarify a comment about using subtypes for sorting nodes in tiers * misc: reactivate GNUC conditional * nvml: cleanup NVLink version bandwidths and add Blackwell/v5 * rename.h: Add missed macro for hwloc_internal_memattr_set_value * rsmi: fix some unused variable warnings * rsmi: fix the PCI locality of partitioned devices * scripts: don't put "fi fi fi" on the same line * test-gather-topology: disable Misc objects * tests/cpukinds: duplicate the topology between register()s * tests/levelzero: don't mix up a ZES and ZE function * tests/levelzero: remove some checks for ZES devices * tests/memattrs: check capacity/locality with different/invalid targets * tests/rename: don't ignore all lines containing hwloc_uint64_t * tests/type_sscanf: test a synthetic case with 2 levels of groups * tests/xml: add a NVIDIA DGX-2 * utils/annotate.1: sectionize EXAMPLES * utils/annotate/test: test transitive-closure and merge-switch-ports on the DGX2 xml * utils/bind.1: fix a "processor" instead of "core" in examples * utils/bind.1: sectionize EXAMPLES * utils/bind: add --default-nodes * utils/bind: fix binding CPU and memory on different locations * utils/bind: only enable binding verbose messages, not all * utils/calc.1: clarify that filters are applied on input only * utils/calc.1: document that --cof applies to both cpuset and nodeset outputs * utils/calc.1: sectionize EXAMPLES * utils/calc.1: split output conversion options out of others * utils/calc/tests: check that we properly find NUMA nodes if heterogeneous memory * utils/calc: --no isn't needed anymore for converting NUMA node indexes etc * utils/calc: abstract-out a hwloc_utils_cpuset_format_sscanf() * utils/calc: accumulate both cpuset and nodeset of locations * utils/calc: add cpukind/memorytier to -I and -N * utils/calc: add the systemd-dbus-api cpuset output format * utils/calc: fix the computing of command-line locations * utils/calc: fix the warning about --nodeset and --largest * utils/calc: remove nodeset_output where it's now unneeded * utils/calc: rename some variables to ease next commits * utils/calc: rework --cpuset-output-format for the systemd-dbus-api * utils/calc: split options into I/O set/object and formatting options * utils/calc: switch to intersecting local NUMA nodes by default * utils/calc: use HWLOC_TYPE_DEPTH_UNKNOWN instead of -1 * utils/calc: use memory object directly instead of walking up to normal objects * utils/gather-cpuid: update leaf 0x23 * utils/gather-topology.1: --proclist obsolete and removed long time ago * utils/gather-topology.1: fix formatting of command-line examples * utils/gather-topology: fix a grep warning when matching octal sequence * utils/hwloc-calc: add systemd-dbus-api to --cof usage and completion * utils/info: add --default-nodes * utils/info: fix sub-index prefix for local memory * utils/lstopo.1: fix formatting of command-line examples * utils/lstopo.1: remove a dumb example * utils/lstopo.1: remove an outdated note about size units * utils/lstopo.1: sectionize EXAMPLES * utils/lstopo: don't build lstopo-win with MSVC * utils/lstopo: remove -mwindows with MSVC * utils/ps.1: sectionize EXAMPLES * utils: improve "default" --best-memattr fallback in corner cases * utils: return our new "default" nodes in the default --best-memattr fallback * utils: uniformize checks after hwloc_calc_parse_level_size() * utils: warn if we failed to find best nodes * windows: add support for Die and Module topology levels * windows: don't use uninitialized memory for selecting group kinds * windows: promote a warning about 32-bit processor groups to critical * x86: allow windows CPUID dump import on Linux * x86: re-enable the gathering of topoext node IDs * x86: work around legacy_max_proc being 0 while HTT feature bit is set (bsc#1236038) * xml/import: add missing xml prefix to some error messages * xml/import: disable the currently unused importing of future types * xml/import: forward compat with distances changes in 3.0 * xml/import: ignore numanode_type for now * xml/import: support a possible future Cluster type * xml/nolibxml/import: allow windows XMLs ++++ kernel-firmware-bluetooth: - Update to version 20250903 (git commit c784990ba3d2): * rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 ++++ kernel-firmware-i915: - Update to version 20250903 (git commit c784990ba3d2): * xe: Update GUC to v70.49.4 for BMG, LNL, PTL * i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL ++++ kernel-firmware-intel: - Update to version 20250903 (git commit c784990ba3d2): * intel_vpu: Update NPU firmware ++++ kernel-firmware-qcom: - Update to version 20250903 (git commit c784990ba3d2): * qcom: add ADSP firmware for qcs615 platform ++++ mir: - Update to 2.22.0: * Breaking Changes: - Consolidation of EDID Parsing * User-.. and DisplayConfigurationOutput::edid replaced with ::display_info * mir::graphics::Edid removed * miroil::Edid::Descriptor removed - Nvidia 565+ breaks EGLStream support (gh#canonical/mir#4147) * Use --platform-display-libs mir:atomic-kms - -platform-rendering-libs mir:gbm-kms to use our (unstable) Nvidia-on-GBM support. We'll follow up with a point release to make this the default * ABI summary: - miral ABI unchanged at 7 - mircommon ABI unchanged at 11 - mircore ABI unchanged at 2 - miroil ABI bumped to 8 - mirplatform ABI bumped to 32 - mirserver ABI bumped to 65 - mirwayland ABI unchanged at 5 - mirplatformgraphics ABI unchanged at 23 - mirinputplatform ABI unchanged at 10 * Enhancements: - static_config_display: add property-based display config support (gh#canonical/mir#3872) - Implement Simulated Secondary Click (gh#canonical/mir#3873) - DRM: Explicit Synchronization Support (gh#canonical/mir#3717) - live configuration facilites (gh#canonical/mir#3995) - Atomic KMS: enable bypass (gh#canonical/mir#3595) - fix: move minimized windows to the back of the Z stack (gh#canonical/#4000) - Implement the 'overlay_cursor' flag for WlrScreencopy (gh#canonical/mir#4013) - Support Nvidia through the atomic-kms/gbm platforms (gh#canonical/mir#3979#4060#4070) - Implement hover click (gh#canonical/mir#3928) - server: add --vt-switching option (gh#canonical/mir#4033) - Improve support for bespoke Wayland extensions (gh#canonical/mir#4018) - Update linux_dmabuf_v1 to version 5 (gh#canonical/mir#4001) - Implement bounce keys (gh#canonical/mir#3934) - Implement slow keys (gh#canonical/mir#3945) - Implement magnifier accessibility feature (gh#canonical/mir#3976) - feature: implement sticky keys accessibility feature (gh#canonical/mir#4076) - Integrate some Rust code into the Mir build (gh#canonical/mir#4022) - (gh#canonical/mir#4078) package mir-platform-graphics-stub and mir-platform-input-stub (gh#canonical/mir#4080) - graphics: introduce EDID parsing in DisplayConfigurationOutput (gh#canonical/mir#4099) - Add live_config support to miral::Keymap (gh#canonical/mir#4088) - Add tracking keymap from locale1 (gh#canonical/mir#4111) * Bugs fixed: - Don't raise the parent of windows sent to the back (gh#canonical/mir#4008) - Update wl_output::geometry to include the correct transformation (gh#canonical/mir#4062) - BasicScreenshooter does not take the output transformation into account (gh#canonical/mir#4086) - Screenshots wrong when display rotated (again) (gh#canonical/mir#3909) - Docking kgx left/right in miriway is misplaced (gh#canonical/mir#4023) * Documentation: - HACKING.md: Add some instructions for MESA debugging (gh#canonical/mir#3992) - doc: add Debugging section to CI docs (gh#canonical/mir#4034) ++++ podofo-0_10: - Rename package to podofo-0_10 - Don't conflict libpodofo2 with libpodofo3 ++++ podofo: - Update to 1.0.2: * PdfTokenizer: Fixed free-after-use after failing to parse content while reading literal tokens (boo#1249105) * PdfFont: Improved heursitic for word spacing * PdfDifferenceEncoding: Fixed handling of ligatures in AGL character names * PdfXMPPAcket: Make GetDescription() const correct * PdfMemDocument: Fixed upgrade to PDF2.0 in a incremental update - drop cmake variables unused in the project ++++ meson: - Add meson-issue-15992.patch: allow packagers and obs projects to toggle verbosity of the meson commands (__meson_verbose 0|1). ++++ meson-test: - Add meson-issue-15992.patch: allow packagers and obs projects to toggle verbosity of the meson commands (__meson_verbose 0|1). ++++ nushell: - Update to version 0.107.0: * Watch out for new `watch` features! * Making `find` more cohesive. * `query xml` improvements. * Breaking changes: - find is now case-sensitive by default. - New behavior for `find --multiline`. - `each` now passes through `null` input. - Change the output of format bits to big endian instead of native endian. - Execution Order of Hooks Changed: `env_change` before `pre_prompt`. - `query xml` returns scalar results when possible. - Use fixed column name for `query xml` output. - Add active column to `overlay list`. * Additions: - `watch` streams events. - New `watch --debounce` option. - `get`, `select`, `reject` can `--ignore-case` of cell-path. - `--endian` flag for `into binary`. - Spread `null` into collections or arguments. - `http` subcommands now keep track of redirects. - New `random choice` command in `std-rfc`. - Add `str align` to `std-rfc/str`. - JSON column support for `stor` and `query db`. - Extend nodeset output formats for `query xml`. - New keybinding: `vichangemode`. - Add `-h/--help` flag to testbin. - Other additions. * Deprecations: - Built-in random dice deprecated. - Deprecate watch --debounce-ms. * Other changes: - `random dice` moved to `std`. - `http` commands will now fail on invalid headers. - `http post` now sends body serialized as pretty json. - Improved error messages for misspelled flags. - Improved default color theme. - Reset content type for commands returning partial input. - Additional changes. * Bug fixes: - Fix highlighting of aliases to external commands. - `input list` Plays Nicely With Styled Input. - Fixed spacing of `help` examples. - Prevent `detect columns` from creating invalid records with duplicate keys. - Improvements to errors. - Other fixes. * For a full list of changes with detailed descriptions, see: - https://www.nushell.sh/blog/2025-09-02-nushell_0_107_0.html ++++ openQA: - Update to version 5.1756905114.bb4fa746: * Fix syntax error in nginx config * Mark unconfigured api route log as uncoverable statement * Increase test coverage for lib/OpenQA/WebAPI/Description.pm * parser: ktap: Don't write diagnostic data into $subtest_name * Extend tests for configuring subdomain to serve files * Avoid job terminated unexpectedly with signal handler in delete needles * Allow configuring subdomain for serving logs/assets more securely * Do not invoke Mojo::IOLoop->remove twice * Add support for Bearer token authentication * Worker::Engines::isotovideo: Simplify using more Mojo::File * Worker::Engines::isotovideo: Remove obsolete comment ++++ os-autoinst: - Update to version 5.1756894972.736fbfd: * baseclass: Fix missing error details on failed SSH connection attempts * baseclass: Extend error details on failed ssh attempts * consoles: Improve error reporting on unavailable VNC * backend::svirt: Extract methods for serial_console command * backend::svirt: Extract method for serial_grab command * backend::svirt: Combine and simplify save_snapshot commands * backend::svirt: Extract method 'vmname' * backend::svirt: Extract methods for is_shutdown cmd ++++ python-acme: - Update to 5.0.0 * Removed acme.crypto_util.SSLSocket and acme.crypto_util.probe_sni * Removed a number of deprecated classes/interfaces in acme.challenges * Python 3.9 support was removed. * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot: - Update to 5.0.0 * Certbot now stores the Retry-After value given by ACME Renewal Info (ARI) so the value can be respected across multiple Certbot runs. * Added uv as a test dependency, and switched most pip invocations to uv pip for faster installs. * certbot.ocsp.RevocationChecker.__init__ no longer accepts the parameter enforce_openssl_binary_usage and always uses the cryptography library for OCSP checking. * Python 3.9 support was removed. * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-apache: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml * Updated apache TLS configuration options: * Added DHE-RSA-CHACHA20-POLY1305 to SSLCipherSuite list * Configured curves using SSLOpenSSLConfCmd so FFDH won't be used with OpenSSL 3.0 * certbot-apache no longer prints a warning claiming the version of OpenSSL used by Apache is too old when we were unable determine the OpenSSL version ++++ python-certbot-dns-cloudflare: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-digitalocean: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-dnsimple: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-dnsmadeeasy: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-google: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-linode: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-luadns: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-nsone: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-rfc2136: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-dns-route53: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml ++++ python-certbot-nginx: - update to version 5.0.0 * Python 3.9 support was removed * Migrated most functionality from setup.py to pyproject.toml * certbot-nginx no longer uses socket.gethostname when generating self-signed certificates for use as a temporary step of installing certificates as it would sometimes result in strings that are too long to be used in the common name of a certificate. The static domain "temp-certbot-nginx.invalid" is now used instead ++++ python-imagecodecs: - Update to 2025.8.2 * Pass 7339 tests. * Fix szip_encode default output buffer might be too small (#128). * Fix minor bugs in LZ4H5 codec (#127). * Avoid grayscale-to-RGB conversions in AVIF codecs. * Improve AVIF error messages. * Add flag for free-threading compatibility (#113). * Do not use zlib uncompress2, which is not available on manylinux. * Do not build unstable BRUNSLI, PCODEC, SPERR, and SZ3 codecs. * Require libavif >= 1.3 and Cython >= 3.1. * Support Python 3.14 and 3.14t. * Drop support for Python 3.10 and PyPy. ++++ python-pyHanko: - Update to 0.30.0: * Bump python-pkcs11 to 0.9.x. * Introduce signxml>=4.2.0 into [etsi] dependency group. * Allow custom text and stamp border colours. * Correct buggy behaviour when reauthenticating with a security handler. * Fix registration of multiple extensions in encrypted files. * Tolerate key usage violations when the signer is a trust anchor. * Remove unnecessary 3.8 compatibility code. * Make it easier to customise PKCS#11 queries * The root pyhanko package is now a namespace package. * Drop dependency on click in pyhanko distribution, move CLI code into pyhanko-cli instead. * Make the dependency on qrcode optional (in the new [qr] dependency group) * Replace defusedxml with a dependency on lxml. - Subsume pyhanko-certvalidator into this package, upstream has intertwined all of the packages into one repo. - Ship docs and license in the built packages. ++++ python-pytest-bdd: - Update to 8.1.0: * Added + Gherkin keyword aliases can now be used and correctly reported in json and terminal output. + Added localization support. + Rule keyword can be used in feature files. + Added support for multiple example tables + Added filtering by tags against example tables + Tags can now be on multiple lines (stacked) + Continuation of steps using asterisks instead of And/But supported. + Added ``datatable`` argument for steps that contain a datatable. * Changed + Step arguments "datatable" and "docstring" are now reserved, and they can't be used as step argument names. + Scenario description field is now set for Cucumber JSON output. + Text after the # character is no longer stripped from the Scenario and Feature name. + Use the gherkin-official parser, replacing the custom parsing logic. + Multiline steps must now always use triple-quotes for the additional lines. + All feature files must now use the keyword Feature: to be considered valid. + Tags can no longer have spaces. + Text after the # character is no longer stripped from the Step name. + Fixed an issue with the upcoming pytest release related to the use of @pytest.mark.usefixtures with an empty list. * Removed + Dropped support for python 3.8. + Drop compatibility with pytest < 7.0.0. ++++ python-pytest-salt-factories: - Update to 1.0.5: * Support pytest 8.4+ ++++ python-python-pkcs11: - Initial release of 0.9.0. ++++ python-questionary: - Initial package of python-questionary 2.1.1 for openSUSE ++++ python-robotframework: - Update to version 7.3.2: * Updated version to 7.3.2 * Release notes for 7.3.2 * Fix --flattenkeywords with JSON outputs * Consistent naming * Enhance JsonLoader config * Fix `include_keywords=False` with JSON. * Nicer signature to ExecutionResult * Make JsonDumber configurable. * Don't access suite.teardown unnecessarily. * Fix handling failing suite teardowns with JSON * Fix --flattenkeywords with VAR, GROUP and RETURN * Enhance tests * Refactor keyword used in tests * Enhance/cleanup flattening output.xml * Fix test on PyPy * Fix listener end_test overriding body when using JSON * Try all matching BDD prefixes, not only longest. * Fix embedded args related regression * Enhance tests for setup/teardown with embedded args * Fix formatting * Back to dev version * Fixes * Updated version to 7.3.1 * Release notes for 7.3.1 * Refactor test toggle logic. * Fix expand icons for failed and skipped tests (#5322) (#5445) * New section about inline comments, fixes and adjustments * Two spaces before an inline comment. * Use `# fmt: skip` instead of `# fmt: off/on`. * Remove unnecessary `.readlines()`. * Update CONTRIBUTING.rst (#5452) * Update contribution guidelines. * Update release instructions. * reformat * Prefer exact match over embedded match with setup/teardown and Run Keyword * Shorter timeouts in tests * Fix handling invalid UK argspec with types * Update issue title * Back to dev version - Update to version 7.3: * UG: Fix internal link * Updated version to 7.3 * Release notes for 7.3 * Update contribution guidelines (#5375) * Enhance variable type conversion documentation * Enhance tests * Enhance user keyword argument conversion errors * Change embedded argument syntax with type and regexp * UG: General cleanup to Variables section * Don't use deprecated Default Tags in example ++++ python-signxml: - Initial release of 4.2.0. ++++ python-subliminal: - Update to version 2.4.0 * Use fps match for scoring subtitles * Refactor cli.py into folder * show all entries from towncrier * Fix guessit title str * Add a section to README about using --debug ++++ python-xsdata: - Initial release of 25.7. ++++ sdbootutil: - Update to version 1+git20250903.f5a076b: * Distiguish between path and id for boot entries ++++ sof-firmware: - version update to 2025.05.1: * SOF v2.13.1 DSP topologies. ++++ syncthing: - Update to 2.0.6 * Fixes fix(db): remove temp_store = MEMORY pragmas by @calmh in #10343 - Update to 2.0.5 * Fixes fix(db): only vacuum database on startup when a migration script was actually run by @pixelspark in #10339 * Other docs: add DCO requirement to contribution guidelines by @calmh in #10333 docs: update contribution guidelines from the docs site by @calmh in #10336 ------------------------------------------------------------------ ------------------ 2025-9-2 - Sep 2 2025 ------------------- ------------------------------------------------------------------ ++++ SDL3: - Update to release 3.2.22 * A bunch of changes for non-Linux platforms only ++++ amazon-ssm-agent: - Update to version 3.3.3050.0 * Add EU sovereign cloud S3 endpoint for DownloadContent plugin * Add configurable credential rotation max backoff interval - from version 3.3.2958.0 * Migrate from twinj/uuid to google/uuid library * Allow newer agent versions to be installed when deploying on Greengrass * Harden function to remove non-admin run command documents in execution path * Fix macOS credential refresher test issue due to missing Debugf from serialport skip file * Enhance testability of custom certificate usage in debug SSM Agent builds * Decouple serial port from startup and add credential refresher serialport logging * Add GlobalEnhancedTelemetryEnabled config to README * Add cloudwatch logs endpoint configuration to optional config for agent * Update Greengrass component version - from version 3.3.2746.0 * Add file privilege check before processing document state file * Storing AWS document interpolation ENV_VAR types as environment variables * Throw explicit error when running local cli as non-priviledged user * Harden telemetry dynamic config folder permissions * Add configuration option for HandshakeTimeout - from version 3.3.2656.0 * Improve unit tests * Add setup for emitting telemetry logs and metrics * Add initial selection of error logs to emit to telemetry * Simplify checkstyle and import organization in build scripts * Update golang.org/x/net from v0.37.0 to v0.38.0 ++++ apko: - Update to version 0.30.7: * build(deps): bump github/codeql-action from 3.29.10 to 3.29.11 (#1834) * build(deps): bump github/codeql-action from 3.29.9 to 3.29.10 (#1824) * build(deps): bump go.step.sm/crypto from 0.69.0 to 0.70.0 (#1827) * build(deps): bump chainguard.dev/sdk from 0.1.37 to 0.1.41 (#1831) * build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#1832) * build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#1829) * build(deps): bump chainguard-dev/actions from 1.4.11 to 1.4.12 (#1830) ++++ arkade: - Update to version 0.11.43: * Add system app to install zvol-snapshotter * refactor: tidy up install command * Minor changes for kubeval * chore: bump kubeseal version to 0.30.0 * Enable manual kick-off for e2e-url-checker job * Implement tablewriter v1.0.9 * Update dependencies * Bump golang.org/x/crypto from 0.38.0 to 0.40.0 * fix: address tablewriter breaking changes * Update dependencies ++++ aws-c-io: - Update to version 0.21.4 * Scheduled Iteration Mem-release Order by @sbSteveK in (#752) - from version 0.21.3 * Change stale issue and discussion handling to run once a week by @DmitriyMusatkin in (#747) * Fix warnings found by the Undefined Behavior Sanitizer by @bjosv in (#748) * Fix memory leaks in NW socket by @sfod in (#749) * Fix Dispatch Queue Leak by @xiazhvera in (#750) ++++ biome: - Update to version 2.2.2: * ci: release (#7303) * chore: remove changeset, fix version number * chore: revert version number * ci: release (#7238) * fix(lint/useNamingConvention): detects ts property parameter with modifier (#7298) * fix(noExtraBooleanCast): preserve parentheses to maintain operator precedence (#7244) * feat(grit): add JSX node name mappings for GritQL patterns (#7285) * fix(migrate): jsonc configuration files (#7283) * fix(module_graph): limit flattening to hardcoded value (#7266) * fix(semantic): missing references in namespaces (#7282) * fix(wasm): `scanProject` being stuck (#7281) * docs(lint): improve noUndeclaredDependencies (#7272) * chore: unduplicate branch (#7274) * fix(linter): fix `useImportExtensions` handling of index files (#7209) * chore: remove duplicated fixture (#7273) * fix(core): resolve issue with rest params in type inference (#7270) * fix(cli): pretty logger (#7264) * feat(linter): auto add Svelte globals for .svelte.test/spec files (#7239) * fix(lsp): unsafe fixes when pulling code actions (#7249) * chore(deps): update dependency @changesets/cli to v2.29.6 (#7255) * chore(deps): update rust:1.89.0-bullseye docker digest to 5b0defc (#7254) * chore(deps): update rust:1.89.0-bookworm docker digest to e090f7b (#7252) * chore(deps): update github-actions (#7251) * docs: fix CHANGELOG to reflect operatorLinebreak (#7253) * chore: fix image sponsor (#7250) * fix(changelog): correct dead links in 2.2 (#7243) * fix: correct error message in useIndexOf rule (#7234) * chore: add repository dispatch to kick off docker image build on release (#7235) * chore: use `divan` for module graph benchmarks (#7231) * perf: determine folders more efficiently (#7220) * chore: restore version and use different runner * chore: revert version * chore: update version and lockfile * chore: revert version * ci: release (#7157) * chore: remove unwanted script * chore: fix various typos across codebase (#7216) * chore: fix typos in biome js formatter crate (#7213) * chore: fix typos in biome js analyze crate (#7210) * chore: fix typos in biome crates (#7215) * chore: fix typos in biome html crates (#7208) * chore: fix typos in biome formatter and grit crates (#7207) * docs: update documentation for `useForOf`; fix typos (#7204) * chore: fix changesets (#7202) * fix(core): fix semver handling (#7197) * Merge pull request #7167 from biomejs/next * feat(core): add support for `.graphqls` files (#7118) * feat(useConst): don't report uninit variables read befroe to be written (#7201) * Revert "feat(resolver): resolve extension alias" (#7199) * chore: add Vercel to sponsors (#7200) * fix: consider type-only imports as dev dependency (#7171) * [autofix.ci] apply automated fixes * chore: document variants * ci: add body to close issue workflow * docs: fix broken link, update rule count (#7194) * docs: fix path to perfectionist docs (#7193) * [autofix.ci] apply automated fixes * chore: fix various typos in biome css formatter crates (#7190) * fix linting and workspace methods * chore: skip rule when there's an `extends` * chore: address linting * merge main and update codegen * Merge remote-tracking branch 'origin/main' into next * chore: fix typos in biome css analyze crates (#7187) * feat(lint): add `useBiomeIgnoreFolder` and `noBiomeFirstException` (#7159) * chore: fix typos in biome_cli crates (#7185) * chore: fix typos `messsage` → `message` (#7186) * chore(deps): update rust crate tower-lsp-server to 0.22.1 (#7183) * chore(deps): update rust crate proc-macro2 to 1.0.96 (#7182) * chore(deps): update @biomejs packages (#7176) * chore(deps): update docker/dockerfile:1 docker digest to 3838752 (#7175) * chore(deps): update dependency @types/node to v22.17.1 (#7177) * chore(deps): update rust crate hashbrown to 0.15.5 (#7181) * chore(deps): update rust crate camino to 1.1.11 (#7180) * chore(deps): update github-actions (#7178) * fix(yaml_parser): tokens out of order (#7168) * chore(coderabbit): dont review generated files (#7172) * feat(resolver): resolve extension alias (#7158) * build: upgrade to Rust 1.89 (#7170) * refactor: use if-let-chain if possible (applying clippy fixes) (#7169) * feat(parser/tailwind): support arbitrary candidates (#7086) * feat(parse/tailwind): handle most basenames with dashes (#7068) * fix(linter): false positive for `noDuplicateFontNames` (#7156) * feat: promote rules (#7137) * feat(parser/html): text expressions in attributes (#6907) * Merge remote-tracking branch 'origin/main' into next * fix(core): included files in nested configurations (#7161) * refactor(test): make generated snapshot tests have module stucture that matches folder structure (#7163) * feat(analyze/js): add `noNextAsyncClientComponent` rule in Next domain (#7081) * feat(analyze/js): add `useMaxParams` (#7124) * docs(changelog): fix wrong `useConsistentTypeDefinitions` URL (#7151) * chore(lint): remove extra `v` from rule metadata (#7150) * Merge branch 'main' into next * chore(lint): version released rules (#7147) * ci: use `github.sha` for dispatch event on release (#7145) * docs: remove the mention of a fix (#7146) * fix: set language of noVueDataObjectDeclaration to js (#7144) * ci: release (#7069) * Merge branch 'main' into next * feat(lint): add ignoreTypes option to the noImportCycles rule (#7143) * feat(lint): add `ignoreTypes` option to the `noImportCycles` rule (#7017) * feat(analyze/js): add noVueDataObjectDeclaration (#6574) * fix: remove option, combobox, listbox from semantic element suggestions (#7129) * fix: revive wasm build (#7136) * perf: minor performance tweaks (#7122) * chore: tweak CodeRabbit (#7132) * fix(core): resolve aliased imports (#7121) * feat(core): scanner v2 (#6989) * ci: depot-windows-2022-4 -> depot-windows-2022-16 * chore: apply CodeRabbit nits (#7116) * feat(parser): support import source (#7019) * Merge branch 'main' into next * ci: use faster runners on depot (#7115) * chore: add CodeRabbit config (#7114) * feat(lint): rule `noUnnecessaryConditions` (#7084) * revert: "fix(lint/noUnassignedVariables): handle JSX ref attribute ass… (#7104) * chore: setup autofix.ci workflow (#7113) * fix(lint/noUnusedPrivateClassMembers): handle class members declared in constructor parameters correctly (#7102) * fix(lint/noUnusedPrivateClassMembers): improve member usage check (#7103) * fix(core): return type inference no longer picks up nested returns (#7106) * feat(analyse/js): add `noNonNullAssertedOptionalChain` rule (#7100) * fix(core): consider extended configs for scan kind (#7099) * feat(analyze/js): added rule for `@typescript-eslint/consistent-type-definitions` (#7053) * chore(deps): update rust crate tokio to 1.47.1 (#7096) * chore(deps): update github-actions (#7094) * chore(deps): update dependency eslint to v9.32.0 (#7093) * chore(deps): update dependency @types/node to v22.17.0 (#7092) * chore(deps): update @biomejs packages (#7091) * chore(deps): update rust crate serde_json to 1.0.142 (#7089) * chore(deps): update rust:1.88.0 docker digest to af306cf (#7042) * chore(lint): add version to the released rules (#7087) * feat: add tailwind domain (#6972) * feat(format/html): implement suppression comments (#5356) * chore: add Claude sub-agents (#7066) * feat(qwik): add few new lint rules (#6887) * feat(parse/tailwind): start implementing lexer/parser (#6986) * docs(analyze): about "Services" (#7058) * fix changelog * chore: use own semver parser (#7061) * ci: use faster runners on Windows (#7041) * ci: release (#6927) * feat(analyze/js): add useReactFunctionComponents rule (#7055) * feat(lint): implement `noVueReservedKeys` rule (#7057) * refactor(format): use specialised tokens (#7052) * docs: update analyzer CONTRIBUTING.md (#7056) * ci: make it so windows devs don't get lints that don't show up on linux/macos (#7003) * chore(deps): update rust:1.88.0-bullseye docker digest to b315f98 (#7043) * fix(lint): `useSemanticElements` self-closing elements (#7044) * Revert "ci: use depot cargo in the PR workflow" (#7046) * ci: use depot cargo in the PR workflow (#7045) * fix(lint/noUnassignedVariables): handle JSX ref attribute assignments (#7000) * feat(qwik): add domain setup and enable some pre-existing rules (#6923) * test(biome-js-analyze): add tests to cover tests to cover ??=, ||=, &&= (#7010) * fix(migrate): transfer comments to the separator (#7014) * feat(formatter): add option to split binary expressions before operators (#6159) * fix(suppression): invalid suppression comments should not cause a panic (#7012) * feat(wasm): expose Workspace::scan_project_folder (#7005) * ci: sync `next` branch to the website repo (#7011) * fix(css_parser): add active-view-transition-type() (#6973) (#6991) * refactor(formatter): specialised verbatim formatting (#7002) * chore: update generated code from analyzer codegen (#7001) * feat(wasm): expose new functions (#6896) * feat(json/analyze): rule `noQuickfixBiome` (#6992) * fix(lint/useSortedClasses): remove leading and trailing whitespaces (#6979) * fix: update documentation URL for `noUnknownPseudoClass` (#6990) * feat(parse): add tailwind parser (#6980) * Merge branch 'main' into next * fix(deps): update @biomejs packages (major) (#6962) * feat: support configureable sorting mode for imports, keys and attributes (#6506) * feat(noRestrictedImports): add the patterns option (#5506) * feat(parse): add tailwind grammar (#6978) * fix: remove infinite loop on `function A(A) {}` (#6976) * feat(yaml_parser): parse flow constructs (#6961) * chore: split `Type` from `TypeData` (#6963) * feat(parser): support import defer (#6949) * chore(deps): update dependency @types/node to v22.16.5 (#6955) * feat(biome-js-analyze): expanded support for useReadonlyClassProperties to cover async class methods too (#6938) * chore(deps): update dependency @types/node to v22.16.5 (#6956) * chore(deps): update rust crate serde_json to 1.0.141 (#6957) * chore(deps): update typescript-eslint monorepo to v8.37.0 (#6960) * fix(deps): update rust crate roaring to 0.11.1 (#6959) * perf: shrink `Text` (#6946) * chore(deps): update github-actions (#6954) * fix: typo `@vitest/eslint-plugin` source url (#6943) * fix(biome_js_analyze): ignore `as const` and similar wrappers in `noMagicNumbers` rule (#6944) * fix(core): fix type inference of `this` (#6942) * fix: typo `perfer-for` → `prefer-for` (#6947) * refactor: add `no-nested-component-definitions` rule to eslint migration (#6941) * ci: add French, Spanish and Ukrainian to labeler (#6926) * perf: introduce `Path` type (#6935) * fix(linter): fix recursive hooks (#6931) * fix(lsp): update diagnostics on watched files (#6924) * fix: update `useComponentExportOnlyModules` website link (#6463) * chore: fix changelog (#6917) * docs: explain how to document options (#6916) * Merge branch 'main' into next * feat(biome_js_analyze): allow specifying stable object keys in `useExhaustiveDependencies` configuration (#6398) * feat(cli): enhanced summary reporter (#6731) ++++ boost-defaults: - added unversioned libboost_url-devel (bsc#1248645) ++++ boost-base: - require shared library package in versioned libboost_url-devel (bsc#1248645) ++++ boost-extra: - require shared library package in versioned libboost_url-devel (bsc#1248645) ++++ bpftop: - Update to version 0.7.1: * CVE-2025-58160: Update tracing-subscriber to version 0.3.20 (boo#1249007) * The BPF iterator program that tracks which process loaded each BPF program now fails gracefully instead of preventing bpftop from starting ++++ chromaprint: - version update to 1.6.0 * Added support for FFmpeg 8.0 * Added chromaprint_decode_fingerprint_header function * Added missing chromaprint_get_algorithm function implementation * Optimized simhash calculation and fingerprint decoding * Improved fingerprint compression performance by pre-allocating vector storage * CMake improvements: updated minimum version to 3.10, use GNUInstallDirs, install config targets * Build Linux ARM64 binaries * Allow build to exclude internal avresample - removed patches - 0005-Fix-compatibility-with-ffmpeg-7.0.patch (upstreamed) ++++ chromium: - Chromium 140.0.7339.80 (boo#1249093): * new permission prompt for local network access * CVE-2025-9864: Use after free in V8 * CVE-2025-9865: Inappropriate implementation in Toolbar * CVE-2025-9866: Inappropriate implementation in Extensions * CVE-2025-9867: Inappropriate implementation in Downloads * Various fixes from internal audits, fuzzing and other initiatives - modified patches: ppc-fedora-0002-regenerate-xnn-buildgn.patch (updated from debian) ++++ container-selinux: - Update to version 2.241.0: * Allow domains that trans to container_runtime_t bpf:prog_run ++++ diun: - Update to version 4.30.0: * Add TLS config options tlsSkipVerify and tlsCaCertFiles for all notifiers using an HTTP client (#1489) * Apprise notifications support (#1457) * Elasticsearch notifications support (#1452) * Add disableNotification option for Telegram (#1354) * Switch from third-party module to HTTP client for Pushover (#1490) * Align chatIDs and chatIDsFile format handling for Telegram (#1316) * Switch from github.com/hako/durafmt to github.com/dromara/carbon module (#1317) * Remove unneeded openssl package in the Docker image (#1488) * Go 1.24 (#1461) * Alpine Linux 3.22 (#1462) * Bump dario.cat/mergo to 1.0.2 (#1436) * Bump github.com/alecthomas/kong to 1.12.1 (#1324 #1456) * Bump github.com/containers/image/v5 to 5.36.1 (#1340 #1454 [#1467]) * Bump github.com/crazy-max/gohealthchecks to 0.5.0 (#1319) * Bump github.com/docker/docker to 28.3.3+incompatible (#1458) * Bump github.com/docker/go-connections to 0.6.0 (#1470) * Bump github.com/dromara/carbon/v2 to 2.6.11 (#1435 #1455) * Bump github.com/go-playground/validator/v10 to 10.27.0 (#1333 [#1432] #1446) * Bump github.com/hashicorp/nomad/api to 1.10.4 (#1487) * Bump github.com/jedib0t/go-pretty/v6 to 6.6.8 (#1430 #1466) * Bump github.com/moby/buildkit to 0.23.2 (#1445) * Bump github.com/opencontainers/image-spec to 1.1.1 (#1434) * Bump github.com/panjf2000/ants/v2 to 2.11.3 (#1331 #1433) * Bump github.com/PaulSonOfLars/gotgbot/v2 to 2.0.0-rc.33 (#1397 [#1448]) * Bump github.com/rs/zerolog to 1.34.0 (#1431) * Bump github.com/stretchr/testify to 1.11.1 (#1482) * Bump go.etcd.io/bbolt to 1.4.3 (#1361 #1444 #1477) * Bump golang.org/x/crypto to 0.35.0 (#1398) * Bump golang.org/x/mod to 0.27.0 (#1377 #1450 #1469) * Bump golang.org/x/net to 0.38.0 (#1343 #1402) * Bump golang.org/x/sys to 0.35.0 (#1323 #1427 #1472) * Bump google.golang.org/grpc to 1.74.2 (#1407 #1465) * Bump google.golang.org/protobuf to 1.36.8 (#1389 #1471 #1479) * Bump k8s.io/client-go to 0.32.1 (#1338 #1453) ++++ dwarfs: - Update to version 0.13.0: Bugfixes: * Made section index discovery more robust. gh#mhx/dwarfs#264 * A recent kernel change (https://lkml.org/lkml/2025/5/5/2868) caused the tools_test to fail on Linux 6.14 and later. This has been fixed by accepting both EPERM and ENOSYS as valid error codes for link() calls. Features: * Support for big-endian architectures. This is still experimental, even though all unit tests pass with QEMU, and the benchmark suite runs fine on real hardware. This currently requires forked versions of folly and fsst. The changes are small and the pull requests will hopefully be merged upstream soon. * Experimental support for 32-bit architectures. While DwarFS should mostly "just work" on 32-bit when using small images (a few hundred megabytes), the limited address space is a problem for the extensive use of memory-mapped files inside DwarFS. There will be changes to limit the use of mmap in the future (mainly due to other issues), which should help 32-bit compatibility as a side-effect. gh#mhx/dwarfs#268. * The category metadata for categorized blocks is now stored in the metadata block by default. This allows re-compressing the blocks with a metadata-dependent algorithm (e.g. FLAC) even if they were previously compressed using a metadata-independent algorithm. This can be disabled using the --no-category-metadata option. See the mkdwarfs man page for more details. * The --no-category-names and --no-category-metadata options can be used to reduce the size of the metadata. However, this will make it impossible to use metadata-dependent compression algorithms (e.g. FLAC), or even select category-specific compression, when recompressing the image. * Metadata rebuilding is now supported in mkdwarfs using the - -rebuild-metadata option. Previously, the metadata could only be recompressed, but it was impossible to change it. With the new option, it is now possible to change metadata packing and apply operations like --set-owner, --set-group, --set-time, - -time-resolution, --chmod, or --no-create-timestamp. Note that these are potentially lossy operations that may be irreversible. By default, the history of metadata rebuilds is tracked in the metadata itself, but this can be disabled using - -no-metadata-version-history. * In addition to metadata rebuilding, it is now also possible to change the block size of an existing image using the - -change-block-size option. This implies --rebuild-metadata and --recompress=all. This can be useful for tuning the performance of an existing image without having to re-create it from scratch. * mkdwarfs now shows its current memory usage while running. Note that -L/--memory-limit still only limits the memory used for the block queue, not the overall memory usage. Fixing this is on the roadmap, there's no need to file an issue. * dwarfsextract has new options to control the output format: - -format-options and --format-filters. There is also - -format=auto to automatically "guess" the format and filters based on the output file name. * dwarfsck has a new frozen_details detail level that will show the frozen_analysis content ordered by memory location instead of memory usage and also shows the address range of each section. ++++ easyeffects: - update to release 7.2.5 + Fixed a bug in the pitch plugin that made the cents and the octaves control to not be reapplied when EasyEffects was restarted - update to release 7.2.4 + The Pitch plugin has new cents and octaves parameters. + The client-rt.conf is ignored on 1.4.0 or newer PipeWire versions. + APO export does not crash anymore when an unsupported LSP Equalizer filter is set. + Fixed a bug in LADSPA wrapper. ++++ freetds: - version update to 1.4.27 * dblib: Fix dbreadtext crash on NULL values * fix signature mismatch for tds_convert_int1 * Merge fix for SQL_C_STINYINT * odbc: Add test for SQL_C_STINYINT type * Fix handling of SQL_C_STINYINT * tds: Add support for SYBSINT1 type conversion * Merge support for BLK_HINTS calling blk_props * ctlib: Add support for setting hints for bulk copy * Make TDSBCPINFO::hint a DSTR * Merge fix for connection to no Sybase servers * Ignore query errors during connection initial setup * tds_setup_connection: Further conditionalize queries by product. * tds_setup_connection: Skip nvc/uvc check under OpenServer. * pool: Ignore extension in login packet * odbc: Fix bug cancelling not active statements * Merge leak fix for odbc_parse_connect_string * odbc: Reuse cleanup code parsing connection string, check for error * odbc: Use tds_dstr_buf to retrieve internal string buffer * odbc: Reuse code in connection_string_parse test * odbc: Add test for connection string parsing * tds_convert_to_binary: Don't leak allocations on syntax errors. * _cs_convert: Cap binary/image copying to the destination length. - modified patches % configure-return-void-fix.patch (refreshed) ++++ gcil: - Initial package of gcil 13.0.1 for openSUSE - Add gcil-no-update.patch to remove checking for updates ++++ google-guest-agent: - Update to version 20250901.00 * Update go version to 1.25 (#565) * Add compat adapt script to windows in agent sysprep (#569) * Fix adapt to use more portable shebang line (#567) * Remove routes script from packaging (#566) * Update adapt script to run on startup/shutdown both (#561) * Update agent_uninstall.ps1 (#558) * Stop core plugin before removing agent package (#554) * Startup scripts should start after agent manager instead (#553) * Update presets and install dependencies on systemd units (#552) * Ensure agent service is disabled (#551) * Disable legacy agent to enable core plugin (#550) * Final fix for RHEL packaging for routes setup (#549) * Fix RHEL packaging for routes scripts (#548) * Packaging changes to include routes script installation (#542) * Update CLI name in packaging (#543) * systemd should manage only the main process (#544) - from version 20250831.03 * Update go version for stable branch to 1.25 (#571) * Add adapt script in stable branch as per #569 (#570) * Backport fix from #567 to stable branch (#568) * Revert compat behavior and call known binary directly (#560) * Revert compat behavior and call known binary directly (#559) * Build rollforward package to re-enable original agent and disable core plugin (#557) - from version 20250831.02 * Update go version to 1.25 (#565) * Add compat adapt script to windows in agent sysprep (#569) * Fix adapt to use more portable shebang line (#567) * Remove routes script from packaging (#566) * Update adapt script to run on startup/shutdown both (#561) * Update agent_uninstall.ps1 (#558) * Stop core plugin before removing agent package (#554) * Startup scripts should start after agent manager instead (#553) * Update presets and install dependencies on systemd units (#552) * Ensure agent service is disabled (#551) * Disable legacy agent to enable core plugin (#550) * Final fix for RHEL packaging for routes setup (#549) * Fix RHEL packaging for routes scripts (#548) * Packaging changes to include routes script installation (#542) * Update CLI name in packaging (#543) * systemd should manage only the main process (#544) - from version 20250831.01 * Update go version for stable branch to 1.25 (#571) * Add adapt script in stable branch as per #569 (#570) * Backport fix from #567 to stable branch (#568) * Revert compat behavior and call known binary directly (#560) * Revert compat behavior and call known binary directly (#559) * Build rollforward package to re-enable original agent and disable core plugin (#557) - from version 20250831.00 * Update go version to 1.25 (#565) * Add compat adapt script to windows in agent sysprep (#569) * Fix adapt to use more portable shebang line (#567) * Remove routes script from packaging (#566) * Update adapt script to run on startup/shutdown both (#561) * Update agent_uninstall.ps1 (#558) * Stop core plugin before removing agent package (#554) * Startup scripts should start after agent manager instead (#553) * Update presets and install dependencies on systemd units (#552) * Ensure agent service is disabled (#551) * Disable legacy agent to enable core plugin (#550) * Final fix for RHEL packaging for routes setup (#549) * Fix RHEL packaging for routes scripts (#548) * Packaging changes to include routes script installation (#542) * Update CLI name in packaging (#543) * systemd should manage only the main process (#544) - from version 20250830.02 * Update go version for stable branch to 1.25 (#571) * Add adapt script in stable branch as per #569 (#570) * Backport fix from #567 to stable branch (#568) * Revert compat behavior and call known binary directly (#560) * Revert compat behavior and call known binary directly (#559) * Build rollforward package to re-enable original agent and disable core plugin (#557) - from version 20250830.01 * Update go version to 1.25 (#565) - from version 20250830.00 * Add compat adapt script to windows in agent sysprep (#569) * Fix adapt to use more portable shebang line (#567) * Remove routes script from packaging (#566) * Update adapt script to run on startup/shutdown both (#561) * Update agent_uninstall.ps1 (#558) * Stop core plugin before removing agent package (#554) * Startup scripts should start after agent manager instead (#553) * Update presets and install dependencies on systemd units (#552) * Ensure agent service is disabled (#551) * Disable legacy agent to enable core plugin (#550) * Final fix for RHEL packaging for routes setup (#549) * Fix RHEL packaging for routes scripts (#548) * Packaging changes to include routes script installation (#542) * Update CLI name in packaging (#543) * systemd should manage only the main process (#544) - from version 20250828.00 * Add adapt script in stable branch as per #569 (#570) * Backport fix from #567 to stable branch (#568) - from version 20250826.00 * Revert compat behavior and call known binary directly (#560) * Revert compat behavior and call known binary directly (#559) * Build rollforward package to re-enable original agent and disable core plugin (#557) - from version 20250821.01 * Remove routes script from packaging (#566) - Drop CVE-2025-22868.patch, merged upstream - Update Go API version to 1.25 ++++ google-guest-oslogin: - Update to version 20250821.00 * Check policy uses adminLogin for cloud run (#165) - from version 20250807.00 * Extract the principal from certs when cloud_run enabled (#164) ++++ gperftools: - version update to 2.17.2 2.17.2 Couple bugs were found in the recently introduced changes. So this is another point release with some fixes. 2.17.1 There was just one fix submitted since 2.17. graysky has contributed build fix for (legacy, 32-bit) ARMs. Huge thanks! 2.17 * Salvatore Dipietro has contributed SB instruction support for spinlock delay loops on newer ARMs. * libgcc backtrace capturing method now handles deep backtraces better. * PPC+musl users can now workaround some issues building PPC-specific backtrace code by adding TCMALLOC_DISABLE_PPC_FRAME_POINTER_BACKTRACER preprocessor define. Much thanks to Josef Schlehofer for reporting the problem. See details in https://github.com/gperftools/gperftools/issues/1602. * Jackie Cui has contributed a small change to the page heap span selection logic that makes a big difference in reducing the amount of used memory in some workloads. See https://github.com/gperftools/gperftools/pull/1604 for further details. * [headline] heap leak checker has been amputated, as promised earlier * [headline] we don't ship pprof anymore. People need to get modern and awesome pprof implementation from github.com/google/pprof * we now have some basic CI infrastructure via Github Actions * we now have basic Bazel support * our docs have been slightly updated and converted to AsciiDoc format * we now implement C23 free{,_aligned}_sized functions (but no libc-s offer those yet anyway) * FreeBSD bits don't depend on procfs anymore (proc maps iterator was broken anyway; now it works) * we don't offer mmap profiling anymore. It wasn't entirely complete for some years now, and killing it has eliminated a lot of complexity. MMap hooks are still part of ABI, but they do nothing. 2.16 * we've upgraded our C++ standard to C++ 17. Some fraction of our code base was modernized. * We've integrated (vendored copy of) GoogleTest, and most tests now use it. GoogleTest has helped us eliminate some legacy code and reduce the number of tests that use shell scripts. * There are no more unnecessary wrappers around mutexes and threads for unit tests. We now use C++ standard mutexes and threads in our tests. * We've done the bulk of the work necessary to enable hidden visibility. The most significant change is that tests no longer reach into libtcmalloc's guts. We use a special TestingPortal interface instead. We now offer the --enable-hidden-visibility configure option, which does what it says. But please note that hidden visibility is off by default for now. * autotools build was significantly refactored, modernized and simplified. * The cmake build has also been radically simplified. The previous version attempted to duplicate the same complexity that we had in the autotools build and did not do it very well. More tests now pass under cmake. But please note that cmake support is still not entirely functional, and we're not yet able to promise anything about it. * Thread-local storage access and emergency malloc integration have been reworked. We now support emergency malloc even on systems with emutls and similarly "bad" TLS support. As a result, backtracing is now more reliable (e.g., on QNX). * OSX operator new/delete performance has been improved. OSX's malloc performance is badly compromised by its support of malloc zones, so we cannot help much (the same applies to much of our competition among memory allocators). But the C++ new/delete API doesn't have to integrate with this stuff, so we now directly replace those functions for a sizeable speedup. Note that OSX performance is still not on par with other "prime tier" OSes due to its lack of efficient TLS support. * Long deprecated google/ headers have been deleted (use, e.g., "gperftools/tcmalloc.h" instead) * All clang builds now use -Wthread-safety and actually check thread-safety declarations * Our code has stopped being incompatible with _TIME_BITS=64 on modern GNU Linux systems (relevant only for 32-bit systems) * OpenSolaris build has been verified and fixed when needed - removed patches - gperftools_fix_unassigned_malloc_in_unittest.patch (not needed) - added patches + gperftools-no-profiledata_unittest.patch ++++ grype: - Update to version 0.99.1: * Bug Fixes - Present fix available version in grype JSON output [#2905 @wagoodman] - detect patch numbers in fuzzy version comparison [#2844 @willmurphyscode] - Make timestamp in output configurable (so that results are more reproducible) [#522 #2724 @gabetrau] - Grype .98 misidentifies the container package version [#2884] * Dependencies - chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#2898) - chore(deps): bump gorm.io/gorm from 1.30.1 to 1.30.2 (#2899) - chore(deps): bump github.com/gookit/color from 1.5.4 to 1.6.0 (#2900) ++++ grype-db: - Update to version 0.40.0: * Added Features - Add fix date processing for OSV transformers [#649 @wagoodman] - Add fix date processing to NVD transformer [#651 @wagoodman] - Add fix available date to GHSA entries [#646 @wagoodman] * Dependencies - chore(deps): Bump astral-sh/setup-uv in /.github/actions/bootstrap (#643) - chore(deps): Bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 (#656) - chore(deps): Bump github.com/anchore/grype (#652) - chore(deps): update tools to latest versions (#645) ++++ himmelblau: - Update to version 1.2.2+git.0.2d04bca: * Include latest branch in CI * Self hosted runners * Version 1.2.2 * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160) * Version 1.2.1 * Automatically append to nsswitch.conf in postinst * Correct the RPM postinst script syntax ++++ hyprlock: - Update to version 0.9.1: * core: limit onClick to down events * seat: restore cursor shape to default * asyncResourceGatherer: fix conditions for skipping screencopy * background: fix mismatched asset sizes and transforms ++++ ibus-typing-booster: - Update to 2.27.73 - Add `~/.config/dconf/` to `observed-paths` in the component file (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/788) - Use GLib.timeout_add() instead of GLib.idle_add() to force a short delay after wl-paste (Related: https://github.com/mike-fabian/ibus-typing-booster/issues/787#issuecomment-3236363564) - Update emoji annotations from CLDR - Improve fallback mechanism in self._show_selection_info_get_selection() (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/787) - Update emoji-data.txt, emoji-sequences.txt, emoji-test.txt, emoji-variation-sequences.txt, emoji-zwj-sequences.txt to the Unicode 17.0.0 draft as of 2025-08-17 - Update UnicodeData.txt, DerivedAge.txt, Blocks.txt to the Unicode 17.0.0 draft as of 2025-08-17 - Translation update from Weblate (es 100%, it 100%, kab 73.7%) - Recommends: wl-clipboard ++++ icewm: - Update to version 3.9.0: * This release has a new dependency: libXcursor. The dependency on libXpm is no longer required. * Features: - If a theme doesn't define a cursor, prefer the system Xcursor theme. - Add support for themed cursors to gdk-pixbuf without requiring libXpm. - Add support for Xcursor files as an alternative to XPM cursors. - Add new -kovered filter to icesh to test if a client is covered. * Fixes: - When lseek on /proc/net/dev fails, avoid it for the future. - Ensure that _NET_CLIENT_LIST_STACKING is always up-to-date. - Correct red and blue colors in icesh for loadicon and saveicon. - When truncating a title in icesh, respect UTF-8 codepoint boundaries. * Changes: When the cursor X/Y-hotspot is absent in a XPM, smart guess it. * Updated translations. - Replace pkgconfig(xpm) with pkgconfig(xcursor) BuildRequires following upstream changes. - Rebase patches with quilt. ++++ inspektor-gadget: - Update to version 0.44.0: No changelog in the release, full list of changes: https://github.com/inspektor-gadget/inspektor-gadget/compare/v0.43.0...v0.44.0 ++++ jfrog-cli: - Update to version 2.78.8: * Fix github.com/ulikunitz/xz see https://github.com/ulikunitz/xz/issues/65 (#3073) * Bump ver from 2.78.7 to 2.78.8 (#3072) ++++ kubectl-switch: - Update to version 2.2.13: * Bug Fixes - go: update kubernetes packages ( v0.33.4 → v0.34.0 ) (#205) (f5b5e5f) * CI/CD - github-action: update aquasecurity/trivy-action ( 0.32.0 → 0.33.0 ) (370f9d9) - pin mise action to consistent version comment across all workflows (#207) (eb0a72b) - github-action: Update jdx/mise-action (#204) (0265601) - github-action: update renovatebot/github-action ( v43.0.8 → v43.0.9 ) (991b85f) - github-action: update github/codeql-action ( v3.29.10 → v3.29.11 ) (bf0f0ae) - github-action: update jdx/mise-action ( v3.0.2 → v3.1.0 ) (7fadfe1) - github-action: Update jdx/mise-action ( v2.4.4 → v3.0.2 ) (#203) (35610fe) - github-action: update github/codeql-action ( v3.29.9 → v3.29.10 ) (ee5a865) - github-action: update renovatebot/github-action ( v43.0.7 → v43.0.8 ) (54856dd) ++++ kubescape: - Update to version 3.0.39: * don't read services from configmap, use file * Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 * new approach of fix implemented ++++ kwctl: - Update to version 1.28.1: * chore: bump policy-evaluator version. * build(deps): update github-actions * build(deps): update taiki-e/install-action action to v2.58.24 * build(deps): update rust crate clap to v4.5.46 (#1338) ++++ level-zero: - Update to version 1.24.2: * Enable DDI Driver Path by Default by @nrspruit in #361 * Add tests for Loader Driver interaction conformance for Sysman VF Management API's by @vishnu-khanth in #360 * level-zero: Changes to get ze_loader loaded for Android by @JeevakaPrabu in #365 * Update Changelog and version to v1.24.1 by @nrspruit in #366 * Check if compile flags are supported: /GL, /QSpectre, /guard:cf by @KseniyaTikhomirova in #368 * Add build instructions for Windows by @ivorobts in #58 * Add repo_token to scorecard.yml by @lisanna-dettwyler in #159 * Update Changelog and version to v1.24.2 with fix for dynamic flag assignment by @nrspruit in #369 ++++ libqt5-qtwebengine: - Update to version 5.15.19: * Bump version to 5.15.19 * qmake: Fix qmake2cmake parsing issue for 5.15 SBOM * Update Chromium (patched with security updates up to 135.0.7049.95): * [Backport] CVE-2024-10229: Inappropriate implementation in Extensions * [Backport] CVE-2024-10827: Use after free in Serial * [Backport] Security bug 378701682 * [Backport] CVE-2024-12694: Use after free in Compositing * [Backport] Security bug 382135228 * [Backport] Security bug 384565015 * [Backport] CVE-2025-0436: Integer overflow in Skia * [Backport] CVE-2024-11477 / Security bug 383772517 * [Backport] CVE-2025-0996: Inappropriate implementation in Browser UI * [Backport] CVE-2025-1426: Heap buffer overflow in GPU * [Backport] Security bug 396481096 * [Backport] CVE-2025-0762: Use after free in DevTools * [Backport] CVE-2025-0999: Heap buffer overflow in V8 * [Backport] CVE-2024-55549: Fix UAF related to excluded namespaces * [Backport] CVE-2025-24855 Fix use-after-free of XPath context node * [backport] CVE-2025-1919 * [Backport] CVE-2025-2783: Incorrect handle provided in unspecified circumstances in Mojo on Windows * [backport] CVE-2025-24201 * [backport] CVE-2025-2136 * [Backport] Security bug 399002829 * [Backport] Security bug 396460489 * [Backport] CVE-2025-3619 * Various python fixes - Drop patches: * python3.12-imp.patch * python3.12-six.patch * python3.13-pipes.patch - Don't try to build with ffmpeg >= 8 on factory ++++ qt6-declarative: - Disable LTO on armv6/7 as a workaround - boo#1249054 ++++ libcdr: - version update to 0.1.8 * fix build with ICU 75 and ICU 76 * Upgrade m4 macros from autoconf-archive.git v2023.02.20 * Fix crash appear with format CDR 14 and Gradients ++++ libgpiod: - version update to 2.2.2 * don't implicity unquote unnamed lines in gpioinfo * remove useless variable in reconfigure example * don't let struct line_config balloon out of control and trigger an OOM * drop python3-config check from configure.ac ++++ texlive: - Increase pool_size and pool_free for both xmltex and pdfxmltex to get formats created and xmlto runing again (boo#1248830) ++++ mupen64plus: - Cherry-pick mupen64plus-CVE-2025-9688.patch from upstream to fix integer overflow in write_is_viewer() (bsc#1249035, CVE-2025-9688) - Add Mesa-libGL-devel and glu-devel to BuildRequires ++++ s2n: - Update to version 1.5.25 * chore: bindings release 0.3.24 by @johubertj in (#5455) * chore: apply clippy fixes by @johubertj in (#5459) * Add fixed version of the rfc9151 policy by @Mark-Simulacrum in (#5277) * test(integration): add record padding test by @jmayclin in (#5451) * refactor(stuffer): Rename s2n_stuffer_has_pem_encapsulated_block by @alice-aws in (#5465) * ci: don't include tls/extensions in SAW build by @lrstewart in (#5466) * ci: fix wikipedia network test + better error message by @lrstewart in (#5470) * refactor: setup replacement default policies by @lrstewart in (#5464) * Add TLSv1.3 (classical + PQ) policies for CloudFront Upstream by @WillChilds-Klein in (#5460) ++++ libusbgx: - version update to 0.3.0 * Add meson build support * Add support for usb9pfs * Add more controls for USB Audio Class 2 (UAC2) * Add support for USB Video Class (UVC) * Add support for Printer8664b79 * Improved support for network gadget * Many smaller fixes - deleted patches - 0001-libusbgx-Fix-out-of-tree-compilation.patch (upstreamed) - 0002-libusbgx-Fix-doc-build-with-new-doxygen-version.patch (upstreamed) - 0003-libusbgx-fix-build-with-glibc-2.28-since-sys-sysmacr.patch (upstreamed) - 0004-libusbgx-fix-without-libconfig-build-against-glibc-2.patch (upstreamed) ++++ libvirt: - Update to libvirt 11.7.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v11-7-0-2025-09-01 ++++ libvisio: - version update to 0.1.8 * tests: Fix build with libxml 2.12 * Add support for simple solid fill styles * Add support for TextBackground from SheetStyle (tdf136564) * Improve Arrowheads appearance (tdf#126402) * Fix reading FillStyleLst and TextBkgnd from shape (tdf#154379) * Add support to DrawingUnits types (tdf#154379) * Visio5: Provide cellType to collector in readTextField ++++ libvoikko: - version update to 4.3.3 * Update C++ standard from C++14 to C++17. * Compilation fixes for recent versions of GCC and Emscripten. * Link time optimisation (LTO) is now supported during build. * Test suite that was run during "make check" has been disabled, as it required a specific, undocumented set of dictionaries to be present. * Fix memory leak in hyphenator code. ++++ wireplumber: - Update to version 0.5.11: * Additions & Enhancements: - Added modem manager module for tracking voice call status and voice call device profile selection hooks to improve phone call audio routing on mobile devices (!722, !729, #819) - Added MPRIS media player pause functionality that automatically pauses media playback when the audio target (e.g. headphones) is removed (!699, #764) - Added support for human-readable names and localization of settings in wireplumber.conf with wpctl displaying localized setting descriptions (!712) - Improved default node selection logic to use both session and route priorities when nodes have equal session priorities (!720) - Increased USB device priority in the ALSA monitor (!719) * Fixes: - Fixed multiple Lua runtime issues including type confusion bugs, stack overflow prevention, and SPA POD array/choice builders (!723, !728) - Fixed proxy object lifecycle management by properly clearing the OWNED_BY_PROXY flag when proxies are destroyed to prevent dangling pointers (!732) - Fixed state-routes handling to prevent saving unavailable routes and eliminate race conditions during profile switching (!730, #762) - Fixed some memory leaks in the script tester and the settings iterator (!727, !726) - Fixed a potential crash caused by module-loopback destroying itself when the pipewire connection is closed (#812) - Fixed profile saving behavior in wpctl set-profile command (#808) - Fixed GObject introspection closure annotation ++++ wireshark: - Wireshark 4.4.9 * CVE-2025-9817: SSH dissector crash (bsc#1249090). - Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.9.html ++++ libxmlb: - Update to version 0.3.23: * Bugfixes: Do not reallocate the final silo blob when compiling to reduce peak RSS by about ~6%. ++++ zlib-ng-compat: - Update to 2.2.5: * RiscV: chunkset_rvv: fix SIGSEGV in CHUNKCOPY #1889 * MSVC: Disable optimizations for AVX512 GET_CHUNK_MAG causing inflate failure #1884 * Fix building with runtime CPU detection disabled (native) [#1931] * Also check for ZMM support when detecting VPCLMULQDQ support [#1932] * Revert "Clean up insert_match() in deflate_medium" due to performance regression #1938 ++++ zlib-ng: - Update to 2.2.5: * RiscV: chunkset_rvv: fix SIGSEGV in CHUNKCOPY #1889 * MSVC: Disable optimizations for AVX512 GET_CHUNK_MAG causing inflate failure #1884 * Fix building with runtime CPU detection disabled (native) [#1931] * Also check for ZMM support when detecting VPCLMULQDQ support [#1932] * Revert "Clean up insert_match() in deflate_medium" due to performance regression #1938 ++++ maven-jmod-plugin: - Explicit dependency on maven-compat ++++ melange: - Update to version 0.31.1: * config.go: Remove no-vendored-cross-package-deps stanza by @sergiodj in #2145 ++++ mesheryctl: - update to 0.8.132: * General - chore: update meshkit to v0.8.41 @n2h9 (#15724) * Meshery CLI - fix(mesheryctl): update tests after upgrade to tablewriter v1.0.x @lekaf974 (#15720) - chore(mesheryctl): update list table output implementation after upgrade to v1.0.x @lekaf974 (#15718) * Maintenance - added mesheryctl error data @saurabhraghuvanshii (#15716) * Documentation - added mesheryctl error data @saurabhraghuvanshii (#15716) - update to 0.8.131: * Bump cuelang.org/go from 0.12.1 to 0.14.0 by @dependabot[bot] in #15499 * Bump github.com/olekukonko/tablewriter from 0.0.5 to 1.0.9 by @dependabot[bot] in #15498 * Fix: Database Summary Table Scrolling Behavior Problem by @yash37158 in #15633 * Fixed linting Error by @ARYANSHAH1567 in #15708 * add: Enhance empty state message in MeshSync data table by @FaheemOnHub in #15679 * build(deps): Bump form-data in /install/docker-extension/ui by @dependabot[bot] in #15655 * build(deps): Bump gopkg.in/yaml.v3 from 3.0.0 to 3.0.1 in /install/docker-extension by @dependabot[bot] in #15697 * chore(mesheryctl-e2e): Skip mesheryctl system stop and start test cases temporary by @lekaf974 in #15632 * chore: upgrade meshkit to v0.8.40: fix mesheryctl system start - p kubernetes command certificate error by @n2h9 in #15710 * fix(msheryctl): update tablewriter after renovate bot upgrade by @lekaf974 in #15705 * fix: using same data source for all k8 connection chips. by @FaheemOnHub in #15674 ++++ nfpm: - Update to version 2.43.1: * Bug fixes - 409e8c9: fix: dir ownership when type: dir (@caarlos0) - 0b3c28f: fix: symlink with empty mtime (#955) (@caarlos0) * Other work - 4497fb3: docs: corrected amd64 name for deb in goarch-to-pkg.md (#945) (@BCMM) - 83fcc7d: docs: improve version extraction of systemctl (#961) (@supcik) - 9c3ba6b: docs: update cmd docs (@caarlos0) - b2a1c0e: refactor: move it around a bit (@caarlos0) - d0d7d06: refactor: use stdlib maps (#942) (@scop) * Dependencies - chore(deps): bump github.com/ulikunitz/xz from 0.5.14 to 0.5.15 (#965) - chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 (#964) - chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#963) - chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#962) - chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.13 (#960) - chore(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 (#959) - chore(deps): bump actions/checkout from 4 to 5 (#958) - chore(deps): bump actions/cache from 4.2.3 to 4.2.4 (#957) - chore(deps): bump github.com/google/rpmpack from 0.7.0 to 0.7.1 (#951) - chore(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 (#950) - chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 (#949) - chore(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 (#947) - chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0 (#946) - chore(deps): bump github.com/caarlos0/go-version from 0.2.0 to 0.2.1 (#944) - chore(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.1 (#943) - chore(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 (#940) - chore(deps): bump stefanzweifel/git-auto-commit-action from 5 to 6 (#937) - chore(deps): bump github.com/goreleaser/chglog from 0.7.0 to 0.7.3 (#936) ++++ nix: - Update to 2.31.1: - libexpr: Canonicalize TOML timestamps for toml11 > 4.0 - libexpr: Use table.size() instead of unnecessary loop - nix/develop: Fix misleading ignored error when run with - -arg/--argstr - Handle empty ports - SQLite: fsync db.sqlite-shm before opening the database ++++ octave: - Add automatic dependency on octave API for arch-dependent octave-forge packages, add octave.attr dependency generator. Add "Provides: octave(api-v60)" on octave-cli package. - Relax glob in build macro, noarch octave bindings may be built as part of a arch-dependent package. ++++ perl-Sys-Virt: - Update to 11.6.0 - Add all new APIs and constants available in libvirt 11.6.0 ++++ pesign-obs-integration: - Update to version 10.2+git20250830.5a2b5f6: * pesign-repackage.spec.in: Stop repacking process when no RPMs be found ++++ postgresql15-timescaledb: - Update to version 2.22.0 https://github.com/timescale/timescaledb/releases/tag/2.22.0 ++++ postgresql16-timescaledb: - Update to version 2.22.0 https://github.com/timescale/timescaledb/releases/tag/2.22.0 ++++ postgresql17-timescaledb: - Update to version 2.22.0 https://github.com/timescale/timescaledb/releases/tag/2.22.0 ++++ python-aws-sam-translator: - Update to 1.100.0 * Merge main to develop by @vicheey in (#3783) * chore: Add policies for new partition by @valerena in (#3789) * chore(schema): update by @github-actions[bot] in (#3780) * chore(schema): update by @github-actions[bot] in (#3787) * chore(schema): update by @github-actions[bot] in (#3790) * chore(schema): update by @github-actions[bot] in (#3793) * Updating Cloudformation Schema by @Vandita2020 in (#3797) ++++ python-blosc: - Add the use-frombuffer.patch: It fix the building due to binary mode of fromstring being removed (gh#Blosc/python-blosc#342) ++++ python-gitlabcis: - update to 1.15.12: * Fix - fix(deps): update dependency tox to ~=4.29.0 (20972ea) - update to 1.15.11: * Fix - fix(deps): update dependency coverage to v7.10.6 (0289a97) ++++ python-google-api-python-client: - Update to version 2.179.0 * **admin:** Update the api * **aiplatform:** Update the api * **alloydb:** Update the api * **analyticshub:** Update the api * **androidpublisher:** Update the api * **apigee:** Update the api * **backupdr:** Update the api * **bigtableadmin:** Update the api * **cloudbuild:** Update the api * **cloudidentity:** Update the api * **cloudkms:** Update the api * **cloudsupport:** Update the api * **compute:** Update the api * **contactcenterinsights:** Update the api * **dialogflow:** Update the api * **discoveryengine:** Update the api * **displayvideo:** Update the api * **file:** Update the api * **firebaseappdistribution:** Update the api * **firebasedataconnect:** Update the api * **firebaseml:** Update the api * **managedkafka:** Update the api * **merchantapi:** Update the api * **mybusinessverifications:** Update the api * **networkservices:** Update the api * **paymentsresellersubscription:** Update the api * **redis:** Update the api * **run:** Update the api * **texttospeech:** Update the api * **walletobjects:** Update the api - from version 2.178.0 * **aiplatform:** Update the api * **aiplatform:** Update the api * **alloydb:** Update the api * **analyticsadmin:** Update the api * **androidenterprise:** Update the api * **androidpublisher:** Update the api * **apihub:** Update the api * **backupdr:** Update the api * **bigquery:** Update the api * **bigquery:** Update the api * **bigtableadmin:** Update the api * **chat:** Update the api * **chat:** Update the api * **chromemanagement:** Update the api * **cloudbuild:** Update the api * **compute:** Update the api * **connectors:** Update the api * **contactcenterinsights:** Update the api * **container:** Update the api * **dataplex:** Update the api * **datastream:** Update the api * **dfareporting:** Update the api * **discoveryengine:** Update the api * **discoveryengine:** Update the api * **displayvideo:** Update the api * **drive:** Update the api * **file:** Update the api * **firebaseml:** Update the api * **firebaseml:** Update the api * **gkebackup:** Update the api * **iam:** Update the api * **integrations:** Update the api * **looker:** Update the api * **merchantapi:** Update the api * **merchantapi:** Update the api * **mybusinessbusinessinformation:** Update the api * **mybusinessverifications:** Update the api * **networkmanagement:** Update the api * **networkmanagement:** Update the api * **networksecurity:** Update the api * **osconfig:** Update the api * **redis:** Update the api * **redis:** Update the api * **retail:** Update the api * **retail:** Update the api * **searchads360:** Update the api * **securitycenter:** Update the api * **serviceconsumermanagement:** Update the api * **servicenetworking:** Update the api * **serviceusage:** Update the api * **storage:** Update the api * **transcoder:** Update the api * **videointelligence:** Update the api * **workloadmanager:** Update the api * **workloadmanager:** Update the api * **workstations:** Update the api * **iamcredentials:** Update the api * **migrationcenter:** Update the api ++++ python-hypothesis: - Update to 6.138.13 * text() now occasionally generates from a preselected list of strings which are likely to find bugs. * Improves input validation for several strategies in our pandas extra, so that they raise a helpful InvalidArgument rather than OverflowError. * New "hypothesis-urandom" backend, which draws randomness from /dev/urandom instead of Python’s PRNG. * randoms() no longer produces 1.0, matching the exclusive upper bound of random.Random.random * Nesting @given inside of @given is now a HealthCheck failure. * Add is_hypothesis_test(), for third-party libraries which want to determine whether a test has been defined with Hypothesis. * Add on_observation() to the internal alternative backends interface. * New hypothesis.extra.django.SimpleTestCase * New run_conformance_test(), for use in testing implementations of alternative backends. * Fixes a substantial performance regression in stateful tests from computing string representations, present since version 6.131.20. * Improves the thread safety of many functions and decorators. * Before this release, Hypothesis did not require that super().__init__() be called in SearchStrategy subclasses. Subclassing SearchStrategy is not supported or part of the public API, but if you are subclassing it anyway, you will need to make sure to call super().__init__(). * When a failure found by an alternative backend does not reproduce under the Hypothesis backend, we now raise FlakyBackendFailure. * When a test is executed concurrently from multiple threads, DeadlineExceeded is now disabled. * Add specified callback methods to the observability interface. The previous TESTCASE_CALLBACKS is deprecated. * Add support for Python 3.14. ++++ python-libvirt-python: - Update to 11.7.0 - Add all new APIs and constants in libvirt 11.7.0 ++++ python-maturin: - Update to 1.9.4 * downgrade manylinux version for riscv64 by @ffgan in #2709 * Fix calculation of platform tag for FreeBSD by @michael-o in #2711 * Add builtin sysconfigs for GraalPy by @msimacek in #2716 * Add use-base-python option to pyproject.toml by @SquidDev in #2717 * fix clippy warnings by @alex in #2724 * Fix Target::get_python_arch comment (#2712) by @michael-o in #2726 * Set PYO3_BUILD_EXTENSION_MODULE env var when building pyo3 extension modules by @alex in #2723 - regenerate vendor tarball to fix CVE-2025-58160 (bsc#1249011) ++++ python-msal: - Update to version 1.33.0 * Managed Identity on Service Fabric supports specifying client_capabilities and claims_challenge (#791) * Broker support on Linux and WSL. (#766) * A byproduct of this is that broker on all platforms will support Python 3.13. (#823) ++++ python-pycxx: - Fix broken build to preserve the old behaviour ++++ python-pygit2: - Update to 1.18.2 1.18.2 (2025-08-16) - ------------------------ - Add support for almost all global options - Now it's possible to set `Submodule.url = url` - New `RemoteCallbacks.push_negotiation(...)` - New optional boolean argument `connect` in `Remote.ls_remotes(...)` - New `Remote.list_heads(...)` returns a list of `RemoteHead` objects - Documentation fixes - Typing improvements Deprecations: - `Remote.ls_remotes(...)` is deprecated, use `Remote.list_heads(...)` 1.18.1 (2025-07-26) - ------------------------ - Update wheels to libgit2 1.9.1 and OpenSSL 3.3 - New `Index.remove_directory(...)` - New `Index.add_conflict(...)` - Now `Repository.merge_file_from_index(...)` returns a `MergeFileResult` object when called with `use_deprecated=False` - Typing improvements Deprecations: - At some point in the future `use_deprecated=False` in `Repository.merge_file_from_index(..., use_deprecated=False)` will be the default. 1.18.0 (2025-04-24) - ------------------------ - Upgrade Linux Glibc wheels to `manylinux_2_28` - Add `RemoteCallbacks.push_transfer_progress(...)` callback - New `bool(oid)` - Now `Repository.merge(...)` accepts a commit or reference object - New `threads` optional argument in `Remote.push(...)` - New `proxy` optional argument in `clone_repository(...)` - New optional arguments `context_lines` and `interhunk_lines` in `Blob.diff(...)` ; and now `Repository.diff(...)` honors these two arguments when the objects diffed are blobs. - Now `Tree.diff_to_workdir(...)` accepts keyword arguments, not just positional. - Fix when a reference name has non UTF-8 chars - Fix condition check in `Repository.remotes.rename(...)` - Add codespell workflow, fix a number of typos - Documentation and typing - CI: Use ARM runner for tests and wheels - Build and CI updates Deprecations: - Passing str to `Repository.merge(...)` is deprecated, instead pass an oid object (or a commit, or a reference) Breaking changes: - Keyword argument `flag` has been renamed to `flags` in `Blob.diff(...)` and `Blob.diff_to_buffer(...)` ++++ python-ruff: - Update vendor tarball to fix CVE-2025-58160 (bsc#1249011) ++++ python-uv: - Update vendor tarball to fix CVE-2025-58160 (bsc#1249011) ++++ qt6-declarative-docs: - Disable LTO on armv6/7 as a workaround - boo#1249054 ++++ regclient: - Update to version 0.9.2: * Security: - xz upgrade fixes CVE-2025-58058 (PR 989) * Miscellaneous: - Fix CLI lint errors. (PR 983) - Cleanup version output. (PR 985) - Dockerfile cleanup. (PR 986) ++++ river: - Update to version 0.3.12: * build: bump version to 0.3.12 * Cursor: clear pointer focus on hide * river: run 0.15 zig fmt * build: update to Zig 0.15 * build: bump zig-wlroots version * build: bump version to 0.3.12-dev * build: bump version to 0.3.11 * build: switch to zig-wlroots tag * ext-foreign-toplevel-list-v1: implement protocol * Seat: ignore virtual keyboards until keymap set * Keyboard: don't add virtual keyboards to group * Cursor: fix formatting * build: bump version to 0.3.11-dev * build: bump version to 0.3.10 * View: workaround wlr_box_intersect() quirk * XwaylandView: remove set_decorations listener on unmap * XwaylandView: drop set_decorations link in handleDestroy() * LayerSurface: drop new_popup link in handleDestroy() * river: drop wl_drm support * linux-drm-syncobj: implement protocol * linux-dmabuf: re-enable per-surface feedback * build: update to wlroots 0.19 * Seat: put all keyboards in a single group * Cursor: restore previous image on unhide * build: bump version to 0.3.10-dev * build: bump version to 0.3.9 * build: eliminate duplicate version string * security-context: fix assertion failure * build: bump version to 0.3.9-dev * build: bump version to 0.3.8 * build: update to zig 0.14.0 * Xwayland: don't inherit rlimit changes from river * build: bump version to 0.3.8-dev ++++ rofi: - Update to 2.0.0: * Removal of autotools build system * To help bug reports, we added the command rofi -info * Redraw on startup #2165 * Close on click out of window #2158 * No IMDKIT support in wayland ++++ selinux-policy: - Update to version 20250902: * Label /usr/lib/systemd/systemd-ssh-issue with systemd_ssh_issue_exec_t * Allow stalld map sysfs files * Allow NetworkManager-dispatcher-winbind get pidfs attributes * Allow openvpn create and use generic netlink socket * policy_capabilities: remove estimated from released versions * policy_capabilities: add stub for userspace_initial_context * add netlink_xperm policy capability and nlmsg permission definitions * policy_capabilities: add ioctl_skip_cloexec * selinux-policy: add allow rule for tuned_ppd_t * selinux-policy: add allow rule for switcheroo_control_t * Label /run/audit with auditd_var_run_t * Allow virtqemud start a vm which uses nbdkit * Add nbdkit_signal() and nbdkit_signull() interfaces * Fix insights_client interfaces names * Add insights_core and insights_client interfaces * dist/targeted/modules.conf: enable slrnpull module * Allow bootupd delete symlinks in the /boot directory * Allow systemd-coredumpd capabilities in the user namespace * Allow openvswitch read virtqemud process state - Syncing with upstream rawhide selinux-policy up to: * 17956d28c011c35560e75a7293ac5924df57a1ee - Update embedded container-selinux version to commit: * 5997aa524734886d35e187f52de2546f25c9f500 (version 2.241.0) ++++ syncthing: - Update to 2.0.4 * Fixes fix(cmd): only start temporary API server during migration if it's enabled by @pixelspark in #10284 fix(model): consider MaxFolderConcurrency when calculating number of hashers by @tomasz1986 in #10285 fix(model): consider number of CPU cores when calculating hashers on interactive OS (#10284) by @tomasz1986 in #10286 fix(db): apply all migrations and schema in one transaction by @calmh in #10323 fix(model): correctly handle block-aligned empty sparse files by @calmh in #10332 fix(syncthing): apply folder migrations with temporary API/GUI server by @calmh in #10330 * Other chore(db): adjust db bench name to improve benchstat grouping by @imsodin in #10283 chore(db): cleanup DB in tests and remove OpenTemp by @imsodin in #10282 build: use Go 1.24 tools pattern by @calmh in #10281 chore(db): avoid rowid for blocks and blocklists by @bt90 in #10315 refactor(db): slightly improve insert performance by @calmh in #10318 chore(gui): use steps of 1024 KiB for bandwidth rate limits by @tomasz1986 in #10316 chore(gui): use step of 3600 for versions cleanup interval by @tomasz1986 in #10317 chore(db): benchmark output, migration blocks/s output by @calmh in #10320 chore(db): update schema version in the same transaction as migration by @imsodin in #10321 chore(db): migration for previous commits by @calmh in #10319 ++++ talhelper: - Update to version 3.0.34: * fix(deps): update module github.com/spf13/cobra to v1.10.1 * docs: update CLI reference documentation (#1172) * chore(deps): update dependency siderolabs/talos to v1.11.0 * chore(github-action): update renovatebot/github-action action to v43.0.10 * chore(container): update ghcr.io/siderolabs/talosctl docker tag to v1.11.0 * fix(deps): update module github.com/siderolabs/talos/pkg/machinery to v1.11.0 * chore(schema): update talos-extensions.yaml JSON schema (#1171) * chore(schema): update talos-extensions.yaml JSON schema (#1164) * chore(schema): update talos-extensions.yaml JSON schema * chore(schema): update talos-extensions.yaml JSON schema * chore(container): update registry.k8s.io/kubectl docker tag to v1.34.0 * chore(schema): update talos-extensions.yaml JSON schema (#1161) * fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.33 * feat: update Scoop for talhelper version v3.0.33 * feat: update flake (#1158) ++++ talosctl: - update to 1.11.0: https://github.com/siderolabs/talos/releases/tag/v1.11.0 * no CLI-related changes in the Changelog * Dependency changes - cloud.google.com/go/compute/metadata v0.6.0 -> v0.7.0 - github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.0 -> v1.18.1 - github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.9.0 -> v1.10.1 - github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.3.1 -> v1.4.0 - github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.3.1 -> v1.4.0 - github.com/aws/aws-sdk-go-v2/config v1.29.14 -> v1.29.17 - github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 -> v1.16.32 - github.com/aws/aws-sdk-go-v2/service/kms v1.38.3 -> v1.41.2 - github.com/aws/smithy-go v1.22.3 -> v1.22.4 - github.com/containerd/containerd/api v1.8.0 -> v1.9.0 - github.com/containerd/containerd/v2 v2.0.5 -> v2.1.4 - github.com/containernetworking/plugins v1.6.2 -> v1.7.1 - github.com/cosi-project/runtime v0.10.2 -> v1.10.7 - github.com/detailyang/go-fallocate 432fa640bd2e new - github.com/docker/cli v28.0.4 -> v28.3.3 - github.com/docker/docker v28.0.4 -> v28.3.3 - github.com/equinix-ms/go-vmw-guestrpc v0.1.1 new - github.com/foxboron/go-uefi 69fb7dba244f -> a3183a1bfc84 - github.com/g0rbe/go-chattr v1.0.1 new - github.com/google/cadvisor v0.52.1 -> v0.53.0 - github.com/google/cel-go v0.24.1 -> v0.26.0 - github.com/google/go-containerregistry v0.20.3 -> v0.20.6 - github.com/google/go-tpm v0.9.3 -> v0.9.5 - github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.1 -> v2.3.2 - github.com/hetznercloud/hcloud-go/v2 v2.21.0 -> v2.22.0 - github.com/jsimonetti/rtnetlink/v2 v2.0.3 -> v2.0.5 - github.com/klauspost/cpuid/v2 v2.2.10 -> v2.3.0 - github.com/linode/go-metadata v0.2.1 -> v0.2.2 - github.com/miekg/dns v1.1.65 -> v1.1.67 - github.com/pkg/xattr v0.4.10 -> v0.4.12 - github.com/prometheus/procfs v0.16.0 -> v0.17.0 - github.com/rivo/tview 949945f8d922 -> a4a78f1e05cb - github.com/safchain/ethtool v0.5.10 -> v0.6.1 - github.com/scaleway/scaleway-sdk-go v1.0.0-beta.33 -> v1.0.0-beta.34 - github.com/siderolabs/crypto v0.5.1 -> v0.6.3 - github.com/siderolabs/discovery-client v0.1.11 -> v0.1.13 - github.com/siderolabs/gen v0.8.0 -> v0.8.5 - github.com/siderolabs/go-api-signature v0.3.6 -> v0.3.7 - github.com/siderolabs/go-blockdevice/v2 v2.0.16 -> v2.0.19 - github.com/siderolabs/go-circular v0.2.2 -> v0.2.3 - github.com/siderolabs/go-kubernetes v0.2.21 -> v0.2.26 - github.com/siderolabs/go-pcidb v0.3.1 -> v0.3.2 - github.com/siderolabs/pkgs v1.10.0-5-g48dba3e -> v1.11.0-15-g2ac857a - github.com/siderolabs/siderolink v0.3.13 -> v0.3.15 - github.com/siderolabs/talos/pkg/machinery v1.10.0 -> v1.11.0 - github.com/siderolabs/tools v1.10.0 -> v1.11.0-2-g8556c73 - github.com/spf13/pflag v1.0.6 -> v1.0.7 - github.com/ulikunitz/xz v0.5.12 -> v0.5.15 - go.etcd.io/etcd/api/v3 v3.5.21 -> v3.6.4 - go.etcd.io/etcd/client/pkg/v3 v3.5.21 -> v3.6.4 - go.etcd.io/etcd/client/v3 v3.5.21 -> v3.6.4 - go.etcd.io/etcd/etcdutl/v3 v3.5.21 -> v3.6.4 - golang.org/x/net v0.39.0 -> v0.42.0 - golang.org/x/oauth2 v0.29.0 -> v0.30.0 - golang.org/x/sync v0.13.0 -> v0.16.0 - golang.org/x/sys v0.32.0 -> v0.34.0 - golang.org/x/term v0.31.0 -> v0.33.0 - golang.org/x/text v0.24.0 -> v0.27.0 - golang.org/x/time v0.11.0 -> v0.12.0 - google.golang.org/grpc v1.71.1 -> v1.73.0 - k8s.io/api v0.33.0 -> v0.34.0 - k8s.io/apiextensions-apiserver v0.34.0 new - k8s.io/apimachinery v0.33.0 -> v0.34.0 - k8s.io/apiserver v0.33.0 -> v0.34.0 - k8s.io/client-go v0.33.0 -> v0.34.0 - k8s.io/component-base v0.33.0 -> v0.34.0 - k8s.io/cri-api v0.33.0 -> v0.34.0 - k8s.io/kube-scheduler v0.33.0 -> v0.34.0 - k8s.io/kubectl v0.33.0 -> v0.34.0 - k8s.io/kubelet v0.33.0 -> v0.34.0 - k8s.io/pod-security-admission v0.33.0 -> v0.34.0 - k8s.io/utils 4c0f3b243397 new - sigs.k8s.io/hydrophone b92baf7e0b04 -> v0.7.0 ++++ texlive-specs-m: - Increase pool_size and pool_free for both xmltex and pdfxmltex to get formats created and xmlto runing again (boo#1248830) ++++ wolfictl: - Update to version 0.38.14: * build(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 * build(deps): bump cloud.google.com/go/storage from 1.56.0 to 1.56.1 (#1732) * build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#1738) ++++ xournalpp: - Update to version 1.2.8: * Improved the behavior of selection tools. * Fixed various visual artifacts. * Fixed some behavior of Mouse+Keyboard combo devices. * Fixed filename extension stripping. * Fixed CLI using relative paths. * Fixed various crashes. * Made using GtkSourceView and Plugins proper CMake options. * Updated translations. - Drop xournalpp-return.patch: fixed upstream. ++++ xwayland-satellite: - Update to version 0.7 * Add hecs ECS for managing Wayland objects * Add supported -listenfd flag - Disable test for while: error E0432, E0433 ++++ zli: - Update to version 2.1.8: no CLI-related changes * Fix deps (#3343) ++++ zot-registry: - Update to version 2.1.8: * fix: close the `syncResult` channel by any goroutine that receives the data (#3348) * fix: gc for untagged docker manifests (#3349) * Fix deps (#3343) * chore: fix dependabot alerts (#3328) * chore: update notation version (#3316) * chore: fix dependabot alerts (#3312) * ci: selectively revert this runner (#3297) * chore(ci): update github runners to oci gh arc runners (#3293) * chore: fix dependabot alerts (#3292) ++++ zypp-gui: - Add 0001-work-with-zypp-parallel-package-download.patch: work with parallel package download. ------------------------------------------------------------------ ------------------ 2025-9-1 - Sep 1 2025 ------------------- ------------------------------------------------------------------ ++++ OpenImageIO: - Update to 3.0.10.0 - exr: Support for OpenEXR 3.4's new compression types for HTJ2K [#4871] (by Todica Ionut) - deps: Ffmpeg 8 support #4870 - ci: Add a VFX Platform 2026 CI job #4856 - ci: Bump webp and openexr for "latest versions" test #4861 ++++ SDL2: - Update to release 2.32.10 * Report the correct device audio format when using Pipewire. * Support the "ambient" value for SDL_HINT_AUDIO_CATEGORY on iOS. * Improved thumbstick range for Nintendo Switch Pro Controllers. * Fixed loading user calibration for Nintendo Switch Pro Controllers. - Add alsa-sig.patch to cure a build failure ++++ wpewebkit: - Update to version 2.48.5: + Fix several crashes. - Changes from version 2.48.4: + Improve emoji font selection with USE_SKIA=ON. + Improve playback of multimedia streams from blob URLs. + Integrate with the system logging service on Android, allowing configuring the overall log level and log channels using the log.tag.WPEWebKit and debug.log.WPEWebKit system properties. + Fall back to display-wide DMA-BUF formats when failing to get the preferred formats for a given WPEToplevel. + Fall back to using libdrm to detect device nodes to use in the WPEPlatform headless and Wayland backends. + Fix WebGL initialization when using WPEPlatform in some setups i.e. Mali GPUs with the proprietary driver. + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and USE_SYSPROF_CAPTURE=ON. + Fix the build on LoongArch with USE_SKIA=ON. + Fix several crashes and rendering issues. - Changes from version 2.48.3: + Fix a crash introduced by the new threaded rendering implementation using Skia API. + Improve rendering performance by recording layers once and replaying every dirty region in different worker threads. + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0. + Fix a reference cycle in webkitmediastreamsrc preventing its disposal. - Changes from version 2.48.2: + Enable CSS Overscroll Behavior by default. + Change threaded rendering implementation to use Skia API instead of WebCore display lists that were not thread safe. + Fix rendering when device scale factor change comes before the web view geometry update. + Fix network process crash on exit. + Fix the build with ENABLE_RESOURCE_USAGE=OFF. + Fix several crashes and rendering issues. - Changes from version 2.48.1: + Limit the data stored in session state. + Remove the empty area below the title bar in Web Inspector when not docked. + Improve the robustness of WebAudio and WebCodecs multimedia support. + Fix the build with GST_DISABLE_GST_DEBUG. + Fix the build with GStreamer versions older than 1.20. + Fix the build with libc++ version 19 or newer. + Fix the build with video support disabled (ENABLE_VIDEO=OFF). + Fix the build with Clang 20. - Changes from version 2.48.0: + Fix YouTube playback by using a different User-Agent quirk. + Avoid adding redundant tracks to MediaPlayer. + Propagate the font's computed locale to HarfBuzz. + Fix missing default values for the key repeat delay, key repeat interval, and drag threshold in WPESettings. + Fix missing registration for the DRM scale setting in WPESettings. + Fix the build on non-Linux platforms. + Fix several crashes and rendering issues. - Add flite-devel BuildRequires: New dependency. - Drop libWPEWebInspectorResources sub-package, no longer built. - No longer disable LTO for ppc64le, disable LTO for 32bit arm. ++++ agama-web-ui: - The Chinese languages do not include the territory (bsc#1248826). ++++ busybox-links: - Add busybox-ether-wake replacing downstream ether-wake from net-tools (boo#1249034). - Provide support for net-tools-dummy-ether-wake (bsc#1242048). ++++ crmsh: - Update to version 5.0.0+20250901.a7c653f5: * Dev: unittests: Adjust unit test for previous commit * Dev: sbd: Check if fence-agents-sbd is installed on join node * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage - Update to version 5.0.0+20250901.263ead3c: * Dev: testcases: Adjust testcases for previous commit * Dev: ui_node: Don't unpack node info from node_state for `node show` command ++++ dcmtk: - Add upstream change (CVE-2025-9732, boo#1248995) * CVE-2025-9732.patch ++++ deno: - Update to version 2.4.4: * 2.4.4 (#30396) * fix(unstable): lint node properties should be enumerable (#30391) * chore: update lint PR title name and job name (#30370) * feat(kv): implement custom inspect for AtomicOperation (#30077) * fix(tests): use correct path separator on unix for code_cache cleanup.ts (#30378) * fix: android build (#30360) * fix(unstable): update deno_tunnel for better reconnect errors (#30381) * fix(ext/node): make some `os` exported properties read only (#30374) * fix: upgrade deno_core to 0.355.0 (#30352) * chore: improve pr title verification (#30367) * fix(ext/node): accept `base64url` encoding on StringDecoder (#30366) * fix(ext/node): handle large buffer correctly (#30369) * chore: Rust 1.89.0 (#30364) * fix: upgrade @node/types to 24 (#30343) * fix: reduce progress bar flickering (#30349) * chore: cleanup unused dependencies (#30059) * fix(io): do not autoClose stdin readable stream (#30345) * chore: remove zlib feature from flate2 dep in npm_cache (#30348) * perf: reduce heap allocations and memory creating cjs wrapper module (#30344) * fix(publish): remove incorrect `relative-package-import` diagnostic when root of workspace is package (#30333) * refactor: improve getting WatchFlags/WatchFlagsWithPaths (#30337) * refactor: move fill_graph into deno_resolver (#30338) * fix(compile): ensure `Deno.build.standalone` is set in workers (#30335) * fix(ext/node): avoid panic when `crypto.randomInt` has no arguments (#30314) * fix(lsp): use referrer compiler options for node_modules files (#30275) * feat(ext/kv): allow specifying default path and path prefix (#30320) * fix(ext/node): use primordials in `ext/node/polyfills/internal_binding/buffer.ts` (#30287) * feat(unstable): add json repl (#30307) * fix(ext/node): use custom allocator for brotli (#30277) * fix: make unmet peer dep error message less verbose (#30312) * fix(ext/node): parse fs open options correctly (#30300) * chore: rewrite tls_wrap internals to JS (#30303) * fix(check): do not surface code resolution errors in declaration file dependencies (#30296) * fix(ext/node): assign 'ERR_BUFFER_TOO_LARGE' to codes (#30311) * fix(ext/node): incorrect `ERR_INVALID_ARG_VALUE` constructor arguments position (#30309) * fix: improve handling of linked jsr packages in lockfile (#30289) * feat(ci): migrate to Cirrus medium runners (#30070) * perf(napi): misc napi optimizations (#30291) * fix(ext/node): worker_threads handles basic `require` calls (#30279) * Revert "fix(ext/node): support TLS for unix sockets" (#30284) * chore(node): resolution mode for cjs export analysis should be require (#30252) * feat(unstable): allow setting headers on EventSource (#30278) * fix(ext/node): support TLS for unix sockets (#30169) * perf: Use more efficient structuredClone API (#30258) * fix(bundle): support importing directories with a package.json from an es module when bundling (#30273) * fix(ext/node): define fs constants correctly across platforms (#30113) * chore(ci): mark some tests flaky (#30268) * fix(update): update version reqs even if locked to latest version (#30249) * chore: remove wait dependency in scripts (#30267) * fix(ext/node): `fs.open` and `fs.openSync` compatibility (#30191) * fix(bundle): require of sub directory in npm package should consult package.json (#30253) * fix(ext/node): use primordials in `ext/node/polyfills/internal_binding/node_file.ts` (#30066) * fix(ext/node): `fs.rename` and `fs.renameSync` compatibility (#30245) * fix(ext/node): fs readv promisify compatibility (#30149) * refactor: remove some url to string clones (#30247) * fix(bundle): use non-node conditions for --platform=browser (#30250) * fix(ext/node): `fs.unlink` and `fs.unlinkSync` compatibility (#30257) ++++ docker: - Update warnings and errors related to "docker buildx ..." so that they reference our openSUSE docker-buildx packages. + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch - Enable building docker-buildx for SLE15 systems with SUSEConnect secret injection enabled. PED-12534 PED-8905 bsc#1247594 As docker-buildx does not support our SUSEConnect secret injection (and some users depend "docker build" working transparently), patch the docker CLI so that "docker build" will no longer automatically call "docker buildx build", effectively making DOCKER_BUILDKIT=0 the default configuration. Users can manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order to opt-in to using docker-buildx. Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0 explicitly. In order to inject SCC credentials with docker-buildx, users should use RUN --mount=type=secret,id=SCCcredentials zypper -n ... in their Dockerfiles, and docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file . when doing their builds. + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch ++++ element-desktop: - Version 1.11.110 [#]# ✨ Features * Hide recovery key when re-entering it while creating or changing it (https://github.com/element-hq/element-web/pull/30499). Contributed by @andybalaam. * Add `?no_universal_links=true` to OIDC url so EX doesn't try to handle it (https://github.com/element-hq/element-web/pull/29439). Contributed by @t3chguy. * Show a blue lock for unencrypted rooms and hide the grey shield for encrypted rooms (https://github.com/element-hq/element-web/pull/30440). Contributed by @langleyd. * Add support for Module API 1.4 (https://github.com/element-hq/element-web/pull/30185). Contributed by @t3chguy. * MVVM - Introduce some helpers for snapshot management (https://github.com/element-hq/element-web/pull/30398). Contributed by @MidhunSureshR. [#]# 🐛 Bug Fixes * A11y: move focus to right panel when opened (https://github.com/element-hq/element-web/pull/30553). Contributed by @florianduros. * Fix e2e warning icon should be white (https://github.com/element-hq/element-web/pull/30539). Contributed by @florianduros. * Remove NoOneHere disabled reason. (https://github.com/element-hq/element-web/pull/30524). Contributed by @toger5. * Fix downloading files with authenticated media API (https://github.com/element-hq/element-web/pull/30520). Contributed by @t3chguy. * Fix call permissions check confusion around element call (https://github.com/element-hq/element-web/pull/30521). Contributed by @t3chguy. * Fix line wrap around emoji verification (https://github.com/element-hq/element-web/pull/30523). Contributed by @t3chguy. * Don't highlight redacted events (https://github.com/element-hq/element-web/pull/30519). Contributed by @t3chguy. * Fix matrix.to links not being handled in the app (https://github.com/element-hq/element-web/pull/30522). Contributed by @t3chguy. * Fix issue of new room list taking up the full width (https://github.com/element-hq/element-web/pull/30459). Contributed by @langleyd. * Fix widget persistence in React development mode (https://github.com/element-hq/element-web/pull/30509). Contributed by @robintown. * Fix widget initialization in React development mode (https://github.com/element-hq/element-web/pull/30463). Contributed by @robintown. ++++ element-web: - Version 1.11.110 [#]# ✨ Features * Hide recovery key when re-entering it while creating or changing it (https://github.com/element-hq/element-web/pull/30499). Contributed by @andybalaam. * Add `?no_universal_links=true` to OIDC url so EX doesn't try to handle it (https://github.com/element-hq/element-web/pull/29439). Contributed by @t3chguy. * Show a blue lock for unencrypted rooms and hide the grey shield for encrypted rooms (https://github.com/element-hq/element-web/pull/30440). Contributed by @langleyd. * Add support for Module API 1.4 (https://github.com/element-hq/element-web/pull/30185). Contributed by @t3chguy. * MVVM - Introduce some helpers for snapshot management (https://github.com/element-hq/element-web/pull/30398). Contributed by @MidhunSureshR. [#]# 🐛 Bug Fixes * A11y: move focus to right panel when opened (https://github.com/element-hq/element-web/pull/30553). Contributed by @florianduros. * Fix e2e warning icon should be white (https://github.com/element-hq/element-web/pull/30539). Contributed by @florianduros. * Remove NoOneHere disabled reason. (https://github.com/element-hq/element-web/pull/30524). Contributed by @toger5. * Fix downloading files with authenticated media API (https://github.com/element-hq/element-web/pull/30520). Contributed by @t3chguy. * Fix call permissions check confusion around element call (https://github.com/element-hq/element-web/pull/30521). Contributed by @t3chguy. * Fix line wrap around emoji verification (https://github.com/element-hq/element-web/pull/30523). Contributed by @t3chguy. * Don't highlight redacted events (https://github.com/element-hq/element-web/pull/30519). Contributed by @t3chguy. * Fix matrix.to links not being handled in the app (https://github.com/element-hq/element-web/pull/30522). Contributed by @t3chguy. * Fix issue of new room list taking up the full width (https://github.com/element-hq/element-web/pull/30459). Contributed by @langleyd. * Fix widget persistence in React development mode (https://github.com/element-hq/element-web/pull/30509). Contributed by @robintown. * Fix widget initialization in React development mode (https://github.com/element-hq/element-web/pull/30463). Contributed by @robintown. ++++ eza: - Update to 0.23.1: Bug Fixes: * Restore unsafe blocks for libc major/minor device id * cargo deb metadata to LICENSE.txt Documentation: * Improve man page description of flags with default values * "default behavior" means eza's default behavior, not an option's default value Features: * Added completion ++++ gap-fplsa: - Update to release 1.2.7 * GCC 15 support - Delete c99.patch ++++ gap-semigroups: - Update to release 5.5.4 * A technical change for compatibility with gap-digraphs 1.11.0. * Removed the use of the SmallGroup package in the test suite. ++++ gdm: - Move migration marker from /var/tmp to /run/gdm (boo#1249017). ++++ gnome-terminal: - Drop gnome-shell BuildRequires: No longer needed. ++++ icon-naming-utils: - Modernize spec-file by calling spec-cleaner yet again + add missing license file. - Stop passing libexecdir to configure, we now uselibexecdir in distro. ++++ installation-images-MicroOS: - merge gh#openSUSE/installation-images#770 - etc: fix path for onboard_usb_dev in module.list (bsc#1244269) - 17.162 - merge gh#openSUSE/installation-images#769 - etc: add qnoc-sa8775p kernel module for Qualcomm RB8 device ++++ installation-images-openSUSE: - merge gh#openSUSE/installation-images#770 - etc: fix path for onboard_usb_dev in module.list (bsc#1244269) - 17.162 - merge gh#openSUSE/installation-images#769 - etc: add qnoc-sa8775p kernel module for Qualcomm RB8 device ++++ iso-codes: - Update to version 4.18.0: + Replace FSF postal address with their website + Rename Chinese translations. + Updated translations. - Changes from version 4.17.0: + Add letter 'g' to conversion script for Tatar + Regenerate cyrillic Tatar from latin Tatar + Update Romanian translation and remove most pre- and suffixes + Updated translations. ++++ jspecify: - Specify sources utf-8 encoding for javadoc generation ++++ python-bqplot: - Update "tmp" js vendored package to 0.2.5 (CVE-2025-54798, bsc#1247788) ++++ wpebackend-fdo: - Update to version 1.16.0: + Fix the build with GCC 15. - Drop wpebackend-fdo-gcc15.patch: Fixed upstream. ++++ libressl: - Move default config to /etc/libressl. ++++ ncurses: - Add ncurses patch 20250830 + in-progress work to merge MinGW/Windows port. + build-fix for experimental Windows configuration (report by Kirill Makurin). + improve pattern used for configure --with-xterm-kbs option. - Add ncurses patch 20250823 + improve style of MKterminfo.sh script (patches by Branden Robinson). + improve formatting/style of manpages (patches by Branden Robinson). + remove redundant definition of ConsoleInfo. + change scope of TTY, GET_TTY and SET_TTY to ncurses-internals - Add ncurses patch +20250816 + remove redundant reference to compiler in libtool configuration of mk-1st.awk (report by Lorinczy Zsigmond). + build-fixes for --enable-exp-win32 configuration + improve formatting/style of manpages (patches by Branden Robinson). - Fix build of tack as with patch 20250823 some parts of term.h became ncurses internal (including termios.h e.g.) - Correct hunk offsets of patch ncurses-6.4.dif ++++ libreoffice: - Update to 25.8.1.1: * Release notes: https://wiki.documentfoundation.org/Releases/25.8.0/RC1 https://wiki.documentfoundation.org/Releases/25.8.0/RC2 https://wiki.documentfoundation.org/Releases/25.8.0/RC3 https://wiki.documentfoundation.org/Releases/25.8.0/RC4 https://wiki.documentfoundation.org/Releases/25.8.1/RC1 - Update bundled libraries: * pdfium-6764.tar.bz2 -> pdfium-7012.tar.bz2 * skia-m130-3c64459d5df2fa9794b277f0959ed8a92552bf4c.tar.xz -> skia-m136-28685d899b0a35894743e2cedad4c9f525e90e1e.tar.xz ++++ snowball: - Updated to version 3.0.1: + The __init__.py in 3.0.0 was incorrectly generated due to a missing build dependency and the list of algorithms was empty, (gh#snowballstem/snowball#229, gh#snowballstem/snowball#230 and gh#snowballstem/snowball#231). + Add trove classifiers for Armenian and Yiddish which have now been registered with PyPI, (gh#snowballstem/snowball#228). - Changes from version 3.0.0: + Numerous bug fixes and improvements, see full details in /usr/share/doc/packages/snowball/NEWS. - Rebase build-options.diff, python-dist.diff and shared-library.diff. - Spec file clean up and add patch attributions. ++++ wf-config: - Update to version 0.10.0: * Use safe list for updated handlers. * safe-list.hpp: remove unused includes. * use ISO date format for log timestamps. ++++ mingw32-filesystem: - Update to version 20250901 - Add providing support for metainfo and desktop files ++++ mingw64-filesystem: - Update to version 20250901 - Add providing support for metainfo and desktop files ++++ net-tools: - Drop ether-wake binary in favor of wol. It was never part of the upstream net-tools, and we have ether-wake in busybox. Bump rpm version to 2.10.0.0.1 to make a seamless update possible (boo#1249034, drop 0001-Add-ether-wake-binary.patch). - Provide support for net-tools-dummy (bsc#1242048). - Remove net_tool Provides/Obsoletes for SuSE Linux 7 and SLES 7. ++++ netty-tcnative: - Upgrade to version 2.0.73 Final * No formal changelog present ++++ obs-service-cargo: - Switch back dependency to openssl from libressl. Otherwise, this will cause it to have conflicting ssl dependencies between `cargo` and itself. ++++ patterns-aeon: - Remove tpm2.0-abrmd as it's deprecated (boo#1248991) ++++ patterns-tik: - Remove tpm2.0-abrmd as it's deprecated (boo#1248991) ++++ podman: - Do not recommend apparmor-parser and apparmor-abstractions: if the system is using apparmor, those packages will be present. If the system is selinux enabled, we don't want to recommend those packages just becuase we build support for apparmor into the package. ++++ python-bandit: - Convert to libalternatives on SLE-16-based and newer systems only - Fix tests with libalternatives ++++ python-azure-communication-phonenumbers: - New upstream release + Version 1.4.0 + For detailed information about changes see the CHANGELOG.md file provided with this package - Update Requires from setup.py ++++ python-azure-mgmt-compute: - New upstream release + Version 36.0.0 + For detailed information about changes see the CHANGELOG.md file provided with this package - Update Requires from setup.py ++++ python-azure-mgmt-containerservice: - New upstream release + Version 39.1.0 + For detailed information about changes see the CHANGELOG.md file provided with this package - Update Requires from setup.py ++++ python-azure-mgmt-netapp: - New upstream release + Version 13.7.0 + For detailed information about changes see the CHANGELOG.md file provided with this package - Update Requires from setup.py ++++ python-azure-mgmt-web: - New upstream release + Version 10.0.0 + For detailed information about changes see the CHANGELOG.md file provided with this package - Update Requires from setup.py ++++ python-cryptography: - Add Make-unsafe-subinterpreter-support-available-via-cfg.patch to allow ceph-mgr to load modules (boo#1248987) ++++ python-eventlet: - Update to 0.40.3 * [SECURITY] Fix request smuggling vulnerability by discarding trailers (#1062) (CVE-2025-58068, bsc#1248994) ++++ python-greenlet: - Update to 3.2.4 * Various small build/test changes for less common configurations (e.g., building CPython with assertions enabled but NOT debugging), contributed by Michał Górny. Note that while greenlet will BUILD in a free-threaded Python, it will cause the GIL to be allocated and used, and memory may leak. Also note that these configurations are not tested by this project's CI. * Fix an assertion error on debug builds of Python 3.14 when using the experimental JIT. See PR 460. ++++ raw-thumbnailer: - Update to version 48.0.0+git5.e8f0079: + cargo: format + Update to libopenraw 0.4.0-alpha.11 - Update to version 48.0.0: + Update to libopenraw-0.4.0-alpha.10 + Better previews for RW2 and Ricoh DNG files. ++++ rekor: - Update to version 1.4.1 (jsc#SLE-23476):: * build(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#2596) CVE-2025-58058: rekor: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory: (bsc#1248910) * build(deps): Bump github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1 CVE-2025-29923: rekor: github.com/redis/go-redis: potential out of order responses when `CLIENT SETINFO` times out during connection establishment (bsc#1241153) * use less expensive gRPC call to implement GetLeafAndProofByHash (#2581) * move to per-shard trillian client manager (#2564) * use cheaper gRPC endpoint when we already have the inclusion proof (#2580) * simplify hash and signature verification in rekord type (#2579) * return correct error if GetLeafAndProofByHash fails (#2574) ++++ sbctl: - bsc#1248949 (CVE-2025-58058): Bump xz to 0.5.14 ++++ stress-ng: - update to 0.19.04: * mmaprandom - extensive memory map random page mapping/unmapping stressor * chyperbolic - complex hyperbolic math function exerciser * ctrig - complex trigonometric math function exerciser * --limit-as - limit virtual memory (address space) * --limit-data - limit data segment (initialized data, uninitialized data, and heap) * --limit-stack - limit stack size ++++ yast2-trans: - Update to version 84.87.20250831.6f5c5e028e: * Translated using Weblate (Japanese) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Update translation files * New POT for text domain 'auth-client'. * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (German) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) ------------------------------------------------------------------ ------------------ 2025-8-31 - Aug 31 2025 ------------------- ------------------------------------------------------------------ ++++ fastfetch: - Update to 2.51.1: Bugfixes: * Fix building on macOS 14 or older; no functional changes - Update to 2.51.0: Changes: * Fastfetch now requires yyjson 0.12 to build when using `-DENABLE_SYSTEM_YYJSON=ON` * The Disk module no longer shows hyperlink mountpoints by default, which cause issues on some real consoles (Disk) - Instead, the custom key for the Disk module now supports `{mountpoint-link}` and `{name-link}` to show hyperlinks for mountpoints and names. For example, `{ "type": "disk", "key": "Disk ({mountpoint-link})" }` can be used to restore the old behavior. Features: * Adds `succeeded` module condition to JSONC config. When set to `false`, the module will only run if the last module failed (gh#fastfetch-cli/fastfetch#1908) * By upgrading to yyjson 0.12, fastfetch now adds JSON5 format support for configuration files (gh#fastfetch-cli/fastfetch#1907) - JSON5 is a superset of JSONC that allows unquoted keys, single quotes, multi-line strings, etc., and is fully compatible with JSONC and strict JSON. - To use JSON5, simply name your config file with a .json5 extension. The .jsonc extension is still supported and used as the default extension for better IDE syntax highlighting support. * Fastfetch has been ported to GNU/Hurd (gh#fastfetch-cli/fastfetch#1895) * Built-in logos now honor logo.width (gh#fastfetch-cli/fastfetch#1905) - When its value is larger than the actual logo width, the logo will be padded with spaces to the right * Adds Trinity DE version detection (gh#fastfetch-cli/fastfetch#1917) * Adds formatted free and available disk size fields (gh#fastfetch-cli/fastfetch#1929) - `{size-free}`: free size of the disk - `{size-available}`: available size of the disk - See askubuntu.com for the difference between free and available size * Adds x86_64 micro-architecture level detection (gh#fastfetch-cli/fastfetch#1928) - Useful when installing software that requires or is optimized for specific CPU features. E.g., CachyOS - Exposed via `{march}` in custom format * Adds Aarch64 micro-architecture level detection (CPU) - Supported on Linux (including Android), macOS and Windows - This is not fully accurate because there are many optional features across different levels, and not all levels are detectable. - Exposed via `{march}` in custom format. * Adds shepherd detection support (InitSystem, Linux) Bugfixes: * Fixes possible default route detection failure when the route table is very large (gh#fastfetch-cli/fastfetch#1919) * Fixes twin WM detection (gh#fastfetch-cli/fastfetch#1917) * Various fixes for Android support - Corrects WM name for Android (WM, Android) - Fixes battery temperature detection when running in ADB (Battery, Android) - Adds CPU and GPU temperature detection support (CPU, Android) Logos: * Adds AerynOS ++++ fritzing: - Added translations via lang package. ++++ ghc-hslogger: - Update hslogger to version 1.3.2.0. [#]## 1.3.2.0 _2025-08-30, Andreas Abel_ - Drop flag `network--GT-3_0_0` and support for `network < 3` - Allow newer `time` - Tested with GHC 8.0 - 9.14 alpha1 ++++ ghc-resolv: - Update resolv to version 0.2.0.3. [#]# 0.2.0.3 _2025-08-31, Andreas Abel_ * Drop support for GHC 7 * Tested with GHC 8.0 - 9.14 alpha1 ++++ gnome-maps: - Update to version 48.7: + Add address formats for Austria and Paraguay. + Updated translations. - Replace appstream-glib with AppStream BuildRequires: appstream-glib is no longer used, and deprecated. ++++ gom: - Update to version 0.5.4: + Build system improvements. - Modernize spec, use ldconfig_scriptles and autosetup macros and modern Supplements. Further enable the previously disabled meson_test macro, run tests during build. Also drop now obsolete removal of la files, no longer built since port to meson. ++++ hawk2: - Make builds determinitstic (bsc#1230275) * add fix-mtime.patch ++++ kdsoap-ws-discovery-client: - Update to 0.4.0. No changelog ++++ qt6-datavis3d: - Add the missing build flag ++++ libpanel: - Update to version 1.10.1: + UI fix for using GtkStackPage. + Documentation fixes. ++++ yyjson: - initial packaging ++++ matomo: - Update to 5.4.0 * Privacy and Security - #19961, #23400: Superusers can enforce strong password requirements to improve account security and reduce the risk of brute-force attacks. - #23356: Password input fields now automatically clear after 10 minutes of inactivity by default, reducing the risk of leaving sensitive data exposed. Developers can configure the timeout per field instance if needed. - #19839, #23294: Users are prevented from using their current password to set a new password. - #23425, #20102: A new scheduled task notifies superusers of accounts inactive for 180 days, and improvements to the password reset process prevent user enumeration by standardising error messages. - #13654, #23320: Improved the password reset process to prevent possible user enumeration. - #23330: Improved usability by adding automatic focus to password confirmation fields. - #20677, #23335: The API now supports passing authentication tokens via the standard Authorization: Bearer token HTTP header. - #23354: Token authentication has been improved with new expiry and notification features. - #12278, #23321: Resolved an issue that could expose internal server IPs in redirect headers. - #19480, #23317: Replaced ssl:// with tls:// in HTTP connections to strengthen security. - #23318: Migration details during core updates are now protected by a token, ensuring only the user performing the update (or someone with the token) can view them. - #23324: Improved security by hiding sensitive parameters from stack traces on PHP 8.2+. - #23304: Matomo now logs a warning for insecure HTTP requests when force_ssl is active. - #3620, #23372: Error and exception handling has been restructured to improve security and clarity. Stack traces are now only shown when explicitly enabled or in development mode, file system paths to the Matomo root are redacted, and sensitive values are removed from exception messages. The error page shown for unsupported PHP versions or missing Composer has also been improved. - #23352: Improved security by redacting SMTP credentials from logs and error traces. - #23385: Password confirmation fields now support custom IDs, avoiding duplicate IDs when multiple password forms appear on the same page and improving accessibility. - #23503: Updated the opt-out form to use event listeners instead of inline onclick attributes, improving compatibility with stricter Content Security Policies. * Reporting - #23451: Requesting row evolution for flattened Page URL reports is now automatically redirected to subtable row evolution to avoid excessive memory usage. - #23505, #23506: The Hits metric is now available in the evolution graph. - #21664, #23271: Goal reports now include a breakdown of conversions by individual social networks. - #23347: Added a new API parameter show_dimensions that allows multi-level reports to display each dimension in separate columns when using flat=1. - #23456: Introduced a new copy component that enables duplicating reports and other entities such as Heatmaps. This feature will be extended to additional report types in future releases. - #23299: The and string in the Goal overview top dimensions is now translatable, ensuring full localisation support. - #23291: Updated url_query_parameter_to_exclude_from_url to include LinkedIn clickID, preventing these parameters from appearing in Page URL reports. - #19060, #23315: Resolved low-risk issue where the configuration option for email reports now prevents showing the report owner’s username in the Reply-To header. - #23452, #23453: Include Campaign names in Transition reports when either referer_keyword or referer_name is NULL. - #23283, #23312: Fixed issue where ChatGPT visitors were showing in campaigns. - #23417, #23448: Fixed eCommerce Overview comparisons that were incorrect. - #23144: Remove token_auth from image graph urls in API response. * Performance and Archiving - #22450, #23421: New maintenance task added to clean up broken archives and keep database storage healthy. - #23408: Fix invalidation processing for report specific archives for periods including today. - #23309: Respect ts_archived when purging ERROR/ERROR_INVALIDATED archives - #23413: Ensure partial archives are marked correctly. - #23412: Metrics with zero values are now stored consistently, improving archive completeness and ensuring exports include all metrics. * Measurables (Websites) - #23277: Update styling and structure of the Create Measurable modal. - #23488: Allow legacy/bc timezones when creating sites (through API). - #23422: Allow filtering out sites by site types and allow selecting only sites for which the user has at least write access. * Matomo User Interface - #23496: Prevent rendering admin area when screen height or with is below 200px. - #23264: Improve UI login screen. - #23274: Refined dashboard top bar with new icons and consistent tooltips. - #23279: Adds code to accept editURL parameter in ContentBlock.vue to link the title. * Customisation - #17451, #23268: Logo and favicon updates now only apply after saving, as expected. * Compatibility and Requirements - #23429: Matomo shows a warning when the database version in use has reached end of life. This works for both MySQL and MariaDB, which now follow different versioning. - #23410: Remove CASE/WHEN around aggregate function in favour of a simple boolean expression. - #23220: Drop Flattr as a donation link option. - #23261: Tweak regex for host checks. - #23281: API responses using format=original now consistently return the Content-Type: text/plain header instead of text/html. - #23336: Fix creation of MySQL optimizer hint comments for multiple hints. * Matomo Tag Manager (MTM) - #929, #1010: Add description for the History Change Trigger in Matomo Tag Manager. - #989, #1019: Removed Save button from custom templates if a user does not have access to edit custom templates. - #1011, #852: The headers for Container Components, Tags, Triggers, Variables, and Versions are now clickable, allowing quick access to each section. - #1017: Adds the tooltip directive to the ContainerSelector to align with upcoming changes that standardise tooltip behaviour across dashboard headers. ++++ python-Mathics: - Update to version 9.0.0: * Long list of changes, see - Enable python 3.13 support. ++++ python-Mathics-Django: - Update to version 9.0.0: * Support for Python 3.13 added, Python 3.8 and 3.9 dropped. * Adjust for 9.0.0 Mathics3 Kernel API. * Adjust tests gallery. * Add to bottom of docs next/prev. - Enable builds for python 3.13. ++++ python-Mathics-Scanner: - Update to version 2.0.0: * Support for saving token position information was started. * Scanning was revised to handle more kinds of escape sequences and to be sensitive to their placement inside and outside a string. * Tokenization support for Box Input operator \* was added. * Small YML changes were made to reflect a better understanding of boxing operators. In particular, \* is not a (prefix) operator. * Internals: Mathics3 scanner exceptions of class TranslateError are incompatible with previous versions, and now store error parameters, "name", "tag", and "args". * Bugs fixed: - gh#Mathics3/mathics-scanner#125 - gh#Mathics3/mathics-scanner#136 ++++ python-mathicsscript: - Update to version 9.0.0: * Add Python 3.13 support; drop 3.8 and 3.9 support. * Track API changes in Mathics3 Scanner 9.0.0 * Make CLI options more like wolframscript. * Option --read with alias -r is now -code and short option -c. * Toggling Autobrace using the function key F4 has been fixed. Function key F1 provides some rudimentary help in the bottom bar. * Match \( with \) in prompt-toolkit mode * Bugs Fixed - [gh#Mathics3/mathicsscript#82] Work around a bug giving Set:setraw error - [gh#Mathics3/mathicsscript#87] Exception 'Rule' object has no attribute 'to_python' - [gh#Mathics3/mathicsscript#104] Respect environment variable NO_COLOR - [gh#Mathics3/mathicsscript#105] Pygments-style None is not disabling pygments style. - Enable builds for python 3.13. ++++ python-ytmusicapi: - Update to 1.11.1 * search: added a fallback for top result parsing to fix a KeyError * get_home: fix song artist parsing * get_home: parse recommended channels * get_playlist/get_episodes_playlist: fix metadata * get_library_playlists: Don't throw an error if playlist title is missing ++++ qt6-datavis3d-docs: - Add the missing build flag ++++ sbcl: - Update to version 2.5.8 * minor incompatible change: SB-THREAD:MAIN-THREAD-P can only be applied to threads, not arbitrary lisp objects. * minor incompatible change: the instruction-combining (peephole) optimization pass does not run if COMPILATION-SPEED has a higher value than SPEED. * platform support: * * on arm64, provide better backtraces in the statistical profiler's reporting, along with better detection of assembly routines, local functions and callers of foreign code. * * on ppc64le, make --dynamic-space-size behave as documented. (lp#2121255) * * on x86-64, handle more cases in the ALU+TEST peephole optimization. * bug fix: for file-streams with :DIRECTION :IO, input and output file positions should no longer get out of sync. (lp#1600610, reported by Guillaume le Vaillant, test cases by Brent Benson) * bug fix: an infinite loop in SUBTYPEP for types involving negations of CONS of specialized ARRAY types. (lp#2114755) * bug fix: miscompilation of a CASE form with small numeric keys. (lp#2119035) * bug fix: anonymous alien structs definitions are deduplicated, making it harder to overflow internal data structures. (lp#2114943, reported by Brooke Tilley) * bug fix: allow ALU+TEST peephole optimizations to fire on x86-64. (lp#2120547, reported by Christoph Breitkopf) * bug fix: miscompilation of a LOOP form with rational arithmetic on variables involved in termination tests. (lp#2121178, reported by 3b) * bug fix: the compiler is better able to associate some forms in a macroexpanion with the original sources. * optimization: improve array construction with LIST or SEQUENCE :INITIAL-CONTENTS. ++++ sil-andika-fonts: - Update to version 7.000 * Andika now has additional intermediate weights. * The v7 fonts do not have "Compact" variants anymore; line spacing should instead be controlled through the editing/publishing software. * Special-purpose modified font variants were available that had been ‘pre-tuned’ to turn on certain features by default for some regional and special uses, are no longer shipped. * Kerning has now been added to cover the full range of alphabetic symbols except for small caps. - Update to 6.210: * Andika Six is simply a renamed version of Andika v6.200 with no other changes. Andika version 7 will include metrics changes that could cause lines, paragraphs, and pages to reflow. Because of this we wanted to provide a font that reproduced the exact metrics and behavior of Andika v6.200 and could be installed at the same time as the newest Andika (v7 and beyond). Once released, Andika v7 will be the best font for most people to use. But if you have documents that you prepared with Andika v6.200 you can install Andika Six, change the doc to use it instead of Andika, and avoid any issues with reflow. Then you can use Andika v7 for new documents and benefit from the many improvements in that and future versions. - Do not obsolete sil-mondulkiri-fonts because of different font name (their 'Khmer Busra' vs our 'Busra') - First packaging for openSUSE ++++ sil-doulos-fonts: - Update to version 7.000 * There is no longer a "Compact" variant; line spacing should be applied by the editing/publishing software instead. * There are no ‘pre-tuned’ regional or "Literacy" special-purpose modified variants anymore. * Support added for complex positioning of bridging double diacritics and nearby marks. ++++ sil-padauk-fonts: - Fix path to PDF documentations - Update to version 5.100 * Add mym2 OpenType support * Support minority languages in OpenType * Support 4 faces, book and regular in bold and regular * Added font packages Namkio (Khamti) and Deemawso (Kayah Li) * Added Thai Mon variant glyphs and language support * Added Aiton and Phake variant glyphs and language support * Added Sgaw Karen variant glyphs * Added Character Variant features (cv01-07) for variant selection in OpenType and Graphite * Added Stylistic Set features (ss01-06) for variant selection in OpenType * Added glyphs to Variation Selector VS1 for Khamti and Aiton * Added Pa’o and Eastern Pwo Karen digits * Stack medials vertically (needed for Sanskrit) * Added Tai Laing variant glyphs and language support (including adding cv10 and ss10) * Added Aiton and Phake language support ++++ strawberry: - Update to version 1.2.13 + Fixed playlist alternating row colors no longer working with some styles (#1806) + Fixed "Open Audio CD" no longer working (#1803) + Fixed systemtray icon playback status not working with scaling (#1782) + Fixed build without MusicBrainz (#1799) + Fixed build without MTP (#1804) + Added Discord status text option (#1796) + Read Vorbis/FLAC "Other" embedded covers if front cover is not available (#1793) ++++ tuxguitar: - Modified patch: * 0004-startscript.patch + temporary fix for bsc#1248990. The file command ends in bad system call with the stderr and/or stdout are redirected ------------------------------------------------------------------ ------------------ 2025-8-30 - Aug 30 2025 ------------------- ------------------------------------------------------------------ ++++ MozillaFirefox: - Mozilla Firefox 142.0.1 * Dragging multiple non-adjacent tabs in horizontal tab strip mode now correctly moves them together as a group. (bmo#1982933) * Dragging multiple tabs no longer causes toolbar unresponsiveness or visual glitches. (bmo#1984342) * Fixed an issue where the text cursor appeared in the wrong location. (bmo#1984045) * Fixed a crash related to gamepad use, particularly on macOS (bmno#1870379) * Fixed an issue where the expand on hover feature in the sidebar would sometimes stop working. (bmo#1982129) * Fixed a crash in KDE Plasma when using certain custom window decorations. (bmo#1984823) ++++ bitwarden: - New upstream release 2025.8.2 * Show website icons when viewing an item * Updated flow for assigning items to collections * Removed setting for requiring password or PIN on app-start when using biometric unlock. Password or PIN now always required on Linux ++++ bitwarden-sdk-internal: - Update to 0.2.0-main.242 for Bitwarden 2025.8.0 ++++ ghex: - Update to version 48.1: + HexWidget: Add :insert-mode property + This release includes libgtkhex 4.10.0 ++++ gpg-tui: - gpg-tui 0.11.1, a terminal user interface for GnuPG ++++ harfbuzz: - Update to version 11.4.5: + Bug fixes for “AAT” shaping, and other shaping micro optimizations. ++++ inxi: - Update to version 3.3.39: * Refactor and updated of the Battery item, that was sorely in need of tightening and better testing and robustness. * Long overdue fixes for CPU Loongson and XhaoXin. * General fixes and updates. - Changes from version 3.3.38: * A small fix/glitch release, nothing exciting. ++++ kernel-firmware-intel: - Update to version 20250829 (git commit 993ff19b553c): * Fix link entry for qat_895xcc.bin ++++ kured: - Update to version 1.20.0: * chore: update release * Fix incorrect break * Add package comments to pass linters * fix lint of files * add golangci lint * Update Kured to support kubernetes 1.34 * Fix bad formatting - Packaging improvements: * Update to BuildRequires: golang(API) >= 1.24 matching go.mod * Rebase kured-imagePullPolicy.patch * Rebase systemctl-path.patch - Update to version 1.19.0: * chore: update release manifests * bump kubernetes 0.32 libraries * build(deps): bump github/codeql-action from 3.29.10 to 3.29.11 * build(deps): bump lycheeverse/lychee-action from 2.5.0 to 2.6.1 * build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 * build(deps): bump actions/dependency-review-action from 4.7.2 to 4.7.3 * build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 * build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.2 * build(deps): bump github/codeql-action from 3.29.9 to 3.29.10 * Reduce periodics frequency * Validate external links for md updates only on PR * build(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 * build(deps): bump docker/login-action from 3.4.0 to 3.5.0 * build(deps): bump lycheeverse/lychee-action from 2.4.1 to 2.5.0 * build(deps): bump github/codeql-action from 3.29.2 to 3.29.8 * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 * Manual bump * build(deps): bump step-security/harden-runner from 2.12.2 to 2.13.0 * build(deps): bump alpine from 3.22.0 to 3.22.1 * Update to go 1.23.1 to fix CVE-2024-34156 * Update k8s for 1.32 * build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 * build(deps): bump github/codeql-action from 3.29.0 to 3.29.2 * build(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 * build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.1 * build(deps): bump step-security/harden-runner from 2.12.0 to 2.12.1 * build(deps): bump github/codeql-action from 3.28.19 to 3.29.0 * build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 (#1139) * build(deps): bump github/codeql-action from 3.28.18 to 3.28.19 (#1138) * build(deps): bump alpine from 3.21.3 to 3.22.0 (#1137) * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#1134) * build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 * build(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 * build(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1 (#1125) * build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0 (#1126) * build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.0 (#1124) * build(deps): bump lycheeverse/lychee-action from 2.4.0 to 2.4.1 (#1123) * build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 (#1122) * build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 (#1120) * build(deps): bump github/codeql-action from 3.28.16 to 3.28.17 (#1121) * build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 (#1119) * build(deps): bump step-security/harden-runner from 2.11.1 to 2.12.0 (#1118) * build(deps): bump github.com/prometheus/client_golang (#1114) * build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 (#1115) * build(deps): bump step-security/harden-runner from 2.11.0 to 2.11.1 (#1111) * build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 (#1110) * build(deps): bump lycheeverse/lychee-action from 2.3.0 to 2.4.0 (#1109) * build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 (#1107) * build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 (#1105) * build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 (#1106) * build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 (#1104) * build(deps): bump docker/login-action from 3.3.0 to 3.4.0 (#1101) * build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 (#1100) * build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 * dholbach steps down (#1096) * build(deps): bump github.com/prometheus/client_golang * update k8s for 1.31 - Packaging improvements: * Update to BuildRequires: golang(API) >= 1.23 matching go.mod ++++ libixion: - Remove obsolete patches: * 0001-Fix-_WIN32-is-not-defined-when-not-on-Windows.patch * libixion-0.19.0-gcc15-cstdint.patch - Update to 0.20.0. * C++ API * changed the return type of model_context::get_sheet_name() to std::string_view. It was previously std::string. * ixion::celltype_t has been renamed to ixion::cell_t. * formula interpreter * added support for using an error token as an assignable value. With this change, you can use an expression such as '=#REF!'. * ISERR function is now implemented as a built-in function. * misc * enabled building of Python module on Windows via CMake, but it is not installed as part of the install target. * switched to mdds 3.0 and adjusted all uses of mdds::sorted_string_map to its new API. * parsing of error values is more precise via use of mdds::packed_trie_map. - Fix main source tarball URL. ++++ liborcus: - Remove patches, as they've been merged upstream: * liborcus-0.19.2-gcc15-cstdint.patch - Fix source tarball URL. - Upgrade to 0.20.2. - Changes from 0.20.2: * The base JSON parser class (orcus::json_parser) now allows primitive string, numeric and boolean values to be document root as it should per JSON specification. * added to the command-line programs proper support for Unicode filepath handling on Windows which still uses UTF-16 with code pages. Relevant public API has been updated to add support for Unicode filepaths on Windows. * added to the import_sheet interface a variant of set_string() that takes a non-indexed string value. This is used to handle cells with inline strings in the xlsx import filter. However, orcus's own document store backend does not yet handle cells with non-indexed strings, so when importing xlsx documents containing cells with inline strings, those cells will be ignored for now. * added to the orcus::format_t enum type json and xml as its members. With that change, you can now instantiate import filter adapters for these two new format types to import generic JSON and XML documents. These two adapter filters will auto-detect tabular structures and map them to sheets if they exist. * orcus::detect() can now detect generic JSON and XML documents. * fixed a bug where orcus-xml generated incorrect map file in map-gen mode when the source document contained multiple tabular structures. - Changes from 0.20.1: * fixed an assertion failure when importing a document in Excel 2003 XML format containing an autofilter with no filtering applied to it. * added a set of new interfaces to support importing pivot table definitions from xlsx documents. * added support for dumping the internal state of pivot caches and pivot table definitions as part of the debug state output. * added clarification on the return value of import_sheet::get_sheet_size() interface method in the documentation. * C++ API reference has been restructured to show each symbol in a separate page, and have their header information also included. * added test cases for testing expected string labels for enum types. * fixed orcus-json's map mode which would previously fail when built with CMake. - Changes from 0.20.0: * import filters * added support for more format types in formatted strings in xlsx, xls-xml and gnumeric filters. The following format types are now supported: * superscript * subscript * strikethrough * underline * strikethrough format applied to cells are now supported in xlsx and xls-xml. * importing of underline format applied to cells in gnumeric have been revised to fix issues. * interface for autofilter import has been revamped to properly import autofilter properties from xlsx, xls-xml, gnumeric and ods. * import_sheet_properties::set_row_height() now takes a row span as opposed to a single row position. * fixed a bug in the ods filter to properly separate styles in different style families. Previously, all styles were stored without style-family segregation which resulted in collision of styles with the same name. * document model * format run storage in orcus::spreadsheet::format_run now correctly differentiates a format not being applied from a negative format being applied. For instance, the previous storage could not differentiate the state of a bold format not being specified from a non-bold state being intentionally applied. * json * added support for custom indent when formatting JSON document. orcus::json::document_tree::dump() now takes an additional indent parameter to control the amount of indentation in the output. * orcus::json::subtree class has been added to allow referencing of subtree in an existing document_tree instance. * parser has been revised to properly handle escaped unicode characters. The parser now propertly converts escaped unicode characters to proper UTF-8 characters. * tools * orcus-json now has a new subtree mode to allow extraction of subtree from an existing JSON document. The root of a subtree is to be specified as a subset of JSONPath expression. Both bracket notation and dot notation are supported. Wildcard selector is also supported. * orcus-json now has a lint mode to allow reformatting of a JSON document with custom indent length via --indent option. ++++ limine: - Update to 9.6.5: * The Limine project has moved its home to Codeberg. * Nyu-EFI was rebranded to PicoEFI. * Minor build system improvements and subproject bumps. ++++ ltris2: - Update to version 2.0.4 * menu tooltips fade in * added fade out effect ++++ mame: - Updated to 0.280 * /usr/share/doc/packages/mame/whatsnew-0.280.txt ++++ python-typer: - Update to 0.17.3 * Allow annotated parsing with a subclass of Path. * Avoid printing default: None in the help section when using Rich. * Fix markdown formatting in --help output. * Lazy-load rich_utils to reduce startup time. ++++ python-typer-slim: - Update to 0.17.3 * Allow annotated parsing with a subclass of Path. * Avoid printing default: None in the help section when using Rich. * Fix markdown formatting in --help output. * Lazy-load rich_utils to reduce startup time. ++++ rtl8188gu: - Update version to 6.16 - Replace from_timer() with timer_container_of() for kernel 6.16 ++++ sdgyrodsu: - Initial version 2.1.1: * Increased no-gyro detection cooldown time * Enable Gyro when data is not present ------------------------------------------------------------------ ------------------ 2025-8-29 - Aug 29 2025 ------------------- ------------------------------------------------------------------ ++++ Komikku: - update to version 1.86.0: * [Servers] Added Annyo (FR) * [Servers] Added Jen Sorensen Weekly Cartoon (EN) * [Servers] Added SushiScan.net (FR) * [Servers] EZManga (EN): Update * [Servers] Reaper Scans (EN): Disabled * [L10n] Updated German, Italian, Russian and Ukrainian translations ++++ MirrorCache: - Update to version 1.100: * Allow server admins manage server notes (#619) ++++ QLog: - Add dependency on qt6-sql-sqlite and optionally tqsl boo#1248884 ++++ aws-lc: - update to version 1.59.0: * Support other field for PKCS7 * Add CFI directives to armv8-mont * Add back RC4_options from decrepit * Apache httpd integration test * Fix clang-21 compile error * Fix MariaDB integration test * ML-KEM: Re-import mlkem-native * ML-KEM: import and enable x86_64 backend from mlkem-native * X509_REQ_verify for MLDSA44 and MLDSA87 * Remove BIT_INTERLEAVE support * ML-KEM: Fix mlkem-native importer.sh * Add CFI directives in md5-armv8.pl ++++ bcachefs-tools: - Update to release 1.25.3 * New commands: `bcachefs image create` and `bcachefs image update` ++++ chirp: - Update to version 20250829: * Add Baofeng UV-5R Mini * Add Retevis RT86S * Enable has_offset for Icom IC-7100 ++++ crmsh: - Update to version 5.0.0+20250829.acc43479: * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874) ++++ digger-cli: - Update to version 0.6.122: * Aliasing by @breardon2011 in #2113 * Make sure plan failures post comment by @breardon2011 in #2114 ++++ dysk: - Update to version 3.1.0: * default strategy on Mac is much faster (about 1000 times faster...) * strategy can be chosen with --strategy diskutil or --strategy iokit (default) ++++ extest: - Publish 32bit version in 64bit repo Steam is a 32bit application, so extest can only work when it's 32bit build is used, even on x86_64 machines. ++++ forgejo-runner: - update to version 9.1.1: * fix: an error from a SKIPPED job does not transform it into a FAILURE * fix: artifact cache DB not using indexes for searching * ix: RunsOn in jobparser is not used by the runner but it is used by Forgejo * chore: fix 'false positive' data race detection in Id/Number default init ++++ freeciv: - make build reproducible, add reproducible.patch boo#1248258 ++++ fwupd: - Update to version 2.0.14: + This release adds the following features: - Add support for ignoring the network connectivity requirement - Allow building on RHEL-9 and RHEL-10 - Allow plugins to know the firmware version during update - Allow UEFI capsule devices to opt-out of Capsule-on-Disk - Allow unsetting HwID plugin context flags - Allow upgrading from a zero "empty" UEFI dbx + This release fixes the following bugs: - Add an automatic firehose counterpart to the QCDM modem device - Disable signature time checks when verifying firmware - Do not add a vendor ID of UNKNOWN when the signature has no vendor - Do not discover ThunderBolt retimer devices when run in single-shot mode - Do not use deprecated libflashrom API - Enhance firmware metadata generation in firmware_packager - Ensure Lexar NVMe drives use a proper version number - Fix parsing and writing UF2 extension sections - Fix Synaptics RMI initialization for new devices - Fix updating DFOTA and MBIM modem devices - Move some vendor name fixups to the quirk file - Remove CapsuleOnDisk HwID match for Dell - Return a sensible error when using build-cabinet wrong - Set the firehose loader filename in a more permissive way - Update the mapping for TPM vendor names - Verify the checksum of the serialized data in tests - Work around a libmbim bug when detaching + This release adds support for the following hardware: - Egis MoC devices - Framework QMK devices - ILITEK touch controllers - SteelSeries Arctis Nova 3P ++++ galileo-mura: - Initial version 0.9: * Add support for downloading mura ++++ gap-digraphs: - Update to release 1.11.0 * Added functions `IsTwoEdgeTransitive`, `BurntPancakeGraph`, `BurntPancakeGraph`, `MinimalCyclicEdgeCut`, `DigraphAllChordlessCyclesOfMaximalLength`, `DigraphKings`, `DigraphIsKing`, `DigraphMaximumFlow`, `RandomUniqueEdgeWeightedDigraph` * `RandomDigraph` is now more random * Added a new optional first argument for mutability in function `CayleyDigraph` * Implemented Zykov's and Christofides's algorithms and made them available as options for `ChromaticNumber` * Sped up `OnDigraphs` for a digraph and a permutation * Added dreadnaut support ++++ gdm: - Fix syntax error in gdm's %pre script. ++++ ghc-blaze-builder: - Update blaze-builder to version 0.4.4.1. * 0.4.4.1 2025-08-28 - Drop unused dependency `deepseq` - Tested with GHC 8.0 - 9.14 alpha1 ++++ git-annex: - Update git-annex to version 10.20250828. git-annex (10.20250828) upstream; urgency=medium * p2p: Added --enable option, which can be used to enable P2P networks provided by external commands git-annex-p2p- * Added git-remote-p2p-annex, which allows git pull and push to P2P networks provided by commands git-annex-p2p- * S3: Default to signature=v4 when using an AWS endpoint, since some AWS regions need v4 and all support it. When host= is used to specify a different S3 host, the default remains signature=v2. * webapp: Support setting up S3 buckets in regions that need v4 signatures. * S3: When initremote is given the name of a bucket that already exists, automatically set datacenter to the right value, rather than needing it to be explicitly set. * info: Added --show option to pick which parts of the info to calculate and display. * Improve behavior when there are special remotes configured with autoenable=yes with names that conflict with other remotes. * adjust: When another branch has been manually merged into the adjusted branch, re-adjusting errors out, rather than losing that merge commit. * sync: When another branch has been manually merged into an adjusted branch, error out rather than only displaying a warning. * initremote: New onlyencryptcreds=yes which can be used along with embedcreds=yes, to only encrypt the embedded creds, without encrypting the content of the special remote. Useful for exporttree/importtree remotes. * Don't allow the type of encryption of an existing special remote to be changed. Fixes reversion introduced in version 7.20191230. * tahoe: Support tahoe-lafs command versions newer than 1.16. * tahoe: Fix bug that made initremote require an encryption= parameter, despite git-annex encryption not being used with this special remote. Fixes reversion introduced in version 7.20191230. * Improved error message when yt-dlp is not installed and is needed to get a file from the web. * The annex.youtube-dl-command git config is no longer used, git-annex always runs the yt-dlp command, rather than the old youtube-dl command. * Removed support for git versions older than 2.22. * Bump aws build dependency to 0.24.1. * stack.yaml: Update to lts-24.2. - - Joey Hess Fri, 29 Aug 2025 11:42:37 -0400 ++++ gitlab-container-registry: - Update to version 4.27.0: * Features - add OpenTofu media types (8465a8d) - add retry logic for database row count metrics lock acquisition and extension (734faad) - bbm: add support for backoff and avoid func not found (9d7f100) - datastore: add database row count metrics with distributed locking (7a7fa66) - new DLB health check endpoint (42841af) * Bug Fixes - add retries calculation to all other methods in azure_v2 (c5588eb) - avoid unknown host and lb recovery on timeouts (a1ebe0f) - docs: correct typos in dev docs (f540bcc) - fix passing log fields from context to logger in rate-limiter (1407441) - properly set TTL when setting urlcache objects in Redis (32b9e10) - restore '_total' suffixes for notifications metrics, add '_count' to retries histogram (f0ae24b) ++++ govulncheck-vulndb: - Update to version 0.0.20250829T154226 2025-08-29T15:42:26Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3884 * GO-2025-3892 * GO-2025-3893 * GO-2025-3894 * GO-2025-3895 * GO-2025-3896 * GO-2025-3897 * GO-2025-3900 * GO-2025-3901 * GO-2025-3902 * GO-2025-3903 * GO-2025-3904 * GO-2025-3905 * GO-2025-3906 * GO-2025-3907 * GO-2025-3909 * GO-2025-3910 * GO-2025-3911 * GO-2025-3912 * GO-2025-3913 ++++ vim: - update to 9.1.1706 + refreshed patches: * vim-7.3-filetype_changes.patch * vim-7.3-filetype_ftl.patch * vim-7.3-filetype_spec.patch * vim-7.3-gvimrc_fontset.patch * vim-7.3-mktemp_tutor.patch * vim-7.3-name_vimrc.patch * vim-7.3-sh_is_bash.patch * vim-7.4-disable_lang_no.patch * vim-7.4-filetype_apparmor.patch * vim-7.4-filetype_mine.patch * vim-8.0.1568-defaults.patch * vim-8.2.2411-globalvimrc.patch * vim-9.1.1134-revert-putty-terminal-colors.patch * vim73-no-static-libpython.patch + changes: * patch 9.1.1706: MS-Windows: Compile error when building with if_ruby * patch 9.1.1705: time.h include is available on all platforms * runtime(tutor): Add a section on text objects and special registers to Chapter 2 * patch 9.1.1704: Cannot determine non-X11/Wayland clipmethods * patch 9.1.1703: Cannot react to terminal OSC responses * runtime(vim): update vim syntax generator for patch v9.1.1692 * patch 9.1.1701: tests: failure on CI with GUI and ASAN in test_edit.res * patch 9.1.1700: Multiline ignorecase specific pattern does not match with 'ignorecase' * patch 9.1.1699: Fuzzy completion disabled for 'findfunc' and customlist * runtime(debversions): Move bullseye, focal, and oracular to "unsupported" * patch 9.1.1698: Some error numbers are not documented * runtime(vimcomplete): Try catch completion of `pack_jobs->add({` * patch 9.1.1697: tests: no test for aclocal.m4 * runtime(indent-tests): Use silent write of resulting files * translation: Remove outdated rule for nl.po * patch 9.1.1696: tabnr from getwininfo() for popup windows is always 0 * runtime(tutor): remove duplicate tutor1.zh * runtime(tutor): fix language selection for zh * patch 9.1.1695: Need more Vim script specific tests * patch 9.1.1694: filetype: Buck eXtension Lang files are not recognized * patch 9.1.1693: tests: test_filetype fails in shadow dir * patch 9.1.1692: global_functions are not constant * patch 9.1.1691: over-allocation in ga_concat_strings() * patch 9.1.1690: Missing recursion guard in dos/unix_expandpath() * patch 9.1.1689: CmdlineChanged not triggered by * patch 9.1.1688: potential buffer overrun in bufwrite.c * patch 9.1.1687: filetype: autoconf filetype not always correct * runtime(lf): update syntax to support lf version r37 * patch 9.1.1686: if_ruby: unknown pragma when not using gcc * patch 9.1.1685: Missing changes from PR 18068 * patch 9.1.1684: min()/max() does not handle float data types * patch 9.1.1683: xxd: Avoid null dereference in autoskip colorless * runtime(python): support 'type's soft keyword form * patch 9.1.1682: tests: Test_wildtrigger_update_screen() creates unused mapping * patch 9.1.1681: tests: no test for actually moving cursor with 'acl' * runtime(termdebug): Remove load guard * runtime(doc): update termguicolors default description * patch 9.1.1680: MS-Windows: possible buffer-under run in if_cscope * patch 9.1.1679: unclear what key causes CmdlineLeave autocommand * runtime(netrw): fix :Explore command in terminal * patch 9.1.1678: Amiga: cannot handle large undo files * patch 9.1.1677: wrong ifdef in message.c * patch 9.1.1676: completion: long line shown twice * runtime(sh): add syntax highlighting support for ${ cmd;} and ${|cmd;} * patch 9.1.1675: MS-Windows: Makefiles can be refactored * patch 9.1.1674: Patch v9.1.1666 causes problems on kitty * patch 9.1.1673: if_python: still support for Python 1 * patch 9.1.1672: completion: cannot add timeouts for 'cpt' sources * runtime(fstab): Added mtab support to fstab syntax. * patch 9.1.1671: configure: missing comment about AC_CONFIG_SRCDIR * patch 9.1.1670: completion: autocomplete breaks second completion * patch 9.1.1669: Vim script: no support for URI de-/encoding * patch 9.1.1668: items() does not work for Blobs * patch 9.1.1667: Another outdated comment in eval.c * patch 9.1.1666: no support for terminal primary device attributes * patch 9.1.1665: Outdated comment in eval.c * runtime(doc): Fix missing heading in remote.txt * patch 9.1.1664: configure: can use any autoconf * runtime(doc): Tweak documentation style * runtime(colors): Update colorschemes * patch 9.1.1663: xxd: 9.1.0023 introduced additional dependency * runtime(systemverilog): Add syntax highlighting for 1800-2023 block strings * patch 9.1.1662: Issues with proto files: missing or inconsistent prototypes. * patch 9.1.1661: Coverity finds a few issues in clientserver.c * patch 9.1.1660: popups without decoration are positioned wrong at bottom of screen * patch 9.1.1659: configure: uses AC_INIT without args * patch 9.1.1658: Missing includes for Wayland headers * patch 9.1.1657: Autocompletion adds delay * runtime(doc): correct another problem in :h items() * patch 9.1.1656: MS-Windows: Patch v9.1.1652 breaks clipboard * patch 9.1.1655: Build-failure in do_mouse() * patch 9.1.1654: build failure when FEAT_DIFF is not defined * patch 9.1.1653: Coverity complains about Null pointer dereference * translation(it): Update Italian translation * translation(it): update Italian manpage * patch 9.1.1652: cannot determine non-X11/Wayland clipmethods * patch 9.1.1651: Cannot use clientserver over socket * patch 9.1.1650: popup: window may not properly resize * patch 9.1.1649: attrs allocation and fuzzy growarray could leak * runtime(python): optimize pythonSync pattern * patch 9.1.1648: MS-Windows: some style issues with patch v9.1.1646 * runtime(doc): fix style and clarify items() function for String type * patch 9.1.1647: filetype: Cangjie files are not recognized * patch 9.1.1646: MS-Windows: completion cannot handle implicit drive letters * patch 9.1.1645: fuzzy.c can be further improved * patch 9.1.1644: configure: doesn't separate CPPFLAGS and CFLAGS * runtime(doc): Update help for the items() function * patch 9.1.1643: tabpanel: mouse code too complicated * patch 9.1.1642: configure: wrong C99 feature test * patch 9.1.1641: a few compiler warnings are output * patch 9.1.1640: Unicode has deprecated some code-points * patch 9.1.1639: completion: popup may be misplaced * patch 9.1.1638: completion: not possible to delay the autcompletion * runtime(vim): set 'comments' based on script type (legacy/Vim9) * runtime(vim9): Disable shellslash for shellescape() in Open() * patch 9.1.1637: FEAT_DIFF used in diff.pro * translation(sr): Update Serbian messages translation * runtime(diff): fix mixed translations in zh_CN * patch 9.1.1636: style issues * patch 9.1.1635: tabpanel: cannot drag inactive tabs * patch 9.1.1634: Clipboard code can be improved * patch 9.1.1633: Search pattern shown incorrectly with negative offset * patch 9.1.1632: memory leak in fuzzy.c * patch 9.1.1631: proto files are outdated * patch 9.1.1630: tests: fuzzy bufname completion test doesn't match successfully ++++ python-nbdime: - Refresh javascript dependencies to update tmp (CVE-2025-54798, bsc#1247788) ++++ k8up-cli: - Update to version 2.13.0: No CLI-related changes in the changelog ++++ kernel-source-longterm: - Update config files for 6.12.44. CONFIG_DRM_DRAW=y - commit 9c0263c ++++ kernel-firmware-ath11k: - Update to version 20250829 (git commit 64596902d2db): * ath11k: Support WCN6855 hw2.1 with NFA firmware variant ++++ kernel-firmware-intel: - Update to version 20250829 (git commit 64596902d2db): * Move QAT firmware to intel/ subdirectory * Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" ++++ kernel-firmware-iwlwifi: - Update to version 20250829 (git commit 64596902d2db): * Move all iwlwifi top level files to intel/ directory ++++ kernel-longterm: - Update config files for 6.12.44. CONFIG_DRM_DRAW=y - commit 9c0263c ++++ kernel-syms-longterm: - Update config files for 6.12.44. CONFIG_DRM_DRAW=y - commit 9c0263c ++++ munge: - Make logrotate work on munge log as user munge. This prevents a local privilege escalation (bsc#1246088). ++++ libostree: - Update to version 2025.5: * Fix ostree boot links getting out of sync * soft-reboot: Also handle /boot * Fix path to aboot.cfg in BLS files ++++ udisks2: - (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds read in udisks daemon (bsc#1248502) + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch ++++ libwnck: - Update to version 43.3: + Fix clang warnings. + Fix regression with class group and application names. - Drop libwnck-fix-compiler-error.patch: Merged upstream. ++++ mdds: - Initial 3.0 release. ++++ mesheryctl: - update to 0.8.130: * General - Update events_streamer.go for improved functionality @leecalcote (#15702) - [server] fix: flush meshsync when provider is remote: take machine from machine traacker by connectionID instead of k8s context id @n2h9 (#15671) - chore: upgrade meshkit version @n2h9 (#15670) * Meshery CLI - fix(mesheryctl-generate): Fix error not handled properly in model generate subcommand @lekaf974 (#15666) * Security - Create SECURITY-INSIGHTS.yml @sangramrath (#15635) ++++ ntp: - bsc#1247587: Fix a crash when calling "sntp -d". * ntp-sntp-assert.patch - Update source URL. ++++ octave-forge-optim: - Fix building with Octave 9/10, add fix_octave9_compat.patch - Add octave-forge-struct and octave-forge-statistics build dependencies required for tests. ++++ opa: - Update to version 1.8.0: * This release contains a mix of new features, performance improvements, and bugfixes. Notably: Support for EdDSA signatures in io.jwt built-ins, including a new io.jwt.verify_eddsa built-in. * EdDSA Support in built-ins (#7824) Support for the EdDSA signing algorithm has been added to built-in functions in the io.jwt namespace. This introduces the new io.jwt.verify_eddsa built-in function, and adds EdDSA support for the following built-ins: - io.jwt.decode_verify - io.jwt.encode_sign - io.jwt.encode_sign_raw This feature benefited greatly from the groundwork laid by @lestrrat in (#7638). * Runtime - cmd: Add back default cmd.RootCommand definition. (#7811) authored by @philipaconrad - Fixing a breaking change to the go API introduced in OPA v1.7.0. - cmd: Fix opa exec parameters (#7850, #7840) authored by @srenatus - Fixing regressions introduced in OPA v1.7.0, where the - -fail-non-empty and --stdin-input flags were dropped. - config: accept env vars set to "", discern from unset (#7831) authored by @srenatus reported by @ManuelNowackConfinale - handlers: Add thread-safe initialization for gzipPool (#7828) authored by @charlieegan3 - plugins: Address race in config access (#7825) authored by @charlieegan3 - plugin/bundle: Correct bundle delay behavior (#7812) authored by @charlieegan3 - runtime: Update server init check (#7818) authored by @charlieegan3 * Topdown - perf: Performance greatly improved for Object.Insert on existing key (#7820) authored by @anderseknert - topdown,bundle,plugins: Upgrade interned jwx (0.9.x) with github.com/lestrrat-go/jwx/v3 (#7638) authored by @lestrrat * Miscellaneous - Update organization affiliations (#7842) authored by @tsandall - test/e2e: Avoid port exhaustion in concurrent tests (#7862) authored by @anderseknert - server: Make TestCertReloading less verbose (#7823) authored by @charlieegan3 - cmd: Exec test wait for bundle server to start (#7821) authored by @charlieegan3 - cmd: Update tests to run sync when ready (#7835) authored by @charlieegan3 - cmd: Move accidental pkg var to local var (#7813) authored by @philipaconrad - internal/report: Allow overriding GitHub repo (#7867) authored by @srenatus - release: Adding Dockerfile for image used in *-patch build targets (#7864) authored by @johanfylling - Dependency updates; notably: - build: Bump go to 1.24.6 (#7834, #7839) authored by @johanfylling and @thevilledev - build(deps): Bump go-viper/mapstructure/v2 from v2.3.0 to v2.4.0 (#7857) authored by @deeglaze - build(deps): Bump github.com/containerd/containerd/v2 from 2.1.3 to 2.1.4 - build(deps): Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 ++++ openQA: - Update to version 5.1756479924.9488e2cc: * docs: Fix typo in path to script folder - Update to version 5.1756374919.f1ac1b58: * build(deps): bump bootstrap from 5.3.7 to 5.3.8 * build(deps-dev): bump eslint from 9.33.0 to 9.34.0 * parser: ktap: Sanitize spaces from group name * Cleanup unused parameter in streamtext * build(deps): bump datatables.net-bs5 from 2.3.2 to 2.3.3 * Document semantics of low limits for important data * Log disconnection of the livehandler due to file changes * Disallow browsing HTML assets/results/logs by default * Extend coverage on streamtext function of Running.pm * Fix Too few arguments for subroutine error on close_connection * Handle 'expand_placeholders' return value consistently ++++ openbao: - Update to version 2.4.0: * SECURITY - audit/file: Restrict mode parameter - Refuse setting an irregular file mode - Silently strip any executable bits [GH-1651] * CHANGES - certutil.ParsePublicKeyPEM of the package github.com/openbao/openbao/sdk/v2/helper/certutil will now return a crypto.PublicKey instead of any. You might need to remove type assertions from your code. [GH-1611] - database: Drop obsolete upgrade check in roleAtPath() function introduced in v0.10 of Vault. [GH-1675] - sdk/framework: Remove LegacyStringToSliceHookFunc, use mapstructure.StringToWeakSliceHookFunc instead. [GH-1626] - sdk/helper: Removed sdk/helper/base62, sdk/helper/mlock, sdk/helper/parseutil, sdk/helper/password, sdk/helper/strutil, and sdk/helper/tlsutil packages. Please use github.com/openbao/go-secure-stdlib/xxx or github.com/hashicorp/go-secure-stdlib/xxx instead. - sdk/database/helper/connutil: Removed Initialize from ConnectionProducer interface, and SQLConnectionProducer struct. [GH-1676] - sdk/logical: Introduce context to logical.HandleListPage(...). [GH-1696] - sdk: Bump Go version to 1.24.0 [GH-1690] - vault/seal: removal of deprecated migration path of an old pre-Vault v1.0 (encrypted) recovery config location [GH-1424] * FEATURES - Allow filtering LIST, SCAN responses via the list_scan_response_keys_filter_path parameter to restrict information to only readable or listable values. [GH-1389] - Configuration-Based Audit Devices: Create and remove audit devices through server configuration updates. Changes are applied on restart and SIGHUP with issues appearing in the logs. [GH-1700] - Declarative Self-Initialization: allow server operators to define initial service state through request-driven initialization that occurs automatically on first server start. Operators can reference environment variables and files to provision initial authentication, audit, and secret mounts in addition to having full control over general requests to OpenBao It is suggested to put the minimal necessary configuration in this and use a proper IaC platform like OpenTofu to perform further configuration of the instance. [GH-1506] - Delay recovery key generation for auto-unseal mechanisms and make rotation authenticated: Add authenticated root and recovery key rotation endpoints, allow delayed recovery key generation (setting initial shares to 0). Solve the issue with the unauthenticated recovery key rotation APIs. [GH-1518] - Inline, Write-less Authentication: support passing authentication information inline with the desired main operation to avoid the need for separate authentication calls, storing and maintaining tokens. This authentication form will not work with operations that create leases. In this form of authentication, no storage writes occur as a result of authentication allowing its use on future read-enabled standby nodes. [GH-1433] - Add static key unseal mechanism to allow auto-unseal in environments with explicit trust chaining. [GH-1425] * IMPROVEMENTS - api/auth/jwt: initial implementation of JWT Auth Method [GH-1526] - auth/oidc: Add new show_qr=true cli option to display a QR code of the login URL. [GH-1561] - auto-unsealing: Improved the clarity of the warning message logged when the server is uninitialized and auto-unsealing is configured. [GH-1411] - builtin/credential/jwt: Support TLS authentication against explicit alt name/subject. [GH-1533] - cel: Add cel-go ext helpers for string, list, optional, regex, math, set, and encoder operations [GH-1697] - cel: Unify CEL helper functions between JWT and PKI modules, making email validation and other utilities available across both authentication and certificate management [GH-1697] - cli: add new subcommand "bao operator validate-config" to validate a configuration file syntax [GH-1609] - core: sys/seal-status: endpoint now always returns the barrier seal type, explicitly adds recovery seal type [GH-1638] - deps: Update go-jose v3 to go-jose v4 [GH-1477] - secrets/kv: Add CAS (Compare-And-Swap) support for metadata operations in KV v2 secrets engine. Metadata updates now support versioning via metadata_cas parameter and metadata_cas_required configuration option to prevent concurrent modification conflicts. [GH-1372] - ui: change the message 'Vault is sealed to 'OpenBao is Sealed' by changing the title of the unseal template [GH-1652] - seal/pkcs11: Support and default to software encryption for RSA key types. [GH-1742] * DEPRECATIONS - storage/postgresql: remove support for legacy PostgreSQL versions before 9.5 which require a special upsert function. [GH-1570] * BUGFIXES - api: Fix compatibility with sys/health from Vault Enterprise [GH-1730] - command: fixes typo in Windows command for setting BAO_ADDR in development mode [GH-1527] - core/namespaces: Prevent infinite loop in namespace loading due to incorrect list pagination when more than 100 sibling namespaces exist under a given parent [GH-1696] - identity: fix nil panic when collecting metrics with unsafe_cross_namespace_identity=true. [GH-1715] - pki: Truncate should error on expired certificates [GH-1369] - releases: add missing container image manifests for *-hsm variants [GH-1597] - sdk: Various constants in the sdk package mistakenly had no explicit type. They now now typed correctly. [GH-1523] - secrets/pki: Prevent infinite loop in tidy stemming from incorrect list pagination [GH-1696] - storage/postgresql: more graceful handling of parallel table creation [GH-1506] ++++ os-autoinst: - Update to version 5.1756120159.1bc0abb: * Fix signature of test module * VMWare: Use grep -F to handle fixed-strings in variables * VMWare: Use POSIX shell on ESXi host that uses Busybox * Add wrappers for testapi variables * backend: Turn off direct-io for multi-fd migration ++++ perl-Text-Kakasi: - Add manual dependencies and license ++++ pesign-obs-integration: - Update to version 10.2+git20250829.fe238ff: * Skip signing when there are no files to sign (bsc#1248618). * Create archive first ++++ python-physt: - Actually switch to using flit-core. - Skip a broken test. ++++ rancher-cli: - Update to version 2.12.1: * update rancher to v2.12.1 (#468) * chore: Bump rancher dependencies to v2.12.1-alpha1 (#464) * [v2.12] Bump Go to 1.24.6 (#457) ++++ rpcs3: - Update to version 0.0.37~git20250827: * Fix raw mouse handler keypress logic * asm.hpp: Make utils::rational_mul() consistent (#17452) * vfs_dialog: ensure that one item is always selected * vfs_dialog: allow to check list items with double-click * patch_manager: make patches selectable by double click * overlays: add settings for screenshot and recording hints * Audio: simplify apply_volume * SPU: Update RdEventStat Busy Wait detection to updated setting behavior ++++ ruby-build: - Update to version 20250829. Changelog: https://github.com/rbenv/ruby-build/releases/tag/v20250829 * Add support for pkg-config by @baarde in #2547 * Fix regression in JRuby 9.3 by @mislav in #2560 * Fix linking to Homebrew OpenSSL by @mislav in #2562 * Bump actions/checkout from 4 to 5 by @dependabot[bot] in #2563 * Add JRuby 9.4.14.0 by @headius in #2564 ++++ stackit-cli: - Update to version 0.40.0: * fix(deps): update module github.com/stackitcloud/stackit-sdk-go/services/iaas to v0.29.2 (#943) * fix(ske): print valid json output when listing clusters (#940) * chore(scripts): use bash found in path in shebang (#937) * chore(deps): bump github.com/stackitcloud/stackit-sdk-go/services/observability (#938) * chore(deps): bump renovatebot/github-action from 43.0.8 to 43.0.9 (#936) * fix: remove access_token prefix from YAML output in get-access-token (#933) * chore(image): add example how to create an image with uefi disabled (#926) * chore(deps): bump renovatebot/github-action from 43.0.7 to 43.0.8 (#929) * fix(deps): update module github.com/stackitcloud/stackit-sdk-go/services/iaas to v0.29.1 (#927) ++++ tailscale: - add patch fix-CVE-2025-58058.patch, fixing bsc#1248920 - update to version 1.86.5: * cmd/k8s-proxy,k8s-operator: fix serve config for userspace mode - update to version 1.86.4: * nothing of relevance - update to version 1.86.3: * nothing of relevance ++++ traefik: - Removed old update scripts which fixes boo#1245204 for traefik reloease v3. - Version 3.5.1 Bug fixes: * accesslogs,otel - Provide Log Body in OTEL access Log * acme - Bump github.com/go-acme/lego/v4 to v4.25.2 * k8s/gatewayapi - Make app protocol case insensitive * otel - Fix misspelling in docs * server - Bump to github.com/pires/go-proxyproto v0.8.1 - Silent expected errors on receiving sigterm signal * tracing - Fix capturedRequestHeaders and capturedResponseHeaders headers options not being canonicalized in tracing - Follow OTel semantic conventions for root span naming * webui - Update Traefik Proxy dashboard UI development deps * docker - Bump github.com/docker/docker to v28.3.3 (#12007 by kevinpollet) * Refactor to use reflect.TypeFor ++++ traefik2: - Removed old update scripts which fixes boo#1245204 for traefik reloease v2. - Version 2.11.29 * acme - Bump github.com/go-acme/lego/v4 to v4.25.2 (gh#traefik/traefik#11983 by ldez) * docker - Bump github.com/docker/docker to v28.3.3 (gh#traefik/traefik#12007 by kevinpollet) ++++ vdu_controls: - Version 2.4.3 * Fix a rare TypeError when light metering. * Some code cleanups for the splash screen. ++++ vtkdata: - Update to version 9.5.1 - no changelog available. ++++ xwmfs: - add explicit pkgconfig(fuse3) build dependency ------------------------------------------------------------------ ------------------ 2025-8-28 - Aug 28 2025 ------------------- ------------------------------------------------------------------ ++++ MirrorCache: - Update to version 1.099: * Fix task mirror_probe_project always failing for https-only servers (#617) * Tolarate mirrors with disabled directory listing in mirror_probe_projects (#617) * Partition task mirror_probe_projects for each region (#617) * Fix primary key on server_projects table for mariadb (#617) ++++ agama: - Update the software cache when the patterns selection changes (bsc#1248826). - Include the output of the "agama config" commands when agama-autoinstall fails (related to bsc#1248779). ++++ agama-web-ui: - Report the underlying problem for the "load.retry" question (related to bsc#1248779). ++++ apache2-mod_php8: - version update to 8.4.12 Core: Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro. Fixed bug GH-19053 (Duplicate property slot with hooks and interface property). Fixed bug GH-19044 (Protected properties are not scoped according to their prototype). Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking). Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr). Fixed bug GH-19305 (Operands may be being released during comparison). Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure). Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator). Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes). Fixed bug GH-19280 (Stale array iterator position on rehashing). Fixed bug GH-18736 (Circumvented type check with return by ref + finally). Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming). Calendar: Fixed bug GH-19371 (integer overflow in calendar.c). FTP: Fix theoretical issues with hrtime() not being available. GD: Fix incorrect comparison with result of php_stream_can_cast(). Hash: Fix crash on clone failure. Intl: Fix memleak on failure in collator_get_sort_key(). Fix return value on failure for resourcebundle count handler. LDAP: Fixed bug GH-18529 (additional inheriting of TLS int options). LibXML: Fixed bug GH-19098 (libxml<2.13 segmentation fault caused by php_libxml_node_free). MbString: Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown). Opcache: Reset global pointers to prevent use-after-free in zend_jit_status(). Fix issue with JIT restart and hooks. Fix crash with dynamic function defs in hooks during preload. OpenSSL: Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check). Fix error return check of EVP_CIPHER_CTX_ctrl(). Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param). PDO Pgsql: Fixed dangling pointer access on _pdo_pgsql_trim_message helper. SOAP: Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref). Sockets: Fix some potential crashes on incorrect argument value. Standard: Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache). Fix theoretical issues with hrtime() not being available. Fixed bug GH-19300 (Nested array_multisort invocation with error breaks). Windows: Free opened_path when opened_path_len >= MAXPATHLEN. ++++ calibre: - Use new package podofo-0.10.5 to fix build error in Tumbleweed. Version in Tumbleweed is to new. ++++ choose: - Update to 1.3.7: * name windows binary with .exe * fix build warnings * fix crlf messing up -1 ++++ chromium: - Chromium 140.0.7339.41 (early stable released 2025-08-27) - modified patches: chromium-125-compiler.patch chromium-libusb_interrupt_event_handler.patch gcc-enable-lto.patch ppc-fedora-fix-unknown-warning-option-messages.diff ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch ppc-fedora-add-ppc64-architecture-to-extensions.diff chromium-102-regex_pattern-array.patch gtk-414.patch ppc-fedora-fix-study-crash.patch ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone) ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch - added patches: chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (revert of upstream patch 8393b61ba876c8e1614275c97767f9b06b889f48) chromium-140-old-flac.patch (applied for flac < 1.5.0) - change rust_version to 1.86 - keeplibs: removed buildtools/third_party/eu-strip (gone upstream) removed wasm_tts_engine (gone upstream) - bump gn BuildReq to 0.20250619 - do not use system_harfbuzz for 16+ for now, unbundle is broken ++++ clojure: - Update to 1.12.2.1565: * Update to Clojure 1.12.2 ++++ criu: - Actually enable builds for riscv64 - Enable the amdgpu plugin on riscv64 as well ++++ crmsh: - Update to version 5.0.0+20250828.c67318b2: * Dev: sbd: Check if fence-agents-sbd is installed on all nodes - Update to version 5.0.0+20250828.79b4c2fc: * Dev: unittests: Adjust unit test for previous commit * Dev: behave: Add functional test case for previous commit * Dev: bootstrap: Enable to remove pacemaker remote node * Dev: xmlutil: Add instance method get_res_id_of_remote_node ++++ ctlptl: - Update to version 0.8.43: * vendor: updates for kind v0.30 (#392) * Update version numbers: 0.8.42 ++++ debhelper: - update to 13.26 * dh_assistant: List files with unclear config file state * dh_assistant: Provide tool-assistance migration hints for compat upgrades * Regenerate POT and PO files * Updated Portuguese translation for debhelper's man page (Closes: #1111112) ++++ delve: - Update to version 1.25.2: * *: release version 1.25.2 (#4104) * pkg/proc: return better error attempting to call nonexistent function (#4062) * service/dap: allow clients to specify rebuild on restart (#4103) * pkg/proc: add support for additional stack-switching functions on loong64 (#4100) * *: fix some failing tests on go1.25 (#4089) * proc: early fixes for Go 1.26 (#4070) * dwarf: using maps.Clone (#4088) * proc: in-progress calls must be properly terminated (#4090) * pkg/proc: support ContextRegNum on loong64 (#4095) * pkg/proc: add support for reading runtime.sigtrampgo context on loong64 (#4098) * proc,service,terminal: add events call use it for dld notifications (#3980) * service/dap: fix TestConfigurationDoneWithoutDebugSession (#4071) * proc: fix nil pointer dereference loading malformed classic maps (#4067) * service/dap: fix restart while the target is running (#4068) * service/dap: fix panic on uninitialized debugger (#4061) ++++ digger-cli: - Update to version 0.6.121: * Feat/breardon2011/logging extended by @breardon2011 in #2100 * enable debug logs by @motatoes in #2106 * Paginate Comment Retrieval by @breardon2011 in #2107 * S3 cache by @breardon2011 in #2111 ++++ eksctl: - Update to version 0.214.0: * Improvements - add notify homebrew update workflow (#8482) * Bug Fixes - Add exact match check to use specified addon versions (#8478) ++++ gettext-runtime: - Add _constraints to avoid OOM build errors ++++ gettext-runtime-mini: - Add _constraints to avoid OOM build errors ++++ gap-anupq: - Update to release 3.3.2 * Some janitorial changes ++++ gap-singular: - Update to release 2025.08.26 * Support bigint, bigintvec, and bigintmat ++++ gettext-csharp: - Add _constraints to avoid OOM build errors ++++ gettext-java: - Add _constraints to avoid OOM build errors ++++ ghc-rpm-macros: - update to 2.9.2 * move *.p_dyn files into prof subpackages ++++ grandorgue: - Update to version 3.16.1. Changelog: https://github.com/GrandOrgue/grandorgue/releases/tag/3.16.1-1 - Fixed sending 'ON' strings in sysex MIDI messages https://github.com/GrandOrgue/grandorgue/issues/2260 - Fixed crash on exit from GrandOrgue on MacOs https://github.com/GrandOrgue/grandorgue/issues/2256 - Fixed playing the last sample of a loop https://github.com/GrandOrgue/grandorgue/issues/2211 ++++ grype: - Update to version 0.99.0: * Added Features - Add fix availability information to DB schema [#2862 @wagoodman] - Add support vulnerability matching for raspbian [#2893 @westonsteimel] - Add Vex CSAF support [#1826 @juan131] * Bug Fixes - include channel in grype db search output [#2873 @willmurphyscode] - add UnmarshalJSON to fix availability blob [#2889 @willmurphyscode] - Grype misdetect Grafana version [#2783] * Breaking Changes - CSAF support [#1826 @juan131] * Dependencies - chore(deps): update anchore dependencies (#2896) - chore(deps): update anchore dependencies (#2895) - chore(deps): bump github.com/gabriel-vasile/mimetype (#2891) - chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#2892) - chore(deps): update tools to latest versions (#2887) - chore(deps): bump github/codeql-action from 3.29.10 to 3.29.11 (#2885) - chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.13 (#2882) - chore(deps): bump github/codeql-action from 3.29.9 to 3.29.10 (#2879) - chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 (#2875) - chore(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 (#2872) - chore(deps): update tools to latest versions (#2870) - chore(deps): bump github.com/anchore/syft from 1.30.0 to 1.31.0 (#2868) - chore(deps): bump zizmorcore/zizmor-action from 0.1.1 to 0.1.2 (#2869) ++++ jfrog-cli: - Update to version 2.78.7: * Bug Fixes - SARIF - Fill missing invocation attributes if needed by @attiasas in #545 ++++ k3kcli: - Update to version 0.3.4: * Bump Charts to 0.3.4-rc3 (#445) * Fix missing `custom-certs` flag in cli (#444) * bump chart (#440) * Revert "Fix pod fieldpath annotation translation (#434)" (#435) * Fix service port for generated kubeconfig secret (#433) * Fix pod fieldpath annotation translation (#434) * Bump version and appVersion to 0.3.4-rc1 in Chart.yaml (#429) * Migrate from `urfave/cli` to `cobra` (#426) * Adding some tests for `k3kcli` (#417) * Added new `golangci-lint` formatters (#425) * Migrate `golangci-lint` to `v2` (#424) * Adding custom certificate to the virtual clusters (#409) * fix for portallocator initialization (#423) * update ver for k3kcli install (#421) * codecov (#418) * fix for restoring policy (#413) * improve chart-release workflow (#412) * Add Conditions and current status to Cluster (#408) * Adding configurable maxConcurrentReconcilers and small CRD cleanup (#410) * Mirror host nodes (#389) * fail fast matrix (#398) * Add PriorityClass reconciler (virtual cluster -> host) (#377) * add troubleshoot how to guide (#390) * bump charts (#403) ++++ k6: - Update to version 1.2.3: * Bug fixes - #5099 Fixes auto extension resolution only working if binary is called k6 after a fix in v1.2.2. - #5098 Fixes gRPC calls not using loaded types and erroring out, especially around the usage of Any. ++++ kargo-cli: - Update to version 1.7.4: * no CLI-related changes ++++ kea: - Update to release 3.0.1 Security Fixes: * Corrected an issue in kea-dhcp4 that caused the server to abort if a client sent a unicast request with a particular options, and Kea failed to find an appropriate subnet for that client. (CVE-2025-40779) [bsc#1248801] Changes: * Moved Botan crypto backend support to version 3. * Avoid adding the qualifying-suffix to fully qualified host names specified in host reservations. ++++ kernel-source-longterm: - Linux 6.12.44 (bsc#1234429). - alloc_fdtable(): change calling conventions (bsc#1234429). - netfilter: nf_reject: don't leak dst refcount for loopback packets (bsc#1234429). - s390/hypfs: Enable limited access during lockdown (bsc#1234429). - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (bsc#1234429). - ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation (bsc#1234429). - net/mlx5e: Preserve shared buffer capacity during headroom updates (bsc#1234429). - net/mlx5e: Query FW for buffer ownership (bsc#1234429). - net/mlx5: Add IFC bits and enums for buf_ownership (bsc#1234429). - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (bsc#1234429). - net/mlx5: Base ECVF devlink port attrs from 0 (bsc#1234429). - Octeontx2-af: Skip overlap check for SPI field (bsc#1234429). - bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU (bsc#1234429). - bonding: update LACP activity flag after setting lacp_active (bsc#1234429). - ALSA: timer: fix ida_free call while not allocated (bsc#1234429). - net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate (bsc#1234429). - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (bsc#1234429). - net: dsa: microchip: Fix KSZ9477 HSR port setup issue (bsc#1234429). - igc: fix disabling L1.2 PCI-E link substate on I226 on init (bsc#1234429). - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (bsc#1234429). - s390/mm: Do not map lowcore with identity mapping (bsc#1234429). - LoongArch: Optimize module load time by optimizing PLT/GOT counting (bsc#1234429). - microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1 (bsc#1234429). - microchip: lan865x: fix missing netif_start_queue() call on device open (bsc#1234429). - net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1234429). - gve: prevent ethtool ops after shutdown (bsc#1234429). - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (bsc#1234429). - phy: mscc: Fix timestamping for vsc8584 (bsc#1234429). - cifs: Fix oops due to uninitialised variable (bsc#1234429). - net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload (bsc#1234429). - ppp: fix race conditions in ppp_fill_forward_path (bsc#1234429). - net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path (bsc#1234429). - ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add (bsc#1234429). - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM (bsc#1234429). - drm/amd/display: Don't print errors for nonexistent connectors (bsc#1234429). - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() (bsc#1234429). - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (bsc#1234429). - drm/hisilicon/hibmc: fix the hibmc loaded failed bug (bsc#1234429). - drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed (bsc#1234429). - drm/hisilicon/hibmc: refactored struct hibmc_drm_private (bsc#1234429). - rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too (bsc#1234429). - mlxsw: spectrum: Forward packets with an IPv4 link-local source IP (bsc#1234429). - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() (bsc#1234429). - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established (bsc#1234429). - Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF (bsc#1234429). - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown (bsc#1234429). - Bluetooth: hci_sync: Fix scan state after PA Sync has been established (bsc#1234429). - iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1234429). - scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1234429). - rtase: Fix Rx descriptor CRC error bit definition (bsc#1234429). - net: bridge: fix soft lockup in br_multicast_query_expired() (bsc#1234429). - net: xilinx: axienet: Fix RX skb ring management in DMAengine mode (bsc#1234429). - RDMA/hns: Fix dip entries leak on devices newer than hip09 (bsc#1234429). - RDMA/bnxt_re: Fix to initialize the PBL array (bsc#1234429). - RDMA/bnxt_re: Fix a possible memory leak in the driver (bsc#1234429). - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (bsc#1234429). - RDMA/bnxt_re: Fix to do SRQ armena by default (bsc#1234429). - RDMA/hns: Fix querying wrong SCC context for DIP algorithm (bsc#1234429). - RDMA/erdma: Fix ignored return value of init_kernel_qp (bsc#1234429). - rust: alloc: replace aligned_size() with Kmalloc::aligned_layout() (bsc#1234429). - iosys-map: Fix undefined behavior in iosys_map_clear() (bsc#1234429). - drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian (bsc#1234429). - drm/tests: Do not use drm_fb_blit() in format-helper tests (bsc#1234429). - drm/format-helper: Add generic conversion to 32-bit formats (bsc#1234429). - drm/format-helper: Move helpers for pixel conversion to header file (bsc#1234429). - drm/format-helper: Add conversion from XRGB8888 to BGR888 (bsc#1234429). - drm/panic: Move drawing functions to drm_draw (bsc#1234429). - drm/tests: Fix endian warning (bsc#1234429). - cgroup/cpuset: Fix a partition error with CPU hotplug (bsc#1234429). - cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key (bsc#1234429). - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor() (bsc#1234429). - spi: spi-fsl-lpspi: Clamp too high speed_hz (bsc#1234429). - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper (bsc#1234429). - iio: imu: inv_icm42600: change invalid data error to -EBUSY (bsc#1234429). - iio: imu: inv_icm42600: Convert to uXX and sXX integer types (bsc#1234429). - iio: imu: inv_icm42600: use = { } instead of memset() (bsc#1234429). - iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64 (bsc#1234429). - tls: fix handling of zero-length records on the rx_list (bsc#1234429). - powerpc/boot: Fix build with gcc 15 (bsc#1234429). - ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp() (bsc#1234429). - drm/i915/icl+/tc: Cache the max lane count value (bsc#1234429). - compiler: remove __ADDRESSABLE_ASM{_STR,}() again (bsc#1234429). - drm/i915/icl+/tc: Convert AUX powered WARN to a debug message (bsc#1234429). - tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1234429). - tracing: Remove unneeded goto out logic (bsc#1234429). - iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() (bsc#1234429). - iio: light: as73211: Ensure buffer holes are zeroed (bsc#1234429). - iio: light: Use aligned_s64 instead of open coding alignment (bsc#1234429). - usb: dwc3: pci: add support for the Intel Wildcat Lake (bsc#1234429). - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (bsc#1234429). - usb: dwc3: Ignore late xferNotReady event to prevent halt timeout (bsc#1234429). - usb: xhci: Fix slot_id resource race conflict (bsc#1234429). - usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean (bsc#1234429). - usb: typec: maxim_contaminant: disable low power mode when reading comparator values (bsc#1234429). - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles (bsc#1234429). - usb: storage: realtek_cr: Use correct byte order for bcs->Residue (bsc#1234429). - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera (bsc#1234429). - usb: renesas-xhci: Fix External ROM access timeouts (bsc#1234429). - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test (bsc#1234429). - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() (bsc#1234429). - comedi: pcl726: Prevent invalid irq number (bsc#1234429). - comedi: Make insn_rw_emulate_bits() do insn->n samples (bsc#1234429). - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive (bsc#1234429). - cdx: Fix off-by-one error in cdx_rpmsg_probe() (bsc#1234429). - kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq() (bsc#1234429). - most: core: Drop device reference after usage in get_channel() (bsc#1234429). - iio: proximity: isl29501: fix buffered read on big-endian systems (bsc#1234429). - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() (bsc#1234429). - ftrace: Also allocate and copy hash for reading of filter files (bsc#1234429). - fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() (bsc#1234429). - mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1 (bsc#1234429). - drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS (bsc#1234429). - cpuidle: governors: menu: Avoid selecting states with too much latency (bsc#1234429). - cpuidle: menu: Remove iowait influence (bsc#1234429). - use uniform permission checks for all mount propagation changes (bsc#1234429). - fs/buffer: fix use-after-free when call bh_read() helper (bsc#1234429). - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (bsc#1234429). - debugfs: fix mount options not being applied (bsc#1234429). - arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file (bsc#1234429). - arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC (bsc#1234429). - arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC (bsc#1234429). - arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot (bsc#1234429). - btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1234429). - ext4: preserve SB_I_VERSION on remount (bsc#1234429). - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems (bsc#1234429). - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (bsc#1234429). - iio: adc: ad7173: fix setting ODR in probe (bsc#1234429). - PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining (bsc#1234429). - PCI: rockchip: Use standard PCIe definitions (bsc#1234429). - PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features (bsc#1234429). - PCI: imx6: Add i.MX8Q PCIe Endpoint (EP) support (bsc#1234429). - Mark xe driver as BROKEN if kernel page size is not 4kB (bsc#1234429). - mptcp: disable add_addr retransmission when timeout is 0 (bsc#1234429). - mptcp: remove duplicate sk_reset_timer call (bsc#1234429). - soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() (bsc#1234429). - scsi: core: Fix command pass through retry regression (bsc#1234429). - drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs (bsc#1234429). - drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs (bsc#1234429). - drm/amd/display: Fix DP audio DTO1 clock source on DCE 6 (bsc#1234429). - drm/amd/display: Fix Xorg desktop unresponsive on Replay panel (bsc#1234429). - drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 (bsc#1234429). - drm/amd/display: Don't overclock DCE 6 by 15% (bsc#1234429). - drm/amd/display: Avoid a NULL pointer dereference (bsc#1234429). - drm/amdgpu/swm14: Update power limit logic (bsc#1234429). - accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc() (bsc#1234429). - kvm: retry nx_huge_page_recovery_thread creation (bsc#1234429). - platform/x86/intel-uncore-freq: Check write blocked for ELC (bsc#1234429). - s390/sclp: Fix SCCB present check (bsc#1234429). - RDMA/rxe: Flush delayed SKBs while releasing RXE resources (bsc#1234429). - ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 (bsc#1234429). - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn (bsc#1234429). - mm/debug_vm_pgtable: clear page table entries at destroy_args() (bsc#1234429). - squashfs: fix memory leak in squashfs_fill_super (bsc#1234429). - NFS: Fix a race when updating an existing write (bsc#1234429). - mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency (bsc#1234429). - mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER (bsc#1234429). - memstick: Fix deadlock by moving removing flag earlier (bsc#1234429). - mmc: sdhci-pci-gli: Add a new function to simplify the code (bsc#1234429). - iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement (bsc#1234429). - iov_iter: iterate_folioq: fix handling of offset >= folio size (bsc#1234429). - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (bsc#1234429). - Revert "can: ti_hecc: fix -Woverflow compiler warning" (bsc#1234429). - sched_ext: initialize built-in idle state before ops.init() (bsc#1234429). - ata: libata-scsi: Return aborted command when missing sense and result TF (bsc#1234429). - io_uring/net: commit partial buffers on retry (bsc#1234429). - netfs: Fix unbuffered write error handling (bsc#1234429). - btrfs: send: make fs_path_len() inline and constify its argument (bsc#1234429). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1234429). - btrfs: send: avoid path allocation for the current inode when issuing commands (bsc#1234429). - btrfs: send: keep the current inode's path cached (bsc#1234429). - btrfs: send: add and use helper to rename current inode when processing refs (bsc#1234429). - btrfs: send: only use boolean variables at process_recorded_refs() (bsc#1234429). - btrfs: send: factor out common logic when sending xattrs (bsc#1234429). - xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags (bsc#1234429). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1234429). - btrfs: codify pattern for adding block_group to bg_list (bsc#1234429). - btrfs: explicitly ref count block_group on new_bgs list (bsc#1234429). - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (bsc#1234429). - btrfs: always abort transaction on failure to add block group to free space tree (bsc#1234429). - btrfs: move transaction aborts to the error site in add_block_group_free_space() (bsc#1234429). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1234429). - btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb() (bsc#1234429). - usb: typec: fusb302: cache PD RX state (bsc#1234429). - USB: typec: Use str_enable_disable-like helpers (bsc#1234429). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1234429). - mm/damon/ops-common: ignore migration request to invalid nodes (bsc#1234429). - selftests: mptcp: pm: check flush doesn't reset limits (bsc#1234429). - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit (bsc#1234429). - mptcp: drop skb if MPTCP skb extension allocation fails (bsc#1234429). - ACPI: pfr_update: Fix the driver update version check (bsc#1234429). - ipv6: sr: Fix MAC comparison to be constant-time (bsc#1234429). - sched/ext: Fix invalid task state transitions on class switch (bsc#1234429). - net, hsr: reject HSR frame if skb can't hold tag (bsc#1234429). - LoongArch: KVM: Make function kvm_own_lbt() robust (bsc#1234429). - drm/amd/display: Don't overwrite dce60_clk_mgr (bsc#1234429). - drm/amd/display: fix a Null pointer dereference vulnerability (bsc#1234429). - drm/amd/display: Add primary plane to commits for correct VRR handling (bsc#1234429). - drm/amdkfd: Destroy KFD debugfs after destroy KFD wq (bsc#1234429). - drm/amdgpu: update mmhub 4.1.0 client id mappings (bsc#1234429). - drm/amdgpu: update mmhub 3.0.1 client id mappings (bsc#1234429). - drm/amdgpu: Update external revid for GC v9.5.0 (bsc#1234429). - drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram() (bsc#1234429). - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities (bsc#1234429). - drm/amdgpu: Avoid extra evict-restore process (bsc#1234429). - drm/amd: Restore cached power limit during resume (bsc#1234429). - drm/amdgpu/discovery: fix fw based ip discovery (bsc#1234429). - media: venus: venc: Clamp param smaller than 1fps and bigger than 240 (bsc#1234429). - media: venus: vdec: Clamp param smaller than 1fps and bigger than 240 (bsc#1234429). - media: venus: protect against spurious interrupts during probe (bsc#1234429). - media: venus: hfi: explicitly release IRQ during teardown (bsc#1234429). - media: venus: Fix MSM8998 frequency table (bsc#1234429). - media: venus: Add a check for packet size after reading from shared memory (bsc#1234429). - media: qcom: camss: cleanup media device allocated resource on error path (bsc#1234429). - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls (bsc#1234429). - media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval (bsc#1234429). - media: ov2659: Fix memory leaks in ov2659_probe() (bsc#1234429). - media: pisp_be: Fix pm_runtime underrun in probe (bsc#1234429). - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (bsc#1234429). - media: usbtv: Lock resolution while streaming (bsc#1234429). - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (bsc#1234429). - media: verisilicon: Fix AV1 decoder clock frequency (bsc#1234429). - media: vivid: fix wrong pixel_array control size (bsc#1234429). - media: ipu6: isys: Use correct pads for xlate_streams() (bsc#1234429). - media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() (bsc#1234429). - media: hi556: correct the test pattern configuration (bsc#1234429). - media: gspca: Add bounds checking to firmware parser (bsc#1234429). - parisc: Update comments in make_insert_tlb (bsc#1234429). - parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault() (bsc#1234429). - parisc: Revise gateway LWS calls to probe user read access (bsc#1234429). - parisc: Revise __get_user() to probe user read access (bsc#1234429). - parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c (bsc#1234429). - parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers (bsc#1234429). - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap (bsc#1234429). - parisc: Define and use set_pte_at() (bsc#1234429). - parisc: Check region is readable by user in raw_copy_from_user() (bsc#1234429). - soc/tegra: pmc: Ensure power-domains are in a known state (bsc#1234429). - kbuild: userprogs: use correct linker when mixing clang and GNU ld (bsc#1234429). - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1234429). - f2fs: fix to avoid out-of-boundary access in dnode page (bsc#1234429). - ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context (bsc#1234429). - amdgpu/amdgpu_discovery: increase timeout limit for IFWI init (bsc#1234429). - phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence (bsc#1234429). - vhost/vsock: Avoid allocating arbitrarily-sized SKBs (bsc#1234429). - vsock/virtio: Validate length in packet header before skb_put() (bsc#1234429). - PCI: imx6: Delay link start until configfs 'start' written (bsc#1234429). - PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset (bsc#1234429). - PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features (bsc#1234429). - PCI: endpoint: Fix configfs group removal on driver teardown (bsc#1234429). - PCI: endpoint: Fix configfs group list head handling (bsc#1234429). - PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge (bsc#1234429). - readahead: fix return value of page_cache_next_miss() when no hole is found (bsc#1234429). - mtd: rawnand: renesas: Add missing check after DMA map (bsc#1234429). - mtd: rawnand: fsmc: Add missing check after DMA map (bsc#1234429). - mtd: spinand: propagate spinand_wait() errors from spinand_write_page() (bsc#1234429). - mtd: spi-nor: Fix spi_nor_try_unlock_all() (bsc#1234429). - hwmon: (gsc-hwmon) fix fan pwm setpoint show functions (bsc#1234429). - pwm: mediatek: Fix duty and period setting (bsc#1234429). - pwm: mediatek: Handle hardware enable and clock enable separately (bsc#1234429). - pwm: imx-tpm: Reset counter if CMOD is 0 (bsc#1234429). - wifi: ath11k: fix dest ring-buffer corruption when ring is full (bsc#1234429). - wifi: ath11k: fix source ring-buffer corruption (bsc#1234429). - wifi: ath11k: fix dest ring-buffer corruption (bsc#1234429). - wifi: ath12k: fix dest ring-buffer corruption when ring is full (bsc#1234429). - wifi: ath12k: fix source ring-buffer corruption (bsc#1234429). - wifi: ath12k: fix dest ring-buffer corruption (bsc#1234429). - wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() (bsc#1234429). - iio: adc: ad_sigma_delta: change to buffer predisable (bsc#1234429). - iio: imu: bno055: fix OOB access of hw_xlate array (bsc#1234429). - zynq_fpga: use sgtable-based scatterlist wrappers (bsc#1234429). - soc: qcom: mdt_loader: Ensure we don't read past the ELF header (bsc#1234429). - ata: libata-scsi: Fix CDL control (bsc#1234429). - scsi: ufs: ufs-pci: Fix default runtime and system PM levels (bsc#1234429). - scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers (bsc#1234429). - ata: libata-scsi: Fix ata_to_sense_error() status handling (bsc#1234429). - scsi: mpi3mr: Fix race between config read submit and interrupt completion (bsc#1234429). - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1234429). - scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host (bsc#1234429). - dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints (bsc#1234429). - dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints (bsc#1234429). - apparmor: Fix 8-byte alignment for initial dfa blob streams (bsc#1234429). - arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses (bsc#1234429). - arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1 (bsc#1234429). - arm64: dts: exynos: gs101: ufs: add dma-coherent property (bsc#1234429). - arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default (bsc#1234429). - arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support (bsc#1234429). - btrfs: fix printing of mount info messages for NODATACOW/NODATASUM (bsc#1234429). - btrfs: restore mount option info messages during mount (bsc#1234429). - btrfs: fix incorrect log message for nobarrier mount option (bsc#1234429). - btrfs: zoned: fix write time activation failure for metadata block group (bsc#1234429). - ext4: fix hole length calculation overflow in non-extent inodes (bsc#1234429). - ext4: use kmalloc_array() for array space allocation (bsc#1234429). - ext4: don't try to clear the orphan_present feature block device is r/o (bsc#1234429). - ext4: fix reserved gdt blocks handling in fsmap (bsc#1234429). - ext4: fix fsmap end of range reporting with bigalloc (bsc#1234429). - ext4: check fast symlink for ea_inode correctly (bsc#1234429). - tracing: fprobe-event: Sanitize wildcard for fprobe event name (bsc#1234429). - ksmbd: extend the connection limiting mechanism to support IPv6 (bsc#1234429). - ksmbd: fix refcount leak causing resource not released (bsc#1234429). - Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" (bsc#1234429). - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 (bsc#1234429). - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 (bsc#1234429). - crypto: octeontx2 - Fix address alignment issue on ucode loading (bsc#1234429). - crypto: qat - flush misc workqueue during device shutdown (bsc#1234429). - crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP (bsc#1234429). - crypto: qat - lower priority for skcipher and aead algorithms (bsc#1234429). - lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap (bsc#1234429). - vt: defkeymap: Map keycodes above 127 to K_HOLE (bsc#1234429). - vt: keyboard: Don't process Unicode characters in K_OFF mode (bsc#1234429). - bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1234429). - bus: mhi: host: Fix endianness of BHI vector table (bsc#1234429). - usb: dwc3: imx8mp: fix device leak at unbind (bsc#1234429). - usb: dwc3: meson-g12a: fix device leaks at unbind (bsc#1234429). - usb: musb: omap2430: fix device leak at unbind (bsc#1234429). - usb: gadget: udc: renesas_usb3: fix device leak at unbind (bsc#1234429). - usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() (bsc#1234429). - m68k: Fix lost column on framebuffer debug console (bsc#1234429). - dm: Check for forbidden splitting of zone write operations (bsc#1234429). - dm: dm-crypt: Do not partially accept write BIOs with zoned targets (bsc#1234429). - PM: runtime: Take active children into account in pm_runtime_get_if_in_use() (bsc#1234429). - platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() (bsc#1234429). - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (bsc#1234429). - ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig (bsc#1234429). - serial: 8250: fix panic due to PSLVERR (bsc#1234429). - commit 27ec0ed ++++ kernel-longterm: - Linux 6.12.44 (bsc#1234429). - alloc_fdtable(): change calling conventions (bsc#1234429). - netfilter: nf_reject: don't leak dst refcount for loopback packets (bsc#1234429). - s390/hypfs: Enable limited access during lockdown (bsc#1234429). - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (bsc#1234429). - ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation (bsc#1234429). - net/mlx5e: Preserve shared buffer capacity during headroom updates (bsc#1234429). - net/mlx5e: Query FW for buffer ownership (bsc#1234429). - net/mlx5: Add IFC bits and enums for buf_ownership (bsc#1234429). - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (bsc#1234429). - net/mlx5: Base ECVF devlink port attrs from 0 (bsc#1234429). - Octeontx2-af: Skip overlap check for SPI field (bsc#1234429). - bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU (bsc#1234429). - bonding: update LACP activity flag after setting lacp_active (bsc#1234429). - ALSA: timer: fix ida_free call while not allocated (bsc#1234429). - net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate (bsc#1234429). - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (bsc#1234429). - net: dsa: microchip: Fix KSZ9477 HSR port setup issue (bsc#1234429). - igc: fix disabling L1.2 PCI-E link substate on I226 on init (bsc#1234429). - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (bsc#1234429). - s390/mm: Do not map lowcore with identity mapping (bsc#1234429). - LoongArch: Optimize module load time by optimizing PLT/GOT counting (bsc#1234429). - microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1 (bsc#1234429). - microchip: lan865x: fix missing netif_start_queue() call on device open (bsc#1234429). - net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1234429). - gve: prevent ethtool ops after shutdown (bsc#1234429). - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (bsc#1234429). - phy: mscc: Fix timestamping for vsc8584 (bsc#1234429). - cifs: Fix oops due to uninitialised variable (bsc#1234429). - net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload (bsc#1234429). - ppp: fix race conditions in ppp_fill_forward_path (bsc#1234429). - net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path (bsc#1234429). - ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add (bsc#1234429). - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM (bsc#1234429). - drm/amd/display: Don't print errors for nonexistent connectors (bsc#1234429). - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() (bsc#1234429). - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (bsc#1234429). - drm/hisilicon/hibmc: fix the hibmc loaded failed bug (bsc#1234429). - drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed (bsc#1234429). - drm/hisilicon/hibmc: refactored struct hibmc_drm_private (bsc#1234429). - rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too (bsc#1234429). - mlxsw: spectrum: Forward packets with an IPv4 link-local source IP (bsc#1234429). - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() (bsc#1234429). - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established (bsc#1234429). - Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF (bsc#1234429). - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown (bsc#1234429). - Bluetooth: hci_sync: Fix scan state after PA Sync has been established (bsc#1234429). - iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1234429). - scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1234429). - rtase: Fix Rx descriptor CRC error bit definition (bsc#1234429). - net: bridge: fix soft lockup in br_multicast_query_expired() (bsc#1234429). - net: xilinx: axienet: Fix RX skb ring management in DMAengine mode (bsc#1234429). - RDMA/hns: Fix dip entries leak on devices newer than hip09 (bsc#1234429). - RDMA/bnxt_re: Fix to initialize the PBL array (bsc#1234429). - RDMA/bnxt_re: Fix a possible memory leak in the driver (bsc#1234429). - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (bsc#1234429). - RDMA/bnxt_re: Fix to do SRQ armena by default (bsc#1234429). - RDMA/hns: Fix querying wrong SCC context for DIP algorithm (bsc#1234429). - RDMA/erdma: Fix ignored return value of init_kernel_qp (bsc#1234429). - rust: alloc: replace aligned_size() with Kmalloc::aligned_layout() (bsc#1234429). - iosys-map: Fix undefined behavior in iosys_map_clear() (bsc#1234429). - drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian (bsc#1234429). - drm/tests: Do not use drm_fb_blit() in format-helper tests (bsc#1234429). - drm/format-helper: Add generic conversion to 32-bit formats (bsc#1234429). - drm/format-helper: Move helpers for pixel conversion to header file (bsc#1234429). - drm/format-helper: Add conversion from XRGB8888 to BGR888 (bsc#1234429). - drm/panic: Move drawing functions to drm_draw (bsc#1234429). - drm/tests: Fix endian warning (bsc#1234429). - cgroup/cpuset: Fix a partition error with CPU hotplug (bsc#1234429). - cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key (bsc#1234429). - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor() (bsc#1234429). - spi: spi-fsl-lpspi: Clamp too high speed_hz (bsc#1234429). - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper (bsc#1234429). - iio: imu: inv_icm42600: change invalid data error to -EBUSY (bsc#1234429). - iio: imu: inv_icm42600: Convert to uXX and sXX integer types (bsc#1234429). - iio: imu: inv_icm42600: use = { } instead of memset() (bsc#1234429). - iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64 (bsc#1234429). - tls: fix handling of zero-length records on the rx_list (bsc#1234429). - powerpc/boot: Fix build with gcc 15 (bsc#1234429). - ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp() (bsc#1234429). - drm/i915/icl+/tc: Cache the max lane count value (bsc#1234429). - compiler: remove __ADDRESSABLE_ASM{_STR,}() again (bsc#1234429). - drm/i915/icl+/tc: Convert AUX powered WARN to a debug message (bsc#1234429). - tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1234429). - tracing: Remove unneeded goto out logic (bsc#1234429). - iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() (bsc#1234429). - iio: light: as73211: Ensure buffer holes are zeroed (bsc#1234429). - iio: light: Use aligned_s64 instead of open coding alignment (bsc#1234429). - usb: dwc3: pci: add support for the Intel Wildcat Lake (bsc#1234429). - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (bsc#1234429). - usb: dwc3: Ignore late xferNotReady event to prevent halt timeout (bsc#1234429). - usb: xhci: Fix slot_id resource race conflict (bsc#1234429). - usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean (bsc#1234429). - usb: typec: maxim_contaminant: disable low power mode when reading comparator values (bsc#1234429). - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles (bsc#1234429). - usb: storage: realtek_cr: Use correct byte order for bcs->Residue (bsc#1234429). - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera (bsc#1234429). - usb: renesas-xhci: Fix External ROM access timeouts (bsc#1234429). - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test (bsc#1234429). - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() (bsc#1234429). - comedi: pcl726: Prevent invalid irq number (bsc#1234429). - comedi: Make insn_rw_emulate_bits() do insn->n samples (bsc#1234429). - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive (bsc#1234429). - cdx: Fix off-by-one error in cdx_rpmsg_probe() (bsc#1234429). - kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq() (bsc#1234429). - most: core: Drop device reference after usage in get_channel() (bsc#1234429). - iio: proximity: isl29501: fix buffered read on big-endian systems (bsc#1234429). - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() (bsc#1234429). - ftrace: Also allocate and copy hash for reading of filter files (bsc#1234429). - fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() (bsc#1234429). - mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1 (bsc#1234429). - drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS (bsc#1234429). - cpuidle: governors: menu: Avoid selecting states with too much latency (bsc#1234429). - cpuidle: menu: Remove iowait influence (bsc#1234429). - use uniform permission checks for all mount propagation changes (bsc#1234429). - fs/buffer: fix use-after-free when call bh_read() helper (bsc#1234429). - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (bsc#1234429). - debugfs: fix mount options not being applied (bsc#1234429). - arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file (bsc#1234429). - arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC (bsc#1234429). - arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC (bsc#1234429). - arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot (bsc#1234429). - btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1234429). - ext4: preserve SB_I_VERSION on remount (bsc#1234429). - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems (bsc#1234429). - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (bsc#1234429). - iio: adc: ad7173: fix setting ODR in probe (bsc#1234429). - PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining (bsc#1234429). - PCI: rockchip: Use standard PCIe definitions (bsc#1234429). - PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features (bsc#1234429). - PCI: imx6: Add i.MX8Q PCIe Endpoint (EP) support (bsc#1234429). - Mark xe driver as BROKEN if kernel page size is not 4kB (bsc#1234429). - mptcp: disable add_addr retransmission when timeout is 0 (bsc#1234429). - mptcp: remove duplicate sk_reset_timer call (bsc#1234429). - soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() (bsc#1234429). - scsi: core: Fix command pass through retry regression (bsc#1234429). - drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs (bsc#1234429). - drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs (bsc#1234429). - drm/amd/display: Fix DP audio DTO1 clock source on DCE 6 (bsc#1234429). - drm/amd/display: Fix Xorg desktop unresponsive on Replay panel (bsc#1234429). - drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 (bsc#1234429). - drm/amd/display: Don't overclock DCE 6 by 15% (bsc#1234429). - drm/amd/display: Avoid a NULL pointer dereference (bsc#1234429). - drm/amdgpu/swm14: Update power limit logic (bsc#1234429). - accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc() (bsc#1234429). - kvm: retry nx_huge_page_recovery_thread creation (bsc#1234429). - platform/x86/intel-uncore-freq: Check write blocked for ELC (bsc#1234429). - s390/sclp: Fix SCCB present check (bsc#1234429). - RDMA/rxe: Flush delayed SKBs while releasing RXE resources (bsc#1234429). - ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 (bsc#1234429). - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn (bsc#1234429). - mm/debug_vm_pgtable: clear page table entries at destroy_args() (bsc#1234429). - squashfs: fix memory leak in squashfs_fill_super (bsc#1234429). - NFS: Fix a race when updating an existing write (bsc#1234429). - mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency (bsc#1234429). - mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER (bsc#1234429). - memstick: Fix deadlock by moving removing flag earlier (bsc#1234429). - mmc: sdhci-pci-gli: Add a new function to simplify the code (bsc#1234429). - iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement (bsc#1234429). - iov_iter: iterate_folioq: fix handling of offset >= folio size (bsc#1234429). - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (bsc#1234429). - Revert "can: ti_hecc: fix -Woverflow compiler warning" (bsc#1234429). - sched_ext: initialize built-in idle state before ops.init() (bsc#1234429). - ata: libata-scsi: Return aborted command when missing sense and result TF (bsc#1234429). - io_uring/net: commit partial buffers on retry (bsc#1234429). - netfs: Fix unbuffered write error handling (bsc#1234429). - btrfs: send: make fs_path_len() inline and constify its argument (bsc#1234429). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1234429). - btrfs: send: avoid path allocation for the current inode when issuing commands (bsc#1234429). - btrfs: send: keep the current inode's path cached (bsc#1234429). - btrfs: send: add and use helper to rename current inode when processing refs (bsc#1234429). - btrfs: send: only use boolean variables at process_recorded_refs() (bsc#1234429). - btrfs: send: factor out common logic when sending xattrs (bsc#1234429). - xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags (bsc#1234429). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1234429). - btrfs: codify pattern for adding block_group to bg_list (bsc#1234429). - btrfs: explicitly ref count block_group on new_bgs list (bsc#1234429). - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (bsc#1234429). - btrfs: always abort transaction on failure to add block group to free space tree (bsc#1234429). - btrfs: move transaction aborts to the error site in add_block_group_free_space() (bsc#1234429). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1234429). - btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb() (bsc#1234429). - usb: typec: fusb302: cache PD RX state (bsc#1234429). - USB: typec: Use str_enable_disable-like helpers (bsc#1234429). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1234429). - mm/damon/ops-common: ignore migration request to invalid nodes (bsc#1234429). - selftests: mptcp: pm: check flush doesn't reset limits (bsc#1234429). - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit (bsc#1234429). - mptcp: drop skb if MPTCP skb extension allocation fails (bsc#1234429). - ACPI: pfr_update: Fix the driver update version check (bsc#1234429). - ipv6: sr: Fix MAC comparison to be constant-time (bsc#1234429). - sched/ext: Fix invalid task state transitions on class switch (bsc#1234429). - net, hsr: reject HSR frame if skb can't hold tag (bsc#1234429). - LoongArch: KVM: Make function kvm_own_lbt() robust (bsc#1234429). - drm/amd/display: Don't overwrite dce60_clk_mgr (bsc#1234429). - drm/amd/display: fix a Null pointer dereference vulnerability (bsc#1234429). - drm/amd/display: Add primary plane to commits for correct VRR handling (bsc#1234429). - drm/amdkfd: Destroy KFD debugfs after destroy KFD wq (bsc#1234429). - drm/amdgpu: update mmhub 4.1.0 client id mappings (bsc#1234429). - drm/amdgpu: update mmhub 3.0.1 client id mappings (bsc#1234429). - drm/amdgpu: Update external revid for GC v9.5.0 (bsc#1234429). - drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram() (bsc#1234429). - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities (bsc#1234429). - drm/amdgpu: Avoid extra evict-restore process (bsc#1234429). - drm/amd: Restore cached power limit during resume (bsc#1234429). - drm/amdgpu/discovery: fix fw based ip discovery (bsc#1234429). - media: venus: venc: Clamp param smaller than 1fps and bigger than 240 (bsc#1234429). - media: venus: vdec: Clamp param smaller than 1fps and bigger than 240 (bsc#1234429). - media: venus: protect against spurious interrupts during probe (bsc#1234429). - media: venus: hfi: explicitly release IRQ during teardown (bsc#1234429). - media: venus: Fix MSM8998 frequency table (bsc#1234429). - media: venus: Add a check for packet size after reading from shared memory (bsc#1234429). - media: qcom: camss: cleanup media device allocated resource on error path (bsc#1234429). - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls (bsc#1234429). - media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval (bsc#1234429). - media: ov2659: Fix memory leaks in ov2659_probe() (bsc#1234429). - media: pisp_be: Fix pm_runtime underrun in probe (bsc#1234429). - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (bsc#1234429). - media: usbtv: Lock resolution while streaming (bsc#1234429). - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (bsc#1234429). - media: verisilicon: Fix AV1 decoder clock frequency (bsc#1234429). - media: vivid: fix wrong pixel_array control size (bsc#1234429). - media: ipu6: isys: Use correct pads for xlate_streams() (bsc#1234429). - media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() (bsc#1234429). - media: hi556: correct the test pattern configuration (bsc#1234429). - media: gspca: Add bounds checking to firmware parser (bsc#1234429). - parisc: Update comments in make_insert_tlb (bsc#1234429). - parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault() (bsc#1234429). - parisc: Revise gateway LWS calls to probe user read access (bsc#1234429). - parisc: Revise __get_user() to probe user read access (bsc#1234429). - parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c (bsc#1234429). - parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers (bsc#1234429). - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap (bsc#1234429). - parisc: Define and use set_pte_at() (bsc#1234429). - parisc: Check region is readable by user in raw_copy_from_user() (bsc#1234429). - soc/tegra: pmc: Ensure power-domains are in a known state (bsc#1234429). - kbuild: userprogs: use correct linker when mixing clang and GNU ld (bsc#1234429). - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1234429). - f2fs: fix to avoid out-of-boundary access in dnode page (bsc#1234429). - ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context (bsc#1234429). - amdgpu/amdgpu_discovery: increase timeout limit for IFWI init (bsc#1234429). - phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence (bsc#1234429). - vhost/vsock: Avoid allocating arbitrarily-sized SKBs (bsc#1234429). - vsock/virtio: Validate length in packet header before skb_put() (bsc#1234429). - PCI: imx6: Delay link start until configfs 'start' written (bsc#1234429). - PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset (bsc#1234429). - PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features (bsc#1234429). - PCI: endpoint: Fix configfs group removal on driver teardown (bsc#1234429). - PCI: endpoint: Fix configfs group list head handling (bsc#1234429). - PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge (bsc#1234429). - readahead: fix return value of page_cache_next_miss() when no hole is found (bsc#1234429). - mtd: rawnand: renesas: Add missing check after DMA map (bsc#1234429). - mtd: rawnand: fsmc: Add missing check after DMA map (bsc#1234429). - mtd: spinand: propagate spinand_wait() errors from spinand_write_page() (bsc#1234429). - mtd: spi-nor: Fix spi_nor_try_unlock_all() (bsc#1234429). - hwmon: (gsc-hwmon) fix fan pwm setpoint show functions (bsc#1234429). - pwm: mediatek: Fix duty and period setting (bsc#1234429). - pwm: mediatek: Handle hardware enable and clock enable separately (bsc#1234429). - pwm: imx-tpm: Reset counter if CMOD is 0 (bsc#1234429). - wifi: ath11k: fix dest ring-buffer corruption when ring is full (bsc#1234429). - wifi: ath11k: fix source ring-buffer corruption (bsc#1234429). - wifi: ath11k: fix dest ring-buffer corruption (bsc#1234429). - wifi: ath12k: fix dest ring-buffer corruption when ring is full (bsc#1234429). - wifi: ath12k: fix source ring-buffer corruption (bsc#1234429). - wifi: ath12k: fix dest ring-buffer corruption (bsc#1234429). - wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() (bsc#1234429). - iio: adc: ad_sigma_delta: change to buffer predisable (bsc#1234429). - iio: imu: bno055: fix OOB access of hw_xlate array (bsc#1234429). - zynq_fpga: use sgtable-based scatterlist wrappers (bsc#1234429). - soc: qcom: mdt_loader: Ensure we don't read past the ELF header (bsc#1234429). - ata: libata-scsi: Fix CDL control (bsc#1234429). - scsi: ufs: ufs-pci: Fix default runtime and system PM levels (bsc#1234429). - scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers (bsc#1234429). - ata: libata-scsi: Fix ata_to_sense_error() status handling (bsc#1234429). - scsi: mpi3mr: Fix race between config read submit and interrupt completion (bsc#1234429). - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1234429). - scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host (bsc#1234429). - dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints (bsc#1234429). - dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints (bsc#1234429). - apparmor: Fix 8-byte alignment for initial dfa blob streams (bsc#1234429). - arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses (bsc#1234429). - arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1 (bsc#1234429). - arm64: dts: exynos: gs101: ufs: add dma-coherent property (bsc#1234429). - arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default (bsc#1234429). - arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support (bsc#1234429). - btrfs: fix printing of mount info messages for NODATACOW/NODATASUM (bsc#1234429). - btrfs: restore mount option info messages during mount (bsc#1234429). - btrfs: fix incorrect log message for nobarrier mount option (bsc#1234429). - btrfs: zoned: fix write time activation failure for metadata block group (bsc#1234429). - ext4: fix hole length calculation overflow in non-extent inodes (bsc#1234429). - ext4: use kmalloc_array() for array space allocation (bsc#1234429). - ext4: don't try to clear the orphan_present feature block device is r/o (bsc#1234429). - ext4: fix reserved gdt blocks handling in fsmap (bsc#1234429). - ext4: fix fsmap end of range reporting with bigalloc (bsc#1234429). - ext4: check fast symlink for ea_inode correctly (bsc#1234429). - tracing: fprobe-event: Sanitize wildcard for fprobe event name (bsc#1234429). - ksmbd: extend the connection limiting mechanism to support IPv6 (bsc#1234429). - ksmbd: fix refcount leak causing resource not released (bsc#1234429). - Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" (bsc#1234429). - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 (bsc#1234429). - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 (bsc#1234429). - crypto: octeontx2 - Fix address alignment issue on ucode loading (bsc#1234429). - crypto: qat - flush misc workqueue during device shutdown (bsc#1234429). - crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP (bsc#1234429). - crypto: qat - lower priority for skcipher and aead algorithms (bsc#1234429). - lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap (bsc#1234429). - vt: defkeymap: Map keycodes above 127 to K_HOLE (bsc#1234429). - vt: keyboard: Don't process Unicode characters in K_OFF mode (bsc#1234429). - bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1234429). - bus: mhi: host: Fix endianness of BHI vector table (bsc#1234429). - usb: dwc3: imx8mp: fix device leak at unbind (bsc#1234429). - usb: dwc3: meson-g12a: fix device leaks at unbind (bsc#1234429). - usb: musb: omap2430: fix device leak at unbind (bsc#1234429). - usb: gadget: udc: renesas_usb3: fix device leak at unbind (bsc#1234429). - usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() (bsc#1234429). - m68k: Fix lost column on framebuffer debug console (bsc#1234429). - dm: Check for forbidden splitting of zone write operations (bsc#1234429). - dm: dm-crypt: Do not partially accept write BIOs with zoned targets (bsc#1234429). - PM: runtime: Take active children into account in pm_runtime_get_if_in_use() (bsc#1234429). - platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() (bsc#1234429). - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (bsc#1234429). - ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig (bsc#1234429). - serial: 8250: fix panic due to PSLVERR (bsc#1234429). - commit 27ec0ed ++++ kernel-syms-longterm: - Linux 6.12.44 (bsc#1234429). - alloc_fdtable(): change calling conventions (bsc#1234429). - netfilter: nf_reject: don't leak dst refcount for loopback packets (bsc#1234429). - s390/hypfs: Enable limited access during lockdown (bsc#1234429). - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (bsc#1234429). - ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation (bsc#1234429). - net/mlx5e: Preserve shared buffer capacity during headroom updates (bsc#1234429). - net/mlx5e: Query FW for buffer ownership (bsc#1234429). - net/mlx5: Add IFC bits and enums for buf_ownership (bsc#1234429). - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (bsc#1234429). - net/mlx5: Base ECVF devlink port attrs from 0 (bsc#1234429). - Octeontx2-af: Skip overlap check for SPI field (bsc#1234429). - bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU (bsc#1234429). - bonding: update LACP activity flag after setting lacp_active (bsc#1234429). - ALSA: timer: fix ida_free call while not allocated (bsc#1234429). - net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate (bsc#1234429). - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (bsc#1234429). - net: dsa: microchip: Fix KSZ9477 HSR port setup issue (bsc#1234429). - igc: fix disabling L1.2 PCI-E link substate on I226 on init (bsc#1234429). - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (bsc#1234429). - s390/mm: Do not map lowcore with identity mapping (bsc#1234429). - LoongArch: Optimize module load time by optimizing PLT/GOT counting (bsc#1234429). - microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1 (bsc#1234429). - microchip: lan865x: fix missing netif_start_queue() call on device open (bsc#1234429). - net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1234429). - gve: prevent ethtool ops after shutdown (bsc#1234429). - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (bsc#1234429). - phy: mscc: Fix timestamping for vsc8584 (bsc#1234429). - cifs: Fix oops due to uninitialised variable (bsc#1234429). - net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload (bsc#1234429). - ppp: fix race conditions in ppp_fill_forward_path (bsc#1234429). - net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path (bsc#1234429). - ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add (bsc#1234429). - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM (bsc#1234429). - drm/amd/display: Don't print errors for nonexistent connectors (bsc#1234429). - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() (bsc#1234429). - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (bsc#1234429). - drm/hisilicon/hibmc: fix the hibmc loaded failed bug (bsc#1234429). - drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed (bsc#1234429). - drm/hisilicon/hibmc: refactored struct hibmc_drm_private (bsc#1234429). - rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too (bsc#1234429). - mlxsw: spectrum: Forward packets with an IPv4 link-local source IP (bsc#1234429). - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() (bsc#1234429). - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established (bsc#1234429). - Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF (bsc#1234429). - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown (bsc#1234429). - Bluetooth: hci_sync: Fix scan state after PA Sync has been established (bsc#1234429). - iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1234429). - scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1234429). - rtase: Fix Rx descriptor CRC error bit definition (bsc#1234429). - net: bridge: fix soft lockup in br_multicast_query_expired() (bsc#1234429). - net: xilinx: axienet: Fix RX skb ring management in DMAengine mode (bsc#1234429). - RDMA/hns: Fix dip entries leak on devices newer than hip09 (bsc#1234429). - RDMA/bnxt_re: Fix to initialize the PBL array (bsc#1234429). - RDMA/bnxt_re: Fix a possible memory leak in the driver (bsc#1234429). - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (bsc#1234429). - RDMA/bnxt_re: Fix to do SRQ armena by default (bsc#1234429). - RDMA/hns: Fix querying wrong SCC context for DIP algorithm (bsc#1234429). - RDMA/erdma: Fix ignored return value of init_kernel_qp (bsc#1234429). - rust: alloc: replace aligned_size() with Kmalloc::aligned_layout() (bsc#1234429). - iosys-map: Fix undefined behavior in iosys_map_clear() (bsc#1234429). - drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian (bsc#1234429). - drm/tests: Do not use drm_fb_blit() in format-helper tests (bsc#1234429). - drm/format-helper: Add generic conversion to 32-bit formats (bsc#1234429). - drm/format-helper: Move helpers for pixel conversion to header file (bsc#1234429). - drm/format-helper: Add conversion from XRGB8888 to BGR888 (bsc#1234429). - drm/panic: Move drawing functions to drm_draw (bsc#1234429). - drm/tests: Fix endian warning (bsc#1234429). - cgroup/cpuset: Fix a partition error with CPU hotplug (bsc#1234429). - cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key (bsc#1234429). - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor() (bsc#1234429). - spi: spi-fsl-lpspi: Clamp too high speed_hz (bsc#1234429). - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper (bsc#1234429). - iio: imu: inv_icm42600: change invalid data error to -EBUSY (bsc#1234429). - iio: imu: inv_icm42600: Convert to uXX and sXX integer types (bsc#1234429). - iio: imu: inv_icm42600: use = { } instead of memset() (bsc#1234429). - iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64 (bsc#1234429). - tls: fix handling of zero-length records on the rx_list (bsc#1234429). - powerpc/boot: Fix build with gcc 15 (bsc#1234429). - ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp() (bsc#1234429). - drm/i915/icl+/tc: Cache the max lane count value (bsc#1234429). - compiler: remove __ADDRESSABLE_ASM{_STR,}() again (bsc#1234429). - drm/i915/icl+/tc: Convert AUX powered WARN to a debug message (bsc#1234429). - tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1234429). - tracing: Remove unneeded goto out logic (bsc#1234429). - iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() (bsc#1234429). - iio: light: as73211: Ensure buffer holes are zeroed (bsc#1234429). - iio: light: Use aligned_s64 instead of open coding alignment (bsc#1234429). - usb: dwc3: pci: add support for the Intel Wildcat Lake (bsc#1234429). - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (bsc#1234429). - usb: dwc3: Ignore late xferNotReady event to prevent halt timeout (bsc#1234429). - usb: xhci: Fix slot_id resource race conflict (bsc#1234429). - usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean (bsc#1234429). - usb: typec: maxim_contaminant: disable low power mode when reading comparator values (bsc#1234429). - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles (bsc#1234429). - usb: storage: realtek_cr: Use correct byte order for bcs->Residue (bsc#1234429). - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera (bsc#1234429). - usb: renesas-xhci: Fix External ROM access timeouts (bsc#1234429). - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test (bsc#1234429). - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() (bsc#1234429). - comedi: pcl726: Prevent invalid irq number (bsc#1234429). - comedi: Make insn_rw_emulate_bits() do insn->n samples (bsc#1234429). - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive (bsc#1234429). - cdx: Fix off-by-one error in cdx_rpmsg_probe() (bsc#1234429). - kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq() (bsc#1234429). - most: core: Drop device reference after usage in get_channel() (bsc#1234429). - iio: proximity: isl29501: fix buffered read on big-endian systems (bsc#1234429). - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() (bsc#1234429). - ftrace: Also allocate and copy hash for reading of filter files (bsc#1234429). - fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() (bsc#1234429). - mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1 (bsc#1234429). - drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS (bsc#1234429). - cpuidle: governors: menu: Avoid selecting states with too much latency (bsc#1234429). - cpuidle: menu: Remove iowait influence (bsc#1234429). - use uniform permission checks for all mount propagation changes (bsc#1234429). - fs/buffer: fix use-after-free when call bh_read() helper (bsc#1234429). - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (bsc#1234429). - debugfs: fix mount options not being applied (bsc#1234429). - arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file (bsc#1234429). - arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC (bsc#1234429). - arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC (bsc#1234429). - arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot (bsc#1234429). - btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1234429). - ext4: preserve SB_I_VERSION on remount (bsc#1234429). - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems (bsc#1234429). - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (bsc#1234429). - iio: adc: ad7173: fix setting ODR in probe (bsc#1234429). - PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining (bsc#1234429). - PCI: rockchip: Use standard PCIe definitions (bsc#1234429). - PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features (bsc#1234429). - PCI: imx6: Add i.MX8Q PCIe Endpoint (EP) support (bsc#1234429). - Mark xe driver as BROKEN if kernel page size is not 4kB (bsc#1234429). - mptcp: disable add_addr retransmission when timeout is 0 (bsc#1234429). - mptcp: remove duplicate sk_reset_timer call (bsc#1234429). - soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() (bsc#1234429). - scsi: core: Fix command pass through retry regression (bsc#1234429). - drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs (bsc#1234429). - drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs (bsc#1234429). - drm/amd/display: Fix DP audio DTO1 clock source on DCE 6 (bsc#1234429). - drm/amd/display: Fix Xorg desktop unresponsive on Replay panel (bsc#1234429). - drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 (bsc#1234429). - drm/amd/display: Don't overclock DCE 6 by 15% (bsc#1234429). - drm/amd/display: Avoid a NULL pointer dereference (bsc#1234429). - drm/amdgpu/swm14: Update power limit logic (bsc#1234429). - accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc() (bsc#1234429). - kvm: retry nx_huge_page_recovery_thread creation (bsc#1234429). - platform/x86/intel-uncore-freq: Check write blocked for ELC (bsc#1234429). - s390/sclp: Fix SCCB present check (bsc#1234429). - RDMA/rxe: Flush delayed SKBs while releasing RXE resources (bsc#1234429). - ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 (bsc#1234429). - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn (bsc#1234429). - mm/debug_vm_pgtable: clear page table entries at destroy_args() (bsc#1234429). - squashfs: fix memory leak in squashfs_fill_super (bsc#1234429). - NFS: Fix a race when updating an existing write (bsc#1234429). - mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency (bsc#1234429). - mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER (bsc#1234429). - memstick: Fix deadlock by moving removing flag earlier (bsc#1234429). - mmc: sdhci-pci-gli: Add a new function to simplify the code (bsc#1234429). - iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement (bsc#1234429). - iov_iter: iterate_folioq: fix handling of offset >= folio size (bsc#1234429). - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (bsc#1234429). - Revert "can: ti_hecc: fix -Woverflow compiler warning" (bsc#1234429). - sched_ext: initialize built-in idle state before ops.init() (bsc#1234429). - ata: libata-scsi: Return aborted command when missing sense and result TF (bsc#1234429). - io_uring/net: commit partial buffers on retry (bsc#1234429). - netfs: Fix unbuffered write error handling (bsc#1234429). - btrfs: send: make fs_path_len() inline and constify its argument (bsc#1234429). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1234429). - btrfs: send: avoid path allocation for the current inode when issuing commands (bsc#1234429). - btrfs: send: keep the current inode's path cached (bsc#1234429). - btrfs: send: add and use helper to rename current inode when processing refs (bsc#1234429). - btrfs: send: only use boolean variables at process_recorded_refs() (bsc#1234429). - btrfs: send: factor out common logic when sending xattrs (bsc#1234429). - xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags (bsc#1234429). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1234429). - btrfs: codify pattern for adding block_group to bg_list (bsc#1234429). - btrfs: explicitly ref count block_group on new_bgs list (bsc#1234429). - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (bsc#1234429). - btrfs: always abort transaction on failure to add block group to free space tree (bsc#1234429). - btrfs: move transaction aborts to the error site in add_block_group_free_space() (bsc#1234429). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1234429). - btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb() (bsc#1234429). - usb: typec: fusb302: cache PD RX state (bsc#1234429). - USB: typec: Use str_enable_disable-like helpers (bsc#1234429). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1234429). - mm/damon/ops-common: ignore migration request to invalid nodes (bsc#1234429). - selftests: mptcp: pm: check flush doesn't reset limits (bsc#1234429). - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit (bsc#1234429). - mptcp: drop skb if MPTCP skb extension allocation fails (bsc#1234429). - ACPI: pfr_update: Fix the driver update version check (bsc#1234429). - ipv6: sr: Fix MAC comparison to be constant-time (bsc#1234429). - sched/ext: Fix invalid task state transitions on class switch (bsc#1234429). - net, hsr: reject HSR frame if skb can't hold tag (bsc#1234429). - LoongArch: KVM: Make function kvm_own_lbt() robust (bsc#1234429). - drm/amd/display: Don't overwrite dce60_clk_mgr (bsc#1234429). - drm/amd/display: fix a Null pointer dereference vulnerability (bsc#1234429). - drm/amd/display: Add primary plane to commits for correct VRR handling (bsc#1234429). - drm/amdkfd: Destroy KFD debugfs after destroy KFD wq (bsc#1234429). - drm/amdgpu: update mmhub 4.1.0 client id mappings (bsc#1234429). - drm/amdgpu: update mmhub 3.0.1 client id mappings (bsc#1234429). - drm/amdgpu: Update external revid for GC v9.5.0 (bsc#1234429). - drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram() (bsc#1234429). - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities (bsc#1234429). - drm/amdgpu: Avoid extra evict-restore process (bsc#1234429). - drm/amd: Restore cached power limit during resume (bsc#1234429). - drm/amdgpu/discovery: fix fw based ip discovery (bsc#1234429). - media: venus: venc: Clamp param smaller than 1fps and bigger than 240 (bsc#1234429). - media: venus: vdec: Clamp param smaller than 1fps and bigger than 240 (bsc#1234429). - media: venus: protect against spurious interrupts during probe (bsc#1234429). - media: venus: hfi: explicitly release IRQ during teardown (bsc#1234429). - media: venus: Fix MSM8998 frequency table (bsc#1234429). - media: venus: Add a check for packet size after reading from shared memory (bsc#1234429). - media: qcom: camss: cleanup media device allocated resource on error path (bsc#1234429). - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls (bsc#1234429). - media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval (bsc#1234429). - media: ov2659: Fix memory leaks in ov2659_probe() (bsc#1234429). - media: pisp_be: Fix pm_runtime underrun in probe (bsc#1234429). - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (bsc#1234429). - media: usbtv: Lock resolution while streaming (bsc#1234429). - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (bsc#1234429). - media: verisilicon: Fix AV1 decoder clock frequency (bsc#1234429). - media: vivid: fix wrong pixel_array control size (bsc#1234429). - media: ipu6: isys: Use correct pads for xlate_streams() (bsc#1234429). - media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() (bsc#1234429). - media: hi556: correct the test pattern configuration (bsc#1234429). - media: gspca: Add bounds checking to firmware parser (bsc#1234429). - parisc: Update comments in make_insert_tlb (bsc#1234429). - parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault() (bsc#1234429). - parisc: Revise gateway LWS calls to probe user read access (bsc#1234429). - parisc: Revise __get_user() to probe user read access (bsc#1234429). - parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c (bsc#1234429). - parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers (bsc#1234429). - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap (bsc#1234429). - parisc: Define and use set_pte_at() (bsc#1234429). - parisc: Check region is readable by user in raw_copy_from_user() (bsc#1234429). - soc/tegra: pmc: Ensure power-domains are in a known state (bsc#1234429). - kbuild: userprogs: use correct linker when mixing clang and GNU ld (bsc#1234429). - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1234429). - f2fs: fix to avoid out-of-boundary access in dnode page (bsc#1234429). - ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context (bsc#1234429). - amdgpu/amdgpu_discovery: increase timeout limit for IFWI init (bsc#1234429). - phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence (bsc#1234429). - vhost/vsock: Avoid allocating arbitrarily-sized SKBs (bsc#1234429). - vsock/virtio: Validate length in packet header before skb_put() (bsc#1234429). - PCI: imx6: Delay link start until configfs 'start' written (bsc#1234429). - PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset (bsc#1234429). - PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features (bsc#1234429). - PCI: endpoint: Fix configfs group removal on driver teardown (bsc#1234429). - PCI: endpoint: Fix configfs group list head handling (bsc#1234429). - PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge (bsc#1234429). - readahead: fix return value of page_cache_next_miss() when no hole is found (bsc#1234429). - mtd: rawnand: renesas: Add missing check after DMA map (bsc#1234429). - mtd: rawnand: fsmc: Add missing check after DMA map (bsc#1234429). - mtd: spinand: propagate spinand_wait() errors from spinand_write_page() (bsc#1234429). - mtd: spi-nor: Fix spi_nor_try_unlock_all() (bsc#1234429). - hwmon: (gsc-hwmon) fix fan pwm setpoint show functions (bsc#1234429). - pwm: mediatek: Fix duty and period setting (bsc#1234429). - pwm: mediatek: Handle hardware enable and clock enable separately (bsc#1234429). - pwm: imx-tpm: Reset counter if CMOD is 0 (bsc#1234429). - wifi: ath11k: fix dest ring-buffer corruption when ring is full (bsc#1234429). - wifi: ath11k: fix source ring-buffer corruption (bsc#1234429). - wifi: ath11k: fix dest ring-buffer corruption (bsc#1234429). - wifi: ath12k: fix dest ring-buffer corruption when ring is full (bsc#1234429). - wifi: ath12k: fix source ring-buffer corruption (bsc#1234429). - wifi: ath12k: fix dest ring-buffer corruption (bsc#1234429). - wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() (bsc#1234429). - iio: adc: ad_sigma_delta: change to buffer predisable (bsc#1234429). - iio: imu: bno055: fix OOB access of hw_xlate array (bsc#1234429). - zynq_fpga: use sgtable-based scatterlist wrappers (bsc#1234429). - soc: qcom: mdt_loader: Ensure we don't read past the ELF header (bsc#1234429). - ata: libata-scsi: Fix CDL control (bsc#1234429). - scsi: ufs: ufs-pci: Fix default runtime and system PM levels (bsc#1234429). - scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers (bsc#1234429). - ata: libata-scsi: Fix ata_to_sense_error() status handling (bsc#1234429). - scsi: mpi3mr: Fix race between config read submit and interrupt completion (bsc#1234429). - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1234429). - scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host (bsc#1234429). - dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints (bsc#1234429). - dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints (bsc#1234429). - apparmor: Fix 8-byte alignment for initial dfa blob streams (bsc#1234429). - arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses (bsc#1234429). - arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1 (bsc#1234429). - arm64: dts: exynos: gs101: ufs: add dma-coherent property (bsc#1234429). - arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default (bsc#1234429). - arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support (bsc#1234429). - btrfs: fix printing of mount info messages for NODATACOW/NODATASUM (bsc#1234429). - btrfs: restore mount option info messages during mount (bsc#1234429). - btrfs: fix incorrect log message for nobarrier mount option (bsc#1234429). - btrfs: zoned: fix write time activation failure for metadata block group (bsc#1234429). - ext4: fix hole length calculation overflow in non-extent inodes (bsc#1234429). - ext4: use kmalloc_array() for array space allocation (bsc#1234429). - ext4: don't try to clear the orphan_present feature block device is r/o (bsc#1234429). - ext4: fix reserved gdt blocks handling in fsmap (bsc#1234429). - ext4: fix fsmap end of range reporting with bigalloc (bsc#1234429). - ext4: check fast symlink for ea_inode correctly (bsc#1234429). - tracing: fprobe-event: Sanitize wildcard for fprobe event name (bsc#1234429). - ksmbd: extend the connection limiting mechanism to support IPv6 (bsc#1234429). - ksmbd: fix refcount leak causing resource not released (bsc#1234429). - Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" (bsc#1234429). - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 (bsc#1234429). - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 (bsc#1234429). - crypto: octeontx2 - Fix address alignment issue on ucode loading (bsc#1234429). - crypto: qat - flush misc workqueue during device shutdown (bsc#1234429). - crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP (bsc#1234429). - crypto: qat - lower priority for skcipher and aead algorithms (bsc#1234429). - lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap (bsc#1234429). - vt: defkeymap: Map keycodes above 127 to K_HOLE (bsc#1234429). - vt: keyboard: Don't process Unicode characters in K_OFF mode (bsc#1234429). - bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1234429). - bus: mhi: host: Fix endianness of BHI vector table (bsc#1234429). - usb: dwc3: imx8mp: fix device leak at unbind (bsc#1234429). - usb: dwc3: meson-g12a: fix device leaks at unbind (bsc#1234429). - usb: musb: omap2430: fix device leak at unbind (bsc#1234429). - usb: gadget: udc: renesas_usb3: fix device leak at unbind (bsc#1234429). - usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() (bsc#1234429). - m68k: Fix lost column on framebuffer debug console (bsc#1234429). - dm: Check for forbidden splitting of zone write operations (bsc#1234429). - dm: dm-crypt: Do not partially accept write BIOs with zoned targets (bsc#1234429). - PM: runtime: Take active children into account in pm_runtime_get_if_in_use() (bsc#1234429). - platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() (bsc#1234429). - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (bsc#1234429). - ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig (bsc#1234429). - serial: 8250: fix panic due to PSLVERR (bsc#1234429). - commit 27ec0ed ++++ kind: - Update to version 0.30.0: * Breaking Changes - The default node image is now kindest/node:v1.34.0@sha256:7416a61b42b1662ca6ca89f02028ac133a309a2a30ba309614e8ec94d976dc5a * New Features - Updated to containerd 2.1.4 * Images pre-built for this release: - v1.34.0: kindest/node:v1.34.0@7416a61b42b1662ca6ca89f02028ac133a309a2a30ba309614e8ec94d976dc5a - v1.33.4: kindest/node:v1.33.4@sha256:25a6018e48dfcaee478f4a59af81157a437f15e6e140bf103f85a2e7cd0cbbf2 - v1.32.8: kindest/node:v1.32.8@sha256:abd489f042d2b644e2d033f5c2d900bc707798d075e8186cb65e3f1367a9d5a1 - v1.31.12: kindest/node:v1.31.12@sha256:0f5cc49c5e73c0c2bb6e2df56e7df189240d83cf94edfa30946482eb08ec57d2 NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons. See also: - https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster - https://kind.sigs.k8s.io/docs/user/quick-start/#building-images NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see #2718 * Fixes - Fix an issue with rebooting v1.33.0+ clusters #3941 - Add priority class system-critical to kindnetd - Fix HA control-plane loadbalancer for podman #3962 - Fix node-image builds with relative source paths ++++ kmod: - Revert the previous workaround ++++ kubefirst: - Update to version 2.9.1: * feature: provide support for Amazon Linux 2023 * feature: surface custom inputs on cluster details page * ux: improve the workload cluster template and workload module user input and summary experience * bugfix: address dropped connections to backend verbose logs during initial provisioning * bugfix: custom template in branch name with slash needs support * bugfix: terraform fix to civo gpu cluster templates * bugfix: intermittent failure to establish default cloud account during initial provision ++++ kwctl: - Update to version 1.28.0: * Maintenance - build(deps): update rust crate regex to v1.11.2 (#1335) - build(deps): update rust crate url to v2.5.7 (#1334) - build(deps): update taiki-e/install-action action to v2.58.21 (#1333) - build(deps): update github-actions - build(deps): update rust crate url to v2.5.6 (#1332) - build(deps): update github-actions - build(deps): update rust crate thiserror to v2.0.16 (#1329) - build(deps): update rust crate tempfile to v3.21.0 - build(deps): update rust crate serde_json to v1.0.143 - build(deps): update rust crate hyper to v1.7.0 - build(deps): update crate-ci/typos action to v1.35.5 (#1325) - build(deps): update rust crate thiserror to v2.0.15 (#1323) - build(deps): update taiki-e/install-action action to v2.58.17 (#1322) - build(deps): update taiki-e/install-action action to v2.58.15 (#1321) - build(deps): update taiki-e/install-action action to v2.58.12 (#1320) ++++ qt6-datavis3d: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) - Build with all available cores ++++ qt6-virtualkeyboard: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) ++++ qt6-declarative: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) ++++ qt6-quick3d: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) ++++ qt6-sensors: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) ++++ pcre2: - Update to 10.46: * CVE-2025-58050: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS (boo#1248832, boo#1248842) ++++ sleef: - Disable SVE on aarch64 to fix build ++++ sysprof: - Update to version 48.1: + Round mapped ring buffer the shared memory boundary on hppa. + Try to talk to perf with direct syscalls in the absence of a D-Bus connection. + Add --no-sysprofd command line option to sysprof-cli. + Properly parse --no-debuginfod in sysprof-cli. + Fix an uninitialized memory issue when using counters with the collector API of libsysprof-capture. + Updated translations. ++++ linkerd-cli-edge: - Update to version 25.8.5: No CLI-related changes in the changelog * Dependencies - build(deps-dev): bump webpack from 5.100.2 to 5.101.3 in /web/app (#14407) - build(deps): bump google-github-actions/setup-gcloud (#14410) - build(deps): bump tj-actions/changed-files (#14411) - build(deps): bump regex from 1.11.1 to 1.11.2 (#14413) - build(deps): bump percent-encoding from 2.3.1 to 2.3.2 (#14416) - build(deps): bump regex-lite from 0.1.6 to 0.1.7 (#14415) - build(deps): bump cc from 1.2.33 to 1.2.34 (#14414) - build(deps): bump ahash from 0.8.11 to 0.8.12 (#14378) - build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 (#14399) - build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 (#14395) - build(deps-dev): bump @babel/preset-env in /web/app (#14383) - build(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 (#14400) - build(deps): bump azure/setup-helm from 4.3.0 to 4.3.1 (#14396) - build(deps): bump helm.sh/helm/v3 from 3.18.5 to 3.18.6 (#14394) - build(deps-dev): bump html-webpack-plugin in /web/app (#14384) - build(deps-dev): bump @babel/core from 7.28.0 to 7.28.3 in /web/app (#14381) - build(deps): bump async-trait from 0.1.88 to 0.1.89 (#14377) - build(deps): bump bitflags from 2.9.1 to 2.9.3 (#14409) - build(deps): bump cfg-if from 1.0.1 to 1.0.3 (#14408) - build(deps): bump ppv-lite86 from 0.2.20 to 0.2.21 (#14376) - Update to version 25.8.4: * CLI-related changes in the changelog - fix(cli): install openssl in dockerfile (#14403) * Dependencies - build(deps): bump syn from 2.0.105 to 2.0.106 (#14393) - build(deps): bump sigs.k8s.io/kustomize/kyaml from 0.19.0 to 0.20.1 (#14375) - chore(deps): bump extension-init from 0.1.6 to 0.1.7 (#14392) - build(deps): bump cc from 1.2.32 to 1.2.33 (#14391) - build(deps): bump hyper from 1.6.0 to 1.7.0 (#14390) - build(deps): bump hashbrown from 0.15.2 to 0.15.5 (#14379) ++++ mkdud: - merge gh#openSUSE/mkdud#42 - make mkdud SLE-16 aware (jsc#PED-13262) - update man page - documentation update - adjust package dependencies - 2.0 ++++ mksusecd: - merge gh#openSUSE/mksusecd#93 - minor suse blog corrections - add provides mkmedia to spec file - add --apply-dud option to apply DUDs directly to install media (jsc#PED-13262) - adjust package dependencies - update mkmedia man page - 4.1 ++++ net-tools: - Drop old Fedora patch 0006-Allow-interface-stacking.patch. It provided a fix for CVE-2025-46836 (bsc#142461), but it was fixes by the upstream in 2025 in a different way. Revert interferring net-tools-CVE-2025-46836.patch back to the upstream version. - Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch). - Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59, net-tools-proc_gen_fmt-buffer-overflow.patch). - Avoid unsafe memcpy in ifconfig (bsc#1248687, net-tools-ifconfig-avoid-unsafe-memcpy.patch). - Prevent overflow in ax25 and netrom (bsc#1248687, net-tools-ax25+netrom-overflow-1.patch, net-tools-ax25+netrom-overflow-2.patch). - Keep possibility to enter long interface names, even if they are not accepted by the kernel, because it was always possible up to CVE-2025-46836 fix. But issue a warning about an interface name concatenation (bsc#1248410, net-tools-ifconfig-long-name-warning.patch). ++++ osv-scanner: - Update to version 2.2.2: * Features: - Feature #2113 Add support for Java reachability analysis to identify uncalled vulnerabilities in JAR files. - Feature #2177 Automatically parse osv-scanner-custom.json files as osv-scanner.json custom lockfiles. * Fixes: - Bug #2204 Add a warning to guide users to the correct GitHub Action. - Bug #2202 Fix incorrect exit code when unimportant vulnerabilities are found in non-container scans. - Bug #2188 Fix handling of absolute paths on Windows. * Dependencies - fix(deps): update osv-scalibr (#2175) - chore(deps): update golang docker tag to v1.24.6 (#2167) - chore(deps): update workflows (#2165) - chore(deps): lock file maintenance (#2143) ++++ patterns-xfce: - Move alsa-utils recommends from laptop_wayland to to basis_wayland patterns, as it's always used by labwc, not depending on laptop - Clean up superfluous entries in laptop_wayland patterns that are already included in the basis pattern; xfce4-battery-plugin is dropped as xfce4-power-manager already provides the functionality (and it's not used as default) ++++ php8: - version update to 8.4.12 Core: Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro. Fixed bug GH-19053 (Duplicate property slot with hooks and interface property). Fixed bug GH-19044 (Protected properties are not scoped according to their prototype). Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking). Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr). Fixed bug GH-19305 (Operands may be being released during comparison). Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure). Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator). Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes). Fixed bug GH-19280 (Stale array iterator position on rehashing). Fixed bug GH-18736 (Circumvented type check with return by ref + finally). Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming). Calendar: Fixed bug GH-19371 (integer overflow in calendar.c). FTP: Fix theoretical issues with hrtime() not being available. GD: Fix incorrect comparison with result of php_stream_can_cast(). Hash: Fix crash on clone failure. Intl: Fix memleak on failure in collator_get_sort_key(). Fix return value on failure for resourcebundle count handler. LDAP: Fixed bug GH-18529 (additional inheriting of TLS int options). LibXML: Fixed bug GH-19098 (libxml<2.13 segmentation fault caused by php_libxml_node_free). MbString: Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown). Opcache: Reset global pointers to prevent use-after-free in zend_jit_status(). Fix issue with JIT restart and hooks. Fix crash with dynamic function defs in hooks during preload. OpenSSL: Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check). Fix error return check of EVP_CIPHER_CTX_ctrl(). Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param). PDO Pgsql: Fixed dangling pointer access on _pdo_pgsql_trim_message helper. SOAP: Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref). Sockets: Fix some potential crashes on incorrect argument value. Standard: Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache). Fix theoretical issues with hrtime() not being available. Fixed bug GH-19300 (Nested array_multisort invocation with error breaks). Windows: Free opened_path when opened_path_len >= MAXPATHLEN. ++++ php8-embed: - version update to 8.4.12 Core: Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro. Fixed bug GH-19053 (Duplicate property slot with hooks and interface property). Fixed bug GH-19044 (Protected properties are not scoped according to their prototype). Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking). Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr). Fixed bug GH-19305 (Operands may be being released during comparison). Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure). Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator). Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes). Fixed bug GH-19280 (Stale array iterator position on rehashing). Fixed bug GH-18736 (Circumvented type check with return by ref + finally). Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming). Calendar: Fixed bug GH-19371 (integer overflow in calendar.c). FTP: Fix theoretical issues with hrtime() not being available. GD: Fix incorrect comparison with result of php_stream_can_cast(). Hash: Fix crash on clone failure. Intl: Fix memleak on failure in collator_get_sort_key(). Fix return value on failure for resourcebundle count handler. LDAP: Fixed bug GH-18529 (additional inheriting of TLS int options). LibXML: Fixed bug GH-19098 (libxml<2.13 segmentation fault caused by php_libxml_node_free). MbString: Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown). Opcache: Reset global pointers to prevent use-after-free in zend_jit_status(). Fix issue with JIT restart and hooks. Fix crash with dynamic function defs in hooks during preload. OpenSSL: Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check). Fix error return check of EVP_CIPHER_CTX_ctrl(). Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param). PDO Pgsql: Fixed dangling pointer access on _pdo_pgsql_trim_message helper. SOAP: Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref). Sockets: Fix some potential crashes on incorrect argument value. Standard: Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache). Fix theoretical issues with hrtime() not being available. Fixed bug GH-19300 (Nested array_multisort invocation with error breaks). Windows: Free opened_path when opened_path_len >= MAXPATHLEN. ++++ php8-fastcgi: - version update to 8.4.12 Core: Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro. Fixed bug GH-19053 (Duplicate property slot with hooks and interface property). Fixed bug GH-19044 (Protected properties are not scoped according to their prototype). Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking). Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr). Fixed bug GH-19305 (Operands may be being released during comparison). Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure). Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator). Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes). Fixed bug GH-19280 (Stale array iterator position on rehashing). Fixed bug GH-18736 (Circumvented type check with return by ref + finally). Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming). Calendar: Fixed bug GH-19371 (integer overflow in calendar.c). FTP: Fix theoretical issues with hrtime() not being available. GD: Fix incorrect comparison with result of php_stream_can_cast(). Hash: Fix crash on clone failure. Intl: Fix memleak on failure in collator_get_sort_key(). Fix return value on failure for resourcebundle count handler. LDAP: Fixed bug GH-18529 (additional inheriting of TLS int options). LibXML: Fixed bug GH-19098 (libxml<2.13 segmentation fault caused by php_libxml_node_free). MbString: Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown). Opcache: Reset global pointers to prevent use-after-free in zend_jit_status(). Fix issue with JIT restart and hooks. Fix crash with dynamic function defs in hooks during preload. OpenSSL: Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check). Fix error return check of EVP_CIPHER_CTX_ctrl(). Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param). PDO Pgsql: Fixed dangling pointer access on _pdo_pgsql_trim_message helper. SOAP: Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref). Sockets: Fix some potential crashes on incorrect argument value. Standard: Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache). Fix theoretical issues with hrtime() not being available. Fixed bug GH-19300 (Nested array_multisort invocation with error breaks). Windows: Free opened_path when opened_path_len >= MAXPATHLEN. ++++ php8-fpm: - version update to 8.4.12 Core: Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro. Fixed bug GH-19053 (Duplicate property slot with hooks and interface property). Fixed bug GH-19044 (Protected properties are not scoped according to their prototype). Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking). Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr). Fixed bug GH-19305 (Operands may be being released during comparison). Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure). Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator). Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes). Fixed bug GH-19280 (Stale array iterator position on rehashing). Fixed bug GH-18736 (Circumvented type check with return by ref + finally). Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming). Calendar: Fixed bug GH-19371 (integer overflow in calendar.c). FTP: Fix theoretical issues with hrtime() not being available. GD: Fix incorrect comparison with result of php_stream_can_cast(). Hash: Fix crash on clone failure. Intl: Fix memleak on failure in collator_get_sort_key(). Fix return value on failure for resourcebundle count handler. LDAP: Fixed bug GH-18529 (additional inheriting of TLS int options). LibXML: Fixed bug GH-19098 (libxml<2.13 segmentation fault caused by php_libxml_node_free). MbString: Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown). Opcache: Reset global pointers to prevent use-after-free in zend_jit_status(). Fix issue with JIT restart and hooks. Fix crash with dynamic function defs in hooks during preload. OpenSSL: Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check). Fix error return check of EVP_CIPHER_CTX_ctrl(). Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param). PDO Pgsql: Fixed dangling pointer access on _pdo_pgsql_trim_message helper. SOAP: Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref). Sockets: Fix some potential crashes on incorrect argument value. Standard: Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache). Fix theoretical issues with hrtime() not being available. Fixed bug GH-19300 (Nested array_multisort invocation with error breaks). Windows: Free opened_path when opened_path_len >= MAXPATHLEN. ++++ php8-test: - version update to 8.4.12 Core: Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro. Fixed bug GH-19053 (Duplicate property slot with hooks and interface property). Fixed bug GH-19044 (Protected properties are not scoped according to their prototype). Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking). Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr). Fixed bug GH-19305 (Operands may be being released during comparison). Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure). Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator). Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes). Fixed bug GH-19280 (Stale array iterator position on rehashing). Fixed bug GH-18736 (Circumvented type check with return by ref + finally). Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming). Calendar: Fixed bug GH-19371 (integer overflow in calendar.c). FTP: Fix theoretical issues with hrtime() not being available. GD: Fix incorrect comparison with result of php_stream_can_cast(). Hash: Fix crash on clone failure. Intl: Fix memleak on failure in collator_get_sort_key(). Fix return value on failure for resourcebundle count handler. LDAP: Fixed bug GH-18529 (additional inheriting of TLS int options). LibXML: Fixed bug GH-19098 (libxml<2.13 segmentation fault caused by php_libxml_node_free). MbString: Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown). Opcache: Reset global pointers to prevent use-after-free in zend_jit_status(). Fix issue with JIT restart and hooks. Fix crash with dynamic function defs in hooks during preload. OpenSSL: Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check). Fix error return check of EVP_CIPHER_CTX_ctrl(). Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param). PDO Pgsql: Fixed dangling pointer access on _pdo_pgsql_trim_message helper. SOAP: Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref). Sockets: Fix some potential crashes on incorrect argument value. Standard: Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache). Fix theoretical issues with hrtime() not being available. Fixed bug GH-19300 (Nested array_multisort invocation with error breaks). Windows: Free opened_path when opened_path_len >= MAXPATHLEN. ++++ python-pycdlib: - Use libalternatives in TW and Leap 16.0 - Change source to github tag archive, the last tag is not released in pypi. - update to 1.15.0: * Remove Python 2 compatibility * Add an encoding parameter to the walk API so non-standard ISOs can be used * Fix ISOs that only have a single extent for Path Tables * Add the 'udf_path' argument to add_file so UDF ISOs can add paths * Fix timestamps for UDF ++++ python-ase: - Update to 3.26.0: * Requirements + The minimum supported Python version has increased to 3.9 * Breaking changes + Removed unused IOFormat.open() method. + The Optimizable interface now works in terms of arbitrary degrees of freedom rather than Cartesian (Nx3) ones. + ase.io.orca.read_orca_output now returns Atoms with attached properties. ase.io.read() will use this function. + The master parameter to each Optimizer is now passed via **kwargs and so becomes keyword-only. + Removed legacy read_cell and write_cell functions from ase.io.castep. + Removed deprecated force_consistent option from Optimizer. + ase.spectrum.band_structure.BandStructurePlot: the plot_with_colors() has been removed and its features merged into the plot() method. * Highlights + Changed ELK based on GenericFileIOCalculator. + The “heavy-weight” database backends in ase.db have been moved to a separate project. + Major improvements to find_optimal_cell_shape(): improve target metric; ensure rotationally invariant results; avoid negative determinants; improved performance via vectorisation. + Added new FiniteDifferenceCalculator, which wraps other calculator for finite-difference forces and strains. + Added two new MD thermostats: ase.md.bussi.Bussi and ase.md.nose_hoover_chain.NoseHooverChainNVT. - Drop patch ase-mr3400-numpy2.patch, included upstream. ++++ python-gitlabcis: - update to 1.15.10: * Fix - fix(deps): update dependency python-gitlab to v6.3.0 (88572b9) ++++ python-prompt_toolkit: - Update to 3.0.52: New features: * Add choice() shortcut for selecting an option amongst a list of choices (see documentation for examples). * Add support for ANSI dim text formatting. * Add frame=... option for prompt() and choice() shortcuts to allow for displaying a frame around the input prompt. Fixes: * Fix button width when non English characters are displayed. * Implement flushing in Windows VT100 input. * Fix signal handling for GraalPy. * Fix handling of zero sized dimensions. ++++ python-python-gitlab: - update to 6.3.0: * Chores - deps: Update actions/checkout action to v5 (36629a4) - deps: Update actions/download-artifact action to v5 (397cf39) - deps: Update all non-major dependencies (d40d5d2) - deps: Update all non-major dependencies (2fce144) - deps: Update all non-major dependencies (2dd2e8e) - deps: Update all non-major dependencies (bf7a60a) - deps: Update all non-major dependencies (18c946f) * Features - Add sync method to force remote mirror updates (f3c6678) - api: Add missing ProjectJob list filters (5fe0e71) - api: Add missing ProjectPackageManager list filters (b1696be) - users: Implement support for 'admins' in administrators 'list' (aaed51c) ++++ python-ruff: - update to 0.12.11 * Preview features * [airflow] Extend AIR311 and AIR312 rules * [airflow] Replace wrong path airflow.io.storage with airflow.io.store (AIR311) * [flake8-async] Implement blocking-http-call-httpx-in-async-function (ASYNC212) * [flake8-logging-format] Add auto-fix for f-string logging calls (G004) * [flake8-use-pathlib] Add autofix for PTH211 * [flake8-use-pathlib] Make PTH100 fix unsafe because it can change behavior * Bug fixes * [pyflakes, pylint] Fix false positives caused by __class__ cell handling (F841, PLE0117) * [pyflakes] Fix allowed-unused-imports matching for top-level modules (F401) * [ruff] Fix false positive for t-strings in default-factory-kwarg (RUF026) * [ruff] Preserve relative whitespace in multi-line expressions (RUF033) * Rule changes * [ruff] Handle empty t-strings in unnecessary-empty-iterable-within-deque-call (RUF037) * Documentation * Fix incorrect D413 links in docstrings convention FAQ * [flake8-use-pathlib] Update links to the table showing the correspondence between os and pathlib ++++ python-unyt: - Update to 3.0.4: * BUG: fix incompatibilities with NumPy 2.1 * add foe and Bethe units * Fix Stephan-Boltzmann constant accuracy and add radiation constant * Typo fixes and documentation fix * BUG: fix return units from numpy.ftt functions * STY: migrate formatting from black to ruff * BUG: fix incorrect output unit for np.prod with an axis argument * BUG: np.histogram* functions give correct units when weights and/or density are set * BUG: fix an issue where np.histogramdd could create infinite recursion on some inputs * BUG: linspace and logspace give incorrect results or crash with some inputs * BUG: apply_over_axes no longer assumes user-supplied function preserves units * BUG: allow subclassing in unyt_array.__array_func__ * BUG: fix unit handling for np.take and unyt_array.take * BUG: fix a regression where np.linspace's num argument would be ignored for unyt_arrays * RFC: handle np.vecdot as a ufunc rather than an arrayfunc * BUG: fix raising a unyt array to an array power in sensible cases * Fix typo in array function implementations (ftt -> fft) * BUG: fix an issue where hdf5 io wouldn't roundtrip properly for a unyt_quantity object - Drop patch unyt-pr512-np2.1.patch, included upstream. ++++ python-uv: - update to 0.8.14 * Enhancements * Add --python-platform to uv pip check * Add an environment variable for UV_ISOLATED * Add logging to the uv build backend * Allow more trailing null bytes in zip files * Allow pinning managed Python versions to specific build versions * Cache PyTorch wheels by default * Reject already-installed wheels that don't match the target platform * Add --no-install-local option to uv sync, uv add and uv export * Include cycle error message in uv pip CLI * Preview features * Fix format of {version} on uv format failure * Lock during installs in uv format to prevent races * Respect --project in uv format * Run uv format in the project root * Configuration * Add file-to-CLI overrides for build isolation configuration * Add file-to-CLI overrides for reinstall configuration * Performance * Cache WHEEL and METADATA reads in installed distributions * Bug fixes * Avoid erroring when creating venv in current working directory * Avoid introducing unnecessary system dependency on CUDA * Clear discovered site packages when creating virtual environment * Read index credentials from the environment during uv publish checks * Refuse to remove non-virtual environments in uv venv * Stop setting CLICOLOR_FORCE=1 when calling build backends * Support file or directory removal for Windows symlinks * Documentation * Fix GitHub guide highlight lines * Move Resolver to new Internals section in the Reference * Split the "Authentication" page into sections * Update uninstall docs to mention uvw.exe needs to be removed ++++ python-yt: - Update to 4.4.1: * Fix off-axis rendering when center is not [0.5, 0.5, 0.5], fix periodicity * Ensure positions are dimensionless in plot callbacks * Correctly normalize off-axis projections for octree datasets * Calculate default depth for off axis projections * Fix compatibility with matplotlib 3.10 for images that have both a custom background color and a non-transparent 'bad' color * Removing code that removes field type in set_title() * Properly reference weight field in profile code for particle-based datasets * Fix swap_axes bug wih celledgescallback * Fix nans in off-center frb slices from ds.r * Make backend_specs case insensitive * Update testing.integrate_kernel type hints * Better behavior when cholla doesn't write "mu" attribute * removing code that removes field type in set_title() * Adapt ci and test suite to breaking changes in pytest 8.4.0 * fix an incoming incompatibility with pytest 8.5 in our test framework * Filter out an indirect deprecation warning from pillow via matplotlib ++++ yt-dlp: - Update to release 2025.08.27 * Add tcc player JS variant * Deprioritize web_safari m3u8 formats * Use alternative tv user-agent when authenticated ++++ qt6-creator: - Update to 17.0.1 https://www.qt.io/blog/qt-creator-17.0.1-released ++++ qt6-datavis3d-docs: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) - Build with all available cores ++++ qt6-declarative-docs: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) ++++ qt6-qtpbfimageformat: - Update to version 4.7 * Default map style tweaks. ++++ qt6-quick3d-docs: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) ++++ qt6-sensors-docs: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) ++++ qt6-virtualkeyboard-docs: - Pass '-DQT_QML_NO_CACHEGEN:BOOL=TRUE' to CMake to make builds reproducible (related: boo#1248369) ++++ rke2-1.31: - Update to version 1.31.12+rke2r1: * This release updates Kubernetes to v1.31.12, and fixes a number of issues. * Details see https://github.com/rancher/rke2/releases/tag/v1.31.12+rke2r1 ++++ rke2-1.32: - Update to version 1.32.8+rke2r1: * This release updates Kubernetes to v1.32.8, and fixes a number of issues. * Details see https://github.com/rancher/rke2/releases/tag/v1.32.8+rke2r1 ++++ rke2: - Update to version 1.33.4+rke2r1: * This release updates Kubernetes to v1.33.4, and fixes a number of issues. * Details see https://github.com/rancher/rke2/releases/tag/v1.33.4+rke2r1 ++++ rqlite: - Update to version 8.43.4: * Implement Broadcast on Cluster Client * Expansions to unit tests * protocol expansions and bug fixes ++++ scx: - Invoke meson macro - Disable LTO: * fixes compilation with meson macro - Reduce min libbpf version to 1.4 - Reduce min llvm version to 1.7 - Reduce min meson version to 1.2.0 - Requires rust+cargo >= 1.82 - Add _constraints file to avoid OOM errors ++++ swappy: - Update to 1.8.0: Features: * config: add left hand friendly keybinds (e3b8bf6) * ui: add transparency feature (0416812) * ui: support input method when edit text (5e3808c) * ui: text supports pasting using Ctrl-v (59dca02) Bug Fixes: * application: bring back output option (061155c), closes #202 * application: save twice if auto_save and -o option (e5cde68) ++++ syft: - Update to version 1.32.0: * Added Features - Catalog entire build list for Go projects, not just packages listed in go.mod [#432 #4127 @spiffcs] - package.json authors keyword parsing [#2250 #4003 @popey] - Conda ecosystem support (basic) [#4002@SimeonStoykovQC] * Bug Fixes - When scanning the FFmpeg binary with Syft a new package is now added [#3988 #3994 @popey] - Warn loudly if SQLite driver is not present when needed [#3234 #4150 @kzantow] * Additional Changes - Update dependencies to use go.yaml.in/yaml [#4157 @n-bes] - chore(deps): update anchore dependencies (#4169) - chore(deps): bump github.com/diskfs/go-diskfs (#4159) - chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#4160) - chore(deps): update tools to latest versions (#4154) - chore(deps): bump github/codeql-action from 3.29.10 to 3.29.11 (#4149) - chore(deps): bump github/codeql-action from 3.29.9 to 3.29.10 (#4145) - chore(deps): update CPE dictionary index (#4143) - chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 (#4144) - chore(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 (#4141) - chore(deps): update tools to latest versions (#4139) ++++ talhelper: - Update to version 3.0.33: * docs: update CLI reference documentation (#1157) * chore(deps): update dependency siderolabs/talos to v1.10.7 * chore(container): update ghcr.io/siderolabs/talosctl docker tag to v1.10.7 * chore(schema): update talos-extensions.yaml JSON schema (#1156) * chore(github-action): update renovatebot/github-action action to v43.0.9 * chore(schema): update talos-extensions.yaml JSON schema (#1152) * fix(deps): update module github.com/siderolabs/image-factory to v0.8.3 * fix(deps): update module github.com/siderolabs/image-factory to v0.8.2 * chore(schema): update talconfig.yaml JSON schema (#1150) * fix(deps): update module github.com/siderolabs/talos/pkg/machinery to v1.11.0-rc.0 * feat(config): add `encryptionSpec` to `volumes` * chore(schema): update talos-extensions.yaml JSON schema (#1148) * chore(schema): update talos-extensions.yaml JSON schema (#1144) * chore(github-action): update renovatebot/github-action action to v43.0.8 * fix(deps): update module github.com/siderolabs/image-factory to v0.8.1 * chore(container): update registry.k8s.io/kubectl docker tag to v1.33.4 * chore(github-action)!: Update actions/checkout action to v5 * chore(container): update golangci/golangci-lint docker tag to v2.4.0 * chore(schema): update talos-extensions.yaml JSON schema (#1140) * fix(deps): update module github.com/siderolabs/talos/pkg/machinery to v1.11.0-beta.2 * chore(github-action): update actions/checkout action to v4.3.0 * chore(github-action): update renovatebot/github-action action to v43.0.7 * fix(deps): update module github.com/siderolabs/image-factory to v0.8.0 * chore(schema): update talos-extensions.yaml JSON schema * chore(github-action): update actions/checkout digest to 08eba0b (#1133) * chore(github-action): update renovatebot/github-action action to v43.0.6 * fix(deps): update module golang.org/x/mod to v0.27.0 * chore(schema): update talos-extensions.yaml JSON schema (#1130) * fix(deps): update module github.com/siderolabs/talos/pkg/machinery to v1.11.0-beta.1 * chore(schema): update talos-extensions.yaml JSON schema (#1127) * chore(container): update golangci/golangci-lint docker tag to v2.3.1 * chore(schema): update talos-extensions.yaml JSON schema (#1124) * fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.32 * chore(schema): update talos-extensions.yaml JSON schema (#1123) * feat: update Scoop for talhelper version v3.0.32 * feat: update flake (#1121) ++++ talosctl: - update to 1.10.7: https://github.com/siderolabs/talos/releases/tag/v1.10.7 * no CLI-related changes in the Changelog * Dependency changes - github.com/siderolabs/discovery-client v0.1.11 -> v0.1.13 - github.com/siderolabs/pkgs v1.10.0-29-g2e6dd0a -> v1.10.0-34-g88700c7 - github.com/siderolabs/talos/pkg/machinery v1.10.6 -> v1.10.7 - github.com/siderolabs/tools v1.10.0-5-g31fd099 -> v1.10.0-6-g306d9d9 - google.golang.org/grpc v1.71.3 -> v1.73.0 - k8s.io/api v0.33.2 -> v0.33.4 - k8s.io/apiserver v0.33.2 -> v0.33.4 - k8s.io/client-go v0.33.2 -> v0.33.4 - k8s.io/component-base v0.33.2 -> v0.33.4 - k8s.io/kube-scheduler v0.33.2 -> v0.33.4 - k8s.io/kubectl v0.33.2 -> v0.33.4 - k8s.io/kubelet v0.33.2 -> v0.33.4 - k8s.io/pod-security-admission v0.33.2 -> v0.33.4 ++++ updatecli: - Update to version 0.106.0: * Features - feat: add mermaidjs graph to report and remove experimental requirement @olblak (#5922) * Bug Fixes - fix(yaml): correctly remove file protocol from file path @olblak (#5921) * Maintenance - deps(github/action): bump all dependencies @updateclibot[bot] (#5941) - deps(go): bump module github.com/stretchr/testify to v1.11.1 @updateclibot[bot] (#5937) - deps(go): bump module github.com/hashicorp/terraform-registry-address to v0.4.0 @updateclibot[bot] (#5919) - deps(go): bump module github.com/stretchr/testify to v1.11.0 @updateclibot[bot] (#5910) - deps(go): bump module github.com/beevik/etree to v1.6.0 @updateclibot[bot] (#5907) - deps(go): bump module github.com/zclconf/go-cty to v1.16.4 @updateclibot[bot] (#5903) - deps(go): bump module helm.sh/helm/v3 to v3.18.6 @updateclibot[bot] (#5897) - deps: Bump Golang version to 1.25.0 @updateclibot[bot] (#5890) - deps(updatecli/policies): bump all policies @updateclibot[bot] (#5889) - deps: bump golangci-lint to v2.4.0 @updateclibot[bot] (#5884) - deps(go): bump module helm.sh/helm/v3 to v3.18.5 @updateclibot[bot] (#5879) - deps(go): bump module github.com/drone/go-scm to v1.40.6 @updateclibot[bot] (#5872) - deps(go): bump module github.com/drone/go-scm to v1.40.5 @updateclibot[bot] (#5859) - deps(go): bump module cuelang.org/go to v0.14.1 @updateclibot[bot] (#5851) ++++ wine: - Remove the suffix “-32bit” from the package name for Windows debug symbols for the i586 build variant, as it is automatically added by mkbaselibs. ++++ wine-staging: - Remove the suffix “-32bit” from the package name for Windows debug symbols for the i586 build variant, as it is automatically added by mkbaselibs. ++++ wine-staging-wow64: - Remove the suffix “-32bit” from the package name for Windows debug symbols for the i586 build variant, as it is automatically added by mkbaselibs. ++++ wine-wow64: - Remove the suffix “-32bit” from the package name for Windows debug symbols for the i586 build variant, as it is automatically added by mkbaselibs. ++++ wolfictl: - Update to version 0.38.13: * build(deps): bump the chainguard group with 4 updates * chore(sbom): resolve warning for directory source * build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#1734) * build(deps): bump chainguard-dev/actions from 1.4.11 to 1.4.12 (#1733) ++++ xfce4-session: - Yet more default key binding for Wayland labwc (bsc#1248802) ++++ xwmfs: - update to version v1.00: * build against libfuse3 (bsc#1242088) * stability bugfixes ------------------------------------------------------------------ ------------------ 2025-8-27 - Aug 27 2025 ------------------- ------------------------------------------------------------------ ++++ agama-yast: - Fix calling GPG import callbacks for unattended installation for addons (bsc#1248782) ++++ apache2-mod_jk: - Minor tweak to the shipped jk.conf (boo#1239178): + Set JkLogFile to /var/log/apache/jk.conf: as this is written by apache, the previous location /var/log/tomcat is not permitted + Set JkShmFile to /var/lib/apache2/jk-runtime-status: again, /var/log/tomcat is no suitable location, as mod_jk is running as apache's user. Moving it to /var/log does not make sense, as SHM is not a log file. ++++ blktrace: - Update to version 1.3.0+git.20250320: * blkparse: Fix a potential coredump issue * doc: update RWBS descriptions * iowatcher: Calculate ios_in_flight per trace * fix hang when BLKTRACESETUP fails and "-o -" is used * doc: btrace: fix wrong format on doc ++++ budgie-backgrounds: - added patches [bsc#1243819] https://github.com/BuddiesOfBudgie/budgie-backgrounds/commit/82067426f1dde366e9c9038fdbe457c2527525dd + budgie-backgrounds-no-jhead.patch ++++ chromium: - Chromium 139.0.7258.154 (boo#1248769) * CVE-2025-9478: Use after free in ANGLE ++++ crmsh: - Update to version 5.0.0+20250827.272bacc8: * Fix: Makefile: should uninstall man pages ++++ gettext-runtime: - autopoint requires diffutils (diff, cmp) ++++ gettext-runtime-mini: - autopoint requires diffutils (diff, cmp) ++++ fractal: - Update to version 12.1: + Our latest stable release had a regression where sending media with the unauthenticated endpoints was failing. This new release fixes it, and provides a couple other papercut fixes. ++++ fuzzel: - Update to 1.13.1: * Regression: input not being returned in dmenu mode. * Regression: `--password` not working. * Regression: Part of the background transparency disappearing after typing. * Add support for fallback icons in dmenu mode using comma-separated values in the icon metadata. * `--namespace` command line option. * Gamma-correct blending. Disabled by default. Enable with the new `--gamma-correct` command line option, or by setting `gamma-correct-blending=yes` in `fuzzel.ini`. Note that gamma-correct blending **is not supported in cairo enabled builds of fuzzel**, due to the lack of 16-bit image buffers in cairo. * `scaling-filter` option (and the corresponding `--scaling-filter` command line option). This option defines which scaling filter fuzzel uses when down scaling PNGs. * `--minimal-lines` command line and config option, causing fuzzel to adjust the number of displayed lines to the minimum of `--lines` and the number of input lines * Touchscreen support * `{cmd}` placeholder support in the `terminal` option. When `{cmd}` is present in the terminal command string, it will be replaced with the application command instead of appending the command at the end. Useful for setting the title or app_id. * `--hide-prompt` command line option to hide the prompt line, reducing window size while still accepting input. This cannot be used simultaneously with `--prompt-only`. * `--auto-select` option. When one entry is left, automatically select it. * `selection-radius` option and `--selection-radius` flag to set the border radius of the selected entry * `enable-mouse` option and `--no-mouse` flag to disable mouse input1 * Crash when --match-workers >= 100. * Keyboard modifiers not being reset on keyboard leave events. * --with-nth: non-selected columns still being matched. * Match highlighting being offset when --with-nth is used. * Too wide PNGs bleeding into the text. * Lookup of icon themes in ~/.icons and /usr/share/pixmans. * Missing shell completions for --launch-prefix. * Missing shell completions for --prompt-only. * Empty window being displayed despite --no-run-if-empty being used. * Fix border width and scaling for mixed-DPI environments * Some icons not found on FreeBSD (/usr/local/share/pixmaps not searched) * Segfault when “execute” action is pressed before there’s any item in the list. * Scrolling speed is now line-by-line instead of page-by-page * Number of render workers is now automatically limited to the number of displayed entries. * wayland-protocols >= 1.41 is now required. * pixman >= 0.46.0 is now required. * fcft >= 3.3.1 is now required. * In application mode (not dmenu), fuzzel now ignores icon theme directories whose Context field is not Application or Apps, or Legacy. This is for performance reasons * Default down scaling filter changed from lanczos3 to box. * Use the width of ‘o’ instead of ‘W’ when calculating the window width. * Default icon theme from hicolor to default. * Error out (with an appropriate error message) if the command line we attempt to execute has non-specification-compliant quoting. * Input text now “scrolls” with the cursor, if the string is longer than the available space. * When using the mouse, the currently selected item is only changed when the mouse is over an item. Before this release, the X coordinate was ignored. ++++ gap-digraphs: - Update to release 1.10.1 * Fix a duplication bug in ArticulationPoints ++++ gap-primgrp: - Update to release 4.0.0 * Integrate the primitive groups of degree 4096 to 8191 into PrimGrp ++++ gap-scscp: - Update to release 2.4.4 * No changelog was provided ++++ gettext-csharp: - autopoint requires diffutils (diff, cmp) ++++ gettext-java: - autopoint requires diffutils (diff, cmp) ++++ glib2-branding-openSUSE: - Raise priority of Papers over other PDF viewers. ++++ hawk-apiserver: - Bump github.com/stretchr/testify.v1.11.0 and gopkg.in/yaml.v3.0.1 (bsc#1248563) ++++ hugo: - Update to version 0.149.0: * releaser: Bump versions for release of 0.149.0 * tpl/collections: Add an integration test for collections.D * misc: Update Go version to 1.24.0 in README * create: Fix new content command with future dates * build(deps): bump github.com/getkin/kin-openapi from 0.132.0 to 0.133.0 * tpl/collections: Add collections.D using Vitter's Method D for sequential random sampling * build(deps): bump google.golang.org/api from 0.247.0 to 0.248.0 * build(deps): bump github.com/evanw/esbuild from 0.25.6 to 0.25.9 * build(deps): bump gocloud.dev from 0.40.0 to 0.43.0 * commands: Deprecate --omitEmpty on chromastyles command * commands: Add --omitClassComments to the chromastyles command * deps: Upgrade github.com/alecthomas/chroma/v2 v2.19.0 => v2.20.0 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront * build(deps): bump github.com/tdewolff/minify/v2 from 2.23.11 to 2.24.0 * all: Use slices.Equal * Squashed 'docs/' changes from 60dd993a6..71f739460 * resources/page: Add :sectionslug and :sectionslugs permalink tokens * Upgrade to Go 1.25 * common/hcontext: Replace with external package * Fix server rebuild when adding a new leaf bundle with resources in one go * resources/page: Use reflect.TypeFor * build(deps): bump github.com/tdewolff/minify/v2 from 2.23.8 to 2.23.11 * Remove test with deprecated path usage * build(deps): bump github.com/olekukonko/tablewriter from 1.0.8 to 1.0.9 * Update README.md * Fix rebuild when deleting a content adapter file * build(deps): bump google.golang.org/api from 0.237.0 to 0.247.0 * build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.36.4 to 1.38.0 * build(deps): bump golang.org/x/tools from 0.35.0 to 0.36.0 * build(deps): bump github.com/bep/simplecobra from 0.6.0 to 0.6.1 * tpl/strings: Remove unnecessary error check * markup/goldmark: Apply Hugo Goldmark Extras when rendering TOC * build(deps): bump golang.org/x/mod from 0.25.0 to 0.27.0 * build(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13 * markup/goldmark: Sanitize TOC heading titles * build(deps): bump golang.org/x/image from 0.28.0 to 0.30.0 * deps: Upgrade github.com/niklasfasching/go-org v1.8.0 => v1.9.1 * Add a key to the partialCached deadlock prevention * transform: Add support for "format" option in transform.Unmarshal * Skip flakey test on CI * releaser: Prepare repository for 0.149.0-DEV ++++ qt6-3d: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-connectivity: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-lottie: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-charts: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-coap: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-base: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released - Drop patch, merged upstream: * 0001-Add-clamping-to-QColorTransferGenericFunction.patch ++++ qt6-qt5compat: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-datavis3d: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-opcua: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-tools: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released - Drp patch, merged upstream: * 0001-QDoc-Sort-non-function-nodes-by-name-then-erase-duplicates.patch - Recommend installing qt6-translation for the -assistant, - designer and -linguist subpackages. ++++ qt6-graphs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-grpc: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-httpserver: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-virtualkeyboard: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-declarative: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released - Drop patch, merged upstream: * 0001-qmlcachegen-fix-crash-on-unresolved-type-with-requir.patch ++++ qt6-location: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-mqtt: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-multimedia: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-networkauth: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-webengine: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released * Patched with security patches up to Chromium version up to 139.0.7258.67 ++++ qt6-positioning: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-quick3d: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-quick3dphysics: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-quicktimeline: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-remoteobjects: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-scxml: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-sensors: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-serialbus: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-serialport: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-shadertools: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-svg: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-speech: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-wayland: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-webchannel: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-websockets: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-webview: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ libcomps: - Add patch sphinx-build.patch now /usr/bin/sphinx-build uses alts. ++++ xfce4-branding-openSUSE: - Fix slow start on Wayland (bsc#1247542): 0001-Fix-the-slow-start-up-of-Wayland-session-bsc-1247542.patch - Make dependency on gtk2-metatheme-* optional (bsc#1237185) ++++ nftables: - Update to release 1.1.5 * Revert JSON ruleset listing, restore set flags to display single item with array * Fix misleading "No buffer space available" error when kernel reports too many errors back to userspace. - Delete 0001-tools-add-a-systemd-unit-for-static-rulesets.patch, json.patch (merged) ++++ libnss_nis: - Update to version 3.4 - Fix memory leak in initgroups_dyn - Remove publickey interface, no consumer left ++++ pfstools: - do not require jhead, recommend ImageMagick instead [bsc#1243819] ++++ ptscotch-mpich: - Rename binaries/man-files that may conflict with those from other packages: mtst -> mtst-scotch, gpart -> gpart-scotch. - Pass `--parallel` to %ctest to avoid conditionally re/un-defining smp_mflags. ++++ ptscotch-mvapich2: - Rename binaries/man-files that may conflict with those from other packages: mtst -> mtst-scotch, gpart -> gpart-scotch. - Pass `--parallel` to %ctest to avoid conditionally re/un-defining smp_mflags. ++++ ptscotch-openmpi4: - Rename binaries/man-files that may conflict with those from other packages: mtst -> mtst-scotch, gpart -> gpart-scotch. - Pass `--parallel` to %ctest to avoid conditionally re/un-defining smp_mflags. ++++ ptscotch-openmpi5: - Rename binaries/man-files that may conflict with those from other packages: mtst -> mtst-scotch, gpart -> gpart-scotch. - Pass `--parallel` to %ctest to avoid conditionally re/un-defining smp_mflags. ++++ scotch: - Rename binaries/man-files that may conflict with those from other packages: mtst -> mtst-scotch, gpart -> gpart-scotch. - Pass `--parallel` to %ctest to avoid conditionally re/un-defining smp_mflags. ++++ lightdm-gtk-greeter-branding-openSUSE: - Correct the background picture file path (bsc#1248096) ++++ nodejs-electron: - New upstream release 37.4.0 * Updated Chromium to 138.0.7204.243 * Fixed an issue where net.isOnline() always returned true in utilityProcesses ++++ octave-forge-msh: - Fix compatibility with current octave, add fix_line_continuations.patch - Exclude tests requiring gmsh ++++ openSUSE-release-tools: - Update to version 20250827.0ffb3bb3: * TTM: allow to override test_project attribute from config - Update to version 20250827.458e4747: * docker_publisher.py: Add Leap 16.0 ++++ pam: - Update to 1.7.1+git (post-v1.7.1.patch) - disable unix_chkpwd by default, only used as fallback again - pam_modutil_get-overwrite-password-at-free.patch is included ++++ pam-config: - Update to version 2.13+git.20250827: * Add CI * Update autoconf configs * Add support for pam_unix_ng ++++ pam-full-src: - Update to 1.7.1+git (post-v1.7.1.patch) - disable unix_chkpwd by default, only used as fallback again - pam_modutil_get-overwrite-password-at-free.patch is included ++++ python-actdiag: - Add patch support-new-fancy-blockdiag-pytest.patch: * Use new methods added by new blockdiag, rather than yield tests. ++++ python-asdf-astropy: - Update to 0.8.0: * Drop python 3.10, numpy 1.24 * register blank extensions for old files with modified extension uris * remove astropy_init * Add support for masked quantities, angles, and coordinates * fix pyproject.toml license and package defs * Enable support for new transform and coordinates schemas * Ignore UnitsWarnings * Support new astronomy manifest ++++ python-asdf-wcs-schemas: - Update to 0.5.0: * Update schemas to prefer tag vs ref * Add fits imaging wcs transform ++++ python-blockdiag: - Replace python-blockdiag-nose-to-pytest.patch with a different upstream patch to also drop use of yield tests. ++++ python-gwcs: - Update to 0.25.2: * Fix the computation of lon_pole for Zenithal projections and declination of +/-90 deg. * Drop Python 3.10 * Fix API issue with wcs.numerical_inverse. * Fix bug where "vector" (shape (n,) not shape (1, n)) arrays would loose all their entries except the first if with_units=True was used. * Bugfix for call and invert incorrectly handling units when involving "parameterless" transforms. * Bugfix for outside_footprint modifying the input coordinates. * Derive the longitude of the celestial pole from the supplied projection. * Add FITSImagingWCSTransform. ++++ python-numexpr: - Update to 2.11.0: * Initial support for free-threaded Python 3.13t has been added. * Fix imaginary evaluation in the form of 1.1e1j. * The test suite has been modernized to use pytest instead of unittest. * Python 3.10 is now the minimum supported version. ++++ python313-pyside6: - Update to 6.9.2. Check the installed changes-6.9.2 file for the full list of changes ++++ python313-shiboken6: - Update to 6.9.2. Check the installed changes-6.9.2 file for the full list of changes ++++ qt6-3d-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-base-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released - Drop patch, merged upstream: * 0001-Add-clamping-to-QColorTransferGenericFunction.patch ++++ qt6-charts-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-coap-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-connectivity-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-datavis3d-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-declarative-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released - Drop patch, merged upstream: * 0001-qmlcachegen-fix-crash-on-unresolved-type-with-requir.patch ++++ qt6-graphs-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-grpc-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-httpserver-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-imageformats: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-imageformats-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-languageserver: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-location-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-lottie-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-mqtt-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-multimedia-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-networkauth-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-opcua-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-positioning-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-qt5compat-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-quick3d-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-quick3dphysics-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-quickeffectmaker: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-quickeffectmaker-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-quicktimeline-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-remoteobjects-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-scxml-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-sensors-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-serialport-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-shadertools-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-speech-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-svg-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-tools-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released - Drp patch, merged upstream: * 0001-QDoc-Sort-non-function-nodes-by-name-then-erase-duplicates.patch - Recommend installing qt6-translation for the -assistant, - designer and -linguist subpackages. ++++ qt6-translations: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-virtualkeyboard-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-wayland-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-webchannel-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-webengine-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released * Patched with security patches up to Chromium version up to 139.0.7258.67 ++++ qt6-websockets-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ qt6-webview-docs: - Update to 6.9.2: * https://www.qt.io/blog/qt-6.9.2-released ++++ rubygem-agama-yast: - Fix calling GPG import callbacks for unattended installation for addons (bsc#1248782) ++++ rz-cutter: - Update to version 2.4.1 * Rizin 0.8.1 * Fix JSDEC plugin location in Windows release package * macOS release package signing fixes * Better align disassembly arrows ++++ scidavis: - Switch to a recent sip: It is supported since v2.4.2 gh#SciDAVis/scidavis#14 ++++ scx: - bump dependency slab to version 0.4.11 (bsc#1248021 CVE-2025-55159) ++++ seamonkey: - remove SUSE_ASNEEDED from spec file - add build options for using system jpg, png, nss, nspr, and zlib libraries ++++ suse-fonts: - update to 2.000: * Added Black weight to SUSE family, with matching italics. * Introduced SUSE Mono variant (Thin → ExtraBold) with matching italics. * Added full Vietnamese coverage — total coverage now 278 Latin-based languages. * Implemented coding ligatures in SUSE Mono, optimized for terminal and coding environments. * Added PUA and emoji-trigger options for chameleon logo in Mono styles (easter egg). * Updated vertical metrics, naming tables, and weight classes for consistency across families. * Refreshed Google Fonts specimen images to reflect expanded family. ++++ sysuser-tools: - Don't set TZ=UTC for chage to avoid dependency on env. ++++ xfce4-session: - Add more default key bindings for Wayland with labwc (bsc#1248802): xfce4-session-more-labwc-keybindings.patch - Drop the previous workaround patch for wayland startup (bsc#1247542): xfce4-session-reduce-wayland-autostart-timeout.patch The fix is now found in xfce4-branding-openSUSE instead ++++ zig: - Update to version 0.15.1: * * CHANGELOG TOO LONG ** See https://ziglang.org/download/0.15.1/release-notes.html ++++ zonefs-tools: - update to 1.7.0: * updated command line interface, new options * improved test suite and improved man pages ------------------------------------------------------------------ ------------------ 2025-8-26 - Aug 26 2025 ------------------- ------------------------------------------------------------------ ++++ ModemManager: - Update to version 1.24.2: + Core: - Wait until bearers are disconnected before allowing system to suspend - Fix checks for CDMA/EVDO access technology in some modems - Detect old Mediatek 62xx-based devices as GSM-capable - Refresh registration info after manual registration for AT-based devices - Correctly report NB-IOT access technology - Disable unsolicited 3GPP events during quick suspend/resume + MBIM: - Fix re-assembly of multi-part unstored SMS messages + QMI: - Fix re-assembly of multi-part unstored SMS messages + Voice interface: - Correctly start call state polling on some modems + Plugins: - fibocomm: don't assert when checking for firmware interface - cinterion: allow spaces in ^SXRAT response ++++ NetworkManager-openvpn: - Update to version 1.12.3: + Fix bug that caused that the challenge prompt didn't appear if it contained some special characters. ++++ argocd-cli: - Update to version 3.1.1: * No CLI-related changes in the changelog ++++ chezmoi: - Update to version 2.65.0: - Features * feat: Add docker command * feat: Add ssh command * feat: Add podman command * feat: Add install-init-shell.sh subcommand to generate command * feat: Extend the range of types accepted by quoteList template func * feat: Add support for rar archives * feat: Add age-keygen command * feat: Apply --age-recipient and --age-recipient-file flags to all commands - Documentation updates * docs: Clarify scripts have to succeed to count as being run * docs: Use age-keygen command in docs - Bump go toolchain requirement to 1.25 ++++ lsp-plugins: - update to 1.2.23 * Added experimental support of UI for MacOS using FreeType and Cairo libraries. Contributed by Marvin Edeler. * Implemented human-friendly preset management in the plugin's UI. * VST3 plugin state format changed, not backward-compatible with previous versions of plugins. Downgrading version may cause plugin state loss. * Added AHDBSSR (Attack, Hold, Decay, Break, Slope, Sustain, Release) envelope control over loaded samples in Sampler and Multisampler plugin series. * Added DC offset control for Clipper and Multiband Clipper plugin series. * Added frequency linking button to the Phaser plugin series that allows to link minimum and maximum LFO frequencies and to keep logarithmic frequency range being constant. * Added support of linear axis for frequency in Spectrum Analyzer plugin series. * Added frequency inspection mode to the Spectrum Analyzer plugin series activated by 'Inspect' button or Ctrl + Left Mouse Button on the graph. * Added support of minimum-phase filter mode for Loudness Compensator plugin series. * Added 'M/S Link' and 'S/C Link' buttons to LeftRigth and MidSide versions of following plugins: * Compressor, Dynamics Builder, Expander, Gate; * Multiband plugins: Compressor, Dynamics Builder, Expander, Gate; * Equalizers: Parametric Equalizer and Graphic Equalizer; * Crossover plugin. * Added audio channel pre-mixing controls for the following plugins: * Compressor, Dynamics Processor, Expander, Gate and Limiter; * Multiband plugins: Compressor, Dynamics Processor, Expander, Gate and Limiter; * GOTT Compressor. * Extended collection of built-in rooms for Room Builder plugin series by Boris Gotsulenko aka borT. * Added exciter-like effect presets for Phaser plugin series contributed by Attila Schler. * Added possibility to automatically play samples when navigating file list. * Added command line option for JACK that allows to specify client name. * Some bugfixes and improvements in VST3 plugin format, now UI works for editorhost demo application from the Steinberg VST3 SDK. * Additional optimizations of 3D space mathematics with AVX instruction set. * Fixed improper AVX-512 optimization for lanczos kernel genration function which could cause improper resampling of audio files and yield some plugins to not to work properly. * Fixed bug in frequency split editing for Mid/Side and Left/Right versions of Crossover plugin. * Fixed bug in Mid/Side conversion of stereo signal on 32-bit and 64-bit ARM processors. Contributed by Asahi Lina. ++++ cnf: - Update to version 0.8.0~2: * (fix): dedup the results (GH #26) * (refactor): unit test, less unsafe, callback smaller, lint in pool.rs ++++ colord-gtk: - Update to version 0.3.1: + Fix the callback signature to fix a crash. - Drop Fix-the-callback-signature-to-fix-a-crash.patch: fixed upstream. ++++ crmsh: - Update to version 5.0.0+20250826.ce40450f: * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile - Update to version 5.0.0+20250826.57cffec0: * Fix: doc: the usage parser in help2adoc should support multiline usages * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds * Dev: packaing: add doc subdir to Makefile - Update to version 5.0.0+20250826.4a3e29cc: * Dev: unittests: Adjust unit test for previous commit * Dev: report: Update HA related packages for crm report to check and verify - Update to version 5.0.0+20250826.598b3b34: * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile * Dev: packaging: remove deprecated `data_files` ++++ eksctl: - Update to version 0.213.0: * Features - Add namespace configuration support for EKS addons (#8476) * Bug Fixes - remove namespace validation for update-addon (#8479) ++++ fd: - Update to version 10.3.0: * release: 10.3 * build: Update OSes for github actions * build(deps): bump actions/checkout from 4 to 5 * filesystem: Fix a clippy warning about lifetime elision * build(deps): bump clap_complete from 4.5.54 to 4.5.55 * build(deps): bump clap from 4.5.40 to 4.5.42 * build(deps): bump libc from 0.2.172 to 0.2.174 * chore: Update several packages * fix: Remove duplicate nix from lockfile * build(deps): bump ctrlc from 3.4.6 to 3.4.7 * build(deps): bump argmax from 0.3.1 to 0.4.0 * build(deps): bump clap_complete from 4.5.52 to 4.5.54 * build(deps): bump clap from 4.5.39 to 4.5.40 * Remove test_invalid_cwd on illumos * Make test be excluded at compile time rather than at run-time. * Use printf in a test rather than echo -n * Do not use jemalloc on Illumos * Update README.md to RHEL 10 * build(deps): bump clap from 4.5.37 to 4.5.39 * build(deps): bump clap_complete from 4.5.48 to 4.5.52 * build(deps): bump jiff from 0.2.10 to 0.2.14 * build(deps): bump tempfile from 3.19.1 to 3.20.0 * Update tikv-jemallocator to 0.6 * Depend on jemallocator as tikv-jemallocator * docs(security): add initial security policy * Fix typo * docs: Clarify option positions in README * docs: Mention how to end --exec-batch args * docs: Better specify that if path is given, pattern must be as well. * Add aarch64 Windows to CI. * Update to crossbeam-channel 0.5.15 * Update etcetera from 0.9 to 0.10 * ci: Use Ubuntu 22.04 runners * Use next_back() instead of last() * Disambiguate modification time vs timestamp * build(deps): bump jiff from 0.2.4 to 0.2.5 * build(deps): bump clap_complete from 4.5.44 to 4.5.47 * build(deps): bump anyhow from 1.0.96 to 1.0.97 * build(deps): bump clap from 4.5.31 to 4.5.35 * build(deps): bump tempfile from 3.16.0 to 3.19.1 * Fix broken Arch Linux link * Use guard to ensure cleanup of test time * refactor: Simplify time filter code * refactor: Avoid passing in current time just for tests * docs: More description of jiff change in changelog * chore(deps): Replace `chrono` with `jiff` * chore: Change to use `jiff::Zoned` * chore(deps): Replace `humantime` with `jiff` * build(deps): bump clap from 4.5.27 to 4.5.31 * build(deps): bump libc from 0.2.169 to 0.2.170 * build(deps): bump globset from 0.4.15 to 0.4.16 * build(deps): bump anyhow from 1.0.95 to 1.0.96 * build(deps): bump etcetera from 0.8.0 to 0.9.0 * chore: Use macos-13 instead of 12 * build(deps): bump tempfile from 3.14.0 to 3.16.0 * build(deps): bump clap from 4.5.23 to 4.5.27 * build(deps): bump clap_complete from 4.5.38 to 4.5.44 * chore: Fix clippy lints * docs: Mention --full-path in troubleshooting * build(deps): bump clap from 4.5.21 to 4.5.23 * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.14 * build(deps): bump chrono from 0.4.38 to 0.4.39 * build(deps): bump anyhow from 1.0.93 to 1.0.95 * build(deps): bump libc from 0.2.167 to 0.2.169 * Update Cargo.toml * add documentation * build(deps): bump clap_complete from 4.5.28 to 4.5.38 * build(deps): bump clap from 4.5.20 to 4.5.21 * build(deps): bump anyhow from 1.0.89 to 1.0.93 * build(deps): bump libc from 0.2.161 to 0.2.167 * build(deps): bump tempfile from 3.13.0 to 3.14.0 * build(deps): bump regex from 1.10.6 to 1.11.1 * build(deps): bump clap from 4.5.16 to 4.5.20 * build(deps): bump lscolors from 0.19.0 to 0.20.0 * build(deps): bump tempfile from 3.12.0 to 3.13.0 * fix: formatting in `src/` and `tests/` * style: simplify string formatting for readability * Add a hidden `--mindepth` alias for `--min-depth` * build(deps): bump anyhow from 1.0.86 to 1.0.89 * build(deps): bump ignore from 0.4.22 to 0.4.23 * build(deps): bump libc from 0.2.158 to 0.2.159 * build(deps): bump globset from 0.4.14 to 0.4.15 * build(deps): bump clap_complete from 4.5.24 to 4.5.28 * Fix a new clippy warning * build(deps): bump clap_complete from 4.5.19 to 4.5.24 * build(deps): bump filetime from 0.2.24 to 0.2.25 ++++ gammaray: - Update to 3.2.2 * Fix GammaRay GUI not showing up on Windows ++++ gammaray-qt6: - Update to 3.2.2 * Fix GammaRay GUI not showing up on Windows ++++ ghc-unix-compat: - Update unix-compat to version 0.7.4.1. Upstream has edited the change log file since the last release in a non-trivial way, i.e. they did more than just add a new entry at the top. You can review the file at: http://hackage.haskell.org/package/unix-compat-0.7.4.1/src/CHANGELOG.md ++++ ghc-vector: - Update vector to version 0.13.2.0 revision 2. Upstream has revised the Cabal build instructions on Hackage. ++++ ghc-vector-stream: - Update vector-stream to version 0.1.0.1 revision 4. Upstream has revised the Cabal build instructions on Hackage. ++++ gmime: - Update to version 3.2.15: + Fixed the g_mime_object_get_header API definition to note that it can return null. + Fixed a memory leak in address_parse(). + Added custom header folding logic for the Newsgroups: header. + Fixed a configure issue regarding ac_cv_sys_file_offset_bits. + Fixed an infinite loop in the Content-Type and Content-Disposition parameter serialization logic. ++++ golang-github-czerwonk-ping_exporter: - Fix for bsc#1248702 - Update to version 1.1.4: * make linter happy * remove tailscale integration since dependency used is deprecated * chore(deps): upgrade dependencies * feat: add fwmark support * Bump golang.org/x/net in the go_modules group across 1 directory * feat(ping_exporter): add dns resolution timeout option * Refactor token validation * Update lint.yml * Update lint.yml * Update test.yml * Update lint.yml * Bump golang.org/x/net in the go_modules group across 1 directory * go 1.24 * upgrade to go 1.23, update dependencies * Bump golang.org/x/crypto from 0.21.0 to 0.31.0 in the go_modules group * feat: add nodeSelector, affinity, and tolerations to test-connection manifest * add metric token * Tweak threshold as it is too sensitive * Add Prometheus alerting rules * Add serviceMonitor * Fix "size" to "payload-size" in README.md * Update labels and Descs on config update * Bump golang.org/x/net in the go_modules group across 1 directory * bump version * Update docker_tag.yml * Update docker_latest.yml * bump version * Refactor ping collector to support updates of target labels * Fix call to logger * Fix edge cases if big files are created and truncated. * Make configuration serializable * update github actions * upgrade dependencies, go 1.22 * Update main.go * Implement hot reloading of configuration file for changed list of targets * Bump google.golang.org/protobuf from 1.28.1 to 1.33.0 * Add package to index for version 1.1.0 * Add configmap checksum to deployment annotations * Bump the go_modules group across 1 directories with 1 update * Create dependabot.yml * Bump app version in Helm chart * Bump golang.org/x/crypto from 0.14.0 to 0.17.0 * Bump golang.org/x/net from 0.7.0 to 0.17.0 * go 1.21 * Update values.yaml * update helm chart package * Update README.md and replace master branch * Update README.md * move tailscale to own go file, will be refactored into generic service discovery module in the future * go module update * go mod tidy * refactoring to get rid of the type assertions * code cleanup (remove bool parameters) * Update lint.yml * Update test.yml * Update release.yml * add missing flag2config lines * Add option to disable IPv4 dns resolution * Update docker_latest.yml * Create CODEOWNERS * fix CI * bump golang.org/x/net from 0.5.0 to 0.7.0 * auto discover targets using tailscale API * add SPDX-License-Identifier * upgrade to go 1.20 * Update README.md * fix goreleaser (empty_dir was deprecated) * update goreleaser github action * use new golangci-lint version * update dependencies, use go 1.19 * added web server HTTPS support * Update README.md * helm: add strategy and podLabels * implement custom labels for targets * fix helm chart default imageTag * remove test results * prepare merge * update `Test` action go-version to 1.17 * increase lint action `GO_VERSION` to accomodate the new 1.17 * Fix description of `metrics.rttunit` flag * remove deprecated `todo` from `target.go` * minor update to `README.md` * implemented disableIPv6 option * Minor cleanup in functions/test * update .gitignore * add `options.disableIPv6`, refactor target functions * Update dependencies and golang version * Update `Dockerfile` to build with golang 1.17.5 * Update `README.md` with helm chart documentation * build chart for distribution via githubusercontent * Add helm chart `ping-exporter` for K8S deployments * Bump version to 1.0.0 * Change/remove deprecated metrics/units [#22/#58] * Fix missed reference to prometheus/common/log [#60] * feat: Build with CAP_NET_RAW by default to simplify rootless use * Fix mistaken DNS resolution error message * Split CMD and ENTRYPOINT * Add docker build for ARM architectures * document required capabilities for linux, closes #23 * dep upgrade * Update docker_tag.yml * Update docker_latest.yml * move docker build to github actions * move to logrus since prometheus log package is deprecated * remove duplicate unit from metric definition * Update README.md * release: support various architectures and systemd versions * Update main.go * ci: improve Github actions * metrics: allow for best practices * cleanup: satisfy linter * cleanup: remove Gopkg configuration * Fix defaults when using config file * fix goreleaser * bump version * add releae workflow * Update test.yml * Update README.md * github workflows ++++ guix: - Add dependencies on makeinfo and po4a - Add fix_compilation_on_gcc_15.patch ++++ installation-images-MicroOS: - merge gh#openSUSE/installation-images#768 - initrd: add /usr/bin/chage to allow users with expiry date being created - 17.161 ++++ installation-images-openSUSE: - merge gh#openSUSE/installation-images#768 - initrd: add /usr/bin/chage to allow users with expiry date being created - 17.161 ++++ jdupes: - Remove the workaround to place a symlink into libjodycode: this seems useless, as build accepts a system library just fine. - Drop bundled(libjoydecode) Provides, as we are not linking joydceode statically (and don't have an intree copy). - update to 1.30.0: * Change -C/--chunk-size to use powers of two instead of raw KiB sizes * Add '-C help' for clearer documentation of -C usage and rationale * Scripts using -C must be updated; values >18 now cause an error exit ++++ jfrog-cli: - Update to version 2.78.6: * Bug Fixes - Fix Vulnerabilities locations in SCA for SARIF and null attributes by @attiasas in jfrog/jfrog-cli-security#539 ++++ kernel-default: - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 ++++ kernel-source: - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 ++++ kernel-docs: - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 ++++ kernel-firmware-amdgpu: - Update to version 20250825 (git commit f044bc789f8e): * amdgpu: Update ISP FW for isp v4.1.1 * amdgpu: DMCUB updates for various ASICs ++++ kernel-firmware-intel: - Update to version 20250825 (git commit f044bc789f8e): * intel_vpu: Update NPU firmware ++++ kernel-firmware-media: - Update to version 20250825 (git commit f044bc789f8e): * firmware: qcom: Reorder VPU firmware entries in WHENCE ++++ kernel-kvmsmall: - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 ++++ kernel-obs-build: - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 ++++ kernel-obs-qa: - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 ++++ kernel-syms: - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 ++++ kernel-vanilla: - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 ++++ kumactl: - Update to version 2.11.5: * chore(deps): security update (#14259) * chore(deps): bump openapi-tool to v1.1.6 (backport of #14226) (#14250) ++++ lazygit: - Update to version 0.54.2: * Improve CPU usage when flicking through large diffs * Fix delay with flicking through files or commits when git diff is very slow * Cleanup: move UpdateWindowTitle to platform-specific source files * Change color of github tag and homebrew badges to blue * Update github tag badge * Update homebrew link * Update the badge of golangci-lint in `README.md` * Update `CONTRIBUTING.md` to clarify translation contribution process * Trim trailing newlines when showing confirmations * Cleanup: remove duplicate test case * Fix the useHunkModeInStagingView hint in the breaking changes message * Stop bumping our homebrew formula ++++ sqlite3: - bsc#1248586: Fix icu-enabled build. ++++ libei: - Update to release 1.5.0 * Previously a slow receiver would get disconnected as soon as the other side encountered a writers' block. This is now worked around via a larger queue. * For the socket backend, the new eis_backend_socket_get_client_pid() provides the client PID. * ei_event_ref() and ei_event_unref() are now available to clients in case the event needs to be kept outside the immediate scope. This should still be handled with care. * The handling of ei_pingpong and ei_sync is now that the pong/sync reply is sent when the respective event is unref'd (previously it was sent as soon as the event is retrieved from libei(s)). ++++ netcdf: - update to 4.9.3: * Extend the netcdf API to support programmatic changes to the plugin search path. * For complete changelog, see included RELEASE_NOTES.md, or https://github.com/Unidata/netcdf-c/releases/tag/v4.9.3 - Drop obsolete patches: * parseServers-Fix-uninitialized-variable-simplify-error-path.patch * NCD4_dumpbytes-Add-missing-initialization-of-float-types.patch - Rebase: * pr_att-Fix-uninitialized-variable.patch * Fix-spurious-uninitialized-variable-warning.patch ++++ netcdf-openmpi4: - update to 4.9.3: * Extend the netcdf API to support programmatic changes to the plugin search path. * For complete changelog, see included RELEASE_NOTES.md, or https://github.com/Unidata/netcdf-c/releases/tag/v4.9.3 - Drop obsolete patches: * parseServers-Fix-uninitialized-variable-simplify-error-path.patch * NCD4_dumpbytes-Add-missing-initialization-of-float-types.patch - Rebase: * pr_att-Fix-uninitialized-variable.patch * Fix-spurious-uninitialized-variable-warning.patch ++++ netcdf-openmpi5: - update to 4.9.3: * Extend the netcdf API to support programmatic changes to the plugin search path. * For complete changelog, see included RELEASE_NOTES.md, or https://github.com/Unidata/netcdf-c/releases/tag/v4.9.3 - Drop obsolete patches: * parseServers-Fix-uninitialized-variable-simplify-error-path.patch * NCD4_dumpbytes-Add-missing-initialization-of-float-types.patch - Rebase: * pr_att-Fix-uninitialized-variable.patch * Fix-spurious-uninitialized-variable-warning.patch ++++ tvm: - Add upstream patch to re-enable cpptest: * 18202.patch ++++ matrix-synapse: - Update to 1.137.0 - Bugfixes - Fix a bug which could corrupt auth chains making it impossible to perform state resolution. (#18746) - Fix error message in register_new_matrix_user utility script for empty registration_shared_secret. (#18780) - Allow enabling MSC4108 when the stable Matrix Authentication Service integration is enabled. (#18832) - Improved Documentation - Include IPv6 networks in denied-peer-ips of coturn setup. Contributed by @litetex. (#18781) - Internal Changes - Update tests to ensure all database tables are emptied when purging a room. (#18794) - Instrument the encode_response part of Sliding Sync requests for more complete traces in Jaeger. (#18815) - Tag Sliding Sync traces when we wait_for_events. (#18816) - Fix portdb CI by hardcoding the new pg_dump restrict key that was added due to CVE-2025-8714. (#18824) - Updates to locked dependencies - Bump actions/add-to-project from 5b1a254a3546aef88e0a7724a77a623fa2e47c36 to 0c37450c4be3b6a7582b2fb013c9ebfd9c8e9300. (#18557) - Bump actions/cache from 4.2.3 to 4.2.4. (#18799) - Bump actions/checkout from 4.2.2 to 4.3.0. (#18800) - Bump actions/download-artifact from 4.3.0 to 5.0.0. (#18801) - Bump docker/metadata-action from 5.7.0 to 5.8.0. (#18773) - Bump mypy from 1.16.1 to 1.17.1. (#18775) - Bump phonenumbers from 9.0.10 to 9.0.11. (#18797) - Bump pygithub from 2.6.1 to 2.7.0. (#18779) - Bump serde_json from 1.0.141 to 1.0.142. (#18776) - Bump slab from 0.4.10 to 0.4.11. (#18809) - Bump tokio from 1.47.0 to 1.47.1. (#18774) - Bump types-pyyaml from 6.0.12.20250516 to 6.0.12.20250809. (#18798) - Bump types-setuptools from 80.9.0.20250529 to 80.9.0.20250809. (#18796) ++++ myrlyn: - Update to version 0.9.8: * Version bump to 0.9.8 * Don't write a default for useRpmGroups for now (Closes #112) * Make the default for "useRpmGroups" compile-time configurable * Make "useRpmGroups" configurable in config file * Use textdomain "rpm-groups" for RPM groups * Removed redundant initial selection * Class rename for consistency * Lazy RPM tree init for startup performance * Filter correcty for empty RPM groups * Removed ancient fallback RPM groups * Consistent terminology * Open only the first two levels of the RPM groups tree * Suppress Qt logging spam * First hacky version of RPM groups (#112) * Translate RPM groups and suppress 'Unspecified' * Show RPM group in technical details view (#112) * Use non-breaking hyphen in read‑only * Don't consider ignored missing RPM signature as failed task (Closes #110) * GitHub config * Added Leap 16.x community repos ++++ ncspot: - Update to version 1.3.1: * fix: Changelog link for 1.3.1 * chore: Bump version to 1.3.1 * chore: `cargo update` * fix(deps): bump librespot to 0.7.0 (#1687) * chore(deps): bump actions/checkout in the github-actions group * chore(deps): bump the cargo group across 1 directory with 5 updates * chore: `cargo fmt` * refactor: Add elided lifetime to result * refactor: collapse nested `if let` * [create-pull-request] automated change * chore(deps): bump the cargo group across 1 directory with 10 updates * chore(deps): bump the cargo group with 5 updates * chore: Set up `direnv` ++++ octave-forge-image: - Update to version 2.18.0: * Octave version 7.2.0 is now the minimum requirement * graycomatrix has been rewritten to be MATLAB compatible. The previous version was renamed to graycomatrix_old (bug #38087) * Fixing filter implementation in iradon (bug #59773) * Add Lancsoz2 & Lancsoz3 interpolation for imresize (bug #62099) * Fix (again) imresize when there is anti-aliasing by adding weight normalization (bug #63560) * Fix Makefile so that it will not use GNU extensions for grep (bug #66829) * The following functions are new: adaptthresh, imbilatfilt, imbinarize, insertText - Update to version 2.16.1: * The function std2 now checks to ensure inputs are numeric and converts image data to double before passing to std(). * connectivity.cc: adding special treatment if ndims or numel equal 0 to avoid heap-buffer-overflow crash (bug #66918). * Add 'reflect' padding option to imfilter (bug #52119). * Fix typos in the documentation of edge.m, entropy.m, entropyfilt.m, imboxfilt.m imagaussfilt.m & hough.m - Update to version 2.16.0: * The function bwselect is now MATLAB compatible. * Input validation and error messaging has been improved for the imshear function. * The following functions are new: imboxfilt, imgaussfilt - Exclude tests requiring a graphical toolkit - Update to version 0.3.3 * Fix BIST if there is no conversion implemented for selected VideoFormat to RGB3 - Update to version 0.3.2 * fix missing header for Media Foundation build - Update to version 0.3.1 * videoinput: Use first available device when no adapter given. - Update to version 0.3.0 * Support for Media Foundation (MF) on MS-Windows * New internal conversion routines for YCbCr -> RGB3 - Update to version 0.2.5 * Bugfix release Octave version >= 6 removed error_state. Bug #63136) Ignore v4l2 Metadata Interface devices in imaqhwinfo. Example if /dev/video0 AND /dev/video1 are created simultaneously. - Drop image-acquisition-error-state.patch - Exclude tests requiring a physical camera. - Update to verion 0.9.5: * SERIALPORT, TCPPORT, UDPPORT: add Tag property * Minor build rule updates * Update instrument classes to close resources on error during contruction * Minor doc updates - Update to verion 0.9.4: * readline: use read terminator if one provided * SERIALPORT: dont use errno in win32 report of error - Update to verion 0.9.3: * SERIALPORT: use max VTIME of 5, allow use of case insensive get properties * TCPCLIENT: add enabletransferdelay property * UDP, UDPPORT: use memmove for overlapped mem usage * VXI11: use inst0 as default instrument name * MODBUS: use input precision when specified in read - Exclude tests requiring a network connection ++++ octave-forge-io: - Update to version 2.7.0: * Bug fixes: - dbfread.m: rewrite code for attribute (column) selection (bug #61757) - fromJSON.m, toJSON.m: improve Java-based BIST (re-apply bug [#60040]); Adapt to more stringent code checks required by (experimental) bytecode interpreter (bug #66790) - TexInfo header fixes (bug #62075) - UNO interface: properly process .xlsx files with commas in sheet names (bug #62169) - xlswrite: Improve xlswrite messages in case of write errors and make sure to clean up (in course of bug #64366) - OCT interface: properly process dcterms:created and dcterms:modified nodes (bug #64349) - OCT interface: copy formulas rather than values when writing into an existing sheet (bug #65624) - rfsearch.m: make sure rfsearch only finds real files, rather than also subdirectories - Fix reading data with Named Ranges (properly distinguish Named Range from ordinary spreadsheet range) (bug #66288) - Fix bug when invoking odsfinfo (errored out with "not enough arguments") - Fix indexing error in xlswrite.m in case of very short file names - Avoid long delay with newer LibreOffice (UNO interface) when that is waiting for printer connection. * Code improvements - JOD interface: now also supports jOpenDocument-1.5. Named Ranges have been implemented, worked also in 1.4-rc2. - POI interface: overhauled .jar detection in Java classpath, POI is now supported up to release 5.2.3. - OTK interface (ODF Toolkit): update support up to 0.10.0, 0.11.0 and 0.12.0. Only one jar is required: odfdom-java--jar-with-dependencies.jar. - Help files for the GUI doc browser have been added. These are loaded/unloaded automatically when loading/unloading the io package. - Texinfo help headers for several functions have been udpated and improved for use with the GUI doc browser. ++++ octave-forge-mapping: - Update to version 1.4.3: * Bug fixes - angl2str.m: work around issue on ppc64el (patch #10196) - shaperead.m: avoid indexing error in case of empty features - degrees2dm.m: avoid error on NaN input (bug #62330) - degrees2dms.m, degrees2dm.m: fix incorrect output (bugs [#65291] and #65508) - distance.m: fix incorrect results for output angles < 0.4 rad (bug #66814) * Code improvements - The package and functions docs now integrate in the GUI doc browser pane when the package is loaded - Add octave-forge-io build depdendency, required for tests - Fix loading of package, causing errors in dependent tests, add 0001-Remove-references-to-removed-polynomialCurves2d.patch ++++ octave-forge-miscellaneous: - Update to version 1.3.1: * pkg update for octave 7.0+ functionality * gunits: check for gunits if available, redirect errors to nul * Allow spaces in octave path for configure ++++ octave-forge-netcdf: - Update to version 1.0.18: * Minor bug fixes * Minor doc updates ++++ octave-forge-nurbs: - Update to version 1.4.4: * Update to work with upcoming Octave 10 release ++++ octave-forge-signal: - Update to version 1.4.6: * Minor bug fixes and documentation improvements have been made to the following functions: cheb1ap, cl2bp, decimate, firpm, pwelch, residuez * The following new functions have been added to the signal package: poisswin, taylorwin - Add octave-forge-control build dependency required for tests ++++ openSUSE-release-tools: - Update to version 20250826.91831b4d: * gocd: adjust pkglistgen for the Leap 16.0 product build setup * gocd: adjust TTM for the Leap 16.0 product setup * Adjust skippkg-finder for the changed Leap 16.0 product build setup ++++ orthanc-python: - remove /usr/orthanc.pyi - unneeded ++++ ppsspp: - Drop libavcodec-devel < 5 BuildRequires, current version builds fine with ffmpeg-7. ++++ python-avro: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-h2: - Update to 4.3.0 (fixes CVE-2025-57804, bsc#1248737) * API Changes (Backward Incompatible) - Reject header names and values containing illegal characters, based on RFC 9113, section 8.2.1. The main Python API is compatible, but some previously valid requests/response headers might now be blocked. Use the `validate_inbound_headers` config option if needed. Thanks to Sebastiano Sartor (sebsrt) for the report. * API Changes (Backward Compatible) - h2 events now have tighter type bounds, e.g. `stream_id` is guaranteed to not be `None` for most events now. This simplifies downstream type checking. - Various typing-related improvements. * Bugfixes - Fix error value when opening a new stream on too many open streams. ++++ python-pytest-sourceorder: - Add patch remove-yield-test.patch: * Remove now unsupported yield test. ++++ targetcli-fb: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-validate-pyproject: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-versioneer: - Convert to libalternatives on SLE-16-based and newer systems ++++ virtualbox: - Disable python bindings for Leap 16.0 (bsc#1248418) python3.13 is not supported by the current virtualbox version so we can't build the bindings. ++++ python-virtualenv: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-virtue: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-watchdog: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-websockify: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-whey: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-xattr: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-xmlschema: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-yamllint: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-yapf: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-zope.testrunner: - Convert to libalternatives on SLE-16-based and newer systems ++++ schismtracker: - Update to release 20250825 * Increased sample position precision, fixing some weird intonation problems. * New "sections" of the schism-log now include a timestamp notating when they were appended. * AdLib VU meters are now based on the actual output volume, rather than being like Scream Tracker's "emulated" VU meters. * Improve mouse precision on buttons. * Fixed some weird sporadic problems with sample sustain loops. * Fixed bias within the nearest neighbor video blitter. * Fixed Shift-Tab behavior in the pattern editor (should not reset the selection). * Fix a crash when loading in a sample that was already pre-loaded for playback (i.e. playing a sample within the sample library). * Fix a memory leak when reading metadata from FLAC files. * Added support for emulating old Schism playback quirks. Only a few are currently implemented. * MED: Implement reading song title within the file list * D00: Fix note-cut count being ignored; many files now play correctly. ++++ seamonkey: - refactor spec file - rename patches according to their source/bug and to the earliest version of the package they were applied to: seamonkey-icu.patch => seamonkey-2.53.21-bmo1927380.patch mozilla-bmo1862601.patch => seamonkey-2.53.21-bmo1862601.patch mozilla-bmo1896958.patch => seamonkey-2.53.19-bmo1896958.patch mach-use-python-311.patch => seamonkey-2.53.20-mach-use-python-311.patch reproducible.patch => seamonkey-2.53.20-boo1237231.patch seamonkey-man-page.patch => seamonkey-2.53.7.1-man-page.patch seamonkey-lto.patch => seamonkey-2.53.3-lto.patch mozilla-ntlm-full-path.patch => seamonkey-2.1.0-bmo634334.patch mozilla-nongnome-proxies.patch => seamonkey-2.0.0-nongnome-proxies.patch mozilla-bmo531915.patch => seamonkey-2.53.17.1-bmo531915.patch - remove build workarounds for Leap 15.5 (now unsupported) - add seamonkey-2.53.20-system-av1.patch for using system AV1 - add seamonkey-2.53.21-bmo1332139.patch for using system VPx - remove spec file code specific to aarch64 and PPC; these are no longer supported upstream and are difficult to get to build - remove spec file code that since r207 had been setting an invalid value for the network.negotiate-auth.gsslib preference - remove (most probably obsolete) -fno-string-aliasing, - fimplicit-constexpr, fno-delete-null-pointer-checks, - fno-lifetime-dse, and fno-schedule-insns2 compiler options in spec file - make compiler output less chatty by removing -Wall - add a listsettings recipe to the GNU Makefile that runs mach settings --list - add seamonkey-2.53.21-bmo1662867.patch to allow mach settings to run - import some compiler/linker settings and syntactic sugar from Fedora's spec file by Dmitry Butskoy et al. - re-enable elf-hack since builds seem to work now - apply existing ICU fixes to Leap 16 ++++ sysuser-tools: - Use run macro for chage for log files/debugging. ++++ terragrunt: - Update to version 0.86.2: * chore: updated dependency github.com/aws/aws-sdk-go-v2 to v1.38.1 by @denis256 in #4728 * chore: updated dependency github.com/hashicorp/go-plugin to v1.7.0 by @denis256 in #4728 * chore: updated dependency github.com/zclconf/go-cty to v1.16.4 by @denis256 in #4728 * chore: updated dependency google.golang.org/api to v0.248.0 by @denis256 in #4728 * chore: updated dependency google.golang.org/grpc to v1.75.0 by @denis256 in #4728 * chore: updated dependency google.golang.org/protobuf to v1.36.8 by @denis256 in #4728 * chore: updated dependency go.uber.org/mock to v0.6.0 by @denis256 in #4728 * chore: updated dependency github.com/aws/aws-sdk-go-v2/config to v1.31.2 by @denis256 in #4728 * chore: updated dependency github.com/aws/aws-sdk-go-v2/service/dynamodb to v1.49.1 by @denis256 in #4728 * chore: updated dependency github.com/aws/aws-sdk-go-v2/service/iam to v1.47.1 by @denis256 in #4728 * chore: updated dependency github.com/aws/aws-sdk-go-v2/service/s3 to v1.87.1 by @denis256 in #4728 * chore: updated dependency github.com/aws/aws-sdk-go-v2/service/sts to v1.38.0 by @denis256 in #4728 * chore: updated dependency github.com/aws/smithy-go to v1.22.5 by @denis256 in #4728 ++++ ulogd: - Update to release 2.0.9 * gprint, oprint: add support for printing IPv6 addresses * sqlite3: correct binding of IPv4 addresses and 64-bit integers - Refresh ulogd-conf.diff ++++ virtualbox-kmp: - Disable python bindings for Leap 16.0 (bsc#1248418) python3.13 is not supported by the current virtualbox version so we can't build the bindings. ------------------------------------------------------------------ ------------------ 2025-8-25 - Aug 25 2025 ------------------- ------------------------------------------------------------------ ++++ ImageMagick: - version update to 7.1.2.2 * Fix infinite loop when decoding JXL with -limit height/width by @Elvyria in #8303 * Bump actions/checkout from 4 to 5 by @dependabot[bot] in #8304 * cache.c: Fix unused function warning by @Dave-Allured in #8309 - fixes CVE-2025-55298 [bsc#1248780] CVE-2025-57803 [bsc#1248784] CVE-2025-55212 [bsc#1248767] ++++ agama-products: - Fix failure of agama-products build after drop of is_opensuse on SLE16 (bsc#1248484) ++++ agama-yast: - Improved initialization of iBFT (bsc#1247711). ++++ apko: - Update to version 0.30.6: * build(deps): bump chainguard-dev/actions from 1.4.9 to 1.4.11 (#1825) ++++ ast-grep: - Remove --locked included in macro ++++ bcc: - Add _constraints to avoid OOM on OBS workers (bsc#1248638) - Add rpmlintrc to suppress rpmlint warnings * some bcc-tools uses /usr/share/bcc/tools/*.c for compilation at runtime, so must be shipped as-is. ++++ folder-color: - Use pyproject macros from python-rpm-macros to build and install. ++++ cdogs-sdl: - Update to version 2.3.2 * Fix crash when loading classic .cpn campaigns ++++ certmonger: - Update to 0.79.20 * Fix type error in cm_tdbusm_get_vn * Adjust parameter type for util_EVP_PKEY_id * Update tests to be compatible with OpenSSL 3.2 * Switch BR from /usr/include/popt.h to popt-devel * getcert: return 2 when trying to create a duplicate entry * getcert: add NULL check to duplicate string compare * Use correct object path for 'ca' property of request objects in D-Bus API * Move shell_escape function to util.c * Add more environment variables to be passed on to the notification command * Translated using Weblate (Chinese (Simplified) (zh_CN)) * Translated using Weblate (Georgian) * Translated using Weblate (Russian) - Remove patches merged upstream * 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch * certmonger-c99-01.patch * certmonger-c99-02.patch - New patch * add_some_missing_tests.patch ++++ colord: - Update to version 1.4.8: + New Features: - Add AppStream metainfo XML with hardware provide info. - Add support for -Dsystemd_root_prefix to make local building easier. - Install sysusers.d config file if configured user is not root. + Bugfixes: - Add the source attribute for each man page. - Drop component type from AppStream metadata XML to avoid parsing error. - Fix a critical warning when running the self tests. - Fix USB scanners not working with RestrictAddressFamilies. - Fix writing to the database with ProtectSystem=strict. - Properly set the status to CD_SESSION_STATUS_RUNNING. - Use g_ascii_strtod instead of atof(). - Use sqlite3_errmsg() to avoid getting a mutable error message. - Changes from version 1.4.7: + Bugfixes: - Add various hardenings to the systemd service. - Always close the ICC profile when loading fails. - Avoid destructing LCMS plugin twice with lcms 2.14. - Do not make state files executable in tmpfiles.d/colord.conf. - Fix a double free spotted by Coverity. - Fix an error check when parsing the DTP94 data. - Fix a -Wincompatible-pointer-types warning. - Fix potential crash when reading from broken Huey hardware. - Set FILE_OFFSET_BITS explicitly. - Use a 64-bit time_t. - Use thread context for Gamut Alarm codes. - Drop colord-CVE-2021-42523.patch and harden_colord.service.patch: fixed upstream. ++++ gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ crmsh: - Update to version 5.0.0+20250825.21aba9d5: * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324) ++++ cross-aarch64-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-arm-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-arm-none-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-arm-none-gcc7-bootstrap: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-avr-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-avr-gcc7-bootstrap: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-hppa-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-i386-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-m68k-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-mips-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-nvptx-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-ppc64-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-ppc64le-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-rx-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-rx-gcc7-bootstrap: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-s390x-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-sparc-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ cross-sparc64-gcc7: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ digger-cli: - Update to version 0.6.120: * Paginate Comment Retrieval (#2107) * enable debug logs (#2106) * Feat/breardon2011/logging extended (#2100) ++++ gcc7-testresults: - Add gcc7-pr81103.patch, removing uses of termio.h to fix Ada build with glibc 2.42 ++++ llamacpp: - Update to version 6269: * Model and conversion: support for Seed-OSS, GPT-OSS response_format, interns1-mini, Ernie 4.5, gpt-oss type strings, improved Mistral templates, new model conversion tool/example with torch-cpu. * Vulkan backend: multiple optimizations (rms_norm, mul_mat_id, synchronization, conv2d, subgroup ops), new ops (exp, conv_2d_dw f16, ggml_mean). * GGML/CPU: added conv3d op, WebGPU quantization support, Q5_0/Q5_1 on s390x, mxfp4 intrinsics on ppc64le. * Server and chat: multimodal completion and embeddings JSON support, improved OpenAI API compatibility and usage statistics, disabled context shift by default, fixed ordering of tasks, webui issues, debug assertions, clarified reasoning_format. * KV cache: unified handling improvements, support for reuse, removal of deprecated APIs, simplifications. * Miscellaneous: fixed logging of non-ASCII characters, removed deprecated or unused code and build artifacts. * Full commit log: https://github.com/ggml-org/llama.cpp/compare/b6188...b6269 ++++ gh: - Update to version 2.78.0: * Add `--force` flag to `gh run cancel` (#11513) * Update third-party license versions (#11557) * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556) * Merge pull request #11536 from cli/copilot/fix-11535 * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2 * Update pkg/cmd/release/verify/verify.go * Update pkg/cmd/release/verify-asset/verify_asset.go * Hidden trusted root flag for release verify * Update Go dependencies to latest versions * chore(deps): bump actions/checkout from 4 to 5 * udpate the test * replace /git/refs/tags/ to /git/ref/tags/ * Update feature_detection.go * Update PR tests for v2 projects * Base changes for PR project items * Update `gh issue view` to show v2 projects * PR feedback from @bagtoad * Update v1 project detection logic * Update govulncheck workflow to scan source code * add test for FetchRefSHA * Apply suggestion from @Copilot * Update docs/install_windows.md * Consolidate repo profile, fix headings * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13 * Update docs on contributing new install methods * markdown lint fixes * Formatting * Initial installation doc refactor * Pushing empty commit to run CI * Bump Go to 1.24.6 * Fix linter * Update pkg/cmd/search/search.go * chore(deps): bump actions/download-artifact from 4 to 5 * Update docs/triage.md * Update docs/triage.md * Update issue triage guidelines and label usage * fix error for ErrReleaseNotFound when fetching ref * Apply suggestion from @Copilot * Update .github/workflows/scripts/spam-detection/process-issue.sh * docs(search): move search syntax note to `gh search --help` * Update spam detection to comment on and close issue * Update permissions and events for workflow * ci: use `help wanted` label link in comment * ci: anchor regexp for `help wanted` label * Improve spam detection evals (#11419) * v1 project feature detection spike using version * docs(help): rename `search-syntax` help topic * docs(search): add reference to `gh help search` * Add help topic for search syntax in gh commands * docs(search): add note for exclusion search syntax * Regenerate third-party licenses on trunk pushes * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 ++++ ghc-fsnotify: - Update fsnotify to version 0.4.4.0. Version 0.4.4.0 - --------- * Use hinotify and -DHAVE_NATIVE_WATCHER for FreeBSD (#121) * Start testing FreeBSD in CI (#122) ++++ govulncheck: - Packaging improvements: * Update to BuildRequires: golang(API) >= 1.25 latest table. This tool requires the latest stable Go toolchain to check other Go applications using that latest stable version of Go. * Refs boo#1248678 ++++ grype-db: - Update to version 0.39.0: * Added Features - Add fix availability data for OS providers [#629 @wagoodman] * Bug Fixes - recognize jvm versions at DB build time [#647 @willmurphyscode] * Additional Changes - move to pyyaml-include 2.x, keep legacy CWD-relative !include [#642 @jamestexas] * Dependencies - chore(deps): Bump actions/checkout from 4.2.2 to 5.0.0 (#630) - chore(deps): Bump astral-sh/setup-uv in /.github/actions/bootstrap (#631) - chore(deps): update tools to latest versions (#639) - chore(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 (#641) ++++ gstreamer-docs: - Update to version 1.26.5: + No changes, stable bump only. ++++ gstreamer-editing-services: - Update to version 1.26.5: + No changes, stable versionbump only. ++++ gstreamer-plugins-libav: - Update to version 1.26.5: + No changes, stable versionbump only. ++++ gstreamer-plugins-ugly: - Update to version 1.26.5: + No changes, stable bump only. ++++ gstreamer-plugins-vaapi: - Update to version 1.26.5: + No changes, stable bump only. ++++ gstreamer-rtsp-server: - Update to version 1.26.5: + No changes, stable bump only. ++++ harfbuzz: - Update to version 11.4.4: + Fix a shaping regression affecting mark glyphs in certain fonts. + Fix pruning of mark filtering sets when subsetting fonts, which caused changes in shaping behaviour. ++++ ibus-libpinyin: - Add 0001-Make-libpinyin-setup-could-response-build-config.patch, 0001-All-candidate-and-mode-buttons-created-in-dynamic-ar.patch: Backport 0e9bebe and 619f0d6 from upstream, Make libpinyin setup program could response build config to disable Lua script and user data input. (bsc#1246569) ++++ indi: - Update to 2.1.5.1: * https://github.com/indilib/indi/releases/tag/v2.1.5.1 * https://github.com/indilib/indi/releases/tag/v2.1.5 ++++ installation-images-MicroOS: - merge gh#openSUSE/installation-images#763 - etc: add imx8mp interconnect to module.config - 17.160 ++++ installation-images-openSUSE: - merge gh#openSUSE/installation-images#763 - etc: add imx8mp interconnect to module.config - 17.160 ++++ java-1_8_0-openjdk: - Added paches: * jdk-8354941.patch * jdk-8354941-aarch32.patch + JDK-8354941: Build failure with glibc 2.42 due to uabs() name collision ++++ kernel-default: - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 ++++ kernel-source: - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 ++++ kernel-docs: - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 ++++ kernel-kvmsmall: - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 ++++ kernel-obs-build: - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 ++++ kernel-obs-qa: - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 ++++ kernel-syms: - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 ++++ kernel-vanilla: - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 ++++ libbpf: - update to 1.6.2: * add proper LIBBPF_API annotation to bpf_object__prepare() API, to make it usable in shared library mode * small fix up to better handle DEVMAP/DEVMAP_HASH maps ++++ openjph: - Update to 0.22.0: * Add the capability to restart a codestream; restart allows the decoder/encoder to re-use memory that was allocated during previous usage of the codestream object. This is useful for processing many similar codestream. #194 ++++ libtracecmd: - Update to version 1.5.4: * Fix checking glob() return values ++++ libuninameslist: - update to version 20240714 * Support for Unicode 16.9b - run tests - enable the french library ++++ vtk: - Remove references to qml plugin dir. The QQmlVTKPlugin has been deprecated by the QQuickVTKItem in 9.3, and removed in 9.5. - Use system libfmt on Leap/SLFO 16. ++++ vtk-openmpi4: - Remove references to qml plugin dir. The QQmlVTKPlugin has been deprecated by the QQuickVTKItem in 9.3, and removed in 9.5. - Use system libfmt on Leap/SLFO 16. ++++ melange: - Update to version 0.31.0: * qemu_runner: Identify as qemu intentionally * Download alpine kernel for local testing * qemu_runner: An hour is far too long for qemu to get networking working by defualt * .gitignore: ignore the kernel directory * feat: go bump - go work vendor (#2136) * More summarize output info. (#2124) * build(deps): bump the gomod group with 8 updates (#2126) ++++ mesheryctl: - update to 0.8.129: * General - Update README.md @ornate-bonzai (#15668) - [server]: chore: update k8s config handler api to accept map of contexts with options per context together with kubeconfig @n2h9 (#15617) - [server] switch meshsync deployment mode on connection PUT: disconnect connect approach. @n2h9 (#15613) - Update readme to match openssf regex for sbom @carlosriosilva (#15605) - [Ci] Update README with Meshery's SBOM @leecalcote (#15604) - Add OpenSSF scorecard to Readme @hamza-mohd (#15600) - Revert "Merge pull request #15568 from n2h9/chore-fix-connection-pers… @n2h9 (#15577) - [server] chore: return ErrContextAlreadyPersisted if k8scontext already exists @n2h9 (#15568) - [server] chore: remote provider SaveK8sContext: do not save context if connection already persisted @n2h9 (#15569) - [server]: chore: update tmp_meshkit channel broker to proper channel broker from real meshkit @n2h9 (#15572) * Meshery CLI - docs(mesheryctl): improve help and usage for 'system context view' command @ahmadu2305 (#15562) - [mesheryctl] chore: fix model build and model init failing tests @n2h9 (#15624) - added e2e tests for system start command @Darshan174 (#15463) * Maintenance - build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 @dependabot (#15651) - feat: added design e2e tests @ianrwhitney (#15564) - Bump brace-expansion in /provider-ui @dependabot (#15615) - added e2e tests for system start command @Darshan174 (#15463) - Bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 @dependabot (#15603) - [CI] Allow OpenSSF code scanner to be run ad hoc; Stop running on merge to master @carlosriosilva (#15601) - [CI] Create OSSF scorecard.yml @leecalcote (#15599) - chore: skip adapter tests @ianrwhitney (#15472) - Bump k8s.io/apiextensions-apiserver from 0.33.2 to 0.33.3 @dependabot (#15501) * Documentation - docs(mesheryctl): improve help and usage for 'system context view' command @ahmadu2305 (#15562) - [BUG] Fix mastering-meshery link @Siddhi-sahu (#15575) - [Docs]: Add missing Adapter Version in all adapter docs @Rajesh-Nagarajan-11 (#15582) - Bump activestorage from 8.0.1 to 8.0.2.1 in /docs @dependabot (#15579) - [Docs] Ensure that each permission key's ID is displayed in the reference table @Siddhi-sahu (#15558) - [docs] Add missing release entry for v0.8.109 @Rajesh-Nagarajan-11 (#15571) - update to 0.8.128: * no CLI-related changes * no dependency updates - update to 0.8.127: * no CLI-related changes * no dependency updates ++++ meson: - Updtae to version 1.9.0: + Array .flatten() method + clang-tidy's auto-generated targets correctly select source files + Added Qualcomm's embedded linker, eld + Added suffix function to the FS module + Support response files for custom targets + meson format now has a --source-file-path argument when reading from stdin + Added license keyword to pkgconfig.generate + New experimental option rust_dynamic_std + Rust and non-Rust sources in the same target + Explicitly setting Swift module name is now supported + Top-level statement handling in Swift libraries + Swift compiler receives select C family compiler options + Swift/C++ interoperability is now supported + Support for MASM in Visual Studio backends + Limited support for WrapDB v1 ++++ meson-test: - Updtae to version 1.9.0: + Array .flatten() method + clang-tidy's auto-generated targets correctly select source files + Added Qualcomm's embedded linker, eld + Added suffix function to the FS module + Support response files for custom targets + meson format now has a --source-file-path argument when reading from stdin + Added license keyword to pkgconfig.generate + New experimental option rust_dynamic_std + Rust and non-Rust sources in the same target + Explicitly setting Swift module name is now supported + Top-level statement handling in Swift libraries + Swift compiler receives select C family compiler options + Swift/C++ interoperability is now supported + Support for MASM in Visual Studio backends + Limited support for WrapDB v1 ++++ mkosi: - Add 0002-Include-sys-conf-ext-info-in-metadata-file.patch * Backport upstream patch to include sysext and confext information in the metadata file. This change allows sysext images to be built with mkosi-generated manifest files in OBS without needing the current *.json hack. ++++ mtools: - version update to 4.0.49 * 4.0.49 - Correctly detect overlong file names, especially when multibyte (UTF-8) strings are concerned - Fix off-by-one error in 2 calls to native_to_wchar - When changing disk label, ignore any plain file which would match label - Added missing newlines in error messages about disk geometry - Do not print error message if getting geometry is simply not supported by device type (such as for loop devices) - If full geometry of a device is not available (such as for loop devices), at least make use of the size * 4.0.48 - portability fixes, mostly for Watcom compiler - cleaned up some other warnings - various runtime fixes for windows (/dev/tty vs CONIN$) - use correct mtools (sub)command name in usage() when using -c - other usage() spelling/wording fixes - fix mtype'ing multiple files at once - integrate mkmanpages into make system, clean it, and credit texi2roff's original developer and others - document compilation on less usual environments in INSTALL - uninitialized buffer fix in mformat - fix parameter counting error in mcd, and document that image file name is not remembered * 4.0.47 - fixed some of the manpage issues reported by manpage-l10n - unix-dir copying on Windows fix - new no-daemon mode for floppyd to make testing easier - make floppyd independant of XauFileName (portability) - autoconf fixes * 4.0.46 - iconv buffer overflow fixes - removed references to mread and mwrite (obsolete subcommands from mcopy) - documented mdoctorfat, and addressed 2 bugs/oversights - removed references to obsolete mread and mwrite - portability fixes (dietlibc and MacOS X) & simplification ++++ nix: - Update to 2.31.0: - `build-cores = 0` now auto-detects CPU cores [#13402](https://github.com/NixOS/nix/pull/13402) When `build-cores` is set to `0`, Nix now automatically detects the number of available CPU cores and passes this value via `NIX_BUILD_CORES`, instead of passing `0` directly. This matches the behavior when `build-cores` is unset. This prevents the builder from having to detect the number of cores. - Fix Git LFS SSH issues [#13337](https://github.com/NixOS/nix/issues/13337) [#13743](https://github.com/NixOS/nix/pull/13743) Fixed some outstanding issues with Git LFS and SSH. - Added support for `NIX_SSHOPTS`. - Properly use the parsed port from URL. - Better use of the response of `git-lfs-authenticate` to determine API endpoint when the API is not exposed on port 443. - Add support for `user@address:port` syntax in store URIs [#7044](https://github.com/NixOS/nix/issues/7044) [#3425](https://github.com/NixOS/nix/pull/3425) It's now possible to specify the port used for SSH stores directly in the store URL in accordance with [RFC3986](https://datatracker.ietf.org/doc/html/rfc3986). Previously the only way to specify custom ports was via `ssh_config` or the `NIX_SSHOPTS` environment variable, because Nix incorrectly passed the port number together with the host name to the SSH executable. This change affects [store references](@docroot@/store/types/index.md#store-url-format) passed via the `--store` and similar flags in CLI as well as in the configuration for [remote builders](@docroot@/command-ref/conf-file.md#conf-builders). For example, the following store URIs now work: - `ssh://127.0.0.1:2222` - `ssh://[b573:6a48:e224:840b:6007:6275:f8f7:ebf3]:22` - `ssh-ng://[b573:6a48:e224:840b:6007:6275:f8f7:ebf3]:22` - Represent IPv6 RFC4007 ZoneId literals in conformance with RFC6874 [#13445](https://github.com/NixOS/nix/pull/13445) Prior versions of Nix since [#4646](https://github.com/NixOS/nix/pull/4646) accepted [IPv6 scoped addresses](https://datatracker.ietf.org/doc/html/rfc4007) in URIs like [store references](@docroot@/store/types/index.md#store-url-format) in the textual representation with a literal percent character: `[fe80::1%18]`. This was ambiguous, because the the percent literal `%` is reserved by [RFC3986](https://datatracker.ietf.org/doc/html/rfc3986), since it's used to indicate percent encoding. Nix now requires that the percent `%` symbol is percent-encoded as `%25`. This implements [RFC6874](https://datatracker.ietf.org/doc/html/rfc6874), which defines the representation of zone identifiers in URIs. The example from above now has to be specified as `[fe80::1%2518]`. - Use WAL mode for SQLite cache databases [#13800](https://github.com/NixOS/nix/pull/13800) Previously, Nix used SQLite's "truncate" mode for caches. However, this could cause a Nix process to block if another process was updating the cache. This was a problem for the flake evaluation cache in particular, since it uses long-running transactions. Thus, concurrent Nix commands operating on the same flake could be blocked for an unbounded amount of time. WAL mode avoids this problem. This change required updating the versions of the SQLite caches. For instance, `eval-cache-v5.sqlite` is now `eval-cache-v6.sqlite`. - Enable parallel marking in bdwgc [#13708](https://github.com/NixOS/nix/pull/13708) Previously marking was done by only one thread, which takes a long time if the heap gets big. Enabling parallel marking speeds up evaluation a lot, for example (on a Ryzen 9 5900X 12-Core): - `nix search nixpkgs` from 24.3s to 18.9s. - Evaluating the `NixOS/nix/2.21.2` flake regression test from 86.1s to 71.2s. - New command `nix flake prefetch-inputs` [#13565](https://github.com/NixOS/nix/pull/13565) This command fetches all inputs of a flake in parallel. This can be a lot faster than the serialized on-demand fetching during regular flake evaluation. The downside is that it may fetch inputs that aren't normally used. - Add `warn-short-path-literals` setting [#13489](https://github.com/NixOS/nix/pull/13489) This setting, when enabled, causes Nix to emit warnings when encountering relative path literals that don't start with `.` or `/`, for instance suggesting that `foo/bar` should be rewritten to `./foo/bar`. - When updating a lock, respect the input's lock file [#13437](https://github.com/NixOS/nix/pull/13437) For example, if a flake has a lock for `a` and `a/b`, and we change the flakeref for `a`, previously Nix would fetch the latest version of `b` rather than using the lock for `b` from `a`. - Implement support for Git hashing with SHA-256 [#13543](https://github.com/NixOS/nix/pull/13543) The experimental support for [Git-hashing](@docroot@/development/experimental-features.md#xp-feature-git-hashing) store objects now also includes support for SHA-256, not just SHA-1, in line with upstream Git. - refresh 0001-port-option-to-disable-functional-tests-to-meson.patch ++++ octave: - Fix octave-forge install/check macros for noarch packages. ++++ octave-forge-bim: - Update to version 1.1.8 - Update to version 1.1.7: * Long awaited bug fix release and addition of docs - Add octave-forge-msh build depdendency, required for tests ++++ octave-forge-control: - Update to version 4.1.2: * estim: new input argument type for a delayed or current version of a discrete-time estimator using last or current output measurements for current state estimation * kalman: adding type input argument for discrete-time filters (see estim), consistent default values for input arguments * added more test, like, e.g. estim, kalman and ssdata * hinfsyn: more comprehensive help text * margin: fix of wrong phase margin if outside +/- 180 degree * rlocusx: improved colors - Update to version 4.1.1: * more robust test in impulse and cfconred * fix possibly missing deprecated LAPACK routine DGEGS * input parameter checking for NaN and Inf in oct-files in order to prevent Octave from hanging (bug #66669) * ss: state space from MIMO transfer function 'tfsys' numerically more robust (bug #66651) * lyap (A,Q) also for non-symmetric Q (bug #66567) * fix time responses (step, impulse, ...) if requested for multiple systems and on Octave versions prior to Octave 8 - Update to version 4.1.0: * lqg, lqgtrack, lqgreg, reg: new functions for linear dynamic output feedback design including estimator and state feedback * lqry, lqi: new linear quadratic regulator design function, output weighting and with integral part * c2d: impulse invariant discrete-time models for MIMO systems and state space representations * New algorithm for imp_invar, also allowing MIMO systems * tfdata: returning coefficient lists of same length for numerator and denominator (bug #43947) * allow time responses (like, e.g. stepor impulse) for several systems with different sizes ++++ octave-forge-database: - Disable check, as a database connection is required. - Update to version 0.5.4: * Update syntax to work with recent versions of Octave. - Drop financial-elem-by-elem-arithmetic.patch - Add octave-forge-statistics package as runtime and build dependency. ++++ octave-forge-fuzzy-logic-toolkit: - Update to version 0.6.2 * Redefined the defuzz option "centroid" using a more efficient method (weighted average), and renamed the previous "centroid" implementation "centroid_integral" (because it is an integral-based calculation) in order to continue to provide the integral-based option. - Update to version 0.6.1 * Improved many comments and updated the html documentation. - Update to version 0.6.0 * Added many built-in self tests, simplified error messages, and made minor improvements to comments. * Reimplemented two private functions: square_distance_matrix.m and update_cluster_membership.m. Tested for identical results with previous implementation using an embedded test in each file. * Added new docs directory containing html documentation for each top-level function. - Update to version 0.5.1 * Updated several top-level text files (ChangeLog, DESCRIPTION, and NEWS). No change to any code. - Update to version 0.5.0 * Replaced several occurrences of the deprecated '.+' and '.-' operators with '+' and '-', respectively. - Drop fuzzy-logic-toolkit-elem-by-elem-arithmetic.patch ++++ octave-forge-geometry: - Update to version 4.1.0 * Added new functions to detect intersetions and points inside 3d polygons. * ispolycw that allows for two cell array inputs (px and py), see https://savannah.gnu.org/patch/?10297 * Fixed compilation error with g++ v11, see https://savannah.gnu.org/bugs/?60884 * Fixed failing test in joinPolygons - Drop compile-with-g++-v11.patch - Add octave-forge-matgeom build dependency required for tests - Exclude tests requiring a graphical toolkit ++++ octave-forge-video: - Update to version 2.1.3: * fix documentation warning - Update to version 2.1.2: * fix build on GNU Octave 10 (include cassert) - Exclude tests requiring full ffmpeg package ++++ ofono: - Update to version 2.18 * Fix issue with QMI and handling SMS message acknowledgement. * Fix issue with handling SIM7100 modem ready detection. * Add support for forbidden operator list. - Turn harden_ofono.service.patch into git patch. ++++ psi+: - update to 1.5.2112+0 * tray: add more options (#926) * Client icons optimize (#925) * CAPTCHA dialog (#924) * Fix obsolete links. Some code refactoring * Updated BasicXMLSyntaxHighlighter Removed deprecated QRegExp class Code * XMPP console highighting (#903) * Refactoring of TextUtil.quote() to improve readability (#899) * XMPP Console (#902) * Minus icons (#892) * passdialog: create form from ui file (#904) * cmake/modules: fix BSD3 license text (#905) * Misc (#901) * Account modify dialog (#894) * Chat menu (#895) * doap: fix XEP link (#893) * Updated ui-files. Hardcoded pathes removed * Make windows bigger (#887) * Add menu_join_groupchat to the top toolbar (#890) * Enable contact list scrool bar by default (#886) * Updated src/options/opt_plugins.cpp: removed not needed description truncate (QHeaderView:Stretch do the stuff) some code refactoring * Enable by default showing of offline contacts (#884) * An attempt to fix opt_plugins tab behavior * Enable by default auto connection and reconnection after sleep (#882) * Plugins options: add description column (#880) * Simplify status message usage (#878) * Disable user join and leave notifiations by default (#877) * Enable by default E2E encryption plugins and Attention plugin (#881) * Fix capitalisation in duplicate process prompt (#883) * INSTALL.mdL fix link to Readme-cmake.md (#875) * Use short circuiting when checking if VCard fields are changed when editing to improve performance (#874) * Add Arch Linux repo links to README.md (#873) * Fix QtKeychain package detection (#867) * Broken logic fix * Work with dependencies for new MXE * Fix alerts for already open chats (#866) ++++ psi+-lang: - update to 1.5.2109+0 ++++ python-Sphinx-test: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-rtslib-fb: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-tqdm: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-Quart: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-Sphinx: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-antlr4-python3-runtime: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-build: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-gitlabcis: - update to 1.15.9: * Fix - fix(deps): update dependency coverage to v7.10.5 (1b3d1d0) ++++ python-google-cloud-artifact-registry: - Add missing BuildRequires on pytest-asyncio. ++++ python-google-cloud-build: - Add missing BuildRequires on pytest-asyncio. ++++ python-google-cloud-domains: - Add missing BuildRequires on pytest-asyncio. ++++ python-google-cloud-vpc-access: - Add missing BuildRequires on pytest-asyncio. ++++ python-h5py: - Update to 3.14.0: * New Features + On NumPy 2.x, it is now possible to read and write native NumPy variable-width strings, a.k.a. StringDType() or dtype='T', which are more efficient than arrays of Python string objects. + New File.in_memory constructor to conveniently build an HDF5 file structure in memory + Dataset views returned by Dataset.astype, Dataset.asstr and Dataset.fields have gained the .dtype, .ndim, .shape, and .size attributes. + Opening an existing dataset in a file is faster since it now only loads the "dataset creation property list" when required. * Exposing HDF5 functions + h5py.h5d.DatasetID.write_direct_chunk now wraps H5Dwrite_chunk instead of H5DOwrite_chunk. + H5Sselect_shape_same exposed as h5py.h5s.SpaceID.select_shape_same. * Bug fixes + Fixed a problem with phil Lock handling in forked processes when h5py is also used from other threads. + Fixed an error using :meth:`.Dataset.read_direct` with a zero-size selection. + Fix various bugs when applying np.array or np.asarray to a Dataset view returned by Dataset.astype, Dataset.asstr, or Dataset.fields. * Building h5py + setuptools 77 or above is now required, due to changes in the license metadata in pyproject.toml. + Numpy variable-width string support does not alter the build process: you need NumPy 2.x to build. + Fixed building h5py with Numpy 2.3. ++++ python-h5py-openmpi4: - Update to 3.14.0: * New Features + On NumPy 2.x, it is now possible to read and write native NumPy variable-width strings, a.k.a. StringDType() or dtype='T', which are more efficient than arrays of Python string objects. + New File.in_memory constructor to conveniently build an HDF5 file structure in memory + Dataset views returned by Dataset.astype, Dataset.asstr and Dataset.fields have gained the .dtype, .ndim, .shape, and .size attributes. + Opening an existing dataset in a file is faster since it now only loads the "dataset creation property list" when required. * Exposing HDF5 functions + h5py.h5d.DatasetID.write_direct_chunk now wraps H5Dwrite_chunk instead of H5DOwrite_chunk. + H5Sselect_shape_same exposed as h5py.h5s.SpaceID.select_shape_same. * Bug fixes + Fixed a problem with phil Lock handling in forked processes when h5py is also used from other threads. + Fixed an error using :meth:`.Dataset.read_direct` with a zero-size selection. + Fix various bugs when applying np.array or np.asarray to a Dataset view returned by Dataset.astype, Dataset.asstr, or Dataset.fields. * Building h5py + setuptools 77 or above is now required, due to changes in the license metadata in pyproject.toml. + Numpy variable-width string support does not alter the build process: you need NumPy 2.x to build. + Fixed building h5py with Numpy 2.3. ++++ python-pyelftools: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-pyflakes: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-pygal: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-pylint: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-pyright: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-pyspnego: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-python-slugify: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-roman: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-semver: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-sip6: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-smartypants: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-sphobjinv: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-sqlparse: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-sshtunnel: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-sure: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-tabulate: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-twine: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-typer: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-userpath: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-uvicorn: - Convert to libalternatives on SLE-16-based and newer systems ++++ regclient: - Update to version 0.9.1: * Features: - Allow relative urls in bearer auth. (PR 963) - Add "ns" query param to registry mirror requests. (PR 976) * Miscellaneous: - Update to SLSA v1 provenance. (PR 968) - Add a "make clean" command. (PR 969) ++++ rubygem-agama-yast: - Improved initialization of iBFT (bsc#1247711). ++++ sysuser-tools: - Generate provides for "u!". ++++ terragrunt: - Update to version 0.86.1: * Handle trailing doublestar ** in --queue-include-dir and - -queue-exclude-dir (#4683) ++++ tomcat: - Update to Tomcat 9.0.108 * Fixed CVEs: + CVE-2025-48989: Update the HTTP/2 overhead documentation (bsc#1243895) * Catalina + Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one or more JAR files. (markt) * Coyote + Fix: 69748: Add missing call to set keep-alive timeout when using HTTP/1.1 following an async request, which was present for AJP. (remm/markt) + Fix: 69762: Fix possible overflow during HPACK decoding of integers. Note that the maximum permitted value of an HPACK decoded integer is Integer.MAX_VALUE. (markt) + Fix: Update the HTTP/2 overhead documentation - particularly the code comments - to reflect the deprecation of the PRIORITY frame and clarify that a stream reset always triggers an overhead increase. (markt) * Cluster + Update: Add enableStatistics configuration attribute for the DeltaManager, defaulting to true. (remm) * Web applications + Fix: Manager and Host Manager. Provide the Manager and Host Manager web applications with a dedicated favicon file rather than using the one from the ROOT web application which might not be present or may represent something entirely different. Pull requests #876 and #878 by Simon Arame. * Other + Update: Update Checkstyle to 10.26.1. (markt) + Add: Improvements to French translations. (remm) + Add: Improvements to Japanese translations by tak7iji. (markt) ++++ tomcat10: - Update to Tomcat 10.1.44 * Fixed CVEs: + CVE-2025-48989: Update the HTTP/2 overhead documentation (bsc#1243895) * Catalina + Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one or more JAR files. (markt) * Coyote + Fix: 69748: Add missing call to set keep-alive timeout when using HTTP/1.1 following an async request, which was present for AJP. (remm/markt) + Fix: 69762: Fix possible overflow during HPACK decoding of integers. Note that the maximum permitted value of an HPACK decoded integer is Integer.MAX_VALUE. (markt) + Fix: Update the HTTP/2 overhead documentation - particularly the code comments - to reflect the deprecation of the PRIORITY frame and clarify that a stream reset always triggers an overhead increase. (markt) + Fix: 69762: Additional overflow fix for HPACK decoding of integers. Pull request #880 by Chenjp. (markt) * Cluster + Update: Add enableStatistics configuration attribute for the DeltaManager, defaulting to true. (remm) * WebSocket + Fix: Align the WebSocket extension handling for WebSocket client connections with WebSocket server connections. The WebSocket client now only includes an extension requested by an endpoint in the opening handshake if the WebSocket client supports that extension. (markt) * Web applications + Fix: Manager and Host Manager. Provide the Manager and Host Manager web applications with a dedicated favicon file rather than using the one from the ROOT web application which might not be present or may represent something entirely different. Pull requests #876 and #878 by Simon Arame. * Other + Update: Update Checkstyle to 10.26.1. (markt) + Add: Improvements to French translations. (remm) + Add: Improvements to Japanese translations by tak7iji. (markt) ++++ tomcat11: - Update to Tomcat 11.0.10 * Fixed CVEs: + CVE-2025-48989: Update the HTTP/2 overhead documentation (bsc#1243895) * Catalina + Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one or more JAR files. (markt) * Coyote + Fix: 69748: Add missing call to set keep-alive timeout when using HTTP/1.1 following an async request, which was present for AJP. (remm/markt) + Fix: 69762: Fix possible overflow during HPACK decoding of integers. Note that the maximum permitted value of an HPACK decoded integer is Integer.MAX_VALUE. (markt) + Fix: Update the HTTP/2 overhead documentation - particularly the code comments - to reflect the deprecation of the PRIORITY frame and clarify that a stream reset always triggers an overhead increase. (markt) * Cluster + Update: Add enableStatistics configuration attribute for the DeltaManager, defaulting to true. (remm) * WebSocket + Fix: Align the WebSocket extension handling for WebSocket client connections with WebSocket server connections. The WebSocket client now only includes an extension requested by an endpoint in the opening handshake if the WebSocket client supports that extension. (markt) * Web applications + Fix: Manager and Host Manager. Provide the Manager and Host Manager web applications with a dedicated favicon file rather than using the one from the ROOT web application which might not be present or may represent something entirely different. Pull requests #876 and #878 by Simon Arame. * Other + Update: Update Checkstyle to 10.26.1. (markt) + Add: Improvements to French translations. (remm) + Add: Improvements to Japanese translations by tak7iji. (markt) ++++ trace-cmd: - Update to version 3.3.3: * Fix completion of trace-cmd report to show files * Fix checking glob() return values * Fix open file descriptors in trace-cmd split ++++ translate-suse-desktop: - Update to version 0.20250826.ec6cc16: * Add firefox-esr and TreeMaker * Translated using Weblate (Spanish) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Thai) * Translated using Weblate (Hebrew) * Translated using Weblate (Kabyle) * Translated using Weblate (Esperanto) ++++ virtiofsd: - Update to version 1.13.2: * Bump version to v1.13.2 * README.md: expand section on non-privileged running * Set guest FD limit based on actual total FD limit * Handles: Track guest FD use * Inodes: Track guest FD use * PassthroughFs: Create GuestFdSemaphore * Add GuestFdSemaphore ++++ wolfictl: - Update to version 0.38.12: * build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 (#1731) * build(deps): bump github.com/chainguard-dev/advisory-schema (#1730) * build(deps): bump chainguard-dev/actions from 1.4.10 to 1.4.11 (#1729) * build(deps): bump the chainguard group with 2 updates (#1727) * build(deps): bump chainguard-dev/actions from 1.4.9 to 1.4.10 (#1728) ++++ yast2-trans: - Update to version 84.87.20250824.23b3f78aba: * Translated using Weblate (French) * Translated using Weblate (French) ------------------------------------------------------------------ ------------------ 2025-8-24 - Aug 24 2025 ------------------- ------------------------------------------------------------------ ++++ cnf: - Update to version 0.8.0~0: * (build): do not depend on obsolete Rust toolchain by default * (fix): Duplicate entries shown (GH #26) * Translated using Weblate (Slovenian) * Translated using Weblate (French) * Translated using Weblate (German) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Catalan) * Sync i18n.toml with the i18n directory * Rename cnf/i18n/po/ku to cnf/i18n/po/kmr - Install shell integration files from upstream tarball - Update shlex to 1.3.0 (bsc#1229375) ++++ dnscrypt-proxy: - Update to version 2.1.13 * Manual configuration reload via SIGHUP is now supported regardless of the hot-reload setting, providing more flexibility for system administrators * Fixed a regression in IP prefix matching for allow/block lists that could cause incorrect filtering behavior * the generate-domains-blocklist script now handles poor network conditions more gracefully ++++ dwarfs: - Replace wrong BuildRequires pkgconfig(clzma) -> pkgconfig(liblzma); build only succeeded previously by accident. ++++ ffmpeg-8: - Derive from ffmpeg-7.spec - Update to release 8.0 * New features: * Native decoders (Packman builds): APV, ProRes RAW, RealVideo 6.0, Sanyo LD-ADPCM, G.728 * VVC decoder improvements: IBC, ACT, Palette Mode * Vulkan compute-based codecs: FFv1 (encode and decode), ProRes RAW (decode only) * Hardware accelerated decoding: Vulkan VP9, VAAPI VVC, OpenHarmony H264/5 * Hardware accelerated encoding: Vulkan AV1, OpenHarmony H264/5 * Filters: colordetect, pad_cuda, scale_d3d11, Whisper, and others - Derive from ffmpeg-7.spec - Update to release 8.0 * New features: * Native decoders (Packman builds): APV, ProRes RAW, RealVideo 6.0, Sanyo LD-ADPCM, G.728 * VVC decoder improvements: IBC, ACT, Palette Mode * Vulkan compute-based codecs: FFv1 (encode and decode), ProRes RAW (decode only) * Hardware accelerated decoding: Vulkan VP9, VAAPI VVC, OpenHarmony H264/5 * Hardware accelerated encoding: Vulkan AV1, OpenHarmony H264/5 * Filters: colordetect, pad_cuda, scale_d3d11, Whisper, and others ++++ gzdoom: - Adjust gzdoom-lzma.patch for changes in the lzma-sdk package's lzma-sdk-shlib.patch. ++++ hashcat: - Update to release 7.1.2 * New algorithms: AS/400 DES, AS/400 SHA1, Cisco-ISE SHA256, LUKS2-Argon2i KDF, KeePass KDBX v4, SAP CODVN H SHA512, sm3crypt, BLAKE2b-256, MD6, sha224 - Edit system-libs.patch to make use of system-provided lzma-sdk ++++ libkeyfinder: - Update to 2.2.8: * Update tests to Catch3 * Bump minimum CMake version to 3.5 to avoid deprecation warning - run tests, fix rpmlint warnings ++++ lzma-sdk: - Edit lzma-sdk-shlib.patch to produces the same libname as Fedora. ++++ vkd3d: - Update to version 1.17: - Initial HLSL support for thread group shared memory. - Several features have been implemented for the experimental Metal Shading Language target. - Miscellaneous bug fixes. ++++ python-fanficfare: - Update to 4.48.0: - OTW/AO3 - change to 'need to login' text, accept both old and new and another string. #1229 - Improve error reporting for open_pages_in_browser_tries_limit [#1231] - Tweak a few defaults.ini settings. - adapter_ficwadcom: Fix for site change. - scribblehub: slow_down_sleep_time:5 per user recommendation - Update translations. ++++ python-mocket: - update to version 3.13.11: - Better abstraction for when inheriting from `mockhttp.Entry` - Define an alternative `can_handle` logic by passing a callable ++++ seamonkey: - add mozilla-bmo1862601.patch and seamonkey-icu.patch to fix - -with-system-icu builds on Tumbleweed (bmo#1864745) - allow Tumbleweed builds to use GCC 14 now, since this no longer fails (bmo#1916827) ++++ shfmt: - Update to version 3.12.0: * CHANGELOG: add entry for v3.12.0 * README.md: add another example to caveats * interp: add HandlerContext.Builtin * interp: add test cases with exit inside a process substitution * interp: add HandlerContext.Pos * interp: swap math/rand for math/rand/v2 * interp: add exitStatus.ok for `code == 0` comparisons * interp: move oneIf under exitStatus * interp: export IsBuiltin * interp: refactor builtins to return an exitStatus * interp: remove Runner.exitShell * interp: simplify trapping on error * interp: reduce the size of exitStatus * interp: convert strings to integers as int64 * interp: reject return with invalid arguments * syntax: skip allocating in SplitBraces when there are no braces * interp: avoid always copying CallExpr.Args to expand aliases * interp: move Runner.setFatalErr to exitStatus * interp: forward custom exit status errors when using `wait` * interp: keep custom exit status errors when using a naked `exit` * interp: positional parameters are unset when missing * interp: support reading $RANDOM and $SRANDOM * interp: add and fix more subshell exit and errexit edge cases * interp: propagate custom exit status errors in command substitutions * interp: simplify code with the exitStatus type * interp: use the Runner.Run context for calls to ReadDirHandlerFunc2 * interp: group "exit status" Runner fields into a type * interp: add more custom exit error test cases * interp: simplify returning exit codes in builtinCode * interp: forward custom non-fatal errors in pipefail and subshells * interp: a non-nil fatalErr implies a non-zero exit status code * interp: properly deprecate ReadDirHandlerFunc * interp: a non-nil fatalErr implies exiting is true * interp: add test cases for custom exit status errors being dropped * interp: wait with arguments returns the status code of the last job * update golang.org/x deps * pattern: deduplicate the implementation of the `*` regular expression * pattern: simplify the regexp flag logic * all: modernize -fix * pattern: skip needsEscaping loop if the mode discards the shortcut * pattern: the shortcut cannot be taken when NoGlobCase is given * pattern: globstar does not need `(?s)` as it does not use `.` * pattern: add test cases matching newlines * pattern: drop tests combining Shortest and EntireString * pattern: implement Shortest via (?U) * pattern: refactor Regexp to use a tiny string lexer * pattern: test error strings properly * pattern: allow ** to match non-leading dots * pattern: allow * to match non-leading dots * expand: always use pattern.NoGlobStar option * expand: resolve iterator warnings spotted by gopls * interp: turn flattenAssigns into an iterator * interp: reuse flagParser for `declare` flags * interp: allow joint flags on `declare` * interp: do not panic on extglob in another scenario * Revert "all: assume C.UTF-8 is available in the tests" * cmd/shfmt: do not allow --write to replace non-regular files * cmd/shfmt: add test case for #843 * fileutil: treat all non-regular files as definitely not shell scripts * cmd/shfmt: improve symlink testscript tests * cmd/shfmt: add support for simplify and minify via EditorConfig * cmd/shfmt: test that we don't mix sibling EditorConfig file settings * update dependencies * interp: undo removal of "unnecessary" type conversion * pattern: make the globstar "**" not match leading dots in basenames * expand: rely on pattern's handling of leading dots with "*" * pattern: make "*" not match leading dots in basenames * pattern: tweak how **/ is transpiled as a regexp * pattern: remove the broken Braces mode * all: remove two unnecessary type conversions * pattern: add test cases for matching dot-prefixed filenames * interp: subshells in a pipe are run concurrently * pattern: replace bytes.Buffer with strings.Builder * pattern: "**" only acts as globstar when alone as a path element * pattern: add more test cases for globstar not used on its own * interp: expose ExitStatus and deprecate NewExitStatus and IsExitStatus * interp: return non-fatal ExecHandler errors via Runner.Run * interp: make tests reliable on MacOS * interp: clarify that Runner.err is for fatal errors only at this point * interp: decouple `return` from Runner.err * interp: add more test cases for exec handler errors causing a stop * interp: set exit status 1 as a fallback on custom exec handler errors * interp: add more test cases for failing pipes * interp: correct the exit statuses of commands used in tests * interp: add more test cases for exec handler errors and exit statuses * interp: show which errors end up in Runner.Run in the handler tests * docs: `prettier-plugin-sh` now uses `sh-syntax` * README: polish a few bits and add the main interpreter caveat * README: actually include sh-syntax link * _js: drop mvdan-sh JS package built with GopherJS * pattern: add NoGlobStar mode * Add README entry * chore: a tiny typo in comment * interp: make the new background shell tests more resilient * interp: document overlayEnviron a bit more * interp: make a full copy of the environment for background subshells * interp: initial support for $! and wait PID * interp: clarify handler docs a bit * expand: tweak tilde expansion to match Bash semantics * interp: add comment next to prev.Local = false * interp: support modifying local vars from parent caller funcs * interp: refactor overlayEnviron.Set to deduplicate map lookups * interp: add more test cases for local vars and parent funcs * interp: set BASH_REMATCH when doing a regular expression match with `=~` * expand: clarify Variable.Set * expand: heredocs unescape \$, \\, and \`, just not \" * update deps * all: make more use of strings.Cut and friends * CHANGELOG: add entry for v3.11.0 * interp: skip handler test using process substitutions on Windows * interp: only obey TMPDIR if it is an absolute dir * update all dependencies * interp: do not hard-code the use of os.TempDir for named pipes * interp: do not open our own ProcSubst FIFO files via OpenHandler * interp: test process substitutions with an OpenHandler * fileutil: shebang detection improvements * syntax: use LangError consistently and add a LangUsed field * syntax: make IsIncomplete more robust * syntax: cover "EOF immediately after heredoc" in Stmts via a test * all: start exposing iter.Seq2[T, error] APIs * all: run gopls's modernize -fix * all: gofumpt * interp: better support for directories in test -r, -w, -x checks * all: make use of slices.Backward * README: Add neoformat NeoVim / Vim plugin * interp: second attempt at fixing /dev/null on Windows * interp: work around apparent Go 1.24 regression with os.DevNull on Windows * interp: add a test case where OpenHandler gets given a non-local path * update x/sys and x/term * start using range-over-func * make use of maps.Keys and maps.Values from Go 1.23 * add Go 1.24.x, drop 1.22.x * go mod tidy * interp: deduplicate calls to Runner.lookupVar * interp,expand: rethink setting variables * interp: add more tests for 1108 * expand: don't unescape characters inside here-documents * expand: make ValueKind a fmt.Stringer * interp: process substitutions are not waited for * interp: document that HandlerContext.Stdin is always a file * expand: fix broken links * interp: improve method signature * all: add godoc links where possible * pattern: fix outdated comment, and add godoc links * cmd/shfmt: switch away from func() int for testscript * syntax: use generics to walk nilable node fields * syntax: use generics to walk over lists of nodes * syntax: recover binary commands properly * syntax: initial support for recovering from missing tokens * interp: skip cancellable reader test on Windows * interp: don't test cancelling a read via os.Stdin * interp: drop muesli/cancelreader for os.File.SetReadDeadline * interp: simplify context logic thanks to context.AfterFunc * all: fix a few typos * CI: test `go build` for plan9 and wasm * all: fix build on plan9 * syntax: linkify syntax node godocs * cmd/shfmt: support -l=0 and -f=0 flags * update deps * expand: fix sequential '\' in double quote literals * CHANGELOG: prepare for v3.10.0 * cmd/shfmt: bump deps in Dockerfile * interp: let HandlerContext.Stdin be nil again when there is no stdin * interp: support closing stdin, stdout, and stderr files * cmd/shfmt: move --filename out of parser options * interp: test and fix `read` with regular files as stdin * all: clarify that the "keep padding" formatting option is deprecated * cmd/shfmt: report correct language read from EditorConfig in errors * cmd/shfmt: show broken behavior in test for #1102 * update all deps * interp: add an Interactive option to be used by cmd/gosh * cmd/gosh: add bad test case for #1100 * syntax: parse all CRLF line endings as LF * syntax: add a few godoc links * cmd/shfmt: test that -i=0 does not skip ignore=true from EditorConfig * README: clarify caveat for `declare` * expand: use cmp.Or * syntax: include skipped backslashes in backticks for column numbers * syntax: actually use qt.CmpEquals * syntax: include skipped null bytes in column numbers * syntax: add test case for positions after skipped null bytes * syntax: do not use %d verb for syntax.Pos * all: more tweaks thanks to Go 1.22 * syntax/typedjson: use reflect.TypeFor * go.mod: update dependencies * syntax: fix a fmt.Sprintf issue spotted by the latest go vet * all: swap bytes.Buffer for strings.Builder * CHANGELOG: prepare for v3.9.0 * add Go 1.23.x, drop 1.21.x * interp: add -s (silent) support to the read builtin * cmd/gosh: use an os.Pipe in another interactive test * interp: fix data race regression with stdin pipe changes * interp: use os.Pipe when StdIO or OpenHandler produce non-file stdins * interp: add a broken test for stdin draining with StdIO * interp: do not include TODOs in godoc comments * interp: implement here-documents via os.Pipe * interp: verify tests with Bash 5.2 * syntax: use the min builtin * update dependencies * syntax: use Parser.matched consistently * update editorconfig and golang.org/x deps * interp: implement -O and -G tests * expand: allocate fewer objects in Fields * expand: replace sort.SearchStrings with slices.BinarySearchFunc * update dependencies * syntax: add support for the Bash 5.2 @k expansion operator * expand: avoid a panic when ParamExp.Repl.Orig is nil * syntax: avoid a slice bounds check on every input byte * syntax: implement basic offset overflow protection * syntax: reduce the amount of allocation batching again * syntax: remove colOverflow conditional * syntax: make Parser.reset a bit more conservative * syntax: move benchmarks to a separate file * syntax: quicktest can take go-cmp options now * cmd/shfmt: drop SHFMT_NO_EDITORCONFIG warning * cmd/shfmt: swap out pkg/diff for internal/diff * cmd/shfmt: simplify with fewer globals * all: update dependencies * all: shadow the variable in type switches * DebugPrint: Print the string value of tokens * Allow case-insensitive filename globbing; add nocaseglob * interp: cancellable reads; EOF on "read" sets var to "" * syntax: swap frankban/quicktest for go-quicktest/qt * syntax: drop go1.18 build tag for fuzz_test.go * all: make use of the slices package * cmd/shfmt: fix typo in shfmt.1.scd * cmd/shfmt: document when --filename is needed for EditorConfig support * CHANGELOG: prepare for v3.8.0 * all: start using Go 1.21 std APIs * CI: bump bash image version * add Go 1.22, drop Go 1.20 * CI: bump github actions * bump dependencies before the next release * cmd/shfmt: add --apply-ignore flag for tools and editors * cmd/shfmt: support editorconfig language sections * syntax: backquotes affect backslashes in single quotes too * syntax: better column numbers for escapes inside backquotes * cmd/shfmt: document how EditorConfig's "ignore" works * syntax: detect bash 5.2 rather than 5.1 * update dependencies * README: fix up a few links * Update Arch Linux package URL in README.md * interp: support subshells with FuncEnviron as Env * expand: support zero-padding in brace expansions * syntax: support brace expansions with uppercase letters * interp: support parentheses in classic test commands * interp: add TODOs about test operator precedence * interp,expand: add support for fs.DirEntry * appease unparam * interp: determine access to a directory via unix.Access * syntax: allow redirects before all arguments * all: add Go 1.21, drop 1.19 * Update README.md * syntax: better error when using "function" in POSIX mode * cmd/shfmt: don't recommend inline EditorConfig comments * CHANGELOG: fix formatting on the latest link references ++++ slade: - Adjust clzma.diff for changes in the lzma-sdk package's lzma-sdk-shlib.patch. ------------------------------------------------------------------ ------------------ 2025-8-23 - Aug 23 2025 ------------------- ------------------------------------------------------------------ ++++ TreeMaker: - Add patches, mainly to fix build with GCC 15: * Fix-build-with-GCC-15.patch * Fix-Wparentheses-warnings.patch * Fix-Wdangling-else-warnings.patch - Migrate from %suse_update_desktop_file to %translate_suse_desktop with translation only for GenericName. (Name is a proper name.) ++++ atuin: - spec: fixed build failure by dropping --locked (already set by %cargo_build macro) ++++ caddy: - Update to version 2.10.2: * caddyfile: Fix importing nested tokens for `{block}` (#7189) * httpcaddyfile: Fix `acme_dns` regression (#7199) * http: Make logger first, before TLS provisioning (#7198) ++++ ceph: - Replace ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch with more correct ceph-mgr-fix-module-import-by-making-NOTIFY_TYPES-in-py-m.patch ++++ clementine: - Update to rolling release version tagged 1.4.1-50-ge281c4508 - Remove clementine-protobuf.patch and clementine-cpp17.patch; similar revisions now upstream per https://github.com/clementine-player/Clementine/pull/7372 - Remove clementine-taglib2.patch; similar revisions now upstream per https://github.com/clementine-player/Clementine/pull/7374 - Add clementine-cmake-pr7402.patch from https://github.com/clementine-player/Clementine/pull/7402 to fix CMake compatibility issues ++++ descent3: - Add httplib0_23.patch ++++ harfbuzz: - Update to version 11.4.3: + Make shaping fail much faster for certain malformed fonts (e.g., those that trigger infinite recursion). + Fix undefined behaviour introduced in 11.4.2. + Fix detection of the “Cambria Math” font when fonts are scaled, so the workaround for the bad MATH table constant is applied. ++++ jaq: - Update to version 2.3.0: * Remove outdated remark. * Downgrade `once_cell` to make jaq-core compile with MSRV. * Dependency updates. * Update benchmark results for jaq 2.3. * Document `bsearch`. * Merge pull request #303 from 01mf02/repl * Comment. * Merge pull request #302 from 01mf02/join-string * Update differences between jq and jaq for `join/1`. * Implement history loading/saving for REPL. * Indent nested REPLs. * Make REPL work with stdin --- thanks a lot to @gwenn! * Merge pull request #300 from fgimian/avoid-open-handles-during-persist * Small import reorganisation. * Add `repl` filter and split main file into smaller modules. * Add rustyline dependency. * Increase MSRV of jaq from 1.65 to 1.66. * Adapt tests to new `join` semantics. * Convert inputs of `join` to strings. * Ensure no file handles remain open during in-place persist (closes #292). * Merge pull request #301 from 01mf02/label-inside-fun * Correctly handle labels inside of native function arguments. * Merge pull request #299 from 01mf02/bsearch * Merge pull request #298 from 01mf02/neg-after-bin * Implement `bsearch`. * Allow negation directly after a binary operator. * Make `Debug` format `load::parse::Def` like a tuple. * Remove unnecessary trait bound. * Add @urid format * Remove reference. * Format. * New update semantics for `..` (recursion). * Implement `try`-`catch` without `label $x | ...`. * Cast epoch timestamp to i64 to prevent overflow on 32-bit architectures. * Merge pull request #283 from dnelson-1901/timefuncs * Thanks, clippy! * Reject negative date-time components. * Make it compile with Rust 1.65 & simplify array construction. * Omit multiplication. * Unix is capital. * Avoid double calls and be more explicit about truncation. * Code deduplication. * mktime: handle fractional seconds * Shorten formatting. * Make `strftime` a bit more performant. * Clippy. * Comments. * Simplify `array_to_datetime`. * Simplify `datetime_to_array`. * Simplify timezone passing. * Make chrono imports explicit. * Document implementation of "More time filters" * allow strftime/strflocaltime to handle incoming arrays * add mktime function * add strptime function * add helper function for creating a date-time array * add localtime, and collapse gmtime and localtime into one function * collapse strftime and strflocaltime into one function * add helper function for parsing an epoch timestamp * gmtime: handle fractional seconds * Add gmtime function * Add strftime and strflocaltime functions * Update security audit link. * Do not compress with UPX because of "bad DT_GNU_HASH" error. * Scoop version is 9 months old and severely outdated. * Update to Ubuntu 22.04. * Bump versions. * Downgrade `once_cell`. * Update dependencies. * Update dependencies. * Merge pull request #280 from 01mf02/path-values * Document. * Test `paths/1`. * Test `path_values`. * Merge pull request #281 from 01mf02/fold-update * Remove slow `getpath` implementation. * Revert "Implement `getpath` natively." * Revert "Support updating with `getpath` on LHS." * Move `getpath` to standard library. * Test fold updates. * Move folding code. * Remove superfluous clone. * Implement updates with folding operators (reduce/foreach) on LHS. * Simplified and faster implementation of `getpath/1`. * Support updating with `getpath` on LHS. * Implement `getpath` natively. * Implement `paths/0` natively. * Correct definition of `paths/1`. * Shorten `path_values` a bit. * Implement `getpath/1`. * Implement new native filter `path_values`. * Format. * Buffer write operations when stdout is not a terminal. * Remove useless `io::`. * Buffer write operations when stdout is not a terminal. * Format. * Remove unused dependency. * Write about security in README. * Add fuzzing targets for jaq-core, thanks to @pcwizz! * Add check to maintain fuzzing targets buildable. * Simplify fuzzing. * Document arbitrary token generation. * Debugging code. * Remove superfluous comment. * Match empty strings to words or numbers in arbitrary token generation. * Document constraint for `Tok::Var`. * Document lexer type invariants. * Do not panic on invalid UTF-8 characters. * Formatting. * Create initial corpus and review README. * Actually compile fuzz target. * Trim token string. * Document. * Use new arbitrary token generation and use in fuzz targets. * Generate arbitrary tokens. * Simplify load_and_compile. * Simplify `data` fuzzer. * Ignore Cargo.lock. * Remove Cargo.lock from fuzzer to decrease duplication. * Add a harness for fuzzing def parsing * Improve punctuation in fuzzing README * Add a fuzz target to harness the parser directly * Make lex::Tok globally public * Create initial fuzz targets * Bump a few dependencies. * Update badge link. * Bump versions. * Handle break labels like variables. * Move `Ctx` into `filter`, and handle bindings nicer during compilation. * Merge pull request #259 from 01mf02/obj-key-fmt * Comment. * Correct test. * Handle break labels like variables. * Correct printing of special Unicode characters in objects keys. * Include packaging status. * Read/write filter & input from/to URL search parameters. * Bump version to 2.1. * Replace `atty` by `is-terminal` and update a few dependencies. * Bump a few dependencies. * Shorten `--argjson` handling. * Update `wasm-bindgen` to address test failures on recent Rust version. * Give precise source of parse error. * Avoid type annotation. * Avoid allocation. * Reformat test. * Merge pull request #250 from wader/argjson * Merge pull request #252 from bluescreen303/lifetime-strictness * Document dependency on `serde_json` feature for main example (#251). * jaq-core/loader: be specific about input parameter for reader * Add --argjson support * Show how to include standard library. * Amazing brace. * Handle comparison between NaN and non-NaN values. * More cache restoration. * Only restore cache for playground. * Use closest matching cache as base for MSRV. * Reindent and use cache. * Try again for if. * Remove if. * Move if. * Use cache for tests. * Use cache for release. * Remove OS from cache key. * Try using a cache for MSRV checking. * Do not install own Rust toolchain when running checks. * Rename workflow. * Merge pull request #247 from simonrupf/32bit-build * Merge pull request #248 from 01mf02/nan-compat * Remove NaN difference. * Handle NaN like in jq, i.e. `nan < nan`. This should close #243. * Harden tests wrt NaN. * Apply the tested changes to the release pipeline. * Attempt to apply the new cross-compile actions to a release build. * Address warning when using `--no-default-features`. * Split workflows into check and tests. * Bump checkout action to v4. * Implement cross compile to validate i686 in addition to x86_64 tests. * Merge pull request #245 from simonrupf/32bit * Replace NUL by `"\0"` in @tsv, closes #246. * Changing test to pass on 32 bit architecture. * Update to macos-13 because macos-12 is deprecated. * Clippy. * Bump version to 2.0.1. * Merge branch 'main' of github.com:01mf02/jaq * Address compiler warning. * Actually implement `--from-file` (closes #244). * Merge pull request #242 from null-dev/patch-2 * Merge pull request #241 from null-dev/patch-1 * Fix --slurpfile flag * Fix --null-input flag * Update MSRV in README. * Linux download instructions. * Bump version to 2.0. * Update benchmark results. * Run `--run-tests` with stdin if no args given, else with last file. * Format. * Remove vanished differences between jq and jaq. * Merge branch 'main' of github.com:01mf02/jaq * Implement `--sort-keys` / `-S`. * Remove unused package from Lockfile. * Merge pull request #229 from wader/math-int-rem * Add reminder op for floats * Merge pull request #239 from 01mf02/general-fold * Remove outdated comment. * Unify reduce/foreach logic and turn panic into error. * Renaming & clippy. * Merge pull request #238 from 01mf02/handmade-cli * Merge branch 'main' into handmade-cli * Comments. * Disable default features for dependencies of jaq-json. * Merge branch 'main' of github.com:01mf02/jaq * Merge pull request #237 from tranzystorekk/foldhash * Remove final flush after locking, as it should not be necessary. * Test `--raw-output`. * Test `--join-output`. * Flush writer after each value when using `--join-output`. * Generalise folding. * Clippy. * Correct error message. * Make a CLI by hand. * Make `--join-output` imply `--raw-output`, like in jq. * Correct name for `halt_error(5)`. * perf: switch jaq-json hasher to foldhash * Bump version to 2.0.0-epsilon. * More updates. * More package updates. * Update a few dependencies. * Make it compile with MSRV again. * Improve error message for folding with wrong number of arguments. * Simplify fold-parsing code. * Make all functions in jaq-std strict! * Potentially make `first` a little faster. * Do not export `ow!` and `once_with` in jaq-std. * Make many jaq-json builtins more strict. * Evaluate `min`, `max`, and `last` more strictly. * Benchmark for `last`. * Implement `last/1` natively. * Remove note about jq 1.6. * Add four new benchmarks and update numbers. * Do not panic on invalid UTF-8. * Interpret search paths via -L as relative to working directory (#228) * Enable jaq to deal with non-UTF-8 file paths (on the command-line). (#234) * Capitalisation. * Make third argument of `foreach` tail-recursive. * Interpret `--args` as flag like in jq. * Correction: use `-L` instead of `-l` for library path. * Permit `--library-path` as long form for `-L`. * Make handling of `-f` more flexible and similar to jq. * Merge pull request #226 from 01mf02/flat-map-then-strict * Rename and document `next_if_one`. * Show necessity of special case for `limit(0; f)`. * Make `flat_map_then` strict. * Do not run filter when `limit` is called with `0`. * Bump version to 2.0.0-delta. * Merge pull request #224 from 01mf02/args * Document `--` behaviour for `--args`. * Filter out only the first `--` after `--args` to improve compatibility. * Support `--args`. * Make it compile with MSRV (1.65) again. * Refactor comment escaping. * Implement multi-line comments when escaped with backslash. * Correct tail recursion & improve compiler complexity (#223) * jq playground now also processes data locally. * More robust character offset calculation for regexes; closes #221. * Merge pull request #222 from wader/math-gamma * Add missing gamma/0 math function * Raise MSRV for jaq-json as well. * Replace `regex` by `regex-lite`. * Test that destructuring preserves original input. * Run RHS of pattern binding with original input. * Test for laziness. * Refactoring. * Save a clone when `l |= f` returns single output in `l, r |= f`. * Document pattern binding. * Correct jaq version in benchmark results. * Bump version to 2.0.0-gamma. * Merge pull request #220 from 01mf02/lazy-concat * Actually round floats to integers, thanks to @null-dev (#219). * Do not use `once_with` in core anymore. * Evaluate RHS of `,` (concatenation) lazily. * Patterns in variable bindings. (#218) * Add new example showing exponential time usage for jq/gojq. * Remove version from dev-dependencies to allow publishing. * Hide a few methods. * Remove more outdated criticism of jq 1.6. * jaq now expands `~` and `$ORIGIN` in module paths. * Specify `foreach/3`. * Remove paragraph about old jq bug. * Update implemented features. * Generate valid JSON. * Generate valid JSON in `bench.sh`. * Update benchmark. * Merge pull request #215 from wader/less-jq-surprises * Clippy. * Bump version to 2.0.0-beta. * Implement `skip` via `foreach/3`. * Comment. * Make `Error::path_expr` public again; it is used in a test. * Comment. * Remove `run_if_ok`. * Privatise. * Privatise. * Comment. * Renaming. * Remove `for/2` and `for/3`. * Implement `foreach/3` and `for/3`. * Demand that `ValT` must implement `Default`. * Implement `skip/2`. * Omit clones in `.[f] |= g`. * Short-circuit on errors in `try ... catch ...`. * Comment. * Implement `stderr` via `log`. * Make `debug` have an effect in jaq-play. * Make `error` more compact. * Print values rawly to stderr. * Implement `stderr`. * Implement `debug/1`. * Reimplement `debug/0`. * Define `error(f)` by `error` instead of other way around. * Write "DEBUG:" instead of "DEBUG". * Restore microsecond precision for date filters. * Truncate timestamps to milliseconds; see #214. * Update on surprising jq behaviours * Format debug messages such as `["DEBUG", [1, 2, 3]]`. * Format. * Do not allocate memory when string is already trimmed. * Merge pull request #212 from wader/trim * Add `trim/0`, `ltrim/0` and `rtrim/0` * Omit version from released files (#211). * Remove `jaq_json::Val::arr`. * Expand `~` and `$ORIGIN` at the start of search paths. * Properly escape characters, including \u200b (closes #209). * 100,000 definitions benchmark. * Reenable dev dependencies, bump to alpha.1. * Temporarily disable dev dependency on jaq-json to publish it. * Add include/import tests. * Correct interpretation of search path array. * Reinstate version number for jaq-play. * Bump version numbers. * Remove jaq-play version. * Tests for alternation update. * Implement `l // r |= f`. * Add `add/1`, closing #206. * Document new features. * New test for label-break. * Consider metadata during file loading (#207) * Merge pull request #205 from thecaralice/ipa * docs: Add IPA pronunciation * Implement `abs`. * Check jaq-json for compatibility with Rust 1.63 * Move JSON-specific filters from jaq-std into jaq-json. * Format. * Implement `halt` and `halt_error`. * Make `error` work on LHS of assignments. * Support import/include directives with trailing metadata. * Reorganisation & new error type (#204) * New native filter & exception API (#203) * Simplify. * Store terms and funs in compiler directly in lookup table. * Shorten. * Rewrite compiler (#202) * jaq-parse is not maintained anymore. * Remove x86_64-pc-windows-gnu target. ++++ kmod: - kmod-testsuite * BuildIgnore pesign-obs-integration (new runtime requirement of kernel-default-devel): we don't need it for the kmod testsuite, and it also breaks the build as we aren't producting any binaries. (bsc#1248108) ++++ libgnome-games-support: - Update to version 2.0.2: + This library is becoming a copylib! The master branch will no longer have releases. This 2.0.2 release might well be the last. + Bugs fixed: - High score name reverts to the user's real name - Circular ref between Context and Context.category_request ++++ mdbtools: - update to 1.0.1: * Add index and primary key output to the sqlite schema writer backend * Make DSN and DBQ extraction from connection string case insensitive * Change mapping of MDB_DOUBLE for MySQL from float to double * Add support for SQLGetData converting floating point types * memory handling correctness fixes and other developer visible fixes - spec file changes: * remove unneeded bootstrapping and unneeded build dependencies, this should fix all architectures and ports for Tumbleweed * drop non-existent configure switches ++++ libmseed: - update to 3.1.7: * Avoid fatal errors when v2 record blockettes contain invalid time stamps. When invalid SEED "btime" values * Limit float point values in extra headers to single precision to avoid unrealistically high precision values in the output ++++ libtorrent: - Update to release 0.15.6 * Strict checking of d.views push_back arguments. * Invert color of focus ui element. * Use getaddrinfo for numeric hostname lookups in UdnsResolver. ++++ libunibreak: - Update to 6.1: * Optimize the size of Unicode data - includes changes from 6.0: * Add East Asian Width support and improve line breaking algorithm * Add Indic Conjunct Break support and improve grapheme breaking algorithm * Update the data (except line breaking) to conform to Unicode 15.1 - drop libunibreak-include-test-data.patch ++++ liburing: - update to 2.11: * portability and compiler fixes * Fixes for io_uring_queue_init_mem() * Add helpers for ring sizes required - includes changes from 2.10: * fix io_uring_setup() parameter name mismatch * syscall: update io_uring_enter2() signature * documentation updates - drop 923961c.patch ++++ neochat: - Add -DQT_QML_NO_CACHEGEN:BOOL=TRUE to the build parameters to make build reproducible (boo#1248369) ++++ nodejs-electron: - Update to 37.3.1 (bsc#1248464) * Chromium 138.0.7204.235 * Node 22.18.0 * V8 13.8 * Added scriptURL property to ServiceWorkerMain. * Added a CSS rule for smooth corners. * Utility Process unhandled rejection behavior change * process.exit() kills utility process synchronously * WebUSB and WebSerial Blocklist Support * Removed: null value for session property in ProtocolResponse * BrowserWindow.IsVisibleOnAllWorkspaces() on Linux * see https://www.electronjs.org/blog/electron-37-0 and https://github.com/electron/electron/releases/tag/v37.0.0 for more - Leap 15.6: use bundled aom * drop aom3.10-AV1E_SET_MAX_CONSEC_FRAME_DROP_MS_CBR.patch * drop aom3.10-AV1E_SET_AUTO_TILES.patch * drop webrtc-aom3.8-AV1E_SET_MAX_CONSEC_FRAME_DROP_CBR.patch * drop webrtc-aom3.8-AV1E_SET_MAX_CONSEC_FRAME_DROP_CBR-2.patch - Fedora <=42: use bundled llhttp - Fedora: use bundled simdutf - Merge MakeSbixTypeface-null-pointer-call.patch into chromium-130-fontations.patch' - drop no longer needed patches * build-without-speech-service.patch * content_browser_client-incomplete-WebUIController.patch * css_shape_value-constructor.patch * disable-devtools-tests.patch * distributed_point_functions-aes_128_fixed_key_hash-missing-StrCat.patch * distributed_point_functions-evaluate_prg_hwy-signature.patch * electron-13-blink-gcc-ambiguous-nodestructor.patch * exception_state-constexpr-initializer.patch * extensions-common-assert.patch * fix-building-with-pipewire-1.3.82.patch * fix-build-without-pdf.patch * fix-build-without-video-effects.patch * html_permission_element_strings_map-reproducible.patch * MakeSbixTypeface-null-pointer-call.patch * media_session_uma_helper-missing-optional.patch * node-llhttp9.3.patch * object_paint_properties-explicit-specialization-in-non-namespace-scope.patch * perfetto-ThreadTrack-Current-null-dereference.patch * picture_in_picture_window_manager_uma_helper-missing-optional.patch * plugin_utils-build-without-electron_extensions.patch * python3.14-nodedownload-FancyURLopener.patch * raw_ptr-fpermissive.patch * resource_response-Wchanges-meaning.patch * resource-Wchanges-meaning.patch * string-hasher-flax-vector-conversions.patch * string_truncator-convert.patch * style_scope-unqualified-To.patch * system-simdutf.patch * to_vector-std-projected-gcc119888.patch * unexportable_key_service_impl-Wlto-type-mismatch.patch * xml_document_parser-Wmissing-template-keyword.patch - Conditionally revert upstream changes to fix build on 15.6 * ffmpeg-4-AV_PROFILE.patch * node-cares-1.21-4.patch * node-nghttp-1.50.patch * v8-highway-1.1.patch - Add patches to fix build errors * angle-BlobCache-Success.patch * llhttp-lax-vector-conversions.patch * masked_domain_list-flatbuffers.patch * node-version-ck.patch * partition_alloc-strict-aliasing.patch * remove-probabilistic-token-which-uses-private-join-and-compute.patch * system-dragonbox.patch - Add patches that should be upstreamed * ANNOTATE_CONTIGUOUS_CONTAINER-Wodr.patch * event_record-optional-initializer.patch * identity_request_account-incomplete-IdentityProviderData.patch * json_to_struct-fixed_flat_map-conflicting-declaration.patch * lock_impl_posix-pthread_mutexattr_setprotocol-conflicting.patch * node-kParentNodeTag-constexpr-initializer.patch * offscreen_canvas-incomplete-LayoutLocale.patch * pickle_traits-kIndexSequence-constexpr-initializer.patch * picture_in_picture_events_info-string-constexpr.patch * sandboxed_vfs_file_impl-missing-memset.patch * v8-simd-flax-vector-conversions.patch * webgl_rendering_context_webgpu_base-incomplete-StaticBitmapImage.patch * webrtc-138-Wchanges-meaning.patch * xr_webgl_swap_chain-incomplete-StaticBitmapImage.patch ++++ python-voluptuous-serialize: - Update to version 2.7.0 * Add type annotations (#160) @farmio * Consistently mark required fields of mapping schemas (#159) @farmio * Check for nested mapping schemas raise properly (#155) @farmio * Add tests for unsupported validators (#154) @farmio * Improve README example (#153) @farmio * Fix TypeError in convert function when schema is not a class (#140) @philippwaller * Improve error handling for unsupported object (#152) @farmio * Remove support for Python 3.8 (#146) @MartinHjelmare - updated source link ++++ yt-dlp: - Update to release 2025.08.22 * cookies: Fix --cookies-from-browser with Firefox 142+ ++++ rtorrent: - Update to release 0.15.6 * Use getaddrinfo for numeric hostname lookups in UdnsResolver. ++++ wine: - Use objdump and objcopy instead of the required xxx-w64-mingw32 host variants to avoid build dependencies on mingxx-cross-yy-utils - Generation of 32-bit and 64-bit debug symbol packages for Windows binaries combined for simplicity ++++ wine-staging: - Use objdump and objcopy instead of the required xxx-w64-mingw32 host variants to avoid build dependencies on mingxx-cross-yy-utils - Generation of 32-bit and 64-bit debug symbol packages for Windows binaries combined for simplicity ++++ wine-staging-wow64: - Use objdump and objcopy instead of the required xxx-w64-mingw32 host variants to avoid build dependencies on mingxx-cross-yy-utils - Generation of 32-bit and 64-bit debug symbol packages for Windows binaries combined for simplicity ++++ wine-wow64: - Use objdump and objcopy instead of the required xxx-w64-mingw32 host variants to avoid build dependencies on mingxx-cross-yy-utils - Generation of 32-bit and 64-bit debug symbol packages for Windows binaries combined for simplicity ------------------------------------------------------------------ ------------------ 2025-8-22 - Aug 22 2025 ------------------- ------------------------------------------------------------------ ++++ Botan: - Bump to Botan 3.9.0 * Add SHA-1 implementation using AVX2/BMI2 (GH #4852) * Add Camellia implementation using GFNI/AVX2 (GH #4848) * Add SHACAL2 implementation using AVX512 (GH #4878) * The eFrodoKEM TLS 1.3 ciphersuites have changed the suite code to match changes in OQS. (GH #4900) * Add support for TLS 1.2 NULL cipher suites. These suites are disabled in the build by default, enable tls_null module to use. (GH #4776) * Add support for X.509 extensions from RFC 3779 (GH #4699 #4883 #4884 #4886) * Elliptic curve improvements (GH #4841 #4934 #4935 #4937 #4949 $4953 #4991) * Add EC_Scalar::hash following RFC 9380’s hash_to_field (GH #4950) * Modify the OID lookup system to use a static switch for builtin OIDs. (GH #4896 #4888) * Optimizations for X448 and Ed448 (GH #5037) * Modify BOTAN_CLEAR_CPUID so that clearing ssse3 also disables AVX2/AVX512 (GH #4853) * Remove various internal references to “EMSA”, an obsolete term used for RSA signature padding that originates from IEEE 1363. (GH #5008 #5024) For full release notes, see: https://botan.randombit.net/news.html#version-3-9-0-2025-08-05 ++++ Radicale: - Set "radicale" as the syslog identifier (replacing the generic "python3") when started via systemd - Update to 3.5.5 * Improve: [auth] ldap: do not read server info by bind to avoid needless network traffic * Improve: add details about platform and effective user on startup * Improve: display owner+permissions on directories on startup, extend error message in case of missing permissions * Improve: add options [logging] trace_on_debug and trace_filter for supporting trace logging * Improve: catch items having tzinfo only on dtstart or dtend set for whatever reason, overtake tzinfo from the other one * Improve: conditional log level for base_prefix strip action depending on auth and web type * Fix: [storage] broken support of 'folder_umask' * Fix: logging ignores not retrievable get_native_id if not supported by OS * Fix: report with enabled expand honors now provided filter proper * Fix: catch case where getpwuid is not returning a username * Fix: add support for query without comp-type * Fix: expanded event with dates are missing VALUE=DATE * Fix: storage hook path now added to DELETE, MKCOL, MKCALENDAR, MOVE, and PROPPATCH * Feature: add hook for server-side e-mail notification * Add: [hook] dryrun: option to disable real hook action for testing, add tests for email+rabbitmq * Add: storage hook placeholder now supports "request" and "to_path" (MOVE only) ++++ ansible-lint: - update to 25.8.2: * Bugfixes - Make rule deprecated-local-action preserve module parameters (#4733) @koalajoe23 - Fix Jinja template rendering error when concatenating _AnsibleTaggedStr with list (#4737) @anusshukla - Update supported Ubuntu platforms (#4727) @mcdonnnj - Update deps (#4734) @cidrblock ++++ caddy: - Update to version 2.10.1: * go.mod: Upgrade CertMagic to v0.24.0 * caddyhttp: use the new http.Protocols to handle h1, h2 and h2c requests (#6961) * fileserver: set Range header for precompressed static files to force Content Length header to appear (#7042) * fileserver: Add a few doc lines about Etag file content (#7173) * ci: set proper build tags in golangci and minor cleanup (#7183) * reverse_proxy: use the new KeepAliveConfig to set probe interval (#7157) * http: clean up listeners if some of the listeners fail to bind (#7176) * http: disable keepalive when KeepAliveInterval is negative (#7158) * use a more modern writing style to simplify code (#7182) * caddyhttp: refactor to use reflect.TypeFor (#7187) * chore: bump Go to v1.25 (#7184) * caddyhttp: Free up quic listener when stopping (#7177) * caddytls: fix regression in external certificate manager support (#7179) * chore: fix inconsistent function name in comment (#7174) * bcrypt: wrong cost flag name (#7168) * bcrypt: add cost parameter to hash-password (#7149) * cmd: Allow `caddy adapt` to read from stdin (#7163) * build(deps): bump the all-updates group across 1 directory with 17 updates (#7155) * Ignore irrelevant linter warning * caddytls: Improve ECH error logging (close #7152) * httpcaddyfile: Fix generated config related to ACME global options * core: Use KeepAliveConfig to pass keepalive_interval to listener's accepted sockets (#7151) * build(deps): bump the actions-deps group with 6 updates (#7142) * Add test for 5b727bde2992e7cb9987208453db42ae6e1c6e1e * go.mod: Upgrade dependencies * httpcaddyfile: Allow naked acme_dns if dns is set (fix #7091) * core: Save app provisioning errors with context (#7070) * ci: reduce dependabot spam (#7078) * refactor: use slices.Equal to simplify code (#7141) * chore: fix minor issue in comment (#7140) * update quic-go to v0.54.0 (#7138) * chore: fix dead link (#7136) * fileserver: denote license for embedded JavaScript for LibreJS (#7127) * headers: Support placeholders in replacement search patterns (#7117) * chore: fix function in comment (#7121) * reverseproxy: validate versions in http transport (#7112) * chore: fix struct name in comment (#7114) * httpcaddyfile: Validates TLS DNS challenge options (#7099) * docs: fix some minor issues in the comments (#7101) * refactor: replace HasPrefix+TrimPrefix with CutPrefix (#7095) * go.mod: update quic-go to v0.53.0 (#7094) * fileserver: Add sort buttons in grid mode (#7089) * Use the built-in max/min to simplify the code (#7081) * chore: apply security best practices for CI (#7066) * core: Clean up new config if it failed to run (#7068) * ci: add `{base,head}-ref` to dep review check (#7064) * ci: add dep review, OSSF scorecard actions (#7063) * cmd: fix `Commands` function not returning all registered commands (#7059) * Update SECURITY.md * build(deps): bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 (#7058) * httpcaddyfile: reject blocks in log_skip directive (#7056) * caddytls: wire up client_auth leaf verifier Caddyfile (#6772) * httpcaddyfile: Prevent error handler from overriding sub-handler matchers (#6999) * core: Check for nil event origin (#7047) * build(deps): bump golangci/golangci-lint-action from 6 to 8 (#7044) * chore: upgrade .golangci.yml and workflow to v2 (#6924) * Use slices.Contains to simplify code (#7039) * Use maps.Copy for simpler map handling (#7009) * caddyhttp: Compare paths w/o wildcard if prefixes differ (#7015) * fileserver: map invalid path errors to fs.ErrInvalid, and return 400 for any invalid path errors. (close #7008) (#7017) * intercept: implement Unwrap for interceptedResponseHandler (#7016) * acme_server: fix policy parsing in caddyfile (#7006) * core: Replace admin server later in provisionContext (#7004) * log: default logger should respect `{in,ex}clude` (#6995) * admin: Make sure that any admin routers are provisioned when local/re… (#6997) * reverseproxy: Use DialTLSContext if ServerName has placeholder (#6955) * fileserver: Add support for .avif image format (#6988) * fix: Remove nil arg from zapslog.NewHandler call (#6984) * caddytls: Set local_ip, not remote_ip (#6952) * reverseproxy: reference correct field name in LoadModule (#6978) * go.mod: update quic-go to v0.51.0 (#6972) - Packaging improvements: * Update to BuildRequires: golang(API) >= 1.25 matching go.mod ++++ cheat: - Packaging improvements: * Drop Requires: golang-packaging. The recommended Go toolchain dependency expression is BuildRequires: golang(API) >= 1.x or optionally the metapackage BuildRequires: go * Use BuildRequires: golang(API) >= 1.19 matching go.mod * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Remove go build -o output binary location and name. Default binary has the same name as package of func main() and is placed in the top level of the build directory. * Add basic %check to execute binary --help ++++ chirp: - Update to version 20250822: * Various models: Remove verbose debug logging and use trace instead * Add generic serial tracing for debug * Allow hexprint with variable line length ++++ crmsh: - Update to version 5.0.0+20250822.b447ae3f: * Dev: run-functional-tests: Add -i option for podman exec command to support interactive mode ++++ digger-cli: - Update to version 0.6.119: * paginate repo list, bug fix for issue #1941 by @jamesboi951 in [#2093] * remove cli-cache-step by @motatoes in #2097 * document caching strategies in digger by @motatoes in #2098 * Digger UI bug fix by @jamesboi951 in #2103 * remove forced lower case by @breardon2011 in #2104 * report no projects impacted when REPORT_BEFORE_LOADING_CONFIG is set by @motatoes in #2099 * traverse nested directories by @breardon2011 in #2105 ++++ dovecot24: - Allow for %is_opensuse to be unset, following up to https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485). ++++ freerdp: - Update to 3.17.0: * [client,sdl2] fix build with webview (#11685) * [core,nla] use wcslen for password length (#11687) * Clear channel error prior to call channel init event proc (#11688) * Warn args (#11689) * [client,common] fix -mouse-motion (#11690) * [core,proxy] fix IPv4 and IPv6 length (#11692) * Regression fix2 (#11696) * Log fixes (#11693) * [common,settings] fix int casts (#11699) * [core,connection] fix log level of several messages (#11697) * [client,sdl] print current video driver (#11701) * [crypto,tls] print big warning for /cert:ignore (#11704) * [client,desktop] fix StartupWMClass setting (#11708) * [cmake] unify version creation (#11711) * [common,settings] force reallocation on caps copy (#11715) * [manpages] Add example of keyboard remapping (#11718) * Some fixes in Negotiate and NLA (#11722) * [client,x11] fix clipboard issues (#11724) * kerberos: do various tries for TGT retrieval in u2u (#11723) * Cmdline escape strings (#11735) * [winpr,utils] do not log command line arguments (#11736) * [api,doc] Add stylesheed for doxygen (#11738) * [core,proxy] fix BIO read methods (#11739) * [client,common] fix sso_mib_get_access_token return value in error case (#11741) * [crypto,tls] do not use context->settings->instance (#11749) * winpr: re-introduce the credentials module (#11734) * [winpr,timezone] ensure thread-safe initialization (#11754) * core/redirection: Ensure stream has enough space for the certificate (#11762) * [client,common] do not log success (#11766) * Clean up bugs exposed on systems with high core counts (#11761) * [cmake] add installWithRPATH (#11747) * [clang-tidy] fix various warnings (#11769) * Wlog improve type checks (#11774) * [client,common] fix tenantid command line parsing (#11779) * Proxy module static and shared linking support (#11768) * LoadLibrary Null fix (#11786) * [client,common] add freerdp_client_populate_settings_from_rdp_file_un… (#11780) * Fullchain support (#11787) * [client,x11] ignore floatbar events (#11771) * [winpr,credentials] prefer utf-8 over utf-16-LE #11790 * [proxy,modules] ignore bitmap-filter skip remaining #11789 ++++ gnome-chess: - Update to version 49.0: + Bugs fixed: - Inform engines of time remaining - Bug: "The computer player is confused" when engine takes too long to move - Remove "Show Move Hints" option - Don't create window in startup phase - Fixed several additional minor bugs + Updated translations. ++++ java-11-openjdk: - jdk-8354941.patch: JDK-8354941: Build failure with glibc 2.42 due to uabs() name collision ++++ java-17-openjdk: - jdk-8354941.patch: JDK-8354941: Build failure with glibc 2.42 due to uabs() name collision ++++ java-24-openjdk: - jdk-8354941.patch: JDK-8354941: Build failure with glibc 2.42 due to uabs() name collision ++++ jetty-alpn: - Upgrade to version 9.4.58.v20250814 * Changes + #13461 - 9.4.x HTTP2Session cleanups - Addresses CVE-2025-5115, bsc#1244252 + #13261 - Improve handling of failed HTTP/2 requests + #461 - Move ServletTester to the test source directory ++++ jetty-minimal: - Upgrade to version 9.4.58.v20250814 * Changes + #13461 - 9.4.x HTTP2Session cleanups - Addresses CVE-2025-5115, bsc#1244252 + #13261 - Improve handling of failed HTTP/2 requests + #461 - Move ServletTester to the test source directory ++++ jetty-http2: - Upgrade to version 9.4.58.v20250814 * Changes + #13461 - 9.4.x HTTP2Session cleanups - Addresses CVE-2025-5115, bsc#1244252 + #13261 - Improve handling of failed HTTP/2 requests + #461 - Move ServletTester to the test source directory ++++ jetty-websocket: - Upgrade to version 9.4.58.v20250814 * Changes + #13461 - 9.4.x HTTP2Session cleanups - Addresses CVE-2025-5115, bsc#1244252 + #13261 - Improve handling of failed HTTP/2 requests + #461 - Move ServletTester to the test source directory ++++ jetty-unixsocket: - Upgrade to version 9.4.58.v20250814 * Changes + #13461 - 9.4.x HTTP2Session cleanups - Addresses CVE-2025-5115, bsc#1244252 + #13261 - Improve handling of failed HTTP/2 requests + #461 - Move ServletTester to the test source directory ++++ kanidm: - Update to version 1.7.3~git0.10847190e: * Release 1.7.3 * Make it clearer why acceptor isnt available (#3812) * Minor: reduce logging verbosity during debug (#3810) * Handle IP addresses in replication SAN field (#3811) * Update to use the codec properly (#3807) ++++ kdump: - upgrade to version 2.1.6 * drop broken option KDUMP_NETCONFIG="" from manpage * prevent NetworkManager from overwriting resolv.conf (bsc#1247848) * fix KDUMP_NETCONFIG=auto for NetworkManager (bsc#1247848) * exclude kernel.panic_on_warn sysctl (bsc#1247355) ++++ kernel-firmware-intel: - Update to version 20250821 (git commit c88f7d064603): * intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 ++++ kernel-firmware-sound: - Update to version 20250821 (git commit c88f7d064603): * cirrus: cs35l41: Move entries to correct driver section in WHENCE * cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops ++++ kubectl-gather: - Update to version 0.10.1: * Handle non existent dirs in ListResources by @parikshithb in [#111] * Cleanups by @nirs in #112 ++++ mozilla-nss: - update to NSS 3.115.1 * bmo#1982742 - restore support for finding certificates by decoded serial number. * bmo#1984165 - avoid CKR_BUFFER_TO_SMALL error in trust lookups. ++++ texlive: - Allow for %is_opensuse to be unset, following up to https://src.suse.de/products/SLFO/pulls/204 (bsc#1248487). ++++ mozjs128: - Update to version 128.14.0: + CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component + CVE-2025-9181: Uninitialized memory in the JavaScript Engine component + CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 ++++ profanity: - Update to 0.15.1: * Add iso8601 as valid time format /time all set iso8601 instead of manual specification * Fix ignoring of roster pushes (#2035) * Print location of decrypted files (#2041) * Fix GPGME >= 2.0.0 compatibility issue (#2048) * Fix tests with gcc15 and uintptr_t (#2055) * Reduce noise in log files (#1911, #2060) * Cleanup, code improvement and memory fixes (#2033, #2041, #2053) * Improve documentation (#2040, 18f157b, #2058) - Drop: * profanity-0.15.0-Fix-tests-with-gcc15-uintptr_t.patch * profanity-0.15.0-gpgme.patch ++++ libtpms: - Allow for %is_opensuse to be unset, following up to https://src.suse.de/products/SLFO/pulls/204 (bsc#1248486). ++++ webrtc-audio-processing: - Add 60.patch: Fix build with abseil-cpp 202508 (boo#1248460). ++++ xfdashboard: - Update to 1.1.0 * Update README after switchover to meson * build: Fix -Wunused-but-set-variable * x11: Set wnck client type at the very first call * build: Fix -Werror=undef * Add meson build * build: Automate copyright year management * build: Unbreak example-search-provider * build: Install version.h * build: Drop dead code with glib 2.66 * build: Require clutter 1.24.0 * build: Require xfce 4.16.0 * build: Require gtk 3.22.0 * Replace deprecated exo with libxfce4ui 4.21.0 * I18n: Update po/LINGUAS list * I18n: Update po/LINGUAS list * I18n: Update po/LINGUAS list * I18n: Update po/LINGUAS list * xfdashboard: Fix translation in g_option_context_set_summary * build: Fix gettext warning about empty string * build: Use XDT_VERSION_INIT and get rid of configure.ac.in * build: Workaround *.theme translation * build: Switch from intltool to gettext * build: Fix deprecation warnings from glib * build: Fix redefined glib macros * build: Add new debug option to AS_CASE * Raise required minimum version of Glib 2.66 due to some functions of Glib used without #ifdef's and alternatives * Add icons at missing sizes, clean up SVG metadata * Remove ENABLE_NLS ifdefs * Post-release version bump to 1.1.0 * Translation Updates - Regenerate xfdashboard-desktop-category.diff and xfdashboard-desktopfile-without-binary.diff - Add xfdashboard-relax-some-package-versions.diff - Rewrite the "tee -a" construct to avoid compressed binary data being sent to stdout and cluttering the output - Add xfdashboard-rpmlintrc to avoid an unnecessary complex package name for libxdashboard0 - Add "-lm" to CFLAGS on Leap 15.6, because libxfdashboard0.so doesn't get automatically linked with libm. ++++ lychee: - Update to version 0.20.0: * chore: release v0.20.0 (#1808) * Bump dependencies (#1811) * Skip binary and invalid UTF-8 inputs (#1810) * Bump actions/checkout from 4 to 5 in the dependencies group (#1804) * feat: make wikilink extraction and checking opt-in (#1803) * Refactor input dumping and path retrieval with extension filtering (#1648) * Replace URL to fix GitHub CI (#1800) * Use a HashSet to store inputs and avoid duplicates (#1781) * add `--index-files` flag, and turn off index file checking by default (#1777) * snap: enable proper permissions (#1796) * Cleanup input example (#1792) * FIx missing identifier in snap build action; add snap install to readme (#1793) * Fall back to `Cargo.toml` version for non-releases (if no git tags available) * Remove unnecessary condition for release builds on snap workflow * Add snap config and GitHub Action (#1786) * Fix clippy lints; refactor code slightly * tests: refactor `test_fragments` to clarify expected successes/fails (#1776) * Fix possible outputs of 'arch' command in Alpine Linux-based Dockerfile (#1778) * fix comment for `ErrorKind::InvalidFragment` (#1775) * Fix test * Revert to previous behaviour: linking to directories results in Status::Ok(StatusCode::OK) * Remove JSON output files even on test failures * Add regression test * Add support for 64-bit ARM binary (#1774) * Improve test * Make excluded_paths part of Collector instead of Input * Minor improvements * Make regex field in RegexFilter private * Add examples * Apply clippy suggestions * Test regex functionality in --exclude-path flag * Update flag description & clean up * Replace Vec with dedicated PathExcludes type * Unwrap option type * fix: do not check the fragment when http response err but accepted (#1763) * docs: add `fallback_extensions` to example config file (#1764) * feat: skip fragment checking for unsupported MIME types (#1744) * Replace unmaintained human-sort with numeric-sort (#1759) * feat: add 'user-content-' prefix to support github markdown fragment (#1750) * fix: treat a fragment in an empty directory as an error (#1756) * fix: resolve index file inside a directory (#1752) * Fix basic auth (#1748) * Update 'Users' section in the README * Add ProseKit to users * Migrate to Clippy 1.88 (#1749) * test: fix assertion in fragment checks * Replace unreliable API URL * docs: improve lychee.example.toml (lycheeverse#1699) (#1741) * display unsupported URLs (#1727) * fix: skip fragment check if website URL doesn't contain fragment (#1733) * Add xml schema found in xsd files to list of exclusions (#1735) * Fix docker tagging for release versions (#1738) ++++ mingw32-filesystem: - Update to version 20250822 - Add checks to shell scripts to see if host-specific executable files are present and report this as an error to avoid hidden problems (bsc#1248468) ++++ mingw64-filesystem: - Update to version 20250822 - Add checks to shell scripts to see if host-specific executable files are present and report this as an error to avoid hidden problems (bsc#1248468) ++++ nano: - GNU nano 8.6 * The GotoLine menu accepts the prefixes ++ and -- for jumping a number of lines forward or backward. * Anchors are not forgotten when a line number is given on the command line ++++ netty: - Upgrade to upstream version 4.1.124 * Fixes + MadeYouReset HTTP/2 DDoS vulnerability (CVE-2025-55163, bsc#1247991) + Fix NPE and AssertionErrors when many tasks are scheduled and cancelled + HTTP2: Http2ConnectionHandler should always use Http2ConnectionEncoder + Epoll: Correctly handle UDP packets with source port of 0 + Fix netty-common OSGi Import-Package header + MqttConnectPayload.toString() includes password - Modified patches: * 0001-Remove-optional-dep-Blockhound.patch * 0002-Remove-optional-dep-conscrypt.patch * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch * 0004-Disable-Brotli-and-ZStd-compression.patch + rediff ++++ octave: - Fix macro for building of octave-forge packages: + Avoid rebuild in install, use intermediate tarball from build step. Also fixes reproducible-build, as it removes a mktemp path from generated files (boo#1062303). - Fix macro for testing octave-forge packages: + Fix test detection due to incorect '%' quoting + Load build package before testing it + Include tests defined in binary sources ++++ octave-forge-communications: - Update to version 1.2.7: * Compatibility fixes for recent Octave versions and the upcoming Octave 10 * Bug fixes, Matlab compatibility, and extended functionality in: decode pamdemod pskdemod qamdemod pammod qammod - Add octave-forge-signal to build requires, needed by tests ++++ octave-forge-statistics: - Exclude tests requiring a graphical toolkit ++++ okteto: - Update to version 3.10.1: * DEV-1107: Initialize the divert deployer in the command struct for up and test commands (#4756) (#4757) ++++ partclone: - Update to 0.3.37: * fix exfat dirty output while output is stdout (issue #272) * Add some test scripts * remove obsolete INSTLIBDIR because fail-mbr.bin has been removed in 0.3.34 * remove commented out mv command * add partclone.apfs manpage to %files section * remove obsolete %{_datadir}/partclone from %files section - Changes in 0.3.36: * update btrfs to v6.14 - Changes in 0.3.34: * update btrfs to v 6.13 * fix btrfs compile issue * fix f2fs compile issue * remove fail-mbr * Check for byteswap.h existence for src/f2fs/f2fs_fs.h by @robert-scheck in #257 * Fix include path for f2fs by @blanktonio in #258 - Changes in 0.3.33: * fix f2fs sector size issue * Prevent use of run-time floating point math functions for compile-time integer constants by @blanktonio in #252 ntfstime.h uses the time.h, sys/stat.h, sys/time.h headers by @chewi in #254 * Conditionally run the reiser4 test by @chewi in #253 ++++ patterns-base: - clean up recommends: no longer recommend inexitsing packages: + ifplugd: Removed from Tumbleweed in January 2020 + providers: Removed from Tumbleweed in July 2017 + translation-update: Removed from Tumbleweed in July 2024 + openssh-askpass: removed in favor of the openssh internal provided askpass ++++ perl-Authen-SASL: - Remove perl-Authen-SASL-CVE-2025-40918.patch (fixed upstream) CVE-2025-40918 [bsc#1246623] - updated to 2.190.0 (2.1900) see /usr/share/doc/packages/perl-Authen-SASL/Changes ++++ perl-Crypt-CBC: - updated to 3.70.0 (3.07) see /usr/share/doc/packages/perl-Crypt-CBC/Changes 3.07 -- Sun Jul 27 11:49:54 ADT 2025 [Changes Since 3.04] - New maintainer - Fix CVE-2025-2814 by using Crypt::URandom - 3.05 Fixed bug involving manually-specified key not being used in some circumstances - Fix decryption of ciphertext created with 'header' => 'randomiv' - Fixed bug in which manually-specified key and -pkdf=>"none" was not having effect - Converted build process to Dist::Zilla - Miscellaneous minor Dist::Zilla relates changes [Detailed Change Log] - 74e3a10 Increment repo version - feb4b31 Rename vulnerabilities file add CVE-2025-2814 - 236c363 Update .gitignore - 4a39da8 Fix spelling error - 99d336a Automate version with Dist::Zilla - 89ac06d Convert build process to Dist::Zilla - 784d599 Fix CVE-2025-2814 by using Crypt::URandom to read random bytes - 81a8f77 Add test for github issue #7 - 40d0e13 Increment version - 160af60 Fix decryption of ciphertext created with 'header' => 'randomiv' - 524db90 Fixed bug in which manually-specified key and -pkdf=>"none" was not having effect 3.05 Thu 20 May 2021 12:00:18 PM EDT - Fixed bug involving manually-specified key not being used in some circumstances. ++++ perl-Devel-Cover: - updated to 1.510.0 (1.51) see /usr/share/doc/packages/perl-Devel-Cover/Changes 1.51 - 26 July 2025 - Test against 5.42.0 - Add nvim report to show coverage in neovim - Fix cover --outputdir option (Hannes Thorsell) (GH-358) ++++ perl-Devel-OverloadInfo: - updated to 0.8.0 (0.008) see /usr/share/doc/packages/perl-Devel-OverloadInfo/Changes 0.008 2025-08-11 17:09:58+01:00 Europe/London - Generate README.md in the repository - Move git repository to Codeberg ++++ perl-File-Finder: - updated to 1.10.0 (1.01) see /usr/share/doc/packages/perl-File-Finder/Changes 1.0.1 Thu Aug 21 10:00:00 2025 -0700 - Updated Changes file for 1.0.0 release. 1.0.0 Wed Aug 20 15:23:42 2025 -0700 - Added Windows compatibility fixes for user, group, nouser, nogroup, and ls methods. - Updated POD documentation. - Bumped version to 1.0.0. ++++ perl-Future-IO: - updated to 0.170.0 (0.17) see /usr/share/doc/packages/perl-Future-IO/Changes 0.17 2025-07-15 [CHANGES] * Added new `->send`, `->recv` and `->recvfrom` socket IO wrapping methods * Provide `->read` and `->write` as better names for what were named `->sysread` and `->syswrite` ++++ plymouth-theme-breeze6: - Add Requires: plymouth-plugin-script ++++ praat: - Update to version 6.4.41: * Faster computation of some formants (because of multithreading). * Removed a bug that caused Praat to crash on Sound: To Formant (robust). ++++ profanity-mini: - Update to 0.15.1: * Add iso8601 as valid time format /time all set iso8601 instead of manual specification * Fix ignoring of roster pushes (#2035) * Print location of decrypted files (#2041) * Fix GPGME >= 2.0.0 compatibility issue (#2048) * Fix tests with gcc15 and uintptr_t (#2055) * Reduce noise in log files (#1911, #2060) * Cleanup, code improvement and memory fixes (#2033, #2041, #2053) * Improve documentation (#2040, 18f157b, #2058) - Drop: * profanity-0.15.0-Fix-tests-with-gcc15-uintptr_t.patch * profanity-0.15.0-gpgme.patch ++++ python-pytest-ansible: - Update to version 25.8.0: * Maintenance - Bump actions/checkout from 4 to 5 (#491) @dependabot[bot] - chore: pre-commit autoupdate (#488) @pre-commit-ci[bot] - Bump the dependencies group across 1 directory with 26 updates (#492) @dependabot[bot] - Bump the dependencies group in /.config with 8 updates (#486) @dependabot[bot] - Bump the dependencies group in /.config with 2 updates (#484) @dependabot[bot] - chore: pre-commit autoupdate (#482) @pre-commit-ci[bot] ++++ python-libnacl: - Use BuildRequires: poetry-core to instead of BuildRequires: poetry ++++ python-mkdocs-material: - update to 9.6.18: * Updated Azerbaijani translations * Fixed last compat issues with minijinja, now 100% compatible ++++ python-preggy: - Add patch switch-to-pytest.patch: * Use pytest features now that nose features have been removed. ++++ python-ruff: - update to 0.12.10 * Preview features * [flake8-simplify] Implement fix for maxsplit without separator (SIM905) * [flake8-use-pathlib] Add fixes for PTH102 and PTH103 * Bug fixes * [isort] Handle multiple continuation lines after module docstring (I002) * [pyupgrade] Avoid reporting __future__ features as unnecessary when they are used (UP010) * [pyupgrade] Handle nested Optionals (UP045) * Rule changes * [pycodestyle] Make E731 fix unsafe instead of display-only for class assignments * [pyflakes] Add secondary annotation showing previous definition (F811) * Documentation * Fix description of global config file discovery strategy * Update outdated links to https://typing.python.org/en/latest/source/stubs.html * [flake8-annotations] Remove unused import in example (ANN401) ++++ python-uv: - update to 0.8.13 * Enhancements * Add --no-install-* arguments to uv add * Initialize Git prior to reading author in uv init * Add CUDA 129 to available torch backends * Update Pyodide to 0.28.2 * Preview features * Add an experimental uv format command * Allow version specifiers in extra-build-dependencies if match-runtime is explicitly false * Bug fixes * Add triton to torch-backend manifest * Avoid panicking when resolver returns stale distributions * Fix uv_build wheel hashes * Treat --upgrade-package on the command-line as overriding upgrade = false in configuration ++++ qt6-qtpbfimageformat: - Update to version 4.6 * Fixed bottom text-anchor rendering. * Fixed searching non-string sets in filters. ++++ rclone: - Update to version 1.71.0: * Version v1.71.0 * fs: tls: add --client-pass support for encrypted --client-key files * ftp: make TLS config default to global TLS config - Fixes #6671 * fshttp: return *Transport rather than http.RoundTripper from NewTransport * bisync: release from beta * bisync: fix markdown formatting issues flagged by linter in docs * bisync: fix --no-slow-hash settings on path2 * Add cui to contributors * docs: add code of conduct * lib/mmap: convert to using unsafe.Slice to avoid deprecated reflect.SliceHeader * build: bump golangci/golangci-lint-action from 6 to 8 * build: update golangci-lint configuration * build: ignore revive lint issue var-naming: avoid meaningless package names * build: fix lint issue: should omit type error from declaration * Revert "build: downgrade linter to use go1.24 until it is fixed for go1.25" * build: migrate golangci-lint configuration to v2 format * s3: add --s3-use-arn-region flag - fixes #8686 * Add Binbin Qian to contributors * Add Lucas Bremgartner to contributors * docs: add tips about outdated certificates * FAQ: specify the availability of SSL_CERT_* env vars * pikpak: add file name integrity check during upload * bisync: skip TestBisyncConcurrent on non-local * internetarchive: fix server side copy files with & * Revert "s3: set useAlreadyExists to false for Alibaba OSS" * Add huangnauh to contributors * smb: improve multithreaded upload performance using multiple connections * bisync: fix data races on tests * bisync: remove unused parameters * bisync: deglobalize to fix concurrent runs via rc - fixes #8675 * mount: fix identification of symlinks in directory listings * s3: fix Content-Type: aws-chunked causing upload errors with --metadata * config: fix problem reading pasted tokens over 4095 bytes * config: fix test failure on local machine with a config file * log: add log rotation to --log-file - fixes #2259 * accounting: Fix stats (speed=0 and eta=nil) when starting jobs via rc * docs: update overview table for oracle object storage * Add praveen-solanki-oracle to contributors * oracleobjectstorage: add read only metadata support - Fixes #8705 * doc: sync doesn't symlinks in dest without --link - Fixes #8749 * s3: sort providers in docs * s3: add docs for Exaba Object Storage * azureblob: fix double accounting for multipart uploads - fixes #8718 * pool: fix deadlock with --max-buffer-memory * azureblob: fix deadlock with --max-connections with InvalidBlockOrBlob errors * build: downgrade linter to use go1.24 until it is fixed for go1.25 * build: update all dependencies * build: update to go1.25 and make go1.24 the minimum required version * Add Timothy Jacobs to contributors * bisync: fix time.Local data race on tests - fixes #8272 * googlecloudstorage: fix rateLimitExceeded error on bisync tests * accounting: populate transfer snapshot with "what" value * build(deps): bump actions/checkout from 4 to 5 * build(deps): bump actions/download-artifact from 4 to 5 * googlecloudstorage: enable bisync integration tests * fstest: fix parsing of commas in -remotes * azurefiles: fix hash getting erased when modtime is set * bisync: disable --sftp-copy-is-hardlink on sftp tests * local: fix --copy-links on Windows when listing Junction points * operations: fix too many connections open when using --max-memory * pool: fix deadlock with --max-memory and multipart transfers * pool: unify memory between multipart and asyncreader to use one pool * docs: update links to rcloneui * docs: add MEGA S4 as a gold sponsor * about: fix potential overflow of about in various backends * box: fix about: cannot unmarshal number 1.0e+18 into Go struct field * oauthutil: fix nil pointer crash when started with expired token * rc: listremotes should send an empty array instead of nil * config: add error if RCLONE_CONFIG_PASS was supplied but didn't decrypt config * rc: add config/unlock to unlock the config file * ftp: allow insecure TLS ciphers - fixes #8701 * s3: set useAlreadyExists to false for Alibaba OSS * docs: update sponsors page * fs: allow global variables to be overriden or set on backend creation * fs: allow setting of --http_proxy from command line * tests: cloudinary: remove test ignore after merging fix from #8707 * Add Antonin Goude to contributors * Add Yu Xin to contributors * Add houance to contributors * Add Florent Vennetier to contributors * Add n4n5 to contributors * Add Albin Parou to contributors * Add liubingrun to contributors * sync: fix testLoggerVsLsf when backend only reads modtime * sync: fix testLoggerVsLsf checking wrong fs * docs: fix make opengraph tags absolute as not all sites understand relative * docs: update contributing guide regarding markdown documentation * build: add markdown linting to workflow * build: add markdownlint configuration * docs: minor format cleanup install.md * docs: fix markdownlint issue md049/emphasis-style * docs: fix markdownlint issue md036/no-emphasis-as-heading * docs: fix markdownlint issue md033/no-inline-html * docs: fix markdownlint issue md025/single-title * docs: fix markdownlint issue md041/first-line-heading * docs: fix markdownlint issue md001/heading-increment * docs: fix markdownlint issue md003/heading-style * docs: fix markdownlint issue md034/no-bare-urls * docs: fix markdownlint issue md010/no-hard-tabs * docs: fix markdownlint issue md013/line-length * docs: fix markdownlint issue md038/no-space-in-code * docs: fix markdownlint issue md040/fenced-code-language * docs: fix markdownlint issue md046/code-block-style * docs: fix markdownlint issue md037/no-space-in-emphasis * docs: fix markdownlint issue md059/descriptive-link-text * docs: fix markdownlint issues md007/ul-indent md004/ul-style * docs: fix markdownlint issue md012/no-multiple-blanks * docs: fix markdownlint issue md058/blanks-around-tables * docs: fix markdownlint issue md022/blanks-around-headings * docs: fix markdownlint issue md031/blanks-around-fences * docs: fix markdownlint issue md032/blanks-around-lists * docs: fix markdownlint issue md009/no-trailing-spaces * docs: fix markdownlint issue md014/commands-show-output * docs: fix markdownlint issues md007/ul-indent md004/ul-style (bin/update-authors.py) * docs: fix markdownlint issues md007/ul-indent md004/ul-style (authors.md) * docs: add opengraph tags for website social media previews * mount: note that bucket based remotes can use directory markers * pikpak: add docs for methods to clarify name collision handling and restrictions * pikpak: enhance Copy method to handle name collisions and improve error management * pikpak: enhance Move for better handling of error and name collision * accounting: fix incorrect stats with --transfers=1 - fixes #8670 * rc: fix `operations/check` ignoring `oneWay` parameter * s3: add OVHcloud Object Storage provider * docs: rc: fix description of how to read local config * build: limit check for edits of autogenerated files to only commits in a pull request * build: extend check for edits of autogenerated files to all commits in a pull request * smb: refresh Kerberos credentials when ccache file changes * s3: fix multipart upload and server side copy when using bucket policy SSE-C * backend/s3: Fix memory leak by cloning strings #8683 * purge: exit with a fatal error if filters are set on `rclone purge` * docs: Add Backblaze as a Platinum sponsor * Add Sam Pegg to contributors * googlephotos: added warning for Google Photos compatability-fixes #8672 * test: remove flakey TestChunkerChunk50bYandex: test * docs: Consolidate entries for Josh Soref in contributors * docs: remove dead link to example of writing a plugin * filescom: document that hashes need to be enabled - fixes #8674 * Add Sudipto Baral to contributors * docs: fix incorrect json syntax in sample output * docs: ignore author email piyushgarg80 * docs: fix header level for --dump option section * docs: use stringArray as parameter type * docs: use consistent markdown heading syntax * imagekit: remove server side Copy method as it was downloading and uploading * imagekit: don't low level retry uploads * imagekit: return correct error when attempting to upload zero length files * smb: add --smb-kerberos-ccache option to set kerberos ccache per smb backend * test: fix smb kerberos integration tests * Changelog updates from Version v1.70.3 * config: make parsing of duration options consistent * docs: cleanup usage * docs: break long lines * docs: add option value type to header where missing * docs: mention that identifiers in option values are case insensitive * docs: rewrite dump option examples * docs: use markdown inline code format for dump option headers that are real examples * docs: change spelling from server side to server-side * docs: cleanup header casing * docs: rename OSX to macOS * docs: fix list and code block issue * docs: consistent markdown list format * docs: split section with general description of options with that documenting actual main options * docs: improve description of option types * docs: use space instead of equal sign to separate option and value in headers * docs: use comma to separate short and long option format in headers * docs: remove use of uncommon parameter types * docs: remove use of parameter type FILE * docs: remove use of parameter type DIR * docs: remove use of parameter type CONFIG_FILE * docs: change use of parameter type N and NUMBER to int consistent with flags and cli help * docs: change use of parameter type TIME to Duration consistent with flags and cli help * docs: change use of parameter type BANDWIDTH_SPEC to BwTimetable consistent with flags and cli help * docs: change use of parameter type SIZE to SizeSuffix consistent with flags and cli help * docs: cleanup markdown header format * docs: explain separated list parameters * azureblob: fix server side copy error "requires exactly one scope" * test: remove and ignore failing integration tests * docs: explain the json log format in more detail * check: fix difference report (was reporting error counts) * serve sftp: add support for more hashes (crc32, sha256, blake3, xxh3, xxh128) * serve sftp: extract function refactoring for handling hashsum commands * sftp: add support for more hashes (crc32, sha256, blake3, xxh3, xxh128) * local: configurable supported hashes * hash: add support for BLAKE3, XXH3, XXH128 * vfs: make integration TestDirEntryModTimeInvalidation test more reliable * smb: skip non integration tests when doing integration tests * seafile: fix integration test errors by adding dot to encoding * linkbox: fix upload error "user upload file not exist" * build: remove integration tests which are too slow * march: fix deadlock when using --no-traverse - fixes #8656 * pikpak: improve error handling for missing links and unrecoverable 500s * pikpak: rewrite upload to bypass AWS S3 manager - fixes #8629 * test: fix TestSMBKerberos password expiring errors * Add Vikas Bhansali to contributors * Add Ross Smith II to contributors * azureblob,azurefiles: add support for client assertion based authentication * webdav: fix setting modtime to that of local object instead of remote * build: set default shell to bash in build.yml * docs: fix filescom/filelu link mixup * Add Davide Bizzarri to contributors * fix: b2 versionAt read metadata * test: make TestWebdavInfiniteScale startup more reliable * test_all: add _connect_delay for slow starting servers * docs: update link for filescom * test_all: make TestWebdav InfiniteScale integration tests run * test_all: make SMB with Kerberos integration tests run properly * test_all: allow an env parameter to set environment variables * Changelog updates from Version v1.70.2 * Add Ali Zein Yousuf to contributors * Add $@M@RTH_ to contributors * docs: update client ID instructions to current Azure AD portal - fixes #8027 * s3: add Zata provider * pacer: fix nil pointer deref in RetryError - fixes #8077 * docs: Remove Warp as a sponsor * docs: add files.com as a Gold sponsor * docs: add links to SecureBuild docker image * Add curlwget to contributors * convmv: fix moving to unicode-equivalent name - fixes #8634 * transform: add truncate_keep_extension and truncate_bytes * convmv: make --dry-run logs less noisy * sync: avoid copying dir metadata to itself * docs: fix some function names in comments * combine: fix directory not found errors with ListP interface - Fixes #8627 * local: fix --skip-links on Windows when skipping Junction points * Add Marvin Rösch to contributors * build: bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2 to fix GHSA-vrw8-fxc6-2r93 * copy,copyto,move,moveto: implement logger flags to store result of sync * log: fix deadlock when using systemd logging - fixes #8621 * docs: googlephotos: detail how to make your own client_id - fixes #8622 * Add necaran to contributors * mega: fix tls handshake failure - fixes #8565 * Changelog updates from Version v1.70.1 * Add jinjingroad to contributors * docs: DOI grammar error * docs: lib/transform: cleanup formatting * lib/transform: avoid empty charmap entry * chore: fix function name * convmv: fix spurious "error running command echo" on Windows * docs: client-credentials is not support by all backends * Start v1.71.0-DEV development ++++ remmina: - Update to 1.4.41: * [REM-3321] Update keyboard mapping !2646 (merged) @myheroyuki * [REM-3276] Fix segfault that could happen when attempting to save a connection profile !2649 (merged) @myheroyuki * [REM-3342] Add ifdef to allow compilation without libssh !2650 (merged) @myheroyuki * [REM-3343] Add environment variable to prevent openssl config issue !2651 (merged) @myheroyuki * [REM-3346] Update snap to latest FreeRDP version !2652 (merged) @myheroyuki * [REM-3344] Toggle sending null or empty password when field is left blank !2653 (merged) @myheroyuki * [REM-3363] Add checks to allow FreeRDP2 compatibility !2654 (merged) @myheroyuki * Fix KeyStroke function for SPICE plugin !2655 (merged) @BobbyTheBuilder * [REM-3364] Raise max length of username field to 300 from 100 !2656 (merged) @myheroyuki * [REM-3186] Allow use of ssh command line arguments to create ssh connections !2657 (merged) @myheroyuki * Fix use of default_value in remmina_file_get_int !2660 (merged) @rafarsa6363 * Implement VNC connection timeout !2659 (merged) @rafarsa6363 * Fix warnings !2658 (merged) @RipleyTom * [REM-3123] Prevent crash when pasting an image using RDP if gdk_pixbuf_save_to_buffer fails !2661 (merged) @myheroyuki * [REM-3386] Properly save and load color themes !2662 (merged) @myheroyuki * [REM-3388] Fix Flatpak crash when moving floating tool bar !2663 (merged) @myheroyuki * [REM-3389] Save unlock password when set outside of the preferences menu !2664 (merged) @myheroyuki * [REM-3382] Update CMAKE_PREFIX_PATH in snapcraft.yaml !2665 (merged) @myheroyuki * [REM-3390] Properly implement keyboard interactive ssh authentication !2666 (merged) @myheroyuki * [REM-3396] Made hiding connection profile name on floating toolbar optional !2667 (merged) @myheroyuki * [REM-3402] Add a local terminal plugin !2670 (merged) @myheroyuki * [REM-3398] Allow Flatpak build to run commands !2669 (merged) @myheroyuki * [REM-3413] Allow users to connect to multiple connections or groups of connects at once !2671 (merged) @myheroyuki * Create autostart directory if it does not exist. !2672 (merged) @rafarsa6363 * Fix autostart directory create for flatpak. !2673 (merged) *@rafarsa6363 * Python Wrapper plugin: Fix typo + add comment for edge-case hinting that the plugin needs to be installed !2674 (merged) @dzatoah * Several small fixes and improving group connections !2675 (merged) @myheroyuki - Drop upstreamed patch drop-unused-func.patch ++++ rke: - Update to version 1.8.6: * RKE Kubernetes versions - v1.30.14-rancher1-1 - v1.31.11-rancher1-1 - v1.32.7-rancher1-1 (default) NOTE: v1.32.7-rancher1-1 and v1.31.11-rancher1-1 are not available without an active RKE Extended Life subscription. For more details, please refer to the SUSE EOL article. https://www.suse.com/support/kb/doc/?id=000021513 ++++ rubygem-gem2rpm: - update suse.patch - use opensuse template on sles as well - update suse.patch - on newer rubies Kernel.open is no longer working with URIs. use URI.open() - also treat contributing as documentation. ++++ s3backer: - Upgrade to release 2.1.6 - Fix realloc() crash with newer libfuse when "--filename" is used. ++++ syncthing: - Update to 2.0.3 * Fixes fix(cmd): restore --version flag for compatibility by @acolomb in #10269 fix(cmd): make database migration more robust to write errors by @calmh in #10278 fix(cmd): provide temporary GUI/API server during database migration by @calmh in #10279 fix(db): clean files for dropped folders at startup by @calmh in #10280 * Other chore(slog): re-enable LOGGER_DISCARD (fixes #10262) by @rasa in #10267 build: downgrade gopsutil (fixes #10276) by @calmh in #10277 * Note that 2.0.2 didn't bring anything relevant to GNU/Linux and was therefore skipped ++++ system-users: - Use fully locked user accounts - Remove daemon as second group ++++ tekton-cli: - Update to version 0.42.0: * New version v0.42.0 * Handle nil steps and add error message * fix panic when trying to read pod logs when pod is already deleted * Bump the go-k8s-dependencies group with 3 updates * Bump github/codeql-action from 3.29.7 to 3.29.10 * Bump actions/checkout from 4.2.2 to 5.0.0 * Bump golang.org/x/term from 0.32.0 to 0.34.0 * Bump tektoncd/pipeline, tektoncd/triggers and tektoncd/hub * Bump github.com/spf13/pflag from 1.0.6 to 1.0.7 * Bump the go-k8s-dependencies group with 3 updates * Bump github.com/ktr0731/go-fuzzyfinder from 0.8.0 to 0.9.0 * Bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.3 * Deprecate the chain command * Bump step-security/harden-runner from 2.11.0 to 2.13.0 * Bump actions/setup-go from 5.3.0 to 5.5.0 * Bump github/codeql-action from 3.28.11 to 3.29.5 * Bump ko-build/setup-ko from 0.8 to 0.9 * Bump github.com/tektoncd/pipeline from 1.0.0 to 1.2.0 * Bump github.com/docker/cli * Bump github.com/docker/docker * Fix golang CI lint failures * cleanup: update golangci-lint to v2 * .github/workflows: use plumbing workflow definitions. * .github/workflows: add a ci workflow… * .github/workflows: add slack and retest workflows * .github/workflows: update codeql job * Bump github.com/sigstore/sigstore from 1.9.4 to 1.9.5 * Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 * Bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2 * Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /tools * Fix deadlock issue when following logs * Bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 * fix: update Pending color of PipelineRunPending * Bump the go-docker-dependencies group with 2 updates * Adjust pipeline logs test to align with updated output format * Add unit test scripts * updated the docs * Add flag to prefix log lines with log source (task and step name) by default * Update CLI docs for tkn v0.41.0 * Bump the go-docker-dependencies group with 2 updates ++++ terragrunt: - Update to version 0.86.0: * Features - Terraform 1.13: We are now testing Terragrunt against Terraform 1.13 and is confirmed to be working. - Go 1.25: Build process now leverages Go 1.25 features and improvements NOTE: Although this release is marked as backward incompatible, it is functionally compatible as nothing has been changed in Terragrunt internals. The minor version release is useful to mark the change in Terraform version that is being tested. * What's Changed - chore: Go and Terraform 1.13 updates (#4724) - chore: add test for source-map in runner-pool (#4707) - Update to version 0.85.1: * Features - Updated go-getter to fix CVE-2025-8959 - Dropped dependencies on aws-sdk-go v1 * Docs - Switched to the new documentation site * What's Changed - chore: Bumping go-getter and dependencies (#4692) - Tighten up Supercharge section (#4712) - Remove unnecessary class (#4713) - chore: rm old page deployment (#4721) - fix: pass argument to version flag, e.g. `run -- version - json` (#4720) - fix: Adjusting `awshelper` (#4502) - Swap classnames per feedback (#4710) - chore: Removing Jekyll docs (#4705) - chore: Tossing Jekyl docs (#4699) - Cleaning animation (#4698) - fix: Adding retry to ignore the flakiness of `TestProviderCache` (#4676) - Search polish (#4697) - Lower padding margins (#4696) - Bump versions (#4695) - fix: Fixing text for search (#4693) - fix: Adjusting patch (#4691) - chore: Final pre-migration steps (#4688) - fix: Adding social link info (#4677) - fix: Removing Google feedback form (#4678) - build(deps): bump actions/checkout from 4 to 5 (#4685) - Web 818 (#4682) - docs: Updating Terragrunt Homepage (#4550) - Fix --report-file not created due to cross-device link (#4675) ++++ werf: - Update to version 2.47.2: * Bug Fixes - deploy: release namespace deletes after stopping being part of a release (9374700) - Update to version 2.47.1: * Bug Fixes - fix(deploy): error `"werf.io/show-logs-only-for-containers", expected integer value` ------------------------------------------------------------------ ------------------ 2025-8-21 - Aug 21 2025 ------------------- ------------------------------------------------------------------ ++++ MozillaFirefox: - Mozilla Firefox 142 https://www.mozilla.org/en-US/firefox/142.0/releasenotes/ MFSA 2025-64 (bsc#1248162) * CVE-2025-9179 (bmo#1979527) Sandbox escape due to invalid pointer in the Audio/Video: GMP component * CVE-2025-9180 (bmo#1979782) Same-origin policy bypass in the Graphics: Canvas2D component * CVE-2025-9181 (bmo#1977130) Uninitialized memory in the JavaScript Engine component * CVE-2025-9186 (bmo#1445758) Spoofing issue in the Address Bar component of Firefox Focus for Android * CVE-2025-9182 (bmo#1975837) Denial-of-service due to out-of-memory in the Graphics: WebRender component * CVE-2025-9183 (bmo#1976102) Spoofing issue in the Address Bar component * CVE-2025-9187 (bmo#1825621, bmo#1970079, bmo#1976736, bmo#1979072) Memory safety bugs fixed in Firefox 142 and Thunderbird 142 * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163, bmo#1979955) Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166) Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 - Refresh mozilla-pgo.patch - requires NSS 3.114 ++++ PackageKit: - Add PackageKit-zypp-parallel-package-downloads.patch: zypp: Implement parallel downloading (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920). ++++ aardvark-dns: - Update to version 1.16.0: * release v1.16.0 * release notes for v1.16.0 * [skip-ci] Update actions/checkout action to v5 * fix(deps): update rust crate libc to 0.2.175 * test: Remove empty user= directive in dnsmasq.conf to avoid SIGSEGV * [skip-ci] Update actions/download-artifact action to v5 * fix(deps): update rust crate tokio to 1.47.1 * fix(deps): update rust crate tokio to 1.47.0 * coredns: fix typo in debug message * coredns: process more than one message per tcp connection * fix(deps): update rust crate tokio to 1.46.1 * fix(deps): update rust crate tokio to 1.46.0 * fix new rust 1.88 lint errors * fix(deps): update rust crate clap to ~4.5.40 * fix(deps): update rust crate libc to 0.2.174 * fix(deps): update rust crate libc to 0.2.173 * make more use of AardvarkError * fix(deps): update rust crate clap to ~4.5.39 * fix(deps): update rust crate tokio to 1.45.1 * fix github release action * bump to v1.16.0-dev ++++ actuated-cli: - Update to version 0.2.11: * Show URLs in standard view all the time * Show HTTP body when there is an error ++++ ansible: - update to 11.9.0: Ansible 11.9.0 includes ansible-core 2.18.8 as well as a curated set of Ansible collections that provide a vast number of modules and plugins. Collections which have opted-in to being a part of the Ansible 11 unified changelog will have an entry on this page: https://github.com/ansible-community/ansible-build-data/blob/main/11/CHANGELOG-v11.rst ++++ ansible-core: - update to 2.18.8: * Minor Changes - ansible-test - Improve formatting of generated coverage config file. - ansible-test - Replace remote FreeBSD 13.3 with 13.5. - ansible-test - Use OS packages to satisfy controller requirements on FreeBSD 13.5 during managed instance bootstrapping. * Bugfixes - ansible-test - Always exclude the tests/output/ directory from a collection's code coverage. (#84244) - ansible-test - Limit package install retries during managed remote instance bootstrapping. - ansible-test - Use a consistent coverage config for all collection testing. - plugins config, get_option_and_origin now correctly displays the value and origin of the option. ++++ ansible-documentation: - Update to version 2.18.8: * ci: refresh dev dependencies (#2977) * ci: refresh dev dependencies (#2951) * [stable-2.19] compile sanity test: update supported Python versions (#2965) (#2970) * Revert "community/maintainers_workflow.rst: improve wording and formatting (#…" (#2956) (#2961) * Update EOL banner for clarity (#2942) (#2946) * update banner to reflect this does not apply to the product (#2895) (#2940) * community/maintainers_workflow.rst: improve wording and formatting (#2799) (#2931) * ci: refresh dev dependencies (#2910) * [stable-2.18] ci: refresh docs build dependencies (#2907) * Add missing comma in introduction.rst (#2914) (#2920) * Update docs windows_winrm for ansible module (#2904) (#2917) * playbook_guide/playbooks_variables.rst: improve style. Assisted-by: AI (#2916) (#2926) * rst/playbook_guide/playbooks_intro.rst: improve. Assisted-by: AI (#2915) (#2923) * add details on some plugin options - AI-assisted (#2813) (#2900) * Styleguide update for installation_distros.rst - AI-assisted (#2855) (#2897) * update backport instructions (#2886) (#2893) * release_and_maintenance.rst: reflect that 2.16 is EOL (#2770) (#2889) * Fix indent for other keys like :Version Added:. (#2880) (#2883) * Fixed minor grammatical errors (#2867) (#2874) * dev_guide/style_guide/spelling_word_choice.rst: See vs Refer to (#2868) (#2871) * Ansible configuration: improve deprecation messages (#2823) (#2864) * Update removal/readd processes to refer to the documentation of ansible-build-data (#2821) (#2860) * core-2.19 prep - update versioning (#2810) (#2857) * inventory_guide/intro_inventory.rst: improve style. Assisted-by AI (#2834) (#2853) * ci: refresh dev dependencies (#2845) * [stable-2.18] ci: refresh docs build dependencies (#2840) * Add more International Communities (#2833) (#2836) * community/maintainers_guidelines.rst: improve the document. Assisted-by: Gemini (#2808) (#2828) * Merge pull request #2825 from anweshadas/pr_porting_guide_11.8.0 (#2827) ++++ ansible-navigator: - Update to version 25.8.0: * Maintenance - Bump actions/checkout from 4 to 5 (#2019) @dependabot[bot] - Bump actions/download-artifact from 4 to 5 (#2016)@dependabot[bot] - Adopt coactions/upload-artifact (#1999) @ssbarnea ++++ bind: - Upgrade to release 9.20.12 New Features: * Support for parsing DSYNC records has been added. Feature Changes: * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS digest type 1. Bug Fixes: * Stale RRsets in a CNAME chain were not always refreshed. * Add RPZ extended DNS error for zones with a CNAME override policy configured. * Fix dig +keepopen option. * Log dropped or slipped responses in the query-errors category. * Fix synth-from-dnssec not working in some scenarios. * Clean enough memory when adding new ADB names/entries under memory pressure. * Prevent spurious validation failures. ++++ bpftop: - Update to version 0.7.0: * Customizable refresh rate: Added -d/--delay option to set screen refresh rate in seconds ++++ buildah: - Update to version 1.41.3: * [release-1.41] Bump Buildah to v1.41.3 * Commit: don't depend on MountImage(), because .imagestore * [release-1.41] Bump to v1.41.2 * Rework how we decide what to filter out of layer diffs * Note that we have to build `true` first for the sake of its tests * copier.Stat(): return owner UID and GID if available * copier.Get(): ensure that directory entries end in "/" * copier.Get(): strip user and group names from entries * imagebuildah.Executor/StageExecutor: check numeric --from= values * [release-1.41] Bump Buildah to v1.41.1 * [release-1.41] Bump c/* projects and Buildah to v1.41.1 * [release-1.41] generatePathChecksum: ignore ModTime, AccessTime * History should note unset-label, timestamp, and rewrite-timestamp * pkg/cli.GenBuildOptions(): don't hardwire optional bools * Only suppress "noted" items when not squashing * Test that pulled up parent directories are excluded at commit * Exclude pulled up parent directories at commit-time * copier.Ensure(): also return parent directories * copier.MkdirOptions: add ModTimeNew * Restore the default meaning of `--pull` (should be `always`). * Bump to Buildah v1.41.0 * Bump to c/storage v1.59.0, c/image v5.36.0, * fix(deps): update module github.com/containers/image/v5 to v5.36.0 * fix(deps): update module github.com/containers/storage to v1.59.0 * stage_executor: check platform of cache candidates * fix(deps): update module golang.org/x/crypto to v0.40.0 * fix(deps): update module golang.org/x/term to v0.33.0 * fix(deps): update module golang.org/x/sync to v0.16.0 * fix(deps): update module github.com/docker/docker to v28.3.2+incompatible * ADD/COPY --link support added * RPM/TMT: account for passwd binary moving to tests * buildah: move passwd command to tests * Update "bud with --cpu-shares" test, and rename it * Remove BUILDTAG btrfs_noversion as no longer effective * fix(deps): update module github.com/docker/docker to v28.3.1+incompatible * fix(deps): update module github.com/moby/buildkit to v0.23.2 * fix(deps): update github.com/containers/luksy digest to bc60f96 * chore(typos): fix typos * vendor: update c/{common,image,storage} to main * chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.3.0 [security] * fix(deps): update module go.etcd.io/bbolt to v1.4.2 * Update Neil Smith's GitHub username in MAINTAINERS.md * Accept SOURCE_DATE_EPOCH as a build-arg * fix(deps): update module github.com/docker/docker to v28.3.0+incompatible * Add conditional release-checking system test * info,inspect: use the "formats" package to get some builtins * Use containers/common's formats package instead of our own * build, commit: set the OCI ...created annotation on OCI images * commit: exclude parents of mount targets, too * run: clean up parents of mount targets, too * tarFilterer: always flush after writing * Builder: drop the TempVolumes field * Update module github.com/moby/buildkit to v0.23.1 * Update module github.com/opencontainers/cgroups to v0.0.3 * Add CommitOptions.OmitLayerHistoryEntry, for skipping the new bits * Update module github.com/fsouza/go-dockerclient to v1.12.1 * conformance: use mirrored frontend and base images * commit-with-extra-files test: use $TEST_SCRATCH_DIR * fix(deps): update module github.com/moby/buildkit to v0.23.0 * "root fs only mounted once" test: accept root with only the rw option * Run with --device /dev/fuse and not just -v /dev/fuse:/dev/fuse * CI: pass $BUILDAH_RUNTIME through to in-container test runs * CI: ensure rootless groups aren't duplicates * build: add support for --inherit-annotations * CI: give the rootless test user some supplemental groups * bud,run: runc does not support keep-groups * Fix lint issue in TestCommitCompression * Add a unit test for compression types in OCI images * Support zstd compression in image commit * fix(deps): update module go.etcd.io/bbolt to v1.4.1 * rpm: build rpm with libsqlite3 tag * Makefile: use libsqlite3 build when possible * commit,build: --source-date-epoch/--timestamp omit identity label * docs: add --setopt "*.countme=false" to dnf examples * Builder.sbomScan(): don't break non-root scanners * build: --source-date-epoch/--timestamp use static hostname/cid * fix(deps): update module golang.org/x/crypto to v0.39.0 * fix(deps): update module golang.org/x/sync to v0.15.0 * build: add --source-date-epoch and --rewrite-timestamp flags * build,config: add support for --unsetannotation * commit: add --source-date-epoch and --rewrite-timestamp flags * fix(deps): update module github.com/openshift/imagebuilder to v1.2.16 * vendor latest c/{common,image,storage} * Tweak our handling of variant values, again * Don't BuildRequires: ostree-devel * parse, validateExtraHost: honor Hostgateway in format * remove static nix build * Ensure extendedGlob returns paths in lexical order * CI: run integration tests on Fedora with both crun and runc * buildah-build(1): clarify that --cgroup-parent affects RUN instructions * runUsingRuntime: use named constants for runtime states * Add a dummy "runtime" that just dumps its config file * run: handle relabeling bind mounts ourselves * fix link to Maintainers file * Update to avoid deprecated types * fix(deps): update module github.com/docker/docker to v28.2.0+incompatible * [skip-ci] Packit: cleanup redundant targets and unused anchors * [skip-ci] Packit: set fedora-all after F40 EOL * Use Fedora 42 instead of 41 in that one conformance test * [CI:DOCS] README.md: add openssf passing badge * fix(deps): update module github.com/moby/buildkit to v0.22.0 * copier: add Ensure and ConditionalRemove * [CI:DOCS] update a couple of lists in the build man page * build: allow --output to be specified multiple times * add: add a new --timestamp flag * tests/helpers.bash: add some helpers for parsing images * pkg/parse.GetBuildOutput(): use strings.Cut() * [skip-ci] Packit: Disable osh_diff_scan * internal/util.SetHas(): handle maps of [generic]generic * Refactor NewImageSource to add a manifest type abstraction (#5743) * [skip-ci] Packit: Ignore ELN and CentOS Stream jobs * imagebuildah: select most recent layer for cache * [CI:DOCS] Add CNCF roadmap, touchup other CNCF files * fix(deps): update module golang.org/x/crypto to v0.38.0 * Fix typo in comment (#6167) * Support label_users in buildah * fix(deps): update module golang.org/x/sync to v0.14.0 * fix(deps): update github.com/containers/luksy digest to 4bb4c3f * test/serve: fix a descriptor leak, add preliminary directory support * fix(deps): update module github.com/opencontainers/cgroups to v0.0.2 * fix(deps): update module github.com/moby/buildkit to v0.21.1 * Update to avoid deprecated types * fix(deps): update module github.com/opencontainers/runc to v1.3.0 * Only filter if containerImageRef.created != nil * Drop superfluous cast * Remove UID/GID scrubbing. * fix(deps): update module github.com/seccomp/libseccomp-golang to v0.11.0 * cirrus: turn prior fedora testing back on * chore(deps): update dependency containers/automation_images to v20250422 * fix(deps): update module github.com/docker/docker to v28.1.1+incompatible * Bump to Buildah v1.41.0-dev * CI vendor_task: pin to go 1.23.3 for now * fix(deps): update module github.com/containers/common to v0.63.0 ++++ cheat: - Packaging improvements: * Service go_modules replace dependencies with CVEs * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1 Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm * Replace golang.org/x/net=golang.org/x/net@v0.36.0 Fixes GO-2025-3503 CVE-2025-22870 * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0 Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8 Fixes GO-2025-3487 CVE-2025-22869 * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0 Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4 Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m * Service tar_scm set mode manual from disabled * Service tar_scm create archive from git so we can exclude vendor directory upstream committed to git. Committed vendor directory contents have build issues even after go mod tidy. * Service tar_scm exclude dir vendor * Service set_version set mode manual from disabled * Service set_version remove param basename not needed - bsc#1247629 (CVE-2025-21613): * Use go-git 5.13.0 via replace in _service ++++ lagrange: - update to 1.18.7 - Revised handling of reserved URI characters according to RFC 3986. The previous behavior did not fully conform to the standard. - Fixed opening some WebP images. There was a problem checking for the "image/webp" media type. - Fixed removal of unexpected NUL characters from the source text. - Fixed redundant mouse events when receiving touch events on the desktop. ++++ clusterctl: - Update to version 1.11.0: Full changelog: https://github.com/kubernetes-sigs/cluster-api/releases/tag/v1.11.0 * Add resource version check to clusterctl upgrade tests * Cleanup clusterctl tests assets * Add Scaleway infrastructure provider to clusterctl * clusterctl: validate provider metadata (#12242) * clusterctl: accept upper case version (#12237) * Remove clusterctl alpha topology plan + Cleanup Cluster topology controller * Update cmd/clusterctl/client/cluster/installer.go * clusterctl: clearer error messages when provider metadata is missing or repo URL is stale * e2e: bump main clusterctl upgrade test to 1.33 * e2e: bump 1.10 clusterctl upgrade test to 1.33 * Add filename to clusterctl error about bad YAML * fix: clusterctl upgrade tests * Update clusterctl version to v1.10.x in quick start * Add retry for SSA requests against Kubernetes < v1.29 in clusterctl upgrade tests * Add support for compatible contracts to clusterctl (#12018) * Enforce skip upgrade policy in clusterctl (#12017) * :bug: clusterctl upgrade hangs for a time on CRD migration when new version contains a number of new CRDs ++++ crmsh: - Update to version 5.0.0+20250821.fb2da632: * Dev: unittests: Adjust unit test for previous commit * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method * Dev: behave: Add funtional test for previous commits * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters * Dev: utils: Skip reachable checking for pacemaker remote node * Dev: cibquery: Remove filter condition for pacemaker remote node * Dev: ui_node: Enable maintenance pacemaker remote node * Dev: ui_node: Enable standby/online pacemaker remote node * Dev: xmlutil: Drop xmlutil.listnodes function ++++ crossplane-cli: - Update to version 2.0.2: No CLI-related changes - Update to version 2.0.1: No CLI-related changes - Update to version 2.0.0: Warnings and breaking changes * Backwards Compatibility with v1 The Crossplane maintainers have taken thoughtful consideration to make major improvements and changes in v2 while maintaining backwards compatibility for the vast majority of v1 workloads. We expect most users to be able to upgrade to v2 without any changes to their control plane. However, there is a set of 4 breaking changes that we have made, mostly to long deprecated features and features that have remained stuck in alpha for a long time. If you are not using any of these 4 features, you can upgrade to v2 without any issues and your existing workload should continue operating as usual. The following features have been removed: - Native patch and transform within composition (mode: Resources) You can migrate your compositions to use function pipelines with the crossplane beta convert pipeline-composition command available in the v1 crossplane CLI. See the Crossplane docs for details. - ControllerConfig These have been replaced by DeploymentRuntimeConfig. You can migrate your existing ControllerConfig to DeploymentRuntimeConfig with the crossplane beta convert deployment-runtime command available in the v1 crossplane CLI. See the Crossplane docs for details. * login/logout removed from Crossplane CLI The crossplane xpkg login and crossplane xpkg logout commands have been removed from the Crossplane CLI. To login to a registry before pushing a package, consider using docker login locally, or the docker/login-action from CI. An example of this pattern can be seen in many Community Extension Projects, for example function-auto-ready. * CLI-related commits - Add #sig-cli to README - Support Rendering Default Values from XRD in Crossplane CLI - fix(render): Render CLI command ignores XR Ready state * Dependencies - chore(deps) bump crossplane-runtime to v2.0.0-rc.1 - chore(deps): bump all crossplane-runtime import paths to github.com/crossplane/crossplane-runtime/v2 - chore(deps): bump crossplane-runtime to v1.21.0-rc.0 - chore(deps): bump crossplane-runtime to v2.0.0 - chore(deps): pin nick-fields/retry action to ce71cc2 - chore(deps): update actions/create-github-app-token digest to d72941d - chore(deps): update actions/stale digest to 5bef64f - chore(deps): update actions/upload-artifact digest to ea165f8 - chore(deps): update bufbuild/buf-action digest to c231a1a - chore(deps): update dependency earthly/earthly to v0.8.16 - chore(deps): update dependency golang to v1.24.5 - chore(deps): update dependency golangci/golangci-lint to v2.2.2 - chore(deps): update docker/login-action digest to 74a5d14 - chore(deps): update gcr.io/distroless/static docker digest to b7b9a69 - chore(deps): update github/codeql-action digest to 181d5ee - chore(deps): update github/codeql-action digest to ce28f5b - chore(deps): update github/codeql-action digest to fca7ace - chore(deps): update mheap/require-checklist-action digest to 46d2ca1 - chore(deps): update module github.com/cloudflare/circl to v1.6.1 [security] - chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.3.0 [security] - chore(deps): update renovatebot/github-action action to v41.0.22 - fix(deps): update module dario.cat/mergo to v1.0.2 - fix(deps): update module github.com/emicklei/dot to v1.8.0 - fix(deps): update module github.com/prometheus/client_golang to v1.22.0 - fix(deps): update module github.com/sigstore/sigstore to v1.9.4 ++++ cryptsetup: - Update to 2.8.1: * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers. * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase. * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher). - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it. - Null cipher is sometimes used to create an empty container for later reencryption. - Only an empty passphrase can activate such a container (the same as in LUKS1). * Do not silently decrease PBKDF parallel cost (threads) if set by an option. - The maximum parallel cost is limited to 4 threads. * Fixes to configuration and installation scripts. - Meson and autoconf tools now properly support --prefix option for temporary directory installation. - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf. - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf. - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release. * Major update to manual pages. - Try to explain the PBKDF hardcoded limits. - Add a better explanation for automatic integrity tag recalculation. - Mention crypt/verity/integritytab. - Remove or reformulate some misleading warnings present only with old and no longer supported kernels. - Clarify that some commands do not wipe data and unify OPAL reset wording. - Clarify the --label option. - There are also many other grammar and stylistic fixes to unify the man-page style. * Fixes for false-positive and annoying (optional) warnings added in recent compilers. ++++ dnsmasq: - bsc#1247812: Fix a segfault when setting up supplementary groups, but no username was specified. ++++ drbd: - drbd: fix build error against kernel v6.16.1 (boo#1248426) * add suse special patch + boo1248426-fix_build_error_against_kernel_v6.16.1.patch ++++ falcoctl: - Update to version 0.11.3: * chore(deps): Bump actions/checkout from 4.2.2 to 5.0.0 * chore(deps): Bump goreleaser/goreleaser-action in the actions group * chore(deps): Bump the actions group across 1 directory with 3 updates * chore(deps): Bump github.com/docker/docker * chore(deps): bump driverkit to v0.21.2 * chore(deps): bump github.com/go-oauth2/oauth2 to v4.5.3 * chore(deps): Bump sigstore/cosign-installer in the actions group * chore(deps): Bump the actions group with 2 updates * chore(deps): Bump github.com/go-viper/mapstructure/v2 * chore(deps): Bump the actions group with 2 updates * chore(deps): Bump github.com/cloudflare/circl from 1.3.8 to 1.6.1 * chore(deps): Bump docker/build-push-action in the actions group ++++ flake-pilot: - Bump version: 3.1.20 → 3.1.21 - seed from entropy - Fix assignment of random sequence number We should use a seed for the sequence as described in https://rust-random.github.io/book/guide-seeding.html#a-simple-number In addition the logic when a random sequence number should be used was wrong and needed a fix regarding resume and attach type flakes which must not use a random sequence ++++ ghc-syb: - Update syb to version 0.7.3. [#] 0.7.3 - Fix `gread` to recognize negative numbers (https://github.com/dreixel/syb/issues/13) - Bump minimum required GHC to 8.0 - `Generic'` is now a newtype instead of data, add `GenericR'` and `GenericB'` (https://github.com/dreixel/syb/issues/49) ++++ gnome-music: - Update to version 48.1: + Flatpak build fixes for Grilo changes + Fix non-responsive window + Fix covers not scaling with gtk 4.19 + Updated translations. ++++ goverlay: - Update to version 1.4.1 * This is a small fix release ++++ harfbuzz: - Update to version 11.4.2: + Various performance and memory usage improvements. + The hb-shape command line tool can now be built with the amalgamated harfbuzz.cc source. + Fix regression in handling version 2 of avar table. + Increase various buffer length limits for better handling of fonts that generate huge number of glyphs per codepoint (e.g. Noto Sans Duployan). + Improvements to the harfrust shaper for more accurate testing. ++++ istioctl: - update to 1.27.0: https://istio.io/latest/news/releases/1.27.x/announcing-1.27/ https://istio.io/latest/news/releases/1.27.x/announcing-1.27/change-notes/ * Security - Added validation for the istioctl --clusterAliases command argument. It should not have more than one alias per cluster. (Issue #56022) * Installation - Fixed a panic in istioctl manifest translate when the IstioOperator config contained multiple gateways. (Issue [#56223]) * Istioctl - Added the --kubeclient-timeout flag to istioctl root flags. May be unset, or set to a valid time.Duration string. When specified, this will override the default 15s timeout for all istioctl commands that use the Kubernetes client. This is useful for environments with slow Kubernetes API servers, such as those with high latency or low bandwidth. Note that this flag is just used for the Kubernetes client, and does not affect other timeouts in istioctl, such as installation timeouts. (Issue #54962) - Added --revision flags for istioctl dashboard controlz and istioctl dashboard istiod-debug. - Added support in the istioctl proxy-status command to dynamically display all xDS/CRD types as columns in the output table. (Issue #56005) - Added support for customizing the timeout of istioctl waypoint status and istioctl waypoint apply. (Issue #56453) - Added support for displaying stack-trace-level in the command istioctl admin log. (Issue #56465) - Added support for displaying traffic type in the command istioctl waypoint list. - Added support for the --weight parameter in the command istioctl experimental workload group create. - Added support for configuring the log level of ip-autoallocate in istioctl admin log. (Issue #55741) - Fixed an issue where, during installation, istio-revision-tag-default and MutatingWebhookConfiguration were not created when the revision was not the default. (Issue #55980) - Fixed an issue where false positive of IST0134 were raised in istioctl analyze when PILOT_ENABLE_IP_AUTOALLOCATE was set to true. (Issue #56083) - Fixed an issue where analysis included Kubernetes system namespaces (e.g., kube-system, kube-node-lease). (Issue [#55022]) - Fixed an issue where create-remote-secret created redundant RBAC resources. (Issue #56558) ++++ jfrog-cli: - Update to version 2.78.5: * Bump version from 2.78.4 to 2.78.5 (#3062) * Bump go version to 1.24.6 (#3061) * Bump ver from 2.78.3 to 2.78.4 (#3060) * fixed build search for build names with special chars (#3056) ++++ jj-fzf: - Update to version 0.32.0: * Added: - Ctrl-W: Added way to toggle between various diff formats - Alt+M: New multi-select mode, use TAB to select multiple commits - Added multi-mode support for abandon, backout, duplicate, squash, rebase - Added make distcheck, always check in CI - Added check for jj-fzf --help - Added installcheck rule - Added separate manual page - Added file summary to oplog history - Added scripts to automate releases - Added contirb/suspend-with-shell.el to run jj-fzf from emacs, see: https://testbit.eu/2025/jj-fzf-in-emacs * Breaking: - Depend on jj-0.32.0 - Changed Alt-N to run new-after with --no-edit - Preserve PWD in subshells if possible (present) - Remove unused 'merging' command * Changed: - To install, run make all install - To run all checks, run make all check install installcheck - Builds require GNU Make - Moved version checks for all tool dependencies into Makefile - Use /usr/bin/env to find bash - Undeprecate Alt-S: restore-file from selected revision - Build man page, use a man page browser for jj-fzf --help - Fetch version information from Git - Automatically run CI for PRs and tags - Introduced pandoc dependency for man builds * Fixed: - Fixed installations not working in non-jj repos - Fixed --version not working outside a jj repo ++++ python-bqplot: - Add bqplot-js.patch boo#1248431 CVE-2025-9287 CVE-2025-9288 * We need to keep most of the js lock (yarn.lock) because 0.12 is still not fully updatable with jupyterlab 4. This will hopefully change with 0.13, which is at rc stage ++++ kernel-source-longterm: - docs: ntsync: Add documentation for the ntsync uAPI (bsc#1234429). - Update config files to enable CONFIG_NTSYNC=m. - ntsync: No longer depend on BROKEN (bsc#1234429). - ntsync: Check wait count based on byte size (bsc#1234429). - ntsync: Set the permissions to be 0666 (bsc#1234429). - ntsync: Fix reference leaks in the remaining create ioctls (bsc#1234429). - ntsync: fix a file reference leak in drivers/misc/ntsync.c (bsc#1234429). - ntsync: Introduce alertable waits (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_SEM_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_PULSE (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_RESET (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_SET (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_CREATE_EVENT (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_KILL (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_UNLOCK (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_CREATE_MUTEX (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_WAIT_ALL (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_WAIT_ANY (bsc#1234429). - ntsync: Rename NTSYNC_IOC_SEM_POST to NTSYNC_IOC_SEM_RELEASE (bsc#1234429). - commit b82832d - ntsync: Return the fd from NTSYNC_IOC_CREATE_SEM (bsc#1234429). - commit 97ac029 ++++ kernel-firmware-ath11k: - Update to version 20250820 (git commit 70dda28e5098): * ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 ++++ kernel-firmware-bluetooth: - Update to version 20250820 (git commit 70dda28e5098): * Link rtl8723b_config.bin to rtl8723bs ++++ kernel-firmware-media: - Update to version 20250820 (git commit 70dda28e5098): * qcom: Add firmware binary for SM8650. ++++ kernel-firmware-qcom: - Update to version 20250820 (git commit 70dda28e5098): * qcom: add CDSP firmware for x1e80100 platform ++++ kernel-firmware-realtek: - Update to version 20250820 (git commit 70dda28e5098): * rtw89: 8922a: update fw to v0.35.80.3 * rtw89: 8852c: update fw to v0.27.129.4 * rtw89: 8852c: update fw to v0.27.129.3 ++++ kernel-firmware-sound: - Update to version 20250820 (git commit 70dda28e5098): * cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops ++++ kernel-longterm: - docs: ntsync: Add documentation for the ntsync uAPI (bsc#1234429). - Update config files to enable CONFIG_NTSYNC=m. - ntsync: No longer depend on BROKEN (bsc#1234429). - ntsync: Check wait count based on byte size (bsc#1234429). - ntsync: Set the permissions to be 0666 (bsc#1234429). - ntsync: Fix reference leaks in the remaining create ioctls (bsc#1234429). - ntsync: fix a file reference leak in drivers/misc/ntsync.c (bsc#1234429). - ntsync: Introduce alertable waits (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_SEM_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_PULSE (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_RESET (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_SET (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_CREATE_EVENT (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_KILL (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_UNLOCK (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_CREATE_MUTEX (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_WAIT_ALL (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_WAIT_ANY (bsc#1234429). - ntsync: Rename NTSYNC_IOC_SEM_POST to NTSYNC_IOC_SEM_RELEASE (bsc#1234429). - commit b82832d - ntsync: Return the fd from NTSYNC_IOC_CREATE_SEM (bsc#1234429). - commit 97ac029 ++++ kernel-syms-longterm: - docs: ntsync: Add documentation for the ntsync uAPI (bsc#1234429). - Update config files to enable CONFIG_NTSYNC=m. - ntsync: No longer depend on BROKEN (bsc#1234429). - ntsync: Check wait count based on byte size (bsc#1234429). - ntsync: Set the permissions to be 0666 (bsc#1234429). - ntsync: Fix reference leaks in the remaining create ioctls (bsc#1234429). - ntsync: fix a file reference leak in drivers/misc/ntsync.c (bsc#1234429). - ntsync: Introduce alertable waits (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_SEM_READ (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_PULSE (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_RESET (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_EVENT_SET (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_CREATE_EVENT (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_KILL (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_MUTEX_UNLOCK (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_CREATE_MUTEX (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_WAIT_ALL (bsc#1234429). - ntsync: Introduce NTSYNC_IOC_WAIT_ANY (bsc#1234429). - ntsync: Rename NTSYNC_IOC_SEM_POST to NTSYNC_IOC_SEM_RELEASE (bsc#1234429). - commit b82832d - ntsync: Return the fd from NTSYNC_IOC_CREATE_SEM (bsc#1234429). - commit 97ac029 ++++ keylime: - Convert to libalternatives on SLE-16-based and newer systems ++++ kolourpaint: - Add upstream change: * 0001-Install-colors-file-into-app-specific-directory.patch ++++ kubefirst: - Update to version 2.9.0: * dynamic inputs and custom cluster workload templates * aws infrastructure upgrades * civo infrastructure upgrades * docs shifting to pro docs ++++ kwin6: - Add patch to avoid flicker due to amdgpu driver bug (kde#508350): * 0001-backends-drm-work-around-amdgpu-applying-GAMMA_LUT-i.patch ++++ openvswitch: - Update openvswitch to 3.6.0. For a list of changes, check https://www.openvswitch.org/releases/NEWS-3.6.0.txt ++++ tiff: - security update: * CVE-2025-8534 [bsc#1247582] Fix null pointer dereference in function PS_Lvl2page + tiff-CVE-2025-8534.patch * CVE-2025-9165 [bsc#1248330] Fix local execution manipulation can lead to memory leak + tiff-CVE-2025-9165.patch * CVE-2024-13978 [bsc#1247581] Fix null pointer dereference in tiff2pdf + tiff-CVE-2024-13978.patch ++++ tiff-man: - security update: * CVE-2025-8534 [bsc#1247582] Fix null pointer dereference in function PS_Lvl2page + tiff-CVE-2025-8534.patch * CVE-2025-9165 [bsc#1248330] Fix local execution manipulation can lead to memory leak + tiff-CVE-2025-9165.patch * CVE-2024-13978 [bsc#1247581] Fix null pointer dereference in tiff2pdf + tiff-CVE-2024-13978.patch ++++ mockery: - Update to version 2.53.5: * Support Go 1.25 in mockery v2 * Update .goreleaser.yml ++++ pam-config: - Update to version 2.13+git.20250819: * pam_unix: fix {use|try}_first_pass and use_authtok ++++ perl-CPAN-Perl-Releases: - updated to 5.202.508.200 (5.20250820) see /usr/share/doc/packages/perl-CPAN-Perl-Releases/Changes ++++ perl-Class-Autouse: - updated to 2.20.0 (2.02) see /usr/share/doc/packages/perl-Class-Autouse/Changes 2.02 2025-08-14 18:37:11Z - distribution tooling updates ++++ perl-Class-Unload: - updated to 0.120.0 (0.12) see /usr/share/doc/packages/perl-Class-Unload/Changes 0.12 2025-08-11 17:20:12+01:00 Europe/London - Generate README.md in the repo - Move git repository to Codeberg ++++ python-coconut: - Fix install requirements - Add optional tests, but disabled by default, we can use a _multibuild in the future and enable some tests ++++ python-grummage: - update to 1.0.0: * Minor keybind and visual changes by @aciddensity in #9 * Check For grype Binary in $PATH by @shaunsetlock in #8 * Make links clickable (fixes #2) by @popey in #11 * Update and package by @popey in #15 ++++ python-Markdown: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-gitlabcis: - update to 1.15.8: * Fix - fix(deps): update dependency pre-commit to ~=4.3.0 (15dc9d0) - update to 1.15.7: * Fix - fix(deps): update dependency coverage to v7.10.4 (64a0b87) - update to 1.15.6: * Fix - fix(deps): update dependency setuptools-scm to v9 (673e173) - update to 1.15.5: * Fix - fix(deps): update dependency coverage to v7.10.3 (18b3b42) ++++ python-hatch: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-hatch-fancy-pypi-readme: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-hatchling: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-hypercorn: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-hypothesis: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-ini2toml: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-invoke: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-jsondiff: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-jsonschema: - update to 4.25.1: * Fix Validator protocol init to match runtime by @sirosen in [#1396] ++++ python-keyring: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-markdown-it-py: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-maturin: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-mistletoe: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-myst-parser: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-natsort: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-netaddr: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-nitrokey: - update to 0.4.1: * Add support for protobuf v6. * nitrokey.trussed.admin_app: Fix validation of ConfigFieldType.U8 values. * nitrokey.trussed: Add list and open functions. * nitrokey.trussed.updates: - Add default values for the image and update_version arguments for Updater.update. - Only call UpdateUi.confirm_extra_information if the passed list is not empty. ++++ python-nodeenv: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-nose2: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pbr: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-peewee: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pip-run: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pipreqs: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pipx: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pkginfo: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pycodestyle: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pytest-benchmark: - Convert to libalternatives on SLE-16-based and newer systems ++++ rubygem-activerecord-8.0: - Drop CVE-2025-55193.patch: it is already handled in the version update ++++ s390-tools: - Applied a patch (bsc#1248264) * s390-tools-sles16sp0-chpstat-Fix-scaling-of-DPU-utilization-calculation.patch - Re-vendor-ed vendor.tar.zst ++++ scap-security-guide: - Remove the cis profiles from the tarball - Remove ssg-remove-cis.patch: tarball - Add check if cis profiles exists in the tarball ++++ semaphore: - Update to version 2.16.18: * Bugfix - Fixed Integrations critical bug: #3215 - Update to version 2.16.17: * Bugfixes - Passing correct feature flags from backend - Update to version 2.16.16: * Features - Updated built-in Swagger API docs (http://localhost:3000/swagger/index.html) - Added button for testing project alerts * Bugfixes - Fixed terraform HTTP backend (PRO) - Update to version 2.16.13: * Features - Updated built-in Swagger API docs - Update to version 2.16.7 (no releases between 2.15.7 and this): Semaphore 2.16 Release Details https://github.com/semaphoreui/semaphore/releases/tag/v2.16.7 * SQLite support (BoltDB deprecated) * Built-in API reference powered by Swagger * UI improvements: - Expandable text inputs - Display of next scheduled run in multiple time zones * Parallel task execution * Task parameters support for Schedules and Integrations * HashiCorp Vault integration (Pro only) ++++ skupper: - Update to version 2.1.1: * update for 2.1.1 * Update Documented CRDs with uniform formatting (#2227) * Set site status to pending when router is down (#2206) * Fixes links left in error if created before a site (#2211) * Removes non-canonical CRD specifications (#2205) * Include documentation in RouterAccess CRD (#2222) * Add documentation to AccessToken CRD (#2225) * Add documentation to AccessGrant CRD (#2226) * Adds documentation to Link CRD (#2210) * Add descriptions to Connector crd (#2224) * Adds documentation to Listener CRD (#2215) * add documentation to attachedconnectorbinding crd (#2221) * Add descriptions to attached connector crd (#2216) * Include Documentation in Site CRD (#2208) * Adding SslProfiles to AttachedConnectors (#2199) ++++ woodpecker: - Update to version 3.9.0: * Security - Remediate webpack vulnerability in webpack-dev-server [#5264] - fix(deps): update module github.com/docker/docker to v28.3.3+incompatible [security] [#5373] - Prevent secrets from leaking to Kubernetes API Server logs [#5305] * Features - feat(k8s): Kubernetes namespace per organization [#5309] - Add and edit additional forges in UI [#5328] * Enhancement - Rename oauth variables [#5435] - Add fsGroupChangePolicy option to Kubernetes backend [#5416] - Rework background colors for light/dark theme [#5411] - Allow to set default approval mode [#5406] - Add Agent-level Tolerations setting [#5266] - feat(k8s): k8s priority class name config [#5391] - Count reopening an pull as opening an pull [#5370] - Add pipeline log fullscreen [#5377] - Show changed files as file-tree [#5379] - Replace header bg with border [#5380] - Prevent body jump when scrollbar appears [#5381] - Show oauth host and favicon on login [#5376] - Support secrets in cli exec [#5374] - Simplify backend types [#5299] * Bug Fixes - Handle empty url and oauth_host on login page [#5434] - Fix background color of pipeline step list [#5431] - Fix bitbucket status sending [#5372] - Correct OpenApi LookupOrg router path [#5351] - fix(agent): handle context cancellation [#5323] - woodpecker-go/types: fix time-related struct field tags [#5343] - Reload repo on hook [#5324] - Fix loading icons and add missing loading indicators [#5329] - Use correct parameter for forge selection on login [#5325] * Documentation - chore(deps): lock file maintenance [#5430] - chore(deps): update docs npm deps non-major [#5420] - Remove X link [#5412] - fix(deps): update docs npm deps non-major [#5395] - fix(deps): update docs npm deps non-major [#5384] - Remove references of kaniko [#5371] - Add ASCII JUnit Test Report plugin [#5355] - fix(deps): update docs npm deps non-major [#5340] - chore(deps): update docs npm deps non-major [#5316] * Dependency - fix(deps): update module google.golang.org/grpc to v1.75.0 [#5437] - fix(deps): update module gitlab.com/gitlab-org/api/client-go to v0.141.1 [#5432] - chore(deps): update golang-lang [#5423] - chore(deps): update docker.io/golang docker tag to v1.25 [#5422] - fix(deps): update dependency simple-icons to v15.11.0 [#5427] - chore(deps): update pre-commit hook golangci/golangci-lint to v2.4.0 [#5425] - chore(deps): update postgres docker tag to v17.6 [#5424] - fix(deps): update web npm deps non-major [#5421] - fix(deps): update golang-packages [#5415] - fix(deps): update golang-packages [#5413] - fix(deps): update golang-packages [#5407] - chore(deps): lock file maintenance [#5404] - chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v6 [#5399] - fix(deps): update dependency simple-icons to v15.10.0 [#5400] - fix(deps): update web npm deps non-major [#5396] - chore(deps): update docker.io/woodpeckerci/plugin-ready-release-go docker tag to v3.4.0 [#5394] - chore(deps): update dependency golang to v1.24.6 [#5393] - fix(deps): update golang-packages [#5392] - chore(deps): lock file maintenance [#5388] - chore(deps): update pre-commit hook golangci/golangci-lint to v2.3.1 [#5386] - fix(deps): update web npm deps non-major [#5385] - fix(deps): update module github.com/prometheus/client_golang to v1.23.0 [#5382] - fix(deps): update golang-packages [#5375] - chore(deps): lock file maintenance [#5369] - fix(deps): update module github.com/bmatcuk/doublestar/v4 to v4.9.1 [#5365] - fix(deps): update module github.com/google/go-github/v73 to v74 [#5363] - chore(deps): update dependency @antfu/eslint-config to v5 [#5362] - chore(deps): update web npm deps non-major [#5361] - chore(deps): update docker.io/mysql docker tag to v9.4.0 [#5359] - fix(deps): update golang-packages [#5356] - update web dependencies [#5352] - chore(config): migrate renovate config [#5350] - chore(deps): lock file maintenance [#5348] - fix(deps): update golang-packages [#5347] - fix(deps): update golang-packages [#5336] - chore(deps): lock file maintenance [#5344] - fix(deps): update web npm deps non-major [#5341] - fix(deps): update dependency vue-i18n to v11.1.10 [security] [#5335] - fix(deps): update golang-packages [#5333] - chore(deps): lock file maintenance [#5320] - fix(deps): update web npm deps non-major [#5317] - fix(deps): update module github.com/bmatcuk/doublestar/v4 to v4.9.0 [#5318] - chore(deps): update dependency golang to v1.24.5 [#5314] - fix(deps): update golang-packages [#5313] - fix(deps): update golang-packages [#5311] - fix(deps): update module gitlab.com/gitlab-org/api/client-go to v0.134.0 [#5308] - chore(deps): lock file maintenance [#5307] * Misc - Add support for proxying to existing woodpecker server [#5354] - Update and improve nix flake [#5349] - Update issue number for link checker [#5327] ++++ teleport: - update to 17.7.2: * Fixed an issue that could cause some hosts not to register dynamic Windows desktops. #58062 * Improve error message when a User without any MFA devices enrolled attempts to access a resource that requires MFA. [#58044] * Add TELEPORT_UNSTABLE_GRPC_RECV_SIZE env var which can be set to overwrite client side max grpc message size. #58028 * Add support for JWT-Secured Authorization Requests to OIDC Connector. #58013 * Fixed an issue that could cause revocation checks to fail in Windows environments. #57879 * Fixed the case where the auto-updated client tools did not use the intended version. #57871 * Fix database PKINIT issues caused missing CDP information in the certificate. #57851 * Device Trust: added required-for-humans mode to allow bots to run on unenrolled devices, while enforcing checks for human users. #57845 * Updated Go to 1.23.12. #57765 * Added the --auth flag to the tctl plugins install scim CLI command to support Bearer token and OAuth authentication methods. #57758 * Fix Alt+Click not being registered in remote desktop sessions. [#57756] * Kubernetes Access: kubectl port-forward now exits cleanly when backend pods are removed. #57742 * Kubernetes Access: Fixed a bug when forwarding multiple ports to a single pod. #57737 * Fixed unlink-package during upgrade/downgrade. #57721 * Teleport event-handler now accepts HTTP Status Code 204 from the recipient. This adds support for sending events to Grafana Alloy and newer Fluentd versions. #57681 * Enrich the windows.desktop.session.start audit event with additional certificate metadata. #57678 * Added --force option to tctl workload-identity x509-issuer-overrides sign-csrs to allow displaying the output of partial failures, intended for use in clusters that make use of HSMs. #57661 * Tctl top can now display raw prometheus metrics. #57634 * Fixed access denied error messages not being displayed in the Teleport web UI PostgreSQL client. #57569 * Use the bot details page to view and edit bot configuration, and see active instances with their upgrade status. #57543 * Fix a bug in the default discovery script that can happen discovering instances whose PATH doesn't contain /usr/local/bin. #57531 * Fix a race condition in the Terraform Provider potentially causing "does not exist" errors the following resources: auth_preference, autoupdate_config, autoupdate_version, cluster_maintenance_config, cluster_network_config, and session_recording_config. #57528 * Fix a Terraform provider bug causing resource creation to be retried more times than the MaxRetries setting. #57528 * Make it easier to identify Windows desktop certificate issuance on the audit log page. #57520 * Fix a bug in the TF provider happening when autoupdate_version or autoupdate_config have non-empty metadata. #57517 * Fix a bug on Windows where a forwarded SSH agent would become dysfunctional after a single connection using the agent. #57512 * Machine and Workload ID: Add experimental implementation of new bound_keypair join method for improved bot joining in on-prem environments. #55037 ++++ ucode-intel: - Intel CPU Microcode was updated to the 20250812 release (bsc#1248438) - Security updates for INTEL-SA-01249 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01249.html - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable escalation of privilege via local access. - Security updates for INTEL-SA-01308 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01308.html - CVE-2025-22840: Sequence of processor instructions leads to unexpected behavior for some Intel Xeon 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access - Security updates for INTEL-SA-01310 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01310.html - CVE-2025-22839: Insufficient granularity of access control in the OOB-MSM for some Intel Xeon 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access. - Security updates for INTEL-SA-01311 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01311.html - CVE-2025-22889: Improper handling of overlap between protected memory ranges for some Intel Xeon 6 processor with Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. - Security updates for INTEL-SA-01313 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html - CVE-2025-20053: Improper buffer restrictions for some Intel Xeon Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access. - Security updates for INTEL-SA-01367 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01367.html - CVE-2025-26403: Out-of-bounds write in the memory subsystem for some Intel Xeon 6 processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. - CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel Xeon 6 Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. - Update for functional issues. Refer to 13th/14th Gen Intel Core Processor Specification Update for details. - Update for functional issues. Refer to 3rd Gen Intel Xeon Processor Scalable Family Specification Update for details. - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update for details. - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update for details. - Update for functional issues. Refer to 6th Gen Intel Xeon Scalable Processors Specification Update for details. - Update for functional issues. Refer to Intel Core Ultra 200 V Series Processor for details. - Update for functional issues. Refer to Intel Core Ultra Processor for details. - Update for functional issues. Refer to Intel Core Ultra Processor (Series 2) for details. - Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update for details. - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update for details. - Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002a9 | 210002b3 | Xeon Scalable Gen5 | GNR-AP/SP | B0 | 06-ad-01/95 | 010003a2 | 010003d0 | Xeon Scalable Gen6 | GNR-AP/SP | H0 | 06-ad-01/20 | 0a0000d1 | 0a000100 | Xeon Scalable Gen6 | ICL-D | B0 | 06-6c-01/10 | 010002d0 | 010002e0 | Xeon D-17xx, D-27xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d000404 | 0d000410 | Xeon Scalable Gen3 | LNL | B0 | 06-bd-01/80 | 0000011f | 00000123 | Core Ultra 200 V Series Processor | MTL | C0 | 06-aa-04/e6 | 00000024 | 00000025 | Core™ Ultra Processor | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004128 | 00004129 | Core Gen13 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004128 | 00004129 | Core Gen13 | SPR-HBM | Bx | 06-8f-08/10 | 2c0003f7 | 2c000401 | Xeon Max | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4 | SRF-SP | C0 | 06-af-03/01 | 03000341 | 03000362 | Xeon 6700-Series Processors with E-Cores New Disclosures Updated in Prior Releases: All ADL, RPL, SPR, EMR, MTL, ARL Microcode patches previously released in May 2025. ------------------------------------------------------------------ ------------------ 2025-8-20 - Aug 20 2025 ------------------- ------------------------------------------------------------------ ++++ ImageMagick: - version update to 7.1.2.1 * Add support for Simple File Format Family (SF3) images by @Shinmera in #8243 * Fix validation issues in SF3 by @Shinmera in #8252 * Fix compressed exr reading by @Hadsen in #8285 * Use OpenMP in ashlar by @yerlotic in #8288 * Bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #8296 - modified patches % ImageMagick-library-installable-in-parallel.patch - removed patches - ImageMagick-filename-placeholder-regression-1.patch (upstreamed) - ImageMagick-filename-placeholder-regression-2.patch (upstreamed) - ImageMagick-filename-placeholder-regression-3.patch (upstreamed) - fixes CVE-2025-55160 [bsc#1248079], CVE-2025-55004 [bsc#1248076] CVE-2025-55154 [bsc#1248078], CVE-2025-55005 [bsc#1248077] ++++ MozillaThunderbird: - Mozilla Thunderbird 140.2 * fixed: Users were unable to use Fastmail calendars due to missing OAuth settings (bmo#1978192) * fixed: Account setup error handling was broken for Account hub (bmo#1971303) * fixed: Menu bar was hidden after updating from 128esr to 140esr (bmo#1979002) * fixed: Security fixes MFSA 2025-72 (bsc#1248162) * CVE-2025-9179 (bmo#1979527) Sandbox escape due to invalid pointer in the Audio/Video: GMP component * CVE-2025-9180 (bmo#1979782) Same-origin policy bypass in the Graphics: Canvas2D component * CVE-2025-9181 (bmo#1977130) Uninitialized memory in the JavaScript Engine component * CVE-2025-9182 (bmo#1975837) Denial-of-service due to out-of-memory in the Graphics: WebRender component * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163, bmo#1979955) Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166) Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 ++++ agama-web-ui: - Refactor DASD page to make it more usable and improve its performance (related to bsc#1247444, gh#agama-project/agama#2648). - Enforce ESP partition id for /boot/efi partitions manually defined (bsc#1248189). ++++ agama-yast: - Removed the heuristic that used to consider some software RAID as bootable devices under some circumstances (bsc#1248195). - Ensure that /boot/efi and /boot/zipl partitions created using the web UI are never encrypted (bsc#1248189, bsc#1247447). ++++ alloy: - update to 1.10.2: Full list of changes: https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102 * Bugfixes - Fix issue in prometheus.write.queue causing inability to increase shard count if existing WAL data was present on start. (@kgeckhart) - Fix issue with loki.source.gcplog when push messages sent by gcp pub/sub only includes messageId. (@kalleep) ++++ amfora: - Use current distro go version. ++++ ansible-lint: - update to 25.8.1: * Bugfixes - Fix first-run collection discovery by enabling plugin loader after prepare_environment (#4722) @cidrblock * Maintenance - Fix mypy and pyright type checking errors (#4724) @cidrblock - update to 25.8.0: * Bugfixes - Lint failure in ansible.utils: src must be an absolute path fix (#4712) @anusshukla ++++ argocd-cli: - Update to version 3.1.0: * CLI-related changes in the changelog - docs(cli): improve `argocd actions run` docs (#23376) - feat(cli): Add Plugin Support to the Argo CD CLI (#20074) - feat(cli): Adding whoami alias (#23385) - fix(cli): Fix for removing auto generated tag for applicationset command (#22446) - fix(cli): Prevent Get & Sync from Hanging on Invalid Application Spec (#21702) - chore(cli): fix `argocd admin repo` command usage docs and examples (#23375) - chore(cli): fix `argocd repo` command usage docs and description (#23364) * Dependencies - chore(deps): Update some dependencies versions (#22228) (#22260) - chore(deps): bump @babel/runtime from 7.14.6 to 7.26.10 in /ui (#22304) - chore(deps): bump @fortawesome/fontawesome-free from 6.5.2 to 6.7.2 in /ui (#23105) - chore(deps): bump Dex from 2.41.1 to 2.43.0 (#23088) - chore(deps): bump SonarSource/sonarqube-scan-action from 4.2.1 to 5.2.0 (#23164) - chore(deps): bump actions/cache from 4.2.0 to 4.2.3 (#23123) - chore(deps): bump actions/download-artifact from 4.1.8 to 4.3.0 (#23153) - chore(deps): bump actions/setup-go from 5.2.0 to 5.5.0 (#23151) - chore(deps): bump actions/setup-node from 4.1.0 to 4.4.0 (#23108) - chore(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 (#21231) - chore(deps): bump chromedriver from 134.0.2 to 135.0.0 in /ui-test (#22555) - chore(deps): bump chromedriver from 135.0.0 to 135.0.1 in /ui-test (#22628) - chore(deps): bump chromedriver from 135.0.1 to 135.0.2 in /ui-test (#22704) - chore(deps): bump chromedriver from 135.0.2 to 135.0.3 in /ui-test (#22774) - chore(deps): bump chromedriver from 135.0.3 to 135.0.4 in /ui-test (#22787) - chore(deps): bump chromedriver from 135.0.4 to 136.0.0 in /ui-test (#22839) - chore(deps): bump chromedriver from 136.0.0 to 136.0.2 in /ui-test (#22987) - chore(deps): bump code.gitea.io/sdk/gitea from 0.20.0 to 0.21.0 (#22565) - chore(deps): bump codecov/codecov-action from 4.6.0 to 5.1.2 (#21252) - chore(deps): bump codecov/test-results-action from 1.0.1 to 1.1.1 (#23124) - chore(deps): bump controller-gen to v0.18.0 (#23000) - chore(deps): bump dario.cat/mergo from 1.0.1 to 1.0.2 (#22903) - chore(deps): bump docker/build-push-action from 6.10.0 to 6.17.0 (#23122) - chore(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 (#23179) - chore(deps): bump docker/login-action from 3.3.0 to 3.4.0 (#23110) - chore(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 (#23442) - chore(deps): bump docker/setup-buildx-action from 3.8.0 to 3.10.0 (#23152) - chore(deps): bump docker/setup-qemu-action from 3.2.0 to 3.6.0 (#23120) - chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.17.0 to 1.17.1 (#22429) - chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.17.1 to 1.18.0 (#22564) - chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.10.0 to 1.10.1 (#23350) - chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.2 to 1.9.0 (#22614) - chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.9.0 to 1.10.0 (#22990) - chore(deps): bump github.com/Azure/kubelogin from 0.1.9 to 0.2.3 (#22401) - chore(deps): bump github.com/Azure/kubelogin from 0.2.3 to 0.2.6 (#22419) - chore(deps): bump github.com/Azure/kubelogin from 0.2.6 to 0.2.7 (#22453) - chore(deps): bump github.com/Azure/kubelogin from 0.2.7 to 0.2.8 (#22813) - chore(deps): bump github.com/alicebob/miniredis/v2 from 2.34.0 to 2.35.0 (#23271) - chore(deps): bump github.com/argoproj/pkg to v2.0.1 (#22516) - chore(deps): bump github.com/aws/aws-sdk-go from 1.55.6 to 1.55.7 (#22761) - chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.14.0 to 2.15.0 (#22685) - chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.15.0 to 2.16.0 (#23221) - chore(deps): bump github.com/casbin/casbin/v2 from 2.103.0 to 2.104.0 (#22388) - chore(deps): bump github.com/casbin/casbin/v2 from 2.104.0 to 2.105.0 (#22732) - chore(deps): bump github.com/casbin/casbin/v2 from 2.105.0 to 2.106.0 (#23247) - chore(deps): bump github.com/casbin/casbin/v2 from 2.106.0 to 2.107.0 (#23322) - chore(deps): bump github.com/casbin/govaluate from 1.3.0 to 1.6.0 (#23074) - chore(deps): bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 (#22566) - chore(deps): bump github.com/expr-lang/expr from 1.16.9 to 1.17.0 (#22364) - chore(deps): bump github.com/expr-lang/expr from 1.17.0 to 1.17.1 (#22400) - chore(deps): bump github.com/expr-lang/expr from 1.17.1 to 1.17.2 (#22477) - chore(deps): bump github.com/expr-lang/expr from 1.17.2 to 1.17.3 (#22989) - chore(deps): bump github.com/expr-lang/expr from 1.17.3 to 1.17.4 (#23175) - chore(deps): bump github.com/expr-lang/expr from 1.17.4 to 1.17.5 (#23248) - chore(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 (#22577) - chore(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.16.0 (#22684) - chore(deps): bump github.com/go-git/go-git/v5 from 5.16.0 to 5.16.1 (#23270) - chore(deps): bump github.com/go-git/go-git/v5 from 5.16.1 to 5.16.2 (#23341) - chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.0 (#22598) - chore(deps): bump github.com/go-logr/logr from 1.4.2 to 1.4.3 (#23194) - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#22442) - chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (#22441) - chore(deps): bump github.com/google/go-jsonnet from 0.21.0-rc1.0.20250311032901-bc787d68ca30 to 0.21.0-rc2 (#22454) - chore(deps): bump github.com/google/go-jsonnet from 0.21.0-rc2 to 0.21.0 (#22902) - chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.0.1 to 1.1.0 (#23441) - chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.1 to 2.3.2 (#22868) - chore(deps): bump github.com/jarcoal/httpmock from 1.3.1 to 1.4.0 (#22576) - chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.81 to 0.9.82 (#22543) - chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.82 to 0.9.83 (#22762) - chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.83 to 0.9.85 (#22866) - chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.85 to 0.9.86 (#23349) - chore(deps): bump github.com/olekukonko/tablewriter from 0.0.6-0.20230925090304-df64c4bbad77 to 1.0.6 (#23030) - chore(deps): bump github.com/olekukonko/tablewriter from 1.0.6 to 1.0.7 (#23174) - chore(deps): bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 (#22615) - chore(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 (#22654) - chore(deps): bump github.com/redis/go-redis/v9 from 9.7.1 to 9.7.3 (#22425) - chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.116.0 to 0.129.0 (#23098) - chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.129.0 to 0.130.1 (#23365) - chore(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.59.0 to 0.60.0 (#22214) - chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.32.0 to 1.35.0 (#22215) - chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.35.0 to 1.36.0 (#23096) - chore(deps): bump go.opentelemetry.io/otel/sdk from 1.34.0 to 1.35.0 (#22210) - chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#22509) - chore(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 (#22599) - chore(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 (#22874) - chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 (#23289) - chore(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 (#22580) - chore(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#22871) - chore(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 (#23290) - chore(deps): bump golang.org/x/term from 0.31.0 to 0.32.0 (#22873) - chore(deps): bump golang.org/x/time from 0.11.0 to 0.12.0 (#23288) - chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 8.0.0 (#23111) - chore(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1 (#22542) - chore(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0 (#22742) - chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 (#22988) - chore(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2 (#23161) - chore(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0 (#23292) - chore(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#22478) - chore(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.3.0 (#23163) - chore(deps): bump http-proxy-middleware from 2.0.7 to 2.0.9 in /ui (#22698) - chore(deps): bump library/busybox from `3308bdf` to `f64ff79` in /test/e2e/multiarch-container (#23145) - chore(deps): bump library/busybox from `37f7b37` to `3308bdf` in /test/e2e/multiarch-container (#23119) - chore(deps): bump library/busybox from sha256:498a000f370d8c37927118ed80afe8adc38d1edcbfc071627d17b25c88efcab0 to sha256:37f7b378a29ceb4c551b1b5582e27747b855bbfaa73fa11914fe0df028dc581f in /test/e2e/multiarch-container (#22703) - chore(deps): bump library/golang from 1.24.1 to 1.24.2 in /test/container (#22597) - chore(deps): bump library/golang from 1.24.1 to 1.24.2 in /test/remote (#22581) - chore(deps): bump library/golang from 1.24.2 to 1.24.3 in /test/remote (#22905) - chore(deps): bump library/golang from 1.24.2@sha256:1ecc479bc712a6bdb56df3e346e33edcc141f469f82840bab9f4bc2bc41bf91d to sha256:d9db32125db0c3a680cfb7a1afcaefb89c898a075ec148fdc2f0f646cc2ed509 in /test/container (#22729) - chore(deps): bump library/golang from `18a1f2d` to `1ecc479` in /test/container (#22637) - chore(deps): bump library/golang from `18a1f2d` to `1ecc479` in /test/remote (#22636) - chore(deps): bump library/golang from `1bcf884` to `e84f2e8` in /test/remote (#23106) - chore(deps): bump library/golang from `1ecc479` to `d9db321` in /test/remote (#22790) - chore(deps): bump library/golang from `39d9e7d` to `86b4cff` in /test/remote (#22985) - chore(deps): bump library/golang from `4c0a181` to `81bf592` in /test/remote (#23220) - chore(deps): bump library/golang from `8131d99` to `30baaea` in /test/container (#22840) - chore(deps): bump library/golang from `86b4cff` to `1bcf884` in /test/remote (#23094) - chore(deps): bump library/golang from `991aa6a` to `c0b66cf` in /test/container (#22613) - chore(deps): bump library/golang from `991aa6a` to `c0b66cf` in /test/remote (#22618) - chore(deps): bump library/golang from `c0b66cf` to `18a1f2d` in /test/container (#22626) - chore(deps): bump library/golang from `c0b66cf` to `18a1f2d` in /test/remote (#22627) - chore(deps): bump library/golang from `c5adecd` to `8678013` in /test/remote (#22327) - chore(deps): bump library/golang from `d9db321` to `8131d99` in /test/container (#22820) - chore(deps): bump library/golang from `d9db321` to `8131d99` in /test/remote (#22818) - chore(deps): bump library/golang from `e84f2e8` to `4c0a181` in /test/remote (#23209) - chore(deps): bump library/redis from 7.4.2 to 7.4.3 in /test/container (#22789) - chore(deps): bump library/redis from 7.4.2@sha256:ca65ea36ae16e709b0f1c7534bc7e5b5ac2e5bb3c97236e4fec00e3625eb678d to sha256:fbdbaea47b9ae4ecc2082ecdb4e1cea81e32176ffb1dcf643d422ad07427e5d9 in /test/container (#22702) - chore(deps): bump library/redis from `8bc6664` to `d000041` in /test/container (#22821) - chore(deps): bump library/redis from `d000041` to `7df1eef` in /test/container (#22841) - chore(deps): bump library/registry from 2.8 to 3.0 in /test/container (#22575) - chore(deps): bump library/ubuntu from 24.04@sha256:80dd3c3b9c6cecb9f1667e9290b3bc61b78c2678c02cbdae5f0fea92cc6734ab to sha256:1e622c5f073b4f6bfad6632f2616c7f59ef256e96fe78bf6a595d1dc4376ac02 in /test/container (#22716) - chore(deps): bump oras.land/oras-go/v2 from 2.5.0 to 2.6.0 (#22912) - chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (#23149) - chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#23217) - chore(deps): bump peter-evans/create-pull-request from 7.0.5 to 7.0.8 (#23107) - chore(deps): bump prismjs from 1.27.0 to 1.30.0 in /ui (#22296) - chore(deps): bump selenium-webdriver from 4.29.0 to 4.30.0 in /ui-test (#22451) - chore(deps): bump selenium-webdriver from 4.30.0 to 4.31.0 in /ui-test (#22574) - chore(deps): bump selenium-webdriver from 4.31.0 to 4.32.0 in /ui-test (#22867) - chore(deps): bump selenium-webdriver from 4.32.0 to 4.33.0 in /ui-test (#23147) - chore(deps): bump sigs.k8s.io/controller-runtime from 0.20.1 to 0.20.4 (#22959) - chore(deps): bump sigs.k8s.io/structured-merge-diff/v4 from 4.6.0 to 4.7.0 (#22653) - chore(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.2 (#23109) - chore(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#23467) - chore(deps): bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#23166) - chore(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2 (#23150) - chore(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.0 (#23340) - chore(deps): bump softprops/action-gh-release from 2.3.0 to 2.3.2 (#23351) - chore(deps): bump style-loader to v1 (#23091) - chore(deps): bump tj-actions/changed-files from 3981e4f74104e7a4c67a835e1e5dd5d9eb0f0a57 to c6634ca281a9fc05b03bee224ba00910cb78ab6e (#23165) - chore(deps): bump tj-actions/changed-files from bab30c2299617f6615ec02a68b9a40d10bd21366 to 3981e4f74104e7a4c67a835e1e5dd5d9eb0f0a57 (#23121) - chore(deps): update dependency gotestyourself/gotestsum to v1.12.2 (#22875) - chore(deps): update dependency markdown to v3.8 (#22642) - chore(deps): update dependency markdown to v3.8.1 (#23480) - chore(deps): update dependency pymdown-extensions to v10.15 (#22811) - chore(deps): update module github.com/golangci/golangci-lint to v1.64.8 (#22384) - chore(deps): update module github.com/golangci/golangci-lint to v2.1.1 (#22458) - chore(deps): update module github.com/golangci/golangci-lint to v2.1.2 (#22675) - chore(deps): update module github.com/golangci/golangci-lint to v2.1.5 (#22783) - chore(deps): update module github.com/golangci/golangci-lint to v2.1.6 (#22865) ++++ cf-cli: - Use current distro go default version. As cf-cli are oldish sources, also use GO111MODULE=off. - Use current distro go default version. As cf-cli are oldish sources, also use GO111MODULE=off. ++++ clusterctl: - Update to version 1.10.5: * Update github.com/coredns/corefile-migration: v1.0.26 → v1.0.27 ++++ crmsh: - Update to version 5.0.0+20250820.2550d50a: * Dev: unittests: Adjust unit test for previous commit * Dev: bootstrap: No need to remove /var/lib/crmsh ++++ digger-cli: - Update to version 0.6.118: * instructions per project comments (#2091) * local dev support (#2088) * add backend instructions (#2090) * Realtime backend summary updates (#2089) * DIGGER_PLANFILE in apply runs (#2087) * Feat/breardon2011/instructions (#2085) * add additional query to filter for repo name (#2084) * fix: remove locking success collapsible (#2083) * remove redundant logs (#2082) * Update README.md (Added "how digger is used" section) * fix danglin locks issue (#2079) - Update to version 0.6.117: * support PLANOUT (#2077) * remove runs reporting (#2076) * expand on undiverged branches (#2072) ++++ docker-compose-switch: - Use current distro go version. ++++ dvdauthor: - Disabled i586 build and remove oblolete statements from spec - Fix build failures on FACTORY due to the new gettext: gettext-fix.patch - Clean up spec file ++++ dyff: - Update to version 1.10.2: * Fix new `--use-indent-lines` wiring in code * Fix typos * doc: Add packaging status, document FreeBSD install * feat: add flag for useIndentLines * feat: allow disabling indent lines * build(deps): bump golang.org/x/tools from 0.35.0 to 0.36.0 * build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 * build(deps): bump golang.org/x/text from 0.27.0 to 0.28.0 * build(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 * build(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 * build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 * build(deps): bump golang.org/x/tools from 0.34.0 to 0.35.0 * build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 * build(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 * build(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 * build(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 * build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 * build(deps): bump github.com/gonvenience/bunt from 1.4.1 to 1.4.2 * build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 * build(deps): bump golang.org/x/tools from 0.33.0 to 0.34.0 * build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 * build(deps): bump github.com/sergi/go-diff * build(deps): bump golang.org/x/text from 0.25.0 to 0.26.0 * build(deps): bump github.com/go-logr/logr from 1.4.2 to 1.4.3 * build(deps): bump dependabot/fetch-metadata from 2.3.0 to 2.4.0 * build(deps): bump golang.org/x/tools from 0.32.0 to 0.33.0 * build(deps): bump golangci/golangci-lint-action from 7 to 8 * build(deps): bump golang.org/x/sys from 0.32.0 to 0.33.0 * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7 * Bump golang.org/x/tools from 0.31.0 to 0.32.0 * Bump golang.org/x/sys from 0.31.0 to 0.32.0 * Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 * Bump github.com/onsi/gomega from 1.36.3 to 1.37.0 * Bump golang.org/x/net from 0.37.0 to 0.38.0 * Bump golangci/golangci-lint-action from 6 to 7 * Bump github.com/gonvenience/bunt from 1.4.0 to 1.4.1 * Bump github.com/gonvenience/term from 1.0.3 to 1.0.4 * Bump github.com/gonvenience/text from 1.0.8 to 1.0.9 * Bump github.com/gonvenience/idem from 0.0.1 to 0.0.2 * Bump github.com/gonvenience/neat from 1.3.15 to 1.3.16 * Bump github.com/onsi/gomega from 1.36.2 to 1.36.3 * Bump github.com/gonvenience/ytbx from 1.4.6 to 1.4.7 * Bump github.com/onsi/ginkgo/v2 from 2.23.1 to 2.23.2 * Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.1 * Bump github.com/BurntSushi/toml from 1.4.0 to 1.5.0 ++++ dysk: - Update to version 3.0.0: * reduce number of keywords in Cargo.toml * update changelog, fix deploy script * remove table of direct links to executables * commit the official deploy script * version 3.0 * improve cross compilation * make target.sh compatible with mac * build.sh compatible with non linux local * update doc to mention in runs on mac too * update lfs-core to stop using stat on mac * restore dev major:minor in json * use lfs-core v0.13 * Mac: unix device id, PATH argument * make / not normal on mac * make /System/Volumes/Data normal * use lfs-core dependency through github with branch * fix unused import on mac * make /boot not "normal" on linux * WIP - Mac compatibility * add a CONTRIBUTING.md file * add RISC-V pre-built binary ++++ editorconfig-checker: - Update to version 3.4.0: * Features - add *~ (emacs backup files) to default excludes (#483) (bbd722f), closes #482 - add go.work, and go.work.sum files to default excludes (#468) (05296a5) * Dependencies - chore(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 (#478) - chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.13 to 0.5.14 (#481) - chore(deps): bump golang.org/x/text from 0.27.0 to 0.28.0 (#484) - chore(deps): bump anchore/sbom-action from 0.20.0 to 0.20.2 (#476) - chore(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 (#477) - chore(deps): bump golang.org/x/text from 0.25.0 to 0.26.0 (#474) - chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.11 to 0.5.13 (#472) - chore(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 (#469) ++++ fsvs: - Fix build error with automake 1.18.1 * the name of automake libdir is automake-1.18 although the version number is 1.18.1, use 'automake --print-libdir' to instead of query the rpm package version ++++ fuse3: - Update to release 3.17.4 * detect mount-utils by checking for /run/mount/utab ++++ git: - Use zlib instead of zlib-ng for SLES16 ++++ git-town: - Update to version 21.4.3: * Bug Fixes - Fewer phantom merge conflicts: Git Town now performs a rebase-onto only if there are actual commits to remove. If there are no commits to remove, Git Town performs a regular rebase, or if there is no need to sync, no rebase at all. (#5422) - "git town branch" prints branches in other worktrees de-emphasized (#5405) - Update to version 21.4.2: * Bug Fixes - Git Town no longer mistakes legit file conflicts for phantom conflicts (#5156, #5140) - delete: Git Town now rebases onto the correct branch (#5358) ++++ golang-github-QubitProducts-exporter_exporter: - Use current distro go default version. - Use current distro go default version. Use auto-versioning on SUSE as well. ++++ govulncheck-vulndb: - Update to version 0.0.20250820T174735 2025-08-20T17:47:35Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3783 CVE-2025-52894 GHSA-prpj-rchp-9j5h ++++ harbor-cli: - Update to version 0.0.10: * Update readme for replication support (#532) * Replication executions (#518) * build(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 (#527) * build(deps): bump golang.org/x/text from 0.27.0 to 0.28.0 (#528) ++++ hashcat: - Use BUILD_MODE=cross to not optimize for build machine CPU (boo#1248352) ++++ helm: - Update to version 3.18.6: * fix(helm-lint): fmt * fix(helm-lint): Add TLSClientConfig * fix(helm-lint): Add HTTP/HTTPS URL support for json schema references ++++ jack-rack: - update to version 1.5.0 - remove obsolete patches (fixed upstream): * jack-rack-undeprec.dif * jack-rack-inc-fix.diff * jack-rack-ld_fix.diff - add jack-rack-autotools.patch (fixes build with recent autotools) ++++ jp: - Use current distro go default version. As these are oldish sources, also use GO111MODULE=off. ++++ k3sup: - Update to version 0.13.11: * Add command to obtain k3sup pro * Initial pro readme * Fixes in README * Update README.md * Update .DEREK.yml ++++ k6: - Update to version 1.2.2: * Bug fixes - #5067 fixes a panic on the deprecated k6 login cloud command. Thanks @indygriffiths for reporting it! - #5069 Fixes group order in end of test summary when scenarios are used. - #5070 Adds nullish check to the new getByRole and add tests for other getBy* APIs nullish checks. - Update to version 1.2.1: https://github.com/grafana/k6/releases/tag/v1.2.1 Note: An old xk6-browser repo v1.2.0 tag was pushed by mistake. It was left over on the machine since the merging of the two repos. As such it can not be used as a go module or installed with go install. For this reason v1.2.1 is released. - Update to version 1.2.0: The release notes contain a lot of examples and documentation on new features, please check it out here: https://github.com/grafana/k6/releases/tag/v1.2.0 * Breaking changes As per our stability guarantees, breaking changes across minor releases are allowed only for experimental features. Breaking changes for experimental modules - The experimental Open Telemetry and Prometheus outputs now default to TLSv1.3. This should've been the default to begin with. It is not expected that anyone should be affected, apart from making it more secure for the metrics output to send messages. * UX improvements and enhancements - #4878 Do not report NaN percentages when there are no checks in the end of test summary. Thank you @Fernando-hub527 for the fix. - #4897 Support string-labels in locator.selectOption in the browser module. - #4898 Add support for authority pseudo header to the gRPC module. Thank you @Oursin for the changes. - #4916 Print errors more consistently and correctly. - #4918 Surface navigation errors from navigation events in the browser module. - #4919 page.url() now doesn't make a call to the browser but instead uses a cached version. Making it a lot faster and aligned with playwright. - #4932 Making it more clear that the requests were aborted in the browser module. - #4944 Add Prometheus metrics endpoint. Thank you @gouthamve. - #5040 Use new expect() syntax in script templates. - #4976 Align metrics in end of test summary with using less dots and less horizontal space. * Bug fixes - #4850 Fixes incorrect conversions between integer types in the browser module. - #4973 Fixes panic when BrowserContext is requested before creating a Page in the browser module. - #4975 Fixes potential race conditions in the browser module. - #5015 Fixes waitForNavigation now blocking the iteration from ending if page.close is not called. - #5017 Fixes potential race conditions in gRPC module, when it gets protobuf defintions from remote server. * Maintenance and internal improvements - #4666 Lowers the log level on some cloud output logs that were too noisy. - #4879, #4945 Updates of software used by the internal k6packager that packages k6. - #4886 Prevents running Winsign for public forks to avoid failing and wasting CI time. - #4892, #4901, #4909, #4927, #4928, #4929, #4939, #4954, [#4965], #4977, #5000, #5001, #5041, #5043 Updates dependencies. - #4925 Configures Dependabot to update all OTel dependencies. - #4914, #4967, #4974, #4990, #4991, #5007, #5008 PRs trying to get the CI tests to be more stable. - #4923 Mention k6 studio in the readme for more visibility. - #4931 Lower the debug log on internal implementation detail error. - #4943, #4946, #4948 Fix the CI not checking generated files and pinning versions. - #4949 Updates to Linux Alpine 3.22 for building the k6 docker image. - #4950 Adds Dependabot rule to update the main Dockerfile dependencies. - #4958 Passes k6's file system to k6deps (for automatic extension resolution). - #4959 Copies Zizmor configuration in the repository to make it work for forks. - #4960 Reduces waitForNavigation complexity. - #4969, #4986 Updates around semgrep scanning for security issues. - #4994 Configures Dependabot to update dependencies in Github actions. - #4996, #4997, #4998 Updates to github actions dependancies. - #5014 Adds a test for running tests with the automatic extension resolution disabled. - #5016 Fix internal/cmd/tests with automatic extension resolution enabled. - #5020 Fix examples with browser using the wrong endpoints. ++++ kernel-default: - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1012628). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1012628). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1012628). - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts (bsc#1012628). - lib/crypto: x86/poly1305: Fix performance regression on short messages (bsc#1012628). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1012628). - Documentation: ACPI: Fix parent device references (bsc#1012628). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1012628). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1012628). - ACPI: EC: Relax sanity check of the ECDT ID string (bsc#1012628). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1012628). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1012628). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1012628). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1012628). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1012628). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1012628). - habanalabs: fix UAF in export_dmabuf() (bsc#1012628). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1012628). - xfrm: flush all states in xfrm_state_fini (bsc#1012628). - xfrm: restore GSO for SW crypto (bsc#1012628). - xfrm: bring back device check in validate_xmit_xfrm (bsc#1012628). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1012628). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1012628). - netfilter: ctnetlink: remove refcounting in expectation dumpers (bsc#1012628). - net: hibmcge: fix rtnl deadlock issue (bsc#1012628). - net: hibmcge: fix the division by zero issue (bsc#1012628). - net: hibmcge: fix the np_link_fail error reporting issue (bsc#1012628). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1012628). - net: page_pool: allow enabling recycling late, fix false positive warning (bsc#1012628). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1012628). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1012628). - net: lapbether: ignore ops-locked netdevs (bsc#1012628). - hamradio: ignore ops-locked netdevs (bsc#1012628). - erofs: fix block count report when 48-bit layout is on (bsc#1012628). - intel_idle: Allow loading ACPI tables for any family (bsc#1012628). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1012628). - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (bsc#1012628). - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (bsc#1012628). - net: stmmac: thead: Get and enable APB clock on initialization (bsc#1012628). - riscv: dts: thead: Add APB clocks for TH1520 GMACs (bsc#1012628). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1012628). - tls: handle data disappearing from under the TLS ULP (bsc#1012628). - ipvs: Fix estimator kthreads preferred affinity (bsc#1012628). - netfilter: nf_tables: reject duplicate device on updates (bsc#1012628). - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE (bsc#1012628). - net: kcm: Fix race condition in kcm_unattach() (bsc#1012628). - hfs: fix general protection fault in hfs_find_init() (bsc#1012628). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1012628). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1012628). - arm64: Handle KCOV __init vs inline mismatches (bsc#1012628). - tpm: Check for completion after timeout (bsc#1012628). - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (bsc#1012628). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1012628). - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents (bsc#1012628). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1012628). - nvme-pci: try function level reset on init failure (bsc#1012628). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1012628). - md/raid10: set chunk_sectors limit (bsc#1012628). - nvme-tcp: log TLS handshake failures at error level (bsc#1012628). - gfs2: Validate i_depth for exhash directories (bsc#1012628). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1012628). - loop: Avoid updating block size under exclusive owner (bsc#1012628). - udf: Verify partition map count (bsc#1012628). - drbd: add missing kref_get in handle_write_conflicts (bsc#1012628). - hfs: fix not erasing deleted b-tree node issue (bsc#1012628). - better lockdep annotations for simple_recursive_removal() (bsc#1012628). - ata: ahci: Disallow LPM policy control if not supported (bsc#1012628). - ata: ahci: Disable DIPM if host lacks support (bsc#1012628). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1012628). - fs/ntfs3: Add sanity check for file name (bsc#1012628). - fs/ntfs3: correctly create symlink for relative path (bsc#1012628). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - landlock: opened file never has a negative dentry (bsc#1012628). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1012628). - fix locking in efi_secret_unlink() (bsc#1012628). - securityfs: don't pin dentries twice, once is enough.. (bsc#1012628). - tracefs: Add d_delete to remove negative dentries (bsc#1012628). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1012628). - staging: gpib: Add init response codes for new ni-usb-hs+ (bsc#1012628). - selftests/kexec: fix test_kexec_jump build (bsc#1012628). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1012628). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1012628). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1012628). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1012628). - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support (bsc#1012628). - bus: mhi: host: pci_generic: Disable runtime PM for QDU100 (bsc#1012628). - usb: xhci: Avoid showing warnings for dying controller (bsc#1012628). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1012628). - usb: xhci: Avoid showing errors during surprise removal (bsc#1012628). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1012628). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1012628). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1012628). - binder: Fix selftest page indexing (bsc#1012628). - gpio: loongson-64bit: Extend GPIO irq support (bsc#1012628). - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi (bsc#1012628). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1012628). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1012628). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1012628). - cpufreq: Exit governor when failed to start old governor (bsc#1012628). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1012628). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1012628). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1012628). - EDAC/synopsys: Clear the ECC counters on init (bsc#1012628). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1012628). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1012628). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1012628). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1012628). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1012628). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1012628). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1012628). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1012628). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1012628). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1012628). - firmware: tegra: Fix IVC dependency problems (bsc#1012628). - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56 (bsc#1012628). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1012628). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1012628). - PM: sleep: console: Fix the black screen issue (bsc#1012628). - ACPI: processor: fix acpi_object initialization (bsc#1012628). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1012628). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1012628). - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND (bsc#1012628). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1012628). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1012628). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1012628). - ASoC: SDCA: Add flag for unused IRQs (bsc#1012628). - x86/sev/vc: Fix EFI runtime instruction emulation (bsc#1012628). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1012628). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1012628). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1012628). - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (bsc#1012628). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1012628). - ALSA: hda: Handle the jack polling always via a work (bsc#1012628). - ALSA: hda: Disable jack polling at shutdown (bsc#1012628). - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700 (bsc#1012628). - x86/bugs: Avoid warning when overriding return thunk (bsc#1012628). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1012628). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1012628). - irqchip/mips-gic: Allow forced affinity (bsc#1012628). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1012628). - tty: serial: fix print format specifiers (bsc#1012628). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1012628). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1012628). - usb: core: usb_submit_urb: downgrade type check (bsc#1012628). - usb: dwc3: xilinx: add shutdown callback (bsc#1012628). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1012628). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1012628). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1012628). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1012628). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1012628). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1012628). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1012628). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1012628). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1012628). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1012628). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1012628). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1012628). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1012628). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1012628). - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (bsc#1012628). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1012628). - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (bsc#1012628). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1012628). - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (bsc#1012628). - xen/netfront: Fix TX response spurious interrupts (bsc#1012628). - wifi: iwlwifi: mld: use spec link id and not FW link id (bsc#1012628). - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (bsc#1012628). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1012628). - net: usb: cdc-ncm: check for filtering capability (bsc#1012628). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1012628). - ktest.pl: Prevent recursion of default variable options (bsc#1012628). - wifi: cfg80211: reject HTC bit for management frames (bsc#1012628). - s390/sclp: Use monotonic clock in sclp_sync_wait() (bsc#1012628). - s390/time: Use monotonic clock in get_cycles() (bsc#1012628). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1012628). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1012628). - idpf: preserve coalescing settings across resets (bsc#1012628). - libbpf: Fix warning in calloc() usage (bsc#1012628). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1012628). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1012628). - et131x: Add missing check after DMA map (bsc#1012628). - net: ag71xx: Add missing check after DMA map (bsc#1012628). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1012628). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1012628). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1012628). - drm/amd/pm: fix null pointer access (bsc#1012628). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1012628). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1012628). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1012628). - net: mctp: Prevent duplicate binds (bsc#1012628). - wifi: mac80211: don't use TPE data from assoc response (bsc#1012628). - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (bsc#1012628). - wifi: cfg80211: Fix interface type validation (bsc#1012628). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1012628). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1012628). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1012628). - net: phy: micrel: Add ksz9131_resume() (bsc#1012628). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1012628). - sched/deadline: Fix accounting after global limits change (bsc#1012628). - bpf: Forget ranges when refining tnum after JSET (bsc#1012628). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1012628). - wifi: iwlwifi: mld: fix scan request validation (bsc#1012628). - um: Re-evaluate thread flags repeatedly (bsc#1012628). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1012628). - wifi: iwlwifi: handle non-overlapping API ranges (bsc#1012628). - drm/sched/tests: Add unit test for cancel_job() (bsc#1012628). - drm/sched: Avoid memory leaks with cancel_job() callback (bsc#1012628). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1012628). - net: phy: bcm54811: PHY initialization (bsc#1012628). - rv: Add #undef TRACE_INCLUDE_FILE (bsc#1012628). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1012628). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1012628). - wifi: mac80211: avoid weird state in error path (bsc#1012628). - s390/early: Copy last breaking event address to pt_regs (bsc#1012628). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1012628). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1012628). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1012628). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1012628). - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (bsc#1012628). - wifi: mt76: fix vif link allocation (bsc#1012628). - drm/fbdev-client: Skip DRM clients if modesetting is absent (bsc#1012628). - drm/msm: Update register xml (bsc#1012628). - drm/msm: use trylock for debugfs (bsc#1012628). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1012628). - perf/arm: Add missing .suppress_bind_attrs (bsc#1012628). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1012628). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1012628). - wifi: rtw89: Disable deep power saving for USB/SDIO (bsc#1012628). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1012628). - wifi: mt76: mt7915: mcu: increase eeprom command timeout (bsc#1012628). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1012628). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1012628). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1012628). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1012628). - xfrm: Duplicate SPI Handling (bsc#1012628). - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization (bsc#1012628). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1012628). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1012628). - net: ieee8021q: fix insufficient table-size assertion (bsc#1012628). - net: enetc: separate 64-bit counters from enetc_port_counters (bsc#1012628). - net: fec: allow disable coalescing (bsc#1012628). - drm/amdgpu: Use correct severity for BP threshold exceed event (bsc#1012628). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1012628). - drm/amd/display: add null check (bsc#1012628). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1012628). - drm/panel: raydium-rm67200: Move initialization from enable() to prepare stage (bsc#1012628). - eth: bnxt: take page size into account for page pool recycling rings (bsc#1012628). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1012628). - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (bsc#1012628). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1012628). - net: phy: realtek: add error handling to rtl8211f_get_wol (bsc#1012628). - lib: packing: Include necessary headers (bsc#1012628). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1012628). - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (bsc#1012628). - wifi: iwlwifi: mld: use the correct struct size for tracing (bsc#1012628). - wifi: iwlwifi: mld: fix last_mlo_scan_time type (bsc#1012628). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1012628). - wifi: iwlwifi: pcie: reinit device properly during TOP reset (bsc#1012628). - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (bsc#1012628). - drm/amdgpu: Add more checks to PSP mailbox (bsc#1012628). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1012628). - drm/amd/display: Initialize mode_select to 0 (bsc#1012628). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1012628). - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (bsc#1012628). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1012628). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1012628). - powerpc: floppy: Add missing checks after DMA map (bsc#1012628). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1012628). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1012628). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1012628). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1012628). - drm/amd/pm: Use pointer type for typecheck() (bsc#1012628). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1012628). - drm/amd/display: Stop storing failures into adev->dm.cached_state (bsc#1012628). - drm/amdgpu: Suspend IH during mode-2 reset (bsc#1012628). - drm/amdgpu: clear pa and mca record counter when resetting eeprom (bsc#1012628). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1012628). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1012628). - gve: Return error for unknown admin queue command (bsc#1012628). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1012628). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1012628). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1012628). - bpftool: Fix JSON writer resource leak in version command (bsc#1012628). - ptp: Use ratelimite for freerun error message (bsc#1012628). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1012628). - ionic: clean dbpage in de-init (bsc#1012628). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1012628). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1012628). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1012628). - drm/ttm: Should to return the evict error (bsc#1012628). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1012628). - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (bsc#1012628). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1012628). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1012628). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1012628). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1012628). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1012628). - drm/ttm: Respect the shrinker core free target (bsc#1012628). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1012628). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1012628). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1012628). - vhost: fail early when __vhost_add_used() fails (bsc#1012628). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1012628). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1012628). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1012628). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1012628). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1012628). - smb: client: fix session setup against servers that require SPN (bsc#1012628). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1012628). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1012628). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1012628). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1012628). - sphinx: kernel_abi: fix performance regression with O= (bsc#1012628). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1012628). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1012628). - phy: rockchip-pcie: Enable all four lanes if required (bsc#1012628). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1012628). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1012628). - watchdog: dw_wdt: Fix default timeout (bsc#1012628). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1012628). - clk: qcom: ipq5018: keep XO clock always on (bsc#1012628). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1012628). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1012628). - ext4: limit the maximum folio order (bsc#1012628). - scsi: bfa: Double-free fix (bsc#1012628). - jfs: truncate good inode pages when hard link is 0 (bsc#1012628). - jfs: Regular file corruption check (bsc#1012628). - jfs: upper bound check of tree index in dbAllocAG (bsc#1012628). - media: hi556: Fix reset GPIO timings (bsc#1012628). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1012628). - crypto: jitter - fix intermediary handling (bsc#1012628). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1012628). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1012628). - media: iris: Add handling for corrupt and drop frames (bsc#1012628). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1012628). - media: i2c: vd55g1: Setup sensor external clock before patching (bsc#1012628). - media: i2c: vd55g1: Fix RATE macros not being expressed in bps (bsc#1012628). - media: ipu-bridge: Add _HID for OV5670 (bsc#1012628). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1012628). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1012628). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1012628). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1012628). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1012628). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1012628). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1012628). - crypto: caam - Support iMX8QXP and variants thereof (bsc#1012628). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1012628). - HID: rate-limit hid_warn to prevent log flooding (bsc#1012628). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1012628). - scsi: pm80xx: Free allocated tags after failure (bsc#1012628). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1012628). - PCI: dw-rockchip: Delay link training after hot reset in EP mode (bsc#1012628). - pinctrl: stm32: Manage irq affinity settings (bsc#1012628). - media: raspberrypi: cfe: Fix min_reqbufs_allocation (bsc#1012628). - media: tc358743: Check I2C succeeded during probe (bsc#1012628). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1012628). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1012628). - media: usb: hdpvr: disable zero-length read messages (bsc#1012628). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1012628). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1012628). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1012628). - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (bsc#1012628). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1012628). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1012628). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1012628). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1012628). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1012628). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1012628). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1012628). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1012628). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1012628). - i3c: add missing include to internal header (bsc#1012628). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1012628). - apparmor: shift ouid when mediating hard links in userns (bsc#1012628). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1012628). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1012628). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1012628). - dm-table: fix checking for rq stackable devices (bsc#1012628). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1012628). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1012628). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1012628). - exfat: add cluster chain loop check for dir (bsc#1012628). - f2fs: check the generic conditions first (bsc#1012628). - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info() (bsc#1012628). - printk: nbcon: Allow reacquire during panic (bsc#1012628). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1012628). - vfio/type1: conditional rescheduling while pinning (bsc#1012628). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1012628). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1012628). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1012628). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1012628). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1012628). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1012628). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1012628). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1012628). - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a minute (bsc#1012628). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1012628). - ipmi: Fix strcpy source and destination the same (bsc#1012628). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1012628). - tools/power turbostat: Fix build with musl (bsc#1012628). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1012628). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1012628). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1012628). - irqchip/mvebu-gicp: Clear pending interrupts on init (bsc#1012628). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1012628). - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU (bsc#1012628). - regmap: irq: Free the regmap-irq mutex (bsc#1012628). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1012628). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1012628). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1012628). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1012628). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1012628). - pNFS: Handle RPC size limit for layoutcommits (bsc#1012628). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1012628). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1012628). - scsi: ufs: core: Fix interrupt handling for MCQ Mode (bsc#1012628). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1012628). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1012628). - ublk: check for unprivileged daemon on each I/O fetch (bsc#1012628). - block: fix kobject double initialization in add_disk (bsc#1012628). - cifs: Fix collect_sample() to handle any iterator type (bsc#1012628). - drm/i915/fbc: fix the implementation of wa_18038517565 (bsc#1012628). - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush (bsc#1012628). - drm/xe/migrate: prevent infinite recursion (bsc#1012628). - drm/xe/migrate: don't overflow max copy size (bsc#1012628). - drm/xe/migrate: prevent potential UAF (bsc#1012628). - drm/xe/hwmon: Add SW clamp for power limits writes (bsc#1012628). - drm/amdgpu: fix vram reservation issue (bsc#1012628). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1012628). - x86/sev: Improve handling of writes to intercepted TSC MSRs (bsc#1012628). - x86/fpu: Fix NULL dereference in avx512_status() (bsc#1012628). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1012628). - futex: Use user_write_access_begin/_end() in futex_put_value() (bsc#1012628). - rust: kbuild: clean output before running `rustdoc` (bsc#1012628). - rust: workaround `rustdoc` target modifiers bug (bsc#1012628). - samples/damon/wsse: fix boot time enable handling (bsc#1012628). - samples/damon/mtier: support boot time enable setup (bsc#1012628). - mm/damon/core: commit damos->target_nid (bsc#1012628). - block: Introduce bio_needs_zone_write_plugging() (bsc#1012628). - dm: Always split write BIOs to zoned device limits (bsc#1012628). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1012628). - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks (bsc#1012628). - cifs: reset iface weights when we cannot find a candidate (bsc#1012628). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1012628). - iommu/arm-smmu-v3: Revert vmaster in the error path (bsc#1012628). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1012628). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1012628). - iommufd: Prevent ALIGN() overflow (bsc#1012628). - ext4: fix zombie groups in average fragment size lists (bsc#1012628). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1012628). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1012628). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1012628). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1012628). - usb: typec: ucsi: Update power_supply on power role change (bsc#1012628). - comedi: fix race between polling and detaching (bsc#1012628). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1012628). - usb: typec: fusb302: cache PD RX state (bsc#1012628). - cdc-acm: fix race between initial clearing halt and open (bsc#1012628). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1012628). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1012628). - btrfs: zoned: reserve data_reloc block group on mount (bsc#1012628). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1012628). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1012628). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1012628). - btrfs: don't ignore inode missing when replaying log tree (bsc#1012628). - btrfs: fix ssd_spread overallocation (bsc#1012628). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1012628). - btrfs: populate otime when logging an inode item (bsc#1012628). - btrfs: don't skip accounting in early ENOTTY return in btrfs_uring_encoded_read() (bsc#1012628). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1012628). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1012628). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1012628). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1012628). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1012628). - btrfs: zoned: do not select metadata BG as finish target (bsc#1012628). - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents() (bsc#1012628). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1012628). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1012628). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1012628). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1012628). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1012628). - fbdev: nvidiafb: add depends on HAS_IOPORT (bsc#1012628). - ocfs2: reset folio to NULL when get folio fails (bsc#1012628). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1012628). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1012628). - i2c: core: Fix double-free of fwnode in i2c_unregister_device() (bsc#1012628). - parisc: Makefile: fix a typo in palo.conf (bsc#1012628). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1012628). - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud() (bsc#1012628). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1012628). - mm/shmem, swap: improve cached mTHP handling and fix potential hang (bsc#1012628). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1012628). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1012628). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1012628). - media: venus: Fix OOB read due to missing payload bound check (bsc#1012628). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1012628). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1012628). - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (bsc#1012628). - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path (bsc#1012628). - tracing: fprobe: Fix infinite recursion using preempt_*_notrace() (bsc#1012628). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1012628). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1012628). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1012628). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1012628). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1012628). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1012628). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1012628). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1012628). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1012628). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1012628). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1012628). - irqchip/mvebu-gicp: Use resource_size() for ioremap() (bsc#1012628). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1012628). - io_uring/zcrx: fix null ifq on area destruction (bsc#1012628). - io_uring/zcrx: don't leak pages on account failure (bsc#1012628). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.2-522-btrfs-fix-log-tree-replay-failure-due-to-file-.patch. - commit b12dbdb ++++ kernel-source: - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1012628). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1012628). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1012628). - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts (bsc#1012628). - lib/crypto: x86/poly1305: Fix performance regression on short messages (bsc#1012628). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1012628). - Documentation: ACPI: Fix parent device references (bsc#1012628). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1012628). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1012628). - ACPI: EC: Relax sanity check of the ECDT ID string (bsc#1012628). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1012628). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1012628). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1012628). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1012628). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1012628). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1012628). - habanalabs: fix UAF in export_dmabuf() (bsc#1012628). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1012628). - xfrm: flush all states in xfrm_state_fini (bsc#1012628). - xfrm: restore GSO for SW crypto (bsc#1012628). - xfrm: bring back device check in validate_xmit_xfrm (bsc#1012628). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1012628). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1012628). - netfilter: ctnetlink: remove refcounting in expectation dumpers (bsc#1012628). - net: hibmcge: fix rtnl deadlock issue (bsc#1012628). - net: hibmcge: fix the division by zero issue (bsc#1012628). - net: hibmcge: fix the np_link_fail error reporting issue (bsc#1012628). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1012628). - net: page_pool: allow enabling recycling late, fix false positive warning (bsc#1012628). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1012628). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1012628). - net: lapbether: ignore ops-locked netdevs (bsc#1012628). - hamradio: ignore ops-locked netdevs (bsc#1012628). - erofs: fix block count report when 48-bit layout is on (bsc#1012628). - intel_idle: Allow loading ACPI tables for any family (bsc#1012628). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1012628). - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (bsc#1012628). - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (bsc#1012628). - net: stmmac: thead: Get and enable APB clock on initialization (bsc#1012628). - riscv: dts: thead: Add APB clocks for TH1520 GMACs (bsc#1012628). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1012628). - tls: handle data disappearing from under the TLS ULP (bsc#1012628). - ipvs: Fix estimator kthreads preferred affinity (bsc#1012628). - netfilter: nf_tables: reject duplicate device on updates (bsc#1012628). - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE (bsc#1012628). - net: kcm: Fix race condition in kcm_unattach() (bsc#1012628). - hfs: fix general protection fault in hfs_find_init() (bsc#1012628). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1012628). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1012628). - arm64: Handle KCOV __init vs inline mismatches (bsc#1012628). - tpm: Check for completion after timeout (bsc#1012628). - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (bsc#1012628). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1012628). - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents (bsc#1012628). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1012628). - nvme-pci: try function level reset on init failure (bsc#1012628). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1012628). - md/raid10: set chunk_sectors limit (bsc#1012628). - nvme-tcp: log TLS handshake failures at error level (bsc#1012628). - gfs2: Validate i_depth for exhash directories (bsc#1012628). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1012628). - loop: Avoid updating block size under exclusive owner (bsc#1012628). - udf: Verify partition map count (bsc#1012628). - drbd: add missing kref_get in handle_write_conflicts (bsc#1012628). - hfs: fix not erasing deleted b-tree node issue (bsc#1012628). - better lockdep annotations for simple_recursive_removal() (bsc#1012628). - ata: ahci: Disallow LPM policy control if not supported (bsc#1012628). - ata: ahci: Disable DIPM if host lacks support (bsc#1012628). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1012628). - fs/ntfs3: Add sanity check for file name (bsc#1012628). - fs/ntfs3: correctly create symlink for relative path (bsc#1012628). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - landlock: opened file never has a negative dentry (bsc#1012628). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1012628). - fix locking in efi_secret_unlink() (bsc#1012628). - securityfs: don't pin dentries twice, once is enough.. (bsc#1012628). - tracefs: Add d_delete to remove negative dentries (bsc#1012628). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1012628). - staging: gpib: Add init response codes for new ni-usb-hs+ (bsc#1012628). - selftests/kexec: fix test_kexec_jump build (bsc#1012628). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1012628). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1012628). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1012628). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1012628). - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support (bsc#1012628). - bus: mhi: host: pci_generic: Disable runtime PM for QDU100 (bsc#1012628). - usb: xhci: Avoid showing warnings for dying controller (bsc#1012628). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1012628). - usb: xhci: Avoid showing errors during surprise removal (bsc#1012628). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1012628). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1012628). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1012628). - binder: Fix selftest page indexing (bsc#1012628). - gpio: loongson-64bit: Extend GPIO irq support (bsc#1012628). - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi (bsc#1012628). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1012628). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1012628). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1012628). - cpufreq: Exit governor when failed to start old governor (bsc#1012628). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1012628). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1012628). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1012628). - EDAC/synopsys: Clear the ECC counters on init (bsc#1012628). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1012628). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1012628). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1012628). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1012628). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1012628). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1012628). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1012628). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1012628). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1012628). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1012628). - firmware: tegra: Fix IVC dependency problems (bsc#1012628). - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56 (bsc#1012628). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1012628). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1012628). - PM: sleep: console: Fix the black screen issue (bsc#1012628). - ACPI: processor: fix acpi_object initialization (bsc#1012628). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1012628). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1012628). - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND (bsc#1012628). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1012628). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1012628). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1012628). - ASoC: SDCA: Add flag for unused IRQs (bsc#1012628). - x86/sev/vc: Fix EFI runtime instruction emulation (bsc#1012628). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1012628). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1012628). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1012628). - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (bsc#1012628). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1012628). - ALSA: hda: Handle the jack polling always via a work (bsc#1012628). - ALSA: hda: Disable jack polling at shutdown (bsc#1012628). - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700 (bsc#1012628). - x86/bugs: Avoid warning when overriding return thunk (bsc#1012628). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1012628). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1012628). - irqchip/mips-gic: Allow forced affinity (bsc#1012628). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1012628). - tty: serial: fix print format specifiers (bsc#1012628). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1012628). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1012628). - usb: core: usb_submit_urb: downgrade type check (bsc#1012628). - usb: dwc3: xilinx: add shutdown callback (bsc#1012628). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1012628). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1012628). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1012628). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1012628). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1012628). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1012628). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1012628). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1012628). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1012628). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1012628). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1012628). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1012628). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1012628). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1012628). - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (bsc#1012628). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1012628). - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (bsc#1012628). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1012628). - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (bsc#1012628). - xen/netfront: Fix TX response spurious interrupts (bsc#1012628). - wifi: iwlwifi: mld: use spec link id and not FW link id (bsc#1012628). - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (bsc#1012628). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1012628). - net: usb: cdc-ncm: check for filtering capability (bsc#1012628). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1012628). - ktest.pl: Prevent recursion of default variable options (bsc#1012628). - wifi: cfg80211: reject HTC bit for management frames (bsc#1012628). - s390/sclp: Use monotonic clock in sclp_sync_wait() (bsc#1012628). - s390/time: Use monotonic clock in get_cycles() (bsc#1012628). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1012628). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1012628). - idpf: preserve coalescing settings across resets (bsc#1012628). - libbpf: Fix warning in calloc() usage (bsc#1012628). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1012628). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1012628). - et131x: Add missing check after DMA map (bsc#1012628). - net: ag71xx: Add missing check after DMA map (bsc#1012628). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1012628). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1012628). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1012628). - drm/amd/pm: fix null pointer access (bsc#1012628). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1012628). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1012628). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1012628). - net: mctp: Prevent duplicate binds (bsc#1012628). - wifi: mac80211: don't use TPE data from assoc response (bsc#1012628). - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (bsc#1012628). - wifi: cfg80211: Fix interface type validation (bsc#1012628). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1012628). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1012628). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1012628). - net: phy: micrel: Add ksz9131_resume() (bsc#1012628). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1012628). - sched/deadline: Fix accounting after global limits change (bsc#1012628). - bpf: Forget ranges when refining tnum after JSET (bsc#1012628). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1012628). - wifi: iwlwifi: mld: fix scan request validation (bsc#1012628). - um: Re-evaluate thread flags repeatedly (bsc#1012628). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1012628). - wifi: iwlwifi: handle non-overlapping API ranges (bsc#1012628). - drm/sched/tests: Add unit test for cancel_job() (bsc#1012628). - drm/sched: Avoid memory leaks with cancel_job() callback (bsc#1012628). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1012628). - net: phy: bcm54811: PHY initialization (bsc#1012628). - rv: Add #undef TRACE_INCLUDE_FILE (bsc#1012628). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1012628). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1012628). - wifi: mac80211: avoid weird state in error path (bsc#1012628). - s390/early: Copy last breaking event address to pt_regs (bsc#1012628). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1012628). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1012628). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1012628). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1012628). - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (bsc#1012628). - wifi: mt76: fix vif link allocation (bsc#1012628). - drm/fbdev-client: Skip DRM clients if modesetting is absent (bsc#1012628). - drm/msm: Update register xml (bsc#1012628). - drm/msm: use trylock for debugfs (bsc#1012628). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1012628). - perf/arm: Add missing .suppress_bind_attrs (bsc#1012628). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1012628). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1012628). - wifi: rtw89: Disable deep power saving for USB/SDIO (bsc#1012628). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1012628). - wifi: mt76: mt7915: mcu: increase eeprom command timeout (bsc#1012628). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1012628). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1012628). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1012628). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1012628). - xfrm: Duplicate SPI Handling (bsc#1012628). - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization (bsc#1012628). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1012628). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1012628). - net: ieee8021q: fix insufficient table-size assertion (bsc#1012628). - net: enetc: separate 64-bit counters from enetc_port_counters (bsc#1012628). - net: fec: allow disable coalescing (bsc#1012628). - drm/amdgpu: Use correct severity for BP threshold exceed event (bsc#1012628). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1012628). - drm/amd/display: add null check (bsc#1012628). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1012628). - drm/panel: raydium-rm67200: Move initialization from enable() to prepare stage (bsc#1012628). - eth: bnxt: take page size into account for page pool recycling rings (bsc#1012628). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1012628). - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (bsc#1012628). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1012628). - net: phy: realtek: add error handling to rtl8211f_get_wol (bsc#1012628). - lib: packing: Include necessary headers (bsc#1012628). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1012628). - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (bsc#1012628). - wifi: iwlwifi: mld: use the correct struct size for tracing (bsc#1012628). - wifi: iwlwifi: mld: fix last_mlo_scan_time type (bsc#1012628). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1012628). - wifi: iwlwifi: pcie: reinit device properly during TOP reset (bsc#1012628). - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (bsc#1012628). - drm/amdgpu: Add more checks to PSP mailbox (bsc#1012628). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1012628). - drm/amd/display: Initialize mode_select to 0 (bsc#1012628). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1012628). - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (bsc#1012628). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1012628). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1012628). - powerpc: floppy: Add missing checks after DMA map (bsc#1012628). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1012628). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1012628). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1012628). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1012628). - drm/amd/pm: Use pointer type for typecheck() (bsc#1012628). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1012628). - drm/amd/display: Stop storing failures into adev->dm.cached_state (bsc#1012628). - drm/amdgpu: Suspend IH during mode-2 reset (bsc#1012628). - drm/amdgpu: clear pa and mca record counter when resetting eeprom (bsc#1012628). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1012628). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1012628). - gve: Return error for unknown admin queue command (bsc#1012628). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1012628). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1012628). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1012628). - bpftool: Fix JSON writer resource leak in version command (bsc#1012628). - ptp: Use ratelimite for freerun error message (bsc#1012628). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1012628). - ionic: clean dbpage in de-init (bsc#1012628). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1012628). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1012628). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1012628). - drm/ttm: Should to return the evict error (bsc#1012628). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1012628). - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (bsc#1012628). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1012628). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1012628). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1012628). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1012628). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1012628). - drm/ttm: Respect the shrinker core free target (bsc#1012628). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1012628). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1012628). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1012628). - vhost: fail early when __vhost_add_used() fails (bsc#1012628). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1012628). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1012628). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1012628). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1012628). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1012628). - smb: client: fix session setup against servers that require SPN (bsc#1012628). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1012628). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1012628). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1012628). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1012628). - sphinx: kernel_abi: fix performance regression with O= (bsc#1012628). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1012628). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1012628). - phy: rockchip-pcie: Enable all four lanes if required (bsc#1012628). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1012628). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1012628). - watchdog: dw_wdt: Fix default timeout (bsc#1012628). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1012628). - clk: qcom: ipq5018: keep XO clock always on (bsc#1012628). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1012628). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1012628). - ext4: limit the maximum folio order (bsc#1012628). - scsi: bfa: Double-free fix (bsc#1012628). - jfs: truncate good inode pages when hard link is 0 (bsc#1012628). - jfs: Regular file corruption check (bsc#1012628). - jfs: upper bound check of tree index in dbAllocAG (bsc#1012628). - media: hi556: Fix reset GPIO timings (bsc#1012628). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1012628). - crypto: jitter - fix intermediary handling (bsc#1012628). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1012628). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1012628). - media: iris: Add handling for corrupt and drop frames (bsc#1012628). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1012628). - media: i2c: vd55g1: Setup sensor external clock before patching (bsc#1012628). - media: i2c: vd55g1: Fix RATE macros not being expressed in bps (bsc#1012628). - media: ipu-bridge: Add _HID for OV5670 (bsc#1012628). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1012628). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1012628). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1012628). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1012628). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1012628). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1012628). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1012628). - crypto: caam - Support iMX8QXP and variants thereof (bsc#1012628). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1012628). - HID: rate-limit hid_warn to prevent log flooding (bsc#1012628). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1012628). - scsi: pm80xx: Free allocated tags after failure (bsc#1012628). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1012628). - PCI: dw-rockchip: Delay link training after hot reset in EP mode (bsc#1012628). - pinctrl: stm32: Manage irq affinity settings (bsc#1012628). - media: raspberrypi: cfe: Fix min_reqbufs_allocation (bsc#1012628). - media: tc358743: Check I2C succeeded during probe (bsc#1012628). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1012628). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1012628). - media: usb: hdpvr: disable zero-length read messages (bsc#1012628). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1012628). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1012628). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1012628). - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (bsc#1012628). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1012628). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1012628). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1012628). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1012628). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1012628). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1012628). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1012628). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1012628). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1012628). - i3c: add missing include to internal header (bsc#1012628). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1012628). - apparmor: shift ouid when mediating hard links in userns (bsc#1012628). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1012628). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1012628). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1012628). - dm-table: fix checking for rq stackable devices (bsc#1012628). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1012628). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1012628). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1012628). - exfat: add cluster chain loop check for dir (bsc#1012628). - f2fs: check the generic conditions first (bsc#1012628). - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info() (bsc#1012628). - printk: nbcon: Allow reacquire during panic (bsc#1012628). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1012628). - vfio/type1: conditional rescheduling while pinning (bsc#1012628). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1012628). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1012628). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1012628). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1012628). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1012628). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1012628). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1012628). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1012628). - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a minute (bsc#1012628). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1012628). - ipmi: Fix strcpy source and destination the same (bsc#1012628). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1012628). - tools/power turbostat: Fix build with musl (bsc#1012628). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1012628). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1012628). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1012628). - irqchip/mvebu-gicp: Clear pending interrupts on init (bsc#1012628). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1012628). - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU (bsc#1012628). - regmap: irq: Free the regmap-irq mutex (bsc#1012628). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1012628). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1012628). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1012628). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1012628). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1012628). - pNFS: Handle RPC size limit for layoutcommits (bsc#1012628). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1012628). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1012628). - scsi: ufs: core: Fix interrupt handling for MCQ Mode (bsc#1012628). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1012628). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1012628). - ublk: check for unprivileged daemon on each I/O fetch (bsc#1012628). - block: fix kobject double initialization in add_disk (bsc#1012628). - cifs: Fix collect_sample() to handle any iterator type (bsc#1012628). - drm/i915/fbc: fix the implementation of wa_18038517565 (bsc#1012628). - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush (bsc#1012628). - drm/xe/migrate: prevent infinite recursion (bsc#1012628). - drm/xe/migrate: don't overflow max copy size (bsc#1012628). - drm/xe/migrate: prevent potential UAF (bsc#1012628). - drm/xe/hwmon: Add SW clamp for power limits writes (bsc#1012628). - drm/amdgpu: fix vram reservation issue (bsc#1012628). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1012628). - x86/sev: Improve handling of writes to intercepted TSC MSRs (bsc#1012628). - x86/fpu: Fix NULL dereference in avx512_status() (bsc#1012628). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1012628). - futex: Use user_write_access_begin/_end() in futex_put_value() (bsc#1012628). - rust: kbuild: clean output before running `rustdoc` (bsc#1012628). - rust: workaround `rustdoc` target modifiers bug (bsc#1012628). - samples/damon/wsse: fix boot time enable handling (bsc#1012628). - samples/damon/mtier: support boot time enable setup (bsc#1012628). - mm/damon/core: commit damos->target_nid (bsc#1012628). - block: Introduce bio_needs_zone_write_plugging() (bsc#1012628). - dm: Always split write BIOs to zoned device limits (bsc#1012628). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1012628). - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks (bsc#1012628). - cifs: reset iface weights when we cannot find a candidate (bsc#1012628). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1012628). - iommu/arm-smmu-v3: Revert vmaster in the error path (bsc#1012628). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1012628). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1012628). - iommufd: Prevent ALIGN() overflow (bsc#1012628). - ext4: fix zombie groups in average fragment size lists (bsc#1012628). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1012628). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1012628). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1012628). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1012628). - usb: typec: ucsi: Update power_supply on power role change (bsc#1012628). - comedi: fix race between polling and detaching (bsc#1012628). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1012628). - usb: typec: fusb302: cache PD RX state (bsc#1012628). - cdc-acm: fix race between initial clearing halt and open (bsc#1012628). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1012628). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1012628). - btrfs: zoned: reserve data_reloc block group on mount (bsc#1012628). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1012628). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1012628). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1012628). - btrfs: don't ignore inode missing when replaying log tree (bsc#1012628). - btrfs: fix ssd_spread overallocation (bsc#1012628). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1012628). - btrfs: populate otime when logging an inode item (bsc#1012628). - btrfs: don't skip accounting in early ENOTTY return in btrfs_uring_encoded_read() (bsc#1012628). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1012628). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1012628). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1012628). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1012628). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1012628). - btrfs: zoned: do not select metadata BG as finish target (bsc#1012628). - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents() (bsc#1012628). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1012628). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1012628). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1012628). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1012628). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1012628). - fbdev: nvidiafb: add depends on HAS_IOPORT (bsc#1012628). - ocfs2: reset folio to NULL when get folio fails (bsc#1012628). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1012628). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1012628). - i2c: core: Fix double-free of fwnode in i2c_unregister_device() (bsc#1012628). - parisc: Makefile: fix a typo in palo.conf (bsc#1012628). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1012628). - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud() (bsc#1012628). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1012628). - mm/shmem, swap: improve cached mTHP handling and fix potential hang (bsc#1012628). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1012628). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1012628). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1012628). - media: venus: Fix OOB read due to missing payload bound check (bsc#1012628). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1012628). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1012628). - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (bsc#1012628). - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path (bsc#1012628). - tracing: fprobe: Fix infinite recursion using preempt_*_notrace() (bsc#1012628). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1012628). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1012628). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1012628). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1012628). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1012628). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1012628). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1012628). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1012628). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1012628). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1012628). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1012628). - irqchip/mvebu-gicp: Use resource_size() for ioremap() (bsc#1012628). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1012628). - io_uring/zcrx: fix null ifq on area destruction (bsc#1012628). - io_uring/zcrx: don't leak pages on account failure (bsc#1012628). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.2-522-btrfs-fix-log-tree-replay-failure-due-to-file-.patch. - commit b12dbdb ++++ kernel-source-longterm: - Linux 6.12.43 (bsc#1234429). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1234429). - PCI: Honor Max Link Speed when determining supported speeds (bsc#1234429). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1234429). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1234429). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1234429). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1234429). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1234429). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1234429). - rust: workaround `rustdoc` target modifiers bug (bsc#1234429). - rust: kbuild: clean output before running `rustdoc` (bsc#1234429). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1234429). - arm64: dts: ti: k3-j722s-evm: Fix USB2.0_MUX_SEL to select Type-C (bsc#1234429). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1234429). - PCI: Allow PCI bridges to go to D3Hot on all non-x86 (bsc#1234429). - PCI: Store all PCIe Supported Link Speeds (bsc#1234429). - smb: client: fix netns refcount leak after net_passive changes (bsc#1234429). - net: better track kernel sockets lifetime (bsc#1234429). - net: Add net_passive_inc() and net_passive_dec() (bsc#1234429). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1234429). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1234429). - tools/hv: fcopy: Fix irregularities with size of ring buffer (bsc#1234429). - wifi: mac80211: check basic rates validity in sta_link_apply_parameters (bsc#1234429). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1234429). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1234429). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1234429). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1234429). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1234429). - media: venus: Fix OOB read due to missing payload bound check (bsc#1234429). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1234429). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1234429). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1234429). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1234429). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1234429). - parisc: Makefile: fix a typo in palo.conf (bsc#1234429). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1234429). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1234429). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1234429). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1234429). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1234429). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1234429). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1234429). - btrfs: zoned: do not select metadata BG as finish target (bsc#1234429). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1234429). - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1234429). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1234429). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1234429). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1234429). - btrfs: populate otime when logging an inode item (bsc#1234429). - btrfs: fix ssd_spread overallocation (bsc#1234429). - btrfs: don't ignore inode missing when replaying log tree (bsc#1234429). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1234429). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1234429). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1234429). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1234429). - cdc-acm: fix race between initial clearing halt and open (bsc#1234429). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1234429). - comedi: fix race between polling and detaching (bsc#1234429). - usb: typec: ucsi: Update power_supply on power role change (bsc#1234429). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1234429). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1234429). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1234429). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1234429). - ext4: fix zombie groups in average fragment size lists (bsc#1234429). - iommufd: Prevent ALIGN() overflow (bsc#1234429). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1234429). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1234429). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1234429). - cifs: reset iface weights when we cannot find a candidate (bsc#1234429). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1234429). - dm: Always split write BIOs to zoned device limits (bsc#1234429). - block: Introduce bio_needs_zone_write_plugging() (bsc#1234429). - mm/damon/core: commit damos->target_nid (bsc#1234429). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1234429). - drm/amdgpu: fix vram reservation issue (bsc#1234429). - cifs: Fix collect_sample() to handle any iterator type (bsc#1234429). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1234429). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1234429). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1234429). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1234429). - pNFS: Handle RPC size limit for layoutcommits (bsc#1234429). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1234429). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1234429). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1234429). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1234429). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1234429). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1234429). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1234429). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1234429). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1234429). - tools/power turbostat: Fix build with musl (bsc#1234429). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1234429). - ipmi: Fix strcpy source and destination the same (bsc#1234429). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1234429). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1234429). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1234429). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1234429). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1234429). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1234429). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1234429). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1234429). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1234429). - vfio/type1: conditional rescheduling while pinning (bsc#1234429). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1234429). - printk: nbcon: Allow reacquire during panic (bsc#1234429). - f2fs: check the generic conditions first (bsc#1234429). - exfat: add cluster chain loop check for dir (bsc#1234429). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1234429). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1234429). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1234429). - dm-table: fix checking for rq stackable devices (bsc#1234429). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1234429). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1234429). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1234429). - apparmor: shift ouid when mediating hard links in userns (bsc#1234429). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1234429). - i3c: add missing include to internal header (bsc#1234429). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1234429). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1234429). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1234429). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1234429). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1234429). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1234429). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1234429). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1234429). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1234429). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1234429). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1234429). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1234429). - media: usb: hdpvr: disable zero-length read messages (bsc#1234429). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1234429). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1234429). - media: tc358743: Check I2C succeeded during probe (bsc#1234429). - pinctrl: stm32: Manage irq affinity settings (bsc#1234429). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1234429). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1234429). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1234429). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1234429). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1234429). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1234429). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1234429). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1234429). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1234429). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1234429). - media: ipu-bridge: Add _HID for OV5670 (bsc#1234429). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1234429). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1234429). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1234429). - crypto: jitter - fix intermediary handling (bsc#1234429). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1234429). - media: hi556: Fix reset GPIO timings (bsc#1234429). - jfs: upper bound check of tree index in dbAllocAG (bsc#1234429). - jfs: Regular file corruption check (bsc#1234429). - jfs: truncate good inode pages when hard link is 0 (bsc#1234429). - scsi: bfa: Double-free fix (bsc#1234429). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1234429). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1234429). - clk: qcom: ipq5018: keep XO clock always on (bsc#1234429). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1234429). - watchdog: dw_wdt: Fix default timeout (bsc#1234429). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1234429). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1234429). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1234429). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1234429). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1234429). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1234429). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1234429). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1234429). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1234429). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1234429). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1234429). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1234429). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1234429). - vhost: fail early when __vhost_add_used() fails (bsc#1234429). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1234429). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1234429). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1234429). - drm/ttm: Respect the shrinker core free target (bsc#1234429). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1234429). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1234429). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1234429). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1234429). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1234429). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1234429). - drm/ttm: Should to return the evict error (bsc#1234429). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1234429). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1234429). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1234429). - ionic: clean dbpage in de-init (bsc#1234429). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1234429). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1234429). - ptp: Use ratelimite for freerun error message (bsc#1234429). - bpftool: Fix JSON writer resource leak in version command (bsc#1234429). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1234429). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1234429). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1234429). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1234429). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1234429). - gve: Return error for unknown admin queue command (bsc#1234429). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1234429). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1234429). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1234429). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1234429). - neighbour: add support for NUD_PERMANENT proxy entries (bsc#1234429). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1234429). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1234429). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1234429). - powerpc: floppy: Add missing checks after DMA map (bsc#1234429). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1234429). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1234429). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1234429). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1234429). - drm/amd/display: Initialize mode_select to 0 (bsc#1234429). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1234429). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1234429). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1234429). - lib: packing: Include necessary headers (bsc#1234429). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1234429). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1234429). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1234429). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1234429). - net: fec: allow disable coalescing (bsc#1234429). - net: ieee8021q: fix insufficient table-size assertion (bsc#1234429). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1234429). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1234429). - xfrm: Duplicate SPI Handling (bsc#1234429). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1234429). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1234429). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1234429). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1234429). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1234429). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1234429). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1234429). - perf/arm: Add missing .suppress_bind_attrs (bsc#1234429). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1234429). - drm/msm: use trylock for debugfs (bsc#1234429). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1234429). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1234429). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1234429). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1234429). - s390/early: Copy last breaking event address to pt_regs (bsc#1234429). - wifi: mac80211: avoid weird state in error path (bsc#1234429). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1234429). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1234429). - net: phy: bcm54811: PHY initialization (bsc#1234429). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1234429). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1234429). - um: Re-evaluate thread flags repeatedly (bsc#1234429). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1234429). - bpf: Forget ranges when refining tnum after JSET (bsc#1234429). - sched/deadline: Fix accounting after global limits change (bsc#1234429). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1234429). - net: phy: micrel: Add ksz9131_resume() (bsc#1234429). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1234429). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1234429). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1234429). - wifi: cfg80211: Fix interface type validation (bsc#1234429). - net: mctp: Prevent duplicate binds (bsc#1234429). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1234429). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1234429). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1234429). - drm/amd/pm: fix null pointer access (bsc#1234429). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1234429). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1234429). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1234429). - net: ag71xx: Add missing check after DMA map (bsc#1234429). - et131x: Add missing check after DMA map (bsc#1234429). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1234429). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1234429). - idpf: preserve coalescing settings across resets (bsc#1234429). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1234429). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1234429). - s390/time: Use monotonic clock in get_cycles() (bsc#1234429). - wifi: cfg80211: reject HTC bit for management frames (bsc#1234429). - ktest.pl: Prevent recursion of default variable options (bsc#1234429). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1234429). - net: usb: cdc-ncm: check for filtering capability (bsc#1234429). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1234429). - xen/netfront: Fix TX response spurious interrupts (bsc#1234429). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1234429). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1234429). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1234429). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1234429). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1234429). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1234429). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1234429). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1234429). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1234429). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1234429). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1234429). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1234429). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1234429). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1234429). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1234429). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1234429). - usb: core: usb_submit_urb: downgrade type check (bsc#1234429). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1234429). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1234429). - tty: serial: fix print format specifiers (bsc#1234429). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1234429). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1234429). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1234429). - x86/bugs: Avoid warning when overriding return thunk (bsc#1234429). - ALSA: hda: Disable jack polling at shutdown (bsc#1234429). - ALSA: hda: Handle the jack polling always via a work (bsc#1234429). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1234429). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1234429). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1234429). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1234429). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1234429). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1234429). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1234429). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1234429). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1234429). - ACPI: processor: fix acpi_object initialization (bsc#1234429). - PM: sleep: console: Fix the black screen issue (bsc#1234429). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1234429). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1234429). - firmware: tegra: Fix IVC dependency problems (bsc#1234429). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1234429). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1234429). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1234429). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1234429). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1234429). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1234429). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1234429). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1234429). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1234429). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1234429). - EDAC/synopsys: Clear the ECC counters on init (bsc#1234429). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1234429). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1234429). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1234429). - cpufreq: Exit governor when failed to start old governor (bsc#1234429). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1234429). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1234429). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1234429). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1234429). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1234429). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1234429). - usb: xhci: Avoid showing errors during surprise removal (bsc#1234429). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1234429). - usb: xhci: Avoid showing warnings for dying controller (bsc#1234429). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1234429). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1234429). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1234429). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1234429). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1234429). - tracefs: Add d_delete to remove negative dentries (bsc#1234429). - securityfs: don't pin dentries twice, once is enough.. (bsc#1234429). - fix locking in efi_secret_unlink() (bsc#1234429). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1234429). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1234429). - fs/ntfs3: correctly create symlink for relative path (bsc#1234429). - fs/ntfs3: Add sanity check for file name (bsc#1234429). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1234429). - ata: ahci: Disable DIPM if host lacks support (bsc#1234429). - ata: ahci: Disallow LPM policy control if not supported (bsc#1234429). - better lockdep annotations for simple_recursive_removal() (bsc#1234429). - hfs: fix not erasing deleted b-tree node issue (bsc#1234429). - drbd: add missing kref_get in handle_write_conflicts (bsc#1234429). - udf: Verify partition map count (bsc#1234429). - loop: Avoid updating block size under exclusive owner (bsc#1234429). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1234429). - gfs2: Validate i_depth for exhash directories (bsc#1234429). - nvme-tcp: log TLS handshake failures at error level (bsc#1234429). - md/raid10: set chunk_sectors limit (bsc#1234429). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1234429). - nvme-pci: try function level reset on init failure (bsc#1234429). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1234429). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1234429). - arm64: Handle KCOV __init vs inline mismatches (bsc#1234429). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1234429). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1234429). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1234429). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1234429). - hfs: fix general protection fault in hfs_find_init() (bsc#1234429). - net: kcm: Fix race condition in kcm_unattach() (bsc#1234429). - tls: handle data disappearing from under the TLS ULP (bsc#1234429). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1234429). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1234429). - intel_idle: Allow loading ACPI tables for any family (bsc#1234429). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1234429). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1234429). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1234429). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1234429). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1234429). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1234429). - habanalabs: fix UAF in export_dmabuf() (bsc#1234429). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1234429). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1234429). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1234429). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1234429). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1234429). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1234429). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1234429). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1234429). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1234429). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1234429). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1234429). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1234429). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1234429). - Documentation: ACPI: Fix parent device references (bsc#1234429). - eventpoll: Fix semi-unbounded recursion (bsc#1234429). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1234429). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1234429). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1234429). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1234429). - clk: samsung: exynos850: fix a comment (bsc#1234429). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1234429). - LoongArch: Avoid in-place string operation on FDT content (bsc#1234429). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1234429). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1234429). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1234429). - PCI: Extend isolated function probing to LoongArch (bsc#1234429). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1234429). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1234429). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1234429). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1234429). - net: dpaa: fix device leak when querying time stamp info (bsc#1234429). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1234429). - net: mtk_eth_soc: fix device leak at probe (bsc#1234429). - net: enetc: fix device and OF node leak at probe (bsc#1234429). - net: gianfar: fix device leak when querying time stamp info (bsc#1234429). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1234429). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1234429). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1234429). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1234429). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1234429). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1234429). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1234429). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1234429). - gpio: virtio: Fix config space reading (bsc#1234429). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1234429). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1234429). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1234429). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1234429). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1234429). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1234429). - io_uring: don't use int for ABI (bsc#1234429). - commit 04bb54a ++++ kernel-docs: - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1012628). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1012628). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1012628). - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts (bsc#1012628). - lib/crypto: x86/poly1305: Fix performance regression on short messages (bsc#1012628). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1012628). - Documentation: ACPI: Fix parent device references (bsc#1012628). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1012628). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1012628). - ACPI: EC: Relax sanity check of the ECDT ID string (bsc#1012628). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1012628). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1012628). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1012628). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1012628). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1012628). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1012628). - habanalabs: fix UAF in export_dmabuf() (bsc#1012628). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1012628). - xfrm: flush all states in xfrm_state_fini (bsc#1012628). - xfrm: restore GSO for SW crypto (bsc#1012628). - xfrm: bring back device check in validate_xmit_xfrm (bsc#1012628). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1012628). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1012628). - netfilter: ctnetlink: remove refcounting in expectation dumpers (bsc#1012628). - net: hibmcge: fix rtnl deadlock issue (bsc#1012628). - net: hibmcge: fix the division by zero issue (bsc#1012628). - net: hibmcge: fix the np_link_fail error reporting issue (bsc#1012628). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1012628). - net: page_pool: allow enabling recycling late, fix false positive warning (bsc#1012628). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1012628). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1012628). - net: lapbether: ignore ops-locked netdevs (bsc#1012628). - hamradio: ignore ops-locked netdevs (bsc#1012628). - erofs: fix block count report when 48-bit layout is on (bsc#1012628). - intel_idle: Allow loading ACPI tables for any family (bsc#1012628). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1012628). - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (bsc#1012628). - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (bsc#1012628). - net: stmmac: thead: Get and enable APB clock on initialization (bsc#1012628). - riscv: dts: thead: Add APB clocks for TH1520 GMACs (bsc#1012628). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1012628). - tls: handle data disappearing from under the TLS ULP (bsc#1012628). - ipvs: Fix estimator kthreads preferred affinity (bsc#1012628). - netfilter: nf_tables: reject duplicate device on updates (bsc#1012628). - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE (bsc#1012628). - net: kcm: Fix race condition in kcm_unattach() (bsc#1012628). - hfs: fix general protection fault in hfs_find_init() (bsc#1012628). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1012628). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1012628). - arm64: Handle KCOV __init vs inline mismatches (bsc#1012628). - tpm: Check for completion after timeout (bsc#1012628). - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (bsc#1012628). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1012628). - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents (bsc#1012628). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1012628). - nvme-pci: try function level reset on init failure (bsc#1012628). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1012628). - md/raid10: set chunk_sectors limit (bsc#1012628). - nvme-tcp: log TLS handshake failures at error level (bsc#1012628). - gfs2: Validate i_depth for exhash directories (bsc#1012628). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1012628). - loop: Avoid updating block size under exclusive owner (bsc#1012628). - udf: Verify partition map count (bsc#1012628). - drbd: add missing kref_get in handle_write_conflicts (bsc#1012628). - hfs: fix not erasing deleted b-tree node issue (bsc#1012628). - better lockdep annotations for simple_recursive_removal() (bsc#1012628). - ata: ahci: Disallow LPM policy control if not supported (bsc#1012628). - ata: ahci: Disable DIPM if host lacks support (bsc#1012628). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1012628). - fs/ntfs3: Add sanity check for file name (bsc#1012628). - fs/ntfs3: correctly create symlink for relative path (bsc#1012628). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - landlock: opened file never has a negative dentry (bsc#1012628). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1012628). - fix locking in efi_secret_unlink() (bsc#1012628). - securityfs: don't pin dentries twice, once is enough.. (bsc#1012628). - tracefs: Add d_delete to remove negative dentries (bsc#1012628). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1012628). - staging: gpib: Add init response codes for new ni-usb-hs+ (bsc#1012628). - selftests/kexec: fix test_kexec_jump build (bsc#1012628). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1012628). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1012628). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1012628). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1012628). - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support (bsc#1012628). - bus: mhi: host: pci_generic: Disable runtime PM for QDU100 (bsc#1012628). - usb: xhci: Avoid showing warnings for dying controller (bsc#1012628). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1012628). - usb: xhci: Avoid showing errors during surprise removal (bsc#1012628). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1012628). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1012628). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1012628). - binder: Fix selftest page indexing (bsc#1012628). - gpio: loongson-64bit: Extend GPIO irq support (bsc#1012628). - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi (bsc#1012628). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1012628). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1012628). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1012628). - cpufreq: Exit governor when failed to start old governor (bsc#1012628). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1012628). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1012628). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1012628). - EDAC/synopsys: Clear the ECC counters on init (bsc#1012628). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1012628). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1012628). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1012628). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1012628). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1012628). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1012628). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1012628). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1012628). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1012628). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1012628). - firmware: tegra: Fix IVC dependency problems (bsc#1012628). - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56 (bsc#1012628). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1012628). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1012628). - PM: sleep: console: Fix the black screen issue (bsc#1012628). - ACPI: processor: fix acpi_object initialization (bsc#1012628). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1012628). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1012628). - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND (bsc#1012628). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1012628). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1012628). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1012628). - ASoC: SDCA: Add flag for unused IRQs (bsc#1012628). - x86/sev/vc: Fix EFI runtime instruction emulation (bsc#1012628). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1012628). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1012628). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1012628). - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (bsc#1012628). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1012628). - ALSA: hda: Handle the jack polling always via a work (bsc#1012628). - ALSA: hda: Disable jack polling at shutdown (bsc#1012628). - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700 (bsc#1012628). - x86/bugs: Avoid warning when overriding return thunk (bsc#1012628). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1012628). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1012628). - irqchip/mips-gic: Allow forced affinity (bsc#1012628). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1012628). - tty: serial: fix print format specifiers (bsc#1012628). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1012628). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1012628). - usb: core: usb_submit_urb: downgrade type check (bsc#1012628). - usb: dwc3: xilinx: add shutdown callback (bsc#1012628). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1012628). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1012628). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1012628). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1012628). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1012628). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1012628). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1012628). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1012628). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1012628). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1012628). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1012628). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1012628). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1012628). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1012628). - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (bsc#1012628). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1012628). - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (bsc#1012628). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1012628). - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (bsc#1012628). - xen/netfront: Fix TX response spurious interrupts (bsc#1012628). - wifi: iwlwifi: mld: use spec link id and not FW link id (bsc#1012628). - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (bsc#1012628). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1012628). - net: usb: cdc-ncm: check for filtering capability (bsc#1012628). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1012628). - ktest.pl: Prevent recursion of default variable options (bsc#1012628). - wifi: cfg80211: reject HTC bit for management frames (bsc#1012628). - s390/sclp: Use monotonic clock in sclp_sync_wait() (bsc#1012628). - s390/time: Use monotonic clock in get_cycles() (bsc#1012628). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1012628). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1012628). - idpf: preserve coalescing settings across resets (bsc#1012628). - libbpf: Fix warning in calloc() usage (bsc#1012628). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1012628). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1012628). - et131x: Add missing check after DMA map (bsc#1012628). - net: ag71xx: Add missing check after DMA map (bsc#1012628). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1012628). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1012628). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1012628). - drm/amd/pm: fix null pointer access (bsc#1012628). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1012628). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1012628). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1012628). - net: mctp: Prevent duplicate binds (bsc#1012628). - wifi: mac80211: don't use TPE data from assoc response (bsc#1012628). - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (bsc#1012628). - wifi: cfg80211: Fix interface type validation (bsc#1012628). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1012628). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1012628). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1012628). - net: phy: micrel: Add ksz9131_resume() (bsc#1012628). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1012628). - sched/deadline: Fix accounting after global limits change (bsc#1012628). - bpf: Forget ranges when refining tnum after JSET (bsc#1012628). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1012628). - wifi: iwlwifi: mld: fix scan request validation (bsc#1012628). - um: Re-evaluate thread flags repeatedly (bsc#1012628). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1012628). - wifi: iwlwifi: handle non-overlapping API ranges (bsc#1012628). - drm/sched/tests: Add unit test for cancel_job() (bsc#1012628). - drm/sched: Avoid memory leaks with cancel_job() callback (bsc#1012628). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1012628). - net: phy: bcm54811: PHY initialization (bsc#1012628). - rv: Add #undef TRACE_INCLUDE_FILE (bsc#1012628). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1012628). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1012628). - wifi: mac80211: avoid weird state in error path (bsc#1012628). - s390/early: Copy last breaking event address to pt_regs (bsc#1012628). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1012628). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1012628). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1012628). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1012628). - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (bsc#1012628). - wifi: mt76: fix vif link allocation (bsc#1012628). - drm/fbdev-client: Skip DRM clients if modesetting is absent (bsc#1012628). - drm/msm: Update register xml (bsc#1012628). - drm/msm: use trylock for debugfs (bsc#1012628). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1012628). - perf/arm: Add missing .suppress_bind_attrs (bsc#1012628). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1012628). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1012628). - wifi: rtw89: Disable deep power saving for USB/SDIO (bsc#1012628). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1012628). - wifi: mt76: mt7915: mcu: increase eeprom command timeout (bsc#1012628). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1012628). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1012628). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1012628). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1012628). - xfrm: Duplicate SPI Handling (bsc#1012628). - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization (bsc#1012628). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1012628). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1012628). - net: ieee8021q: fix insufficient table-size assertion (bsc#1012628). - net: enetc: separate 64-bit counters from enetc_port_counters (bsc#1012628). - net: fec: allow disable coalescing (bsc#1012628). - drm/amdgpu: Use correct severity for BP threshold exceed event (bsc#1012628). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1012628). - drm/amd/display: add null check (bsc#1012628). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1012628). - drm/panel: raydium-rm67200: Move initialization from enable() to prepare stage (bsc#1012628). - eth: bnxt: take page size into account for page pool recycling rings (bsc#1012628). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1012628). - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (bsc#1012628). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1012628). - net: phy: realtek: add error handling to rtl8211f_get_wol (bsc#1012628). - lib: packing: Include necessary headers (bsc#1012628). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1012628). - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (bsc#1012628). - wifi: iwlwifi: mld: use the correct struct size for tracing (bsc#1012628). - wifi: iwlwifi: mld: fix last_mlo_scan_time type (bsc#1012628). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1012628). - wifi: iwlwifi: pcie: reinit device properly during TOP reset (bsc#1012628). - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (bsc#1012628). - drm/amdgpu: Add more checks to PSP mailbox (bsc#1012628). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1012628). - drm/amd/display: Initialize mode_select to 0 (bsc#1012628). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1012628). - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (bsc#1012628). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1012628). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1012628). - powerpc: floppy: Add missing checks after DMA map (bsc#1012628). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1012628). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1012628). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1012628). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1012628). - drm/amd/pm: Use pointer type for typecheck() (bsc#1012628). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1012628). - drm/amd/display: Stop storing failures into adev->dm.cached_state (bsc#1012628). - drm/amdgpu: Suspend IH during mode-2 reset (bsc#1012628). - drm/amdgpu: clear pa and mca record counter when resetting eeprom (bsc#1012628). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1012628). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1012628). - gve: Return error for unknown admin queue command (bsc#1012628). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1012628). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1012628). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1012628). - bpftool: Fix JSON writer resource leak in version command (bsc#1012628). - ptp: Use ratelimite for freerun error message (bsc#1012628). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1012628). - ionic: clean dbpage in de-init (bsc#1012628). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1012628). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1012628). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1012628). - drm/ttm: Should to return the evict error (bsc#1012628). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1012628). - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (bsc#1012628). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1012628). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1012628). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1012628). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1012628). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1012628). - drm/ttm: Respect the shrinker core free target (bsc#1012628). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1012628). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1012628). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1012628). - vhost: fail early when __vhost_add_used() fails (bsc#1012628). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1012628). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1012628). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1012628). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1012628). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1012628). - smb: client: fix session setup against servers that require SPN (bsc#1012628). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1012628). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1012628). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1012628). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1012628). - sphinx: kernel_abi: fix performance regression with O= (bsc#1012628). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1012628). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1012628). - phy: rockchip-pcie: Enable all four lanes if required (bsc#1012628). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1012628). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1012628). - watchdog: dw_wdt: Fix default timeout (bsc#1012628). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1012628). - clk: qcom: ipq5018: keep XO clock always on (bsc#1012628). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1012628). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1012628). - ext4: limit the maximum folio order (bsc#1012628). - scsi: bfa: Double-free fix (bsc#1012628). - jfs: truncate good inode pages when hard link is 0 (bsc#1012628). - jfs: Regular file corruption check (bsc#1012628). - jfs: upper bound check of tree index in dbAllocAG (bsc#1012628). - media: hi556: Fix reset GPIO timings (bsc#1012628). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1012628). - crypto: jitter - fix intermediary handling (bsc#1012628). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1012628). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1012628). - media: iris: Add handling for corrupt and drop frames (bsc#1012628). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1012628). - media: i2c: vd55g1: Setup sensor external clock before patching (bsc#1012628). - media: i2c: vd55g1: Fix RATE macros not being expressed in bps (bsc#1012628). - media: ipu-bridge: Add _HID for OV5670 (bsc#1012628). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1012628). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1012628). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1012628). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1012628). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1012628). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1012628). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1012628). - crypto: caam - Support iMX8QXP and variants thereof (bsc#1012628). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1012628). - HID: rate-limit hid_warn to prevent log flooding (bsc#1012628). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1012628). - scsi: pm80xx: Free allocated tags after failure (bsc#1012628). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1012628). - PCI: dw-rockchip: Delay link training after hot reset in EP mode (bsc#1012628). - pinctrl: stm32: Manage irq affinity settings (bsc#1012628). - media: raspberrypi: cfe: Fix min_reqbufs_allocation (bsc#1012628). - media: tc358743: Check I2C succeeded during probe (bsc#1012628). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1012628). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1012628). - media: usb: hdpvr: disable zero-length read messages (bsc#1012628). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1012628). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1012628). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1012628). - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (bsc#1012628). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1012628). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1012628). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1012628). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1012628). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1012628). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1012628). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1012628). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1012628). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1012628). - i3c: add missing include to internal header (bsc#1012628). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1012628). - apparmor: shift ouid when mediating hard links in userns (bsc#1012628). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1012628). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1012628). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1012628). - dm-table: fix checking for rq stackable devices (bsc#1012628). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1012628). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1012628). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1012628). - exfat: add cluster chain loop check for dir (bsc#1012628). - f2fs: check the generic conditions first (bsc#1012628). - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info() (bsc#1012628). - printk: nbcon: Allow reacquire during panic (bsc#1012628). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1012628). - vfio/type1: conditional rescheduling while pinning (bsc#1012628). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1012628). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1012628). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1012628). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1012628). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1012628). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1012628). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1012628). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1012628). - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a minute (bsc#1012628). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1012628). - ipmi: Fix strcpy source and destination the same (bsc#1012628). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1012628). - tools/power turbostat: Fix build with musl (bsc#1012628). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1012628). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1012628). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1012628). - irqchip/mvebu-gicp: Clear pending interrupts on init (bsc#1012628). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1012628). - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU (bsc#1012628). - regmap: irq: Free the regmap-irq mutex (bsc#1012628). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1012628). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1012628). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1012628). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1012628). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1012628). - pNFS: Handle RPC size limit for layoutcommits (bsc#1012628). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1012628). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1012628). - scsi: ufs: core: Fix interrupt handling for MCQ Mode (bsc#1012628). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1012628). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1012628). - ublk: check for unprivileged daemon on each I/O fetch (bsc#1012628). - block: fix kobject double initialization in add_disk (bsc#1012628). - cifs: Fix collect_sample() to handle any iterator type (bsc#1012628). - drm/i915/fbc: fix the implementation of wa_18038517565 (bsc#1012628). - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush (bsc#1012628). - drm/xe/migrate: prevent infinite recursion (bsc#1012628). - drm/xe/migrate: don't overflow max copy size (bsc#1012628). - drm/xe/migrate: prevent potential UAF (bsc#1012628). - drm/xe/hwmon: Add SW clamp for power limits writes (bsc#1012628). - drm/amdgpu: fix vram reservation issue (bsc#1012628). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1012628). - x86/sev: Improve handling of writes to intercepted TSC MSRs (bsc#1012628). - x86/fpu: Fix NULL dereference in avx512_status() (bsc#1012628). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1012628). - futex: Use user_write_access_begin/_end() in futex_put_value() (bsc#1012628). - rust: kbuild: clean output before running `rustdoc` (bsc#1012628). - rust: workaround `rustdoc` target modifiers bug (bsc#1012628). - samples/damon/wsse: fix boot time enable handling (bsc#1012628). - samples/damon/mtier: support boot time enable setup (bsc#1012628). - mm/damon/core: commit damos->target_nid (bsc#1012628). - block: Introduce bio_needs_zone_write_plugging() (bsc#1012628). - dm: Always split write BIOs to zoned device limits (bsc#1012628). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1012628). - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks (bsc#1012628). - cifs: reset iface weights when we cannot find a candidate (bsc#1012628). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1012628). - iommu/arm-smmu-v3: Revert vmaster in the error path (bsc#1012628). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1012628). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1012628). - iommufd: Prevent ALIGN() overflow (bsc#1012628). - ext4: fix zombie groups in average fragment size lists (bsc#1012628). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1012628). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1012628). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1012628). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1012628). - usb: typec: ucsi: Update power_supply on power role change (bsc#1012628). - comedi: fix race between polling and detaching (bsc#1012628). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1012628). - usb: typec: fusb302: cache PD RX state (bsc#1012628). - cdc-acm: fix race between initial clearing halt and open (bsc#1012628). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1012628). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1012628). - btrfs: zoned: reserve data_reloc block group on mount (bsc#1012628). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1012628). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1012628). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1012628). - btrfs: don't ignore inode missing when replaying log tree (bsc#1012628). - btrfs: fix ssd_spread overallocation (bsc#1012628). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1012628). - btrfs: populate otime when logging an inode item (bsc#1012628). - btrfs: don't skip accounting in early ENOTTY return in btrfs_uring_encoded_read() (bsc#1012628). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1012628). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1012628). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1012628). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1012628). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1012628). - btrfs: zoned: do not select metadata BG as finish target (bsc#1012628). - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents() (bsc#1012628). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1012628). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1012628). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1012628). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1012628). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1012628). - fbdev: nvidiafb: add depends on HAS_IOPORT (bsc#1012628). - ocfs2: reset folio to NULL when get folio fails (bsc#1012628). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1012628). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1012628). - i2c: core: Fix double-free of fwnode in i2c_unregister_device() (bsc#1012628). - parisc: Makefile: fix a typo in palo.conf (bsc#1012628). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1012628). - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud() (bsc#1012628). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1012628). - mm/shmem, swap: improve cached mTHP handling and fix potential hang (bsc#1012628). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1012628). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1012628). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1012628). - media: venus: Fix OOB read due to missing payload bound check (bsc#1012628). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1012628). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1012628). - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (bsc#1012628). - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path (bsc#1012628). - tracing: fprobe: Fix infinite recursion using preempt_*_notrace() (bsc#1012628). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1012628). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1012628). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1012628). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1012628). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1012628). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1012628). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1012628). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1012628). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1012628). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1012628). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1012628). - irqchip/mvebu-gicp: Use resource_size() for ioremap() (bsc#1012628). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1012628). - io_uring/zcrx: fix null ifq on area destruction (bsc#1012628). - io_uring/zcrx: don't leak pages on account failure (bsc#1012628). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.2-522-btrfs-fix-log-tree-replay-failure-due-to-file-.patch. - commit b12dbdb ++++ kernel-kvmsmall: - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1012628). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1012628). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1012628). - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts (bsc#1012628). - lib/crypto: x86/poly1305: Fix performance regression on short messages (bsc#1012628). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1012628). - Documentation: ACPI: Fix parent device references (bsc#1012628). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1012628). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1012628). - ACPI: EC: Relax sanity check of the ECDT ID string (bsc#1012628). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1012628). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1012628). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1012628). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1012628). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1012628). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1012628). - habanalabs: fix UAF in export_dmabuf() (bsc#1012628). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1012628). - xfrm: flush all states in xfrm_state_fini (bsc#1012628). - xfrm: restore GSO for SW crypto (bsc#1012628). - xfrm: bring back device check in validate_xmit_xfrm (bsc#1012628). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1012628). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1012628). - netfilter: ctnetlink: remove refcounting in expectation dumpers (bsc#1012628). - net: hibmcge: fix rtnl deadlock issue (bsc#1012628). - net: hibmcge: fix the division by zero issue (bsc#1012628). - net: hibmcge: fix the np_link_fail error reporting issue (bsc#1012628). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1012628). - net: page_pool: allow enabling recycling late, fix false positive warning (bsc#1012628). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1012628). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1012628). - net: lapbether: ignore ops-locked netdevs (bsc#1012628). - hamradio: ignore ops-locked netdevs (bsc#1012628). - erofs: fix block count report when 48-bit layout is on (bsc#1012628). - intel_idle: Allow loading ACPI tables for any family (bsc#1012628). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1012628). - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (bsc#1012628). - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (bsc#1012628). - net: stmmac: thead: Get and enable APB clock on initialization (bsc#1012628). - riscv: dts: thead: Add APB clocks for TH1520 GMACs (bsc#1012628). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1012628). - tls: handle data disappearing from under the TLS ULP (bsc#1012628). - ipvs: Fix estimator kthreads preferred affinity (bsc#1012628). - netfilter: nf_tables: reject duplicate device on updates (bsc#1012628). - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE (bsc#1012628). - net: kcm: Fix race condition in kcm_unattach() (bsc#1012628). - hfs: fix general protection fault in hfs_find_init() (bsc#1012628). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1012628). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1012628). - arm64: Handle KCOV __init vs inline mismatches (bsc#1012628). - tpm: Check for completion after timeout (bsc#1012628). - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (bsc#1012628). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1012628). - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents (bsc#1012628). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1012628). - nvme-pci: try function level reset on init failure (bsc#1012628). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1012628). - md/raid10: set chunk_sectors limit (bsc#1012628). - nvme-tcp: log TLS handshake failures at error level (bsc#1012628). - gfs2: Validate i_depth for exhash directories (bsc#1012628). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1012628). - loop: Avoid updating block size under exclusive owner (bsc#1012628). - udf: Verify partition map count (bsc#1012628). - drbd: add missing kref_get in handle_write_conflicts (bsc#1012628). - hfs: fix not erasing deleted b-tree node issue (bsc#1012628). - better lockdep annotations for simple_recursive_removal() (bsc#1012628). - ata: ahci: Disallow LPM policy control if not supported (bsc#1012628). - ata: ahci: Disable DIPM if host lacks support (bsc#1012628). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1012628). - fs/ntfs3: Add sanity check for file name (bsc#1012628). - fs/ntfs3: correctly create symlink for relative path (bsc#1012628). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - landlock: opened file never has a negative dentry (bsc#1012628). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1012628). - fix locking in efi_secret_unlink() (bsc#1012628). - securityfs: don't pin dentries twice, once is enough.. (bsc#1012628). - tracefs: Add d_delete to remove negative dentries (bsc#1012628). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1012628). - staging: gpib: Add init response codes for new ni-usb-hs+ (bsc#1012628). - selftests/kexec: fix test_kexec_jump build (bsc#1012628). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1012628). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1012628). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1012628). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1012628). - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support (bsc#1012628). - bus: mhi: host: pci_generic: Disable runtime PM for QDU100 (bsc#1012628). - usb: xhci: Avoid showing warnings for dying controller (bsc#1012628). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1012628). - usb: xhci: Avoid showing errors during surprise removal (bsc#1012628). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1012628). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1012628). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1012628). - binder: Fix selftest page indexing (bsc#1012628). - gpio: loongson-64bit: Extend GPIO irq support (bsc#1012628). - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi (bsc#1012628). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1012628). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1012628). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1012628). - cpufreq: Exit governor when failed to start old governor (bsc#1012628). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1012628). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1012628). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1012628). - EDAC/synopsys: Clear the ECC counters on init (bsc#1012628). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1012628). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1012628). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1012628). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1012628). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1012628). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1012628). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1012628). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1012628). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1012628). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1012628). - firmware: tegra: Fix IVC dependency problems (bsc#1012628). - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56 (bsc#1012628). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1012628). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1012628). - PM: sleep: console: Fix the black screen issue (bsc#1012628). - ACPI: processor: fix acpi_object initialization (bsc#1012628). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1012628). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1012628). - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND (bsc#1012628). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1012628). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1012628). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1012628). - ASoC: SDCA: Add flag for unused IRQs (bsc#1012628). - x86/sev/vc: Fix EFI runtime instruction emulation (bsc#1012628). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1012628). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1012628). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1012628). - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (bsc#1012628). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1012628). - ALSA: hda: Handle the jack polling always via a work (bsc#1012628). - ALSA: hda: Disable jack polling at shutdown (bsc#1012628). - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700 (bsc#1012628). - x86/bugs: Avoid warning when overriding return thunk (bsc#1012628). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1012628). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1012628). - irqchip/mips-gic: Allow forced affinity (bsc#1012628). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1012628). - tty: serial: fix print format specifiers (bsc#1012628). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1012628). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1012628). - usb: core: usb_submit_urb: downgrade type check (bsc#1012628). - usb: dwc3: xilinx: add shutdown callback (bsc#1012628). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1012628). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1012628). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1012628). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1012628). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1012628). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1012628). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1012628). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1012628). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1012628). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1012628). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1012628). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1012628). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1012628). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1012628). - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (bsc#1012628). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1012628). - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (bsc#1012628). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1012628). - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (bsc#1012628). - xen/netfront: Fix TX response spurious interrupts (bsc#1012628). - wifi: iwlwifi: mld: use spec link id and not FW link id (bsc#1012628). - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (bsc#1012628). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1012628). - net: usb: cdc-ncm: check for filtering capability (bsc#1012628). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1012628). - ktest.pl: Prevent recursion of default variable options (bsc#1012628). - wifi: cfg80211: reject HTC bit for management frames (bsc#1012628). - s390/sclp: Use monotonic clock in sclp_sync_wait() (bsc#1012628). - s390/time: Use monotonic clock in get_cycles() (bsc#1012628). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1012628). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1012628). - idpf: preserve coalescing settings across resets (bsc#1012628). - libbpf: Fix warning in calloc() usage (bsc#1012628). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1012628). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1012628). - et131x: Add missing check after DMA map (bsc#1012628). - net: ag71xx: Add missing check after DMA map (bsc#1012628). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1012628). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1012628). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1012628). - drm/amd/pm: fix null pointer access (bsc#1012628). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1012628). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1012628). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1012628). - net: mctp: Prevent duplicate binds (bsc#1012628). - wifi: mac80211: don't use TPE data from assoc response (bsc#1012628). - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (bsc#1012628). - wifi: cfg80211: Fix interface type validation (bsc#1012628). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1012628). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1012628). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1012628). - net: phy: micrel: Add ksz9131_resume() (bsc#1012628). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1012628). - sched/deadline: Fix accounting after global limits change (bsc#1012628). - bpf: Forget ranges when refining tnum after JSET (bsc#1012628). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1012628). - wifi: iwlwifi: mld: fix scan request validation (bsc#1012628). - um: Re-evaluate thread flags repeatedly (bsc#1012628). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1012628). - wifi: iwlwifi: handle non-overlapping API ranges (bsc#1012628). - drm/sched/tests: Add unit test for cancel_job() (bsc#1012628). - drm/sched: Avoid memory leaks with cancel_job() callback (bsc#1012628). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1012628). - net: phy: bcm54811: PHY initialization (bsc#1012628). - rv: Add #undef TRACE_INCLUDE_FILE (bsc#1012628). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1012628). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1012628). - wifi: mac80211: avoid weird state in error path (bsc#1012628). - s390/early: Copy last breaking event address to pt_regs (bsc#1012628). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1012628). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1012628). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1012628). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1012628). - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (bsc#1012628). - wifi: mt76: fix vif link allocation (bsc#1012628). - drm/fbdev-client: Skip DRM clients if modesetting is absent (bsc#1012628). - drm/msm: Update register xml (bsc#1012628). - drm/msm: use trylock for debugfs (bsc#1012628). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1012628). - perf/arm: Add missing .suppress_bind_attrs (bsc#1012628). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1012628). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1012628). - wifi: rtw89: Disable deep power saving for USB/SDIO (bsc#1012628). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1012628). - wifi: mt76: mt7915: mcu: increase eeprom command timeout (bsc#1012628). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1012628). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1012628). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1012628). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1012628). - xfrm: Duplicate SPI Handling (bsc#1012628). - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization (bsc#1012628). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1012628). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1012628). - net: ieee8021q: fix insufficient table-size assertion (bsc#1012628). - net: enetc: separate 64-bit counters from enetc_port_counters (bsc#1012628). - net: fec: allow disable coalescing (bsc#1012628). - drm/amdgpu: Use correct severity for BP threshold exceed event (bsc#1012628). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1012628). - drm/amd/display: add null check (bsc#1012628). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1012628). - drm/panel: raydium-rm67200: Move initialization from enable() to prepare stage (bsc#1012628). - eth: bnxt: take page size into account for page pool recycling rings (bsc#1012628). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1012628). - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (bsc#1012628). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1012628). - net: phy: realtek: add error handling to rtl8211f_get_wol (bsc#1012628). - lib: packing: Include necessary headers (bsc#1012628). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1012628). - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (bsc#1012628). - wifi: iwlwifi: mld: use the correct struct size for tracing (bsc#1012628). - wifi: iwlwifi: mld: fix last_mlo_scan_time type (bsc#1012628). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1012628). - wifi: iwlwifi: pcie: reinit device properly during TOP reset (bsc#1012628). - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (bsc#1012628). - drm/amdgpu: Add more checks to PSP mailbox (bsc#1012628). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1012628). - drm/amd/display: Initialize mode_select to 0 (bsc#1012628). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1012628). - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (bsc#1012628). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1012628). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1012628). - powerpc: floppy: Add missing checks after DMA map (bsc#1012628). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1012628). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1012628). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1012628). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1012628). - drm/amd/pm: Use pointer type for typecheck() (bsc#1012628). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1012628). - drm/amd/display: Stop storing failures into adev->dm.cached_state (bsc#1012628). - drm/amdgpu: Suspend IH during mode-2 reset (bsc#1012628). - drm/amdgpu: clear pa and mca record counter when resetting eeprom (bsc#1012628). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1012628). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1012628). - gve: Return error for unknown admin queue command (bsc#1012628). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1012628). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1012628). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1012628). - bpftool: Fix JSON writer resource leak in version command (bsc#1012628). - ptp: Use ratelimite for freerun error message (bsc#1012628). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1012628). - ionic: clean dbpage in de-init (bsc#1012628). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1012628). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1012628). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1012628). - drm/ttm: Should to return the evict error (bsc#1012628). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1012628). - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (bsc#1012628). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1012628). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1012628). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1012628). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1012628). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1012628). - drm/ttm: Respect the shrinker core free target (bsc#1012628). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1012628). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1012628). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1012628). - vhost: fail early when __vhost_add_used() fails (bsc#1012628). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1012628). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1012628). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1012628). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1012628). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1012628). - smb: client: fix session setup against servers that require SPN (bsc#1012628). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1012628). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1012628). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1012628). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1012628). - sphinx: kernel_abi: fix performance regression with O= (bsc#1012628). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1012628). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1012628). - phy: rockchip-pcie: Enable all four lanes if required (bsc#1012628). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1012628). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1012628). - watchdog: dw_wdt: Fix default timeout (bsc#1012628). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1012628). - clk: qcom: ipq5018: keep XO clock always on (bsc#1012628). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1012628). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1012628). - ext4: limit the maximum folio order (bsc#1012628). - scsi: bfa: Double-free fix (bsc#1012628). - jfs: truncate good inode pages when hard link is 0 (bsc#1012628). - jfs: Regular file corruption check (bsc#1012628). - jfs: upper bound check of tree index in dbAllocAG (bsc#1012628). - media: hi556: Fix reset GPIO timings (bsc#1012628). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1012628). - crypto: jitter - fix intermediary handling (bsc#1012628). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1012628). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1012628). - media: iris: Add handling for corrupt and drop frames (bsc#1012628). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1012628). - media: i2c: vd55g1: Setup sensor external clock before patching (bsc#1012628). - media: i2c: vd55g1: Fix RATE macros not being expressed in bps (bsc#1012628). - media: ipu-bridge: Add _HID for OV5670 (bsc#1012628). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1012628). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1012628). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1012628). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1012628). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1012628). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1012628). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1012628). - crypto: caam - Support iMX8QXP and variants thereof (bsc#1012628). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1012628). - HID: rate-limit hid_warn to prevent log flooding (bsc#1012628). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1012628). - scsi: pm80xx: Free allocated tags after failure (bsc#1012628). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1012628). - PCI: dw-rockchip: Delay link training after hot reset in EP mode (bsc#1012628). - pinctrl: stm32: Manage irq affinity settings (bsc#1012628). - media: raspberrypi: cfe: Fix min_reqbufs_allocation (bsc#1012628). - media: tc358743: Check I2C succeeded during probe (bsc#1012628). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1012628). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1012628). - media: usb: hdpvr: disable zero-length read messages (bsc#1012628). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1012628). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1012628). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1012628). - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (bsc#1012628). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1012628). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1012628). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1012628). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1012628). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1012628). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1012628). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1012628). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1012628). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1012628). - i3c: add missing include to internal header (bsc#1012628). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1012628). - apparmor: shift ouid when mediating hard links in userns (bsc#1012628). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1012628). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1012628). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1012628). - dm-table: fix checking for rq stackable devices (bsc#1012628). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1012628). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1012628). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1012628). - exfat: add cluster chain loop check for dir (bsc#1012628). - f2fs: check the generic conditions first (bsc#1012628). - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info() (bsc#1012628). - printk: nbcon: Allow reacquire during panic (bsc#1012628). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1012628). - vfio/type1: conditional rescheduling while pinning (bsc#1012628). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1012628). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1012628). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1012628). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1012628). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1012628). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1012628). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1012628). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1012628). - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a minute (bsc#1012628). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1012628). - ipmi: Fix strcpy source and destination the same (bsc#1012628). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1012628). - tools/power turbostat: Fix build with musl (bsc#1012628). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1012628). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1012628). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1012628). - irqchip/mvebu-gicp: Clear pending interrupts on init (bsc#1012628). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1012628). - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU (bsc#1012628). - regmap: irq: Free the regmap-irq mutex (bsc#1012628). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1012628). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1012628). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1012628). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1012628). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1012628). - pNFS: Handle RPC size limit for layoutcommits (bsc#1012628). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1012628). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1012628). - scsi: ufs: core: Fix interrupt handling for MCQ Mode (bsc#1012628). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1012628). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1012628). - ublk: check for unprivileged daemon on each I/O fetch (bsc#1012628). - block: fix kobject double initialization in add_disk (bsc#1012628). - cifs: Fix collect_sample() to handle any iterator type (bsc#1012628). - drm/i915/fbc: fix the implementation of wa_18038517565 (bsc#1012628). - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush (bsc#1012628). - drm/xe/migrate: prevent infinite recursion (bsc#1012628). - drm/xe/migrate: don't overflow max copy size (bsc#1012628). - drm/xe/migrate: prevent potential UAF (bsc#1012628). - drm/xe/hwmon: Add SW clamp for power limits writes (bsc#1012628). - drm/amdgpu: fix vram reservation issue (bsc#1012628). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1012628). - x86/sev: Improve handling of writes to intercepted TSC MSRs (bsc#1012628). - x86/fpu: Fix NULL dereference in avx512_status() (bsc#1012628). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1012628). - futex: Use user_write_access_begin/_end() in futex_put_value() (bsc#1012628). - rust: kbuild: clean output before running `rustdoc` (bsc#1012628). - rust: workaround `rustdoc` target modifiers bug (bsc#1012628). - samples/damon/wsse: fix boot time enable handling (bsc#1012628). - samples/damon/mtier: support boot time enable setup (bsc#1012628). - mm/damon/core: commit damos->target_nid (bsc#1012628). - block: Introduce bio_needs_zone_write_plugging() (bsc#1012628). - dm: Always split write BIOs to zoned device limits (bsc#1012628). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1012628). - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks (bsc#1012628). - cifs: reset iface weights when we cannot find a candidate (bsc#1012628). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1012628). - iommu/arm-smmu-v3: Revert vmaster in the error path (bsc#1012628). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1012628). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1012628). - iommufd: Prevent ALIGN() overflow (bsc#1012628). - ext4: fix zombie groups in average fragment size lists (bsc#1012628). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1012628). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1012628). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1012628). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1012628). - usb: typec: ucsi: Update power_supply on power role change (bsc#1012628). - comedi: fix race between polling and detaching (bsc#1012628). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1012628). - usb: typec: fusb302: cache PD RX state (bsc#1012628). - cdc-acm: fix race between initial clearing halt and open (bsc#1012628). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1012628). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1012628). - btrfs: zoned: reserve data_reloc block group on mount (bsc#1012628). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1012628). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1012628). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1012628). - btrfs: don't ignore inode missing when replaying log tree (bsc#1012628). - btrfs: fix ssd_spread overallocation (bsc#1012628). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1012628). - btrfs: populate otime when logging an inode item (bsc#1012628). - btrfs: don't skip accounting in early ENOTTY return in btrfs_uring_encoded_read() (bsc#1012628). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1012628). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1012628). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1012628). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1012628). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1012628). - btrfs: zoned: do not select metadata BG as finish target (bsc#1012628). - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents() (bsc#1012628). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1012628). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1012628). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1012628). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1012628). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1012628). - fbdev: nvidiafb: add depends on HAS_IOPORT (bsc#1012628). - ocfs2: reset folio to NULL when get folio fails (bsc#1012628). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1012628). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1012628). - i2c: core: Fix double-free of fwnode in i2c_unregister_device() (bsc#1012628). - parisc: Makefile: fix a typo in palo.conf (bsc#1012628). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1012628). - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud() (bsc#1012628). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1012628). - mm/shmem, swap: improve cached mTHP handling and fix potential hang (bsc#1012628). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1012628). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1012628). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1012628). - media: venus: Fix OOB read due to missing payload bound check (bsc#1012628). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1012628). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1012628). - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (bsc#1012628). - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path (bsc#1012628). - tracing: fprobe: Fix infinite recursion using preempt_*_notrace() (bsc#1012628). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1012628). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1012628). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1012628). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1012628). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1012628). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1012628). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1012628). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1012628). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1012628). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1012628). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1012628). - irqchip/mvebu-gicp: Use resource_size() for ioremap() (bsc#1012628). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1012628). - io_uring/zcrx: fix null ifq on area destruction (bsc#1012628). - io_uring/zcrx: don't leak pages on account failure (bsc#1012628). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.2-522-btrfs-fix-log-tree-replay-failure-due-to-file-.patch. - commit b12dbdb ++++ kernel-longterm: - Linux 6.12.43 (bsc#1234429). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1234429). - PCI: Honor Max Link Speed when determining supported speeds (bsc#1234429). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1234429). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1234429). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1234429). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1234429). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1234429). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1234429). - rust: workaround `rustdoc` target modifiers bug (bsc#1234429). - rust: kbuild: clean output before running `rustdoc` (bsc#1234429). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1234429). - arm64: dts: ti: k3-j722s-evm: Fix USB2.0_MUX_SEL to select Type-C (bsc#1234429). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1234429). - PCI: Allow PCI bridges to go to D3Hot on all non-x86 (bsc#1234429). - PCI: Store all PCIe Supported Link Speeds (bsc#1234429). - smb: client: fix netns refcount leak after net_passive changes (bsc#1234429). - net: better track kernel sockets lifetime (bsc#1234429). - net: Add net_passive_inc() and net_passive_dec() (bsc#1234429). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1234429). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1234429). - tools/hv: fcopy: Fix irregularities with size of ring buffer (bsc#1234429). - wifi: mac80211: check basic rates validity in sta_link_apply_parameters (bsc#1234429). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1234429). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1234429). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1234429). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1234429). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1234429). - media: venus: Fix OOB read due to missing payload bound check (bsc#1234429). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1234429). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1234429). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1234429). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1234429). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1234429). - parisc: Makefile: fix a typo in palo.conf (bsc#1234429). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1234429). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1234429). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1234429). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1234429). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1234429). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1234429). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1234429). - btrfs: zoned: do not select metadata BG as finish target (bsc#1234429). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1234429). - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1234429). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1234429). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1234429). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1234429). - btrfs: populate otime when logging an inode item (bsc#1234429). - btrfs: fix ssd_spread overallocation (bsc#1234429). - btrfs: don't ignore inode missing when replaying log tree (bsc#1234429). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1234429). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1234429). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1234429). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1234429). - cdc-acm: fix race between initial clearing halt and open (bsc#1234429). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1234429). - comedi: fix race between polling and detaching (bsc#1234429). - usb: typec: ucsi: Update power_supply on power role change (bsc#1234429). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1234429). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1234429). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1234429). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1234429). - ext4: fix zombie groups in average fragment size lists (bsc#1234429). - iommufd: Prevent ALIGN() overflow (bsc#1234429). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1234429). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1234429). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1234429). - cifs: reset iface weights when we cannot find a candidate (bsc#1234429). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1234429). - dm: Always split write BIOs to zoned device limits (bsc#1234429). - block: Introduce bio_needs_zone_write_plugging() (bsc#1234429). - mm/damon/core: commit damos->target_nid (bsc#1234429). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1234429). - drm/amdgpu: fix vram reservation issue (bsc#1234429). - cifs: Fix collect_sample() to handle any iterator type (bsc#1234429). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1234429). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1234429). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1234429). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1234429). - pNFS: Handle RPC size limit for layoutcommits (bsc#1234429). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1234429). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1234429). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1234429). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1234429). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1234429). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1234429). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1234429). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1234429). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1234429). - tools/power turbostat: Fix build with musl (bsc#1234429). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1234429). - ipmi: Fix strcpy source and destination the same (bsc#1234429). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1234429). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1234429). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1234429). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1234429). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1234429). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1234429). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1234429). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1234429). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1234429). - vfio/type1: conditional rescheduling while pinning (bsc#1234429). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1234429). - printk: nbcon: Allow reacquire during panic (bsc#1234429). - f2fs: check the generic conditions first (bsc#1234429). - exfat: add cluster chain loop check for dir (bsc#1234429). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1234429). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1234429). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1234429). - dm-table: fix checking for rq stackable devices (bsc#1234429). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1234429). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1234429). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1234429). - apparmor: shift ouid when mediating hard links in userns (bsc#1234429). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1234429). - i3c: add missing include to internal header (bsc#1234429). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1234429). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1234429). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1234429). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1234429). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1234429). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1234429). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1234429). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1234429). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1234429). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1234429). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1234429). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1234429). - media: usb: hdpvr: disable zero-length read messages (bsc#1234429). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1234429). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1234429). - media: tc358743: Check I2C succeeded during probe (bsc#1234429). - pinctrl: stm32: Manage irq affinity settings (bsc#1234429). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1234429). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1234429). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1234429). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1234429). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1234429). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1234429). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1234429). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1234429). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1234429). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1234429). - media: ipu-bridge: Add _HID for OV5670 (bsc#1234429). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1234429). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1234429). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1234429). - crypto: jitter - fix intermediary handling (bsc#1234429). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1234429). - media: hi556: Fix reset GPIO timings (bsc#1234429). - jfs: upper bound check of tree index in dbAllocAG (bsc#1234429). - jfs: Regular file corruption check (bsc#1234429). - jfs: truncate good inode pages when hard link is 0 (bsc#1234429). - scsi: bfa: Double-free fix (bsc#1234429). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1234429). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1234429). - clk: qcom: ipq5018: keep XO clock always on (bsc#1234429). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1234429). - watchdog: dw_wdt: Fix default timeout (bsc#1234429). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1234429). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1234429). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1234429). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1234429). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1234429). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1234429). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1234429). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1234429). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1234429). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1234429). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1234429). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1234429). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1234429). - vhost: fail early when __vhost_add_used() fails (bsc#1234429). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1234429). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1234429). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1234429). - drm/ttm: Respect the shrinker core free target (bsc#1234429). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1234429). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1234429). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1234429). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1234429). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1234429). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1234429). - drm/ttm: Should to return the evict error (bsc#1234429). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1234429). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1234429). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1234429). - ionic: clean dbpage in de-init (bsc#1234429). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1234429). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1234429). - ptp: Use ratelimite for freerun error message (bsc#1234429). - bpftool: Fix JSON writer resource leak in version command (bsc#1234429). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1234429). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1234429). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1234429). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1234429). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1234429). - gve: Return error for unknown admin queue command (bsc#1234429). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1234429). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1234429). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1234429). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1234429). - neighbour: add support for NUD_PERMANENT proxy entries (bsc#1234429). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1234429). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1234429). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1234429). - powerpc: floppy: Add missing checks after DMA map (bsc#1234429). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1234429). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1234429). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1234429). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1234429). - drm/amd/display: Initialize mode_select to 0 (bsc#1234429). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1234429). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1234429). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1234429). - lib: packing: Include necessary headers (bsc#1234429). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1234429). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1234429). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1234429). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1234429). - net: fec: allow disable coalescing (bsc#1234429). - net: ieee8021q: fix insufficient table-size assertion (bsc#1234429). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1234429). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1234429). - xfrm: Duplicate SPI Handling (bsc#1234429). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1234429). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1234429). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1234429). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1234429). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1234429). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1234429). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1234429). - perf/arm: Add missing .suppress_bind_attrs (bsc#1234429). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1234429). - drm/msm: use trylock for debugfs (bsc#1234429). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1234429). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1234429). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1234429). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1234429). - s390/early: Copy last breaking event address to pt_regs (bsc#1234429). - wifi: mac80211: avoid weird state in error path (bsc#1234429). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1234429). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1234429). - net: phy: bcm54811: PHY initialization (bsc#1234429). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1234429). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1234429). - um: Re-evaluate thread flags repeatedly (bsc#1234429). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1234429). - bpf: Forget ranges when refining tnum after JSET (bsc#1234429). - sched/deadline: Fix accounting after global limits change (bsc#1234429). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1234429). - net: phy: micrel: Add ksz9131_resume() (bsc#1234429). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1234429). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1234429). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1234429). - wifi: cfg80211: Fix interface type validation (bsc#1234429). - net: mctp: Prevent duplicate binds (bsc#1234429). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1234429). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1234429). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1234429). - drm/amd/pm: fix null pointer access (bsc#1234429). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1234429). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1234429). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1234429). - net: ag71xx: Add missing check after DMA map (bsc#1234429). - et131x: Add missing check after DMA map (bsc#1234429). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1234429). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1234429). - idpf: preserve coalescing settings across resets (bsc#1234429). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1234429). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1234429). - s390/time: Use monotonic clock in get_cycles() (bsc#1234429). - wifi: cfg80211: reject HTC bit for management frames (bsc#1234429). - ktest.pl: Prevent recursion of default variable options (bsc#1234429). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1234429). - net: usb: cdc-ncm: check for filtering capability (bsc#1234429). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1234429). - xen/netfront: Fix TX response spurious interrupts (bsc#1234429). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1234429). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1234429). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1234429). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1234429). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1234429). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1234429). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1234429). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1234429). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1234429). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1234429). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1234429). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1234429). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1234429). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1234429). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1234429). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1234429). - usb: core: usb_submit_urb: downgrade type check (bsc#1234429). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1234429). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1234429). - tty: serial: fix print format specifiers (bsc#1234429). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1234429). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1234429). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1234429). - x86/bugs: Avoid warning when overriding return thunk (bsc#1234429). - ALSA: hda: Disable jack polling at shutdown (bsc#1234429). - ALSA: hda: Handle the jack polling always via a work (bsc#1234429). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1234429). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1234429). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1234429). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1234429). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1234429). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1234429). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1234429). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1234429). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1234429). - ACPI: processor: fix acpi_object initialization (bsc#1234429). - PM: sleep: console: Fix the black screen issue (bsc#1234429). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1234429). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1234429). - firmware: tegra: Fix IVC dependency problems (bsc#1234429). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1234429). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1234429). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1234429). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1234429). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1234429). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1234429). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1234429). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1234429). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1234429). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1234429). - EDAC/synopsys: Clear the ECC counters on init (bsc#1234429). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1234429). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1234429). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1234429). - cpufreq: Exit governor when failed to start old governor (bsc#1234429). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1234429). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1234429). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1234429). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1234429). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1234429). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1234429). - usb: xhci: Avoid showing errors during surprise removal (bsc#1234429). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1234429). - usb: xhci: Avoid showing warnings for dying controller (bsc#1234429). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1234429). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1234429). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1234429). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1234429). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1234429). - tracefs: Add d_delete to remove negative dentries (bsc#1234429). - securityfs: don't pin dentries twice, once is enough.. (bsc#1234429). - fix locking in efi_secret_unlink() (bsc#1234429). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1234429). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1234429). - fs/ntfs3: correctly create symlink for relative path (bsc#1234429). - fs/ntfs3: Add sanity check for file name (bsc#1234429). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1234429). - ata: ahci: Disable DIPM if host lacks support (bsc#1234429). - ata: ahci: Disallow LPM policy control if not supported (bsc#1234429). - better lockdep annotations for simple_recursive_removal() (bsc#1234429). - hfs: fix not erasing deleted b-tree node issue (bsc#1234429). - drbd: add missing kref_get in handle_write_conflicts (bsc#1234429). - udf: Verify partition map count (bsc#1234429). - loop: Avoid updating block size under exclusive owner (bsc#1234429). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1234429). - gfs2: Validate i_depth for exhash directories (bsc#1234429). - nvme-tcp: log TLS handshake failures at error level (bsc#1234429). - md/raid10: set chunk_sectors limit (bsc#1234429). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1234429). - nvme-pci: try function level reset on init failure (bsc#1234429). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1234429). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1234429). - arm64: Handle KCOV __init vs inline mismatches (bsc#1234429). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1234429). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1234429). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1234429). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1234429). - hfs: fix general protection fault in hfs_find_init() (bsc#1234429). - net: kcm: Fix race condition in kcm_unattach() (bsc#1234429). - tls: handle data disappearing from under the TLS ULP (bsc#1234429). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1234429). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1234429). - intel_idle: Allow loading ACPI tables for any family (bsc#1234429). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1234429). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1234429). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1234429). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1234429). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1234429). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1234429). - habanalabs: fix UAF in export_dmabuf() (bsc#1234429). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1234429). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1234429). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1234429). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1234429). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1234429). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1234429). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1234429). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1234429). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1234429). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1234429). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1234429). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1234429). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1234429). - Documentation: ACPI: Fix parent device references (bsc#1234429). - eventpoll: Fix semi-unbounded recursion (bsc#1234429). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1234429). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1234429). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1234429). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1234429). - clk: samsung: exynos850: fix a comment (bsc#1234429). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1234429). - LoongArch: Avoid in-place string operation on FDT content (bsc#1234429). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1234429). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1234429). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1234429). - PCI: Extend isolated function probing to LoongArch (bsc#1234429). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1234429). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1234429). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1234429). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1234429). - net: dpaa: fix device leak when querying time stamp info (bsc#1234429). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1234429). - net: mtk_eth_soc: fix device leak at probe (bsc#1234429). - net: enetc: fix device and OF node leak at probe (bsc#1234429). - net: gianfar: fix device leak when querying time stamp info (bsc#1234429). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1234429). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1234429). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1234429). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1234429). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1234429). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1234429). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1234429). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1234429). - gpio: virtio: Fix config space reading (bsc#1234429). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1234429). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1234429). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1234429). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1234429). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1234429). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1234429). - io_uring: don't use int for ABI (bsc#1234429). - commit 04bb54a ++++ kernel-obs-build: - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1012628). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1012628). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1012628). - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts (bsc#1012628). - lib/crypto: x86/poly1305: Fix performance regression on short messages (bsc#1012628). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1012628). - Documentation: ACPI: Fix parent device references (bsc#1012628). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1012628). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1012628). - ACPI: EC: Relax sanity check of the ECDT ID string (bsc#1012628). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1012628). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1012628). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1012628). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1012628). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1012628). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1012628). - habanalabs: fix UAF in export_dmabuf() (bsc#1012628). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1012628). - xfrm: flush all states in xfrm_state_fini (bsc#1012628). - xfrm: restore GSO for SW crypto (bsc#1012628). - xfrm: bring back device check in validate_xmit_xfrm (bsc#1012628). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1012628). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1012628). - netfilter: ctnetlink: remove refcounting in expectation dumpers (bsc#1012628). - net: hibmcge: fix rtnl deadlock issue (bsc#1012628). - net: hibmcge: fix the division by zero issue (bsc#1012628). - net: hibmcge: fix the np_link_fail error reporting issue (bsc#1012628). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1012628). - net: page_pool: allow enabling recycling late, fix false positive warning (bsc#1012628). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1012628). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1012628). - net: lapbether: ignore ops-locked netdevs (bsc#1012628). - hamradio: ignore ops-locked netdevs (bsc#1012628). - erofs: fix block count report when 48-bit layout is on (bsc#1012628). - intel_idle: Allow loading ACPI tables for any family (bsc#1012628). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1012628). - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (bsc#1012628). - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (bsc#1012628). - net: stmmac: thead: Get and enable APB clock on initialization (bsc#1012628). - riscv: dts: thead: Add APB clocks for TH1520 GMACs (bsc#1012628). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1012628). - tls: handle data disappearing from under the TLS ULP (bsc#1012628). - ipvs: Fix estimator kthreads preferred affinity (bsc#1012628). - netfilter: nf_tables: reject duplicate device on updates (bsc#1012628). - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE (bsc#1012628). - net: kcm: Fix race condition in kcm_unattach() (bsc#1012628). - hfs: fix general protection fault in hfs_find_init() (bsc#1012628). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1012628). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1012628). - arm64: Handle KCOV __init vs inline mismatches (bsc#1012628). - tpm: Check for completion after timeout (bsc#1012628). - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (bsc#1012628). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1012628). - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents (bsc#1012628). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1012628). - nvme-pci: try function level reset on init failure (bsc#1012628). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1012628). - md/raid10: set chunk_sectors limit (bsc#1012628). - nvme-tcp: log TLS handshake failures at error level (bsc#1012628). - gfs2: Validate i_depth for exhash directories (bsc#1012628). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1012628). - loop: Avoid updating block size under exclusive owner (bsc#1012628). - udf: Verify partition map count (bsc#1012628). - drbd: add missing kref_get in handle_write_conflicts (bsc#1012628). - hfs: fix not erasing deleted b-tree node issue (bsc#1012628). - better lockdep annotations for simple_recursive_removal() (bsc#1012628). - ata: ahci: Disallow LPM policy control if not supported (bsc#1012628). - ata: ahci: Disable DIPM if host lacks support (bsc#1012628). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1012628). - fs/ntfs3: Add sanity check for file name (bsc#1012628). - fs/ntfs3: correctly create symlink for relative path (bsc#1012628). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - landlock: opened file never has a negative dentry (bsc#1012628). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1012628). - fix locking in efi_secret_unlink() (bsc#1012628). - securityfs: don't pin dentries twice, once is enough.. (bsc#1012628). - tracefs: Add d_delete to remove negative dentries (bsc#1012628). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1012628). - staging: gpib: Add init response codes for new ni-usb-hs+ (bsc#1012628). - selftests/kexec: fix test_kexec_jump build (bsc#1012628). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1012628). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1012628). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1012628). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1012628). - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support (bsc#1012628). - bus: mhi: host: pci_generic: Disable runtime PM for QDU100 (bsc#1012628). - usb: xhci: Avoid showing warnings for dying controller (bsc#1012628). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1012628). - usb: xhci: Avoid showing errors during surprise removal (bsc#1012628). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1012628). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1012628). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1012628). - binder: Fix selftest page indexing (bsc#1012628). - gpio: loongson-64bit: Extend GPIO irq support (bsc#1012628). - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi (bsc#1012628). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1012628). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1012628). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1012628). - cpufreq: Exit governor when failed to start old governor (bsc#1012628). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1012628). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1012628). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1012628). - EDAC/synopsys: Clear the ECC counters on init (bsc#1012628). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1012628). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1012628). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1012628). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1012628). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1012628). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1012628). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1012628). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1012628). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1012628). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1012628). - firmware: tegra: Fix IVC dependency problems (bsc#1012628). - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56 (bsc#1012628). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1012628). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1012628). - PM: sleep: console: Fix the black screen issue (bsc#1012628). - ACPI: processor: fix acpi_object initialization (bsc#1012628). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1012628). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1012628). - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND (bsc#1012628). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1012628). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1012628). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1012628). - ASoC: SDCA: Add flag for unused IRQs (bsc#1012628). - x86/sev/vc: Fix EFI runtime instruction emulation (bsc#1012628). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1012628). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1012628). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1012628). - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (bsc#1012628). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1012628). - ALSA: hda: Handle the jack polling always via a work (bsc#1012628). - ALSA: hda: Disable jack polling at shutdown (bsc#1012628). - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700 (bsc#1012628). - x86/bugs: Avoid warning when overriding return thunk (bsc#1012628). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1012628). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1012628). - irqchip/mips-gic: Allow forced affinity (bsc#1012628). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1012628). - tty: serial: fix print format specifiers (bsc#1012628). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1012628). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1012628). - usb: core: usb_submit_urb: downgrade type check (bsc#1012628). - usb: dwc3: xilinx: add shutdown callback (bsc#1012628). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1012628). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1012628). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1012628). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1012628). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1012628). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1012628). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1012628). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1012628). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1012628). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1012628). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1012628). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1012628). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1012628). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1012628). - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (bsc#1012628). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1012628). - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (bsc#1012628). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1012628). - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (bsc#1012628). - xen/netfront: Fix TX response spurious interrupts (bsc#1012628). - wifi: iwlwifi: mld: use spec link id and not FW link id (bsc#1012628). - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (bsc#1012628). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1012628). - net: usb: cdc-ncm: check for filtering capability (bsc#1012628). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1012628). - ktest.pl: Prevent recursion of default variable options (bsc#1012628). - wifi: cfg80211: reject HTC bit for management frames (bsc#1012628). - s390/sclp: Use monotonic clock in sclp_sync_wait() (bsc#1012628). - s390/time: Use monotonic clock in get_cycles() (bsc#1012628). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1012628). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1012628). - idpf: preserve coalescing settings across resets (bsc#1012628). - libbpf: Fix warning in calloc() usage (bsc#1012628). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1012628). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1012628). - et131x: Add missing check after DMA map (bsc#1012628). - net: ag71xx: Add missing check after DMA map (bsc#1012628). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1012628). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1012628). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1012628). - drm/amd/pm: fix null pointer access (bsc#1012628). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1012628). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1012628). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1012628). - net: mctp: Prevent duplicate binds (bsc#1012628). - wifi: mac80211: don't use TPE data from assoc response (bsc#1012628). - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (bsc#1012628). - wifi: cfg80211: Fix interface type validation (bsc#1012628). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1012628). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1012628). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1012628). - net: phy: micrel: Add ksz9131_resume() (bsc#1012628). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1012628). - sched/deadline: Fix accounting after global limits change (bsc#1012628). - bpf: Forget ranges when refining tnum after JSET (bsc#1012628). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1012628). - wifi: iwlwifi: mld: fix scan request validation (bsc#1012628). - um: Re-evaluate thread flags repeatedly (bsc#1012628). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1012628). - wifi: iwlwifi: handle non-overlapping API ranges (bsc#1012628). - drm/sched/tests: Add unit test for cancel_job() (bsc#1012628). - drm/sched: Avoid memory leaks with cancel_job() callback (bsc#1012628). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1012628). - net: phy: bcm54811: PHY initialization (bsc#1012628). - rv: Add #undef TRACE_INCLUDE_FILE (bsc#1012628). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1012628). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1012628). - wifi: mac80211: avoid weird state in error path (bsc#1012628). - s390/early: Copy last breaking event address to pt_regs (bsc#1012628). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1012628). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1012628). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1012628). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1012628). - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (bsc#1012628). - wifi: mt76: fix vif link allocation (bsc#1012628). - drm/fbdev-client: Skip DRM clients if modesetting is absent (bsc#1012628). - drm/msm: Update register xml (bsc#1012628). - drm/msm: use trylock for debugfs (bsc#1012628). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1012628). - perf/arm: Add missing .suppress_bind_attrs (bsc#1012628). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1012628). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1012628). - wifi: rtw89: Disable deep power saving for USB/SDIO (bsc#1012628). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1012628). - wifi: mt76: mt7915: mcu: increase eeprom command timeout (bsc#1012628). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1012628). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1012628). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1012628). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1012628). - xfrm: Duplicate SPI Handling (bsc#1012628). - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization (bsc#1012628). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1012628). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1012628). - net: ieee8021q: fix insufficient table-size assertion (bsc#1012628). - net: enetc: separate 64-bit counters from enetc_port_counters (bsc#1012628). - net: fec: allow disable coalescing (bsc#1012628). - drm/amdgpu: Use correct severity for BP threshold exceed event (bsc#1012628). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1012628). - drm/amd/display: add null check (bsc#1012628). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1012628). - drm/panel: raydium-rm67200: Move initialization from enable() to prepare stage (bsc#1012628). - eth: bnxt: take page size into account for page pool recycling rings (bsc#1012628). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1012628). - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (bsc#1012628). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1012628). - net: phy: realtek: add error handling to rtl8211f_get_wol (bsc#1012628). - lib: packing: Include necessary headers (bsc#1012628). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1012628). - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (bsc#1012628). - wifi: iwlwifi: mld: use the correct struct size for tracing (bsc#1012628). - wifi: iwlwifi: mld: fix last_mlo_scan_time type (bsc#1012628). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1012628). - wifi: iwlwifi: pcie: reinit device properly during TOP reset (bsc#1012628). - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (bsc#1012628). - drm/amdgpu: Add more checks to PSP mailbox (bsc#1012628). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1012628). - drm/amd/display: Initialize mode_select to 0 (bsc#1012628). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1012628). - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (bsc#1012628). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1012628). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1012628). - powerpc: floppy: Add missing checks after DMA map (bsc#1012628). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1012628). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1012628). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1012628). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1012628). - drm/amd/pm: Use pointer type for typecheck() (bsc#1012628). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1012628). - drm/amd/display: Stop storing failures into adev->dm.cached_state (bsc#1012628). - drm/amdgpu: Suspend IH during mode-2 reset (bsc#1012628). - drm/amdgpu: clear pa and mca record counter when resetting eeprom (bsc#1012628). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1012628). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1012628). - gve: Return error for unknown admin queue command (bsc#1012628). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1012628). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1012628). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1012628). - bpftool: Fix JSON writer resource leak in version command (bsc#1012628). - ptp: Use ratelimite for freerun error message (bsc#1012628). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1012628). - ionic: clean dbpage in de-init (bsc#1012628). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1012628). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1012628). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1012628). - drm/ttm: Should to return the evict error (bsc#1012628). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1012628). - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (bsc#1012628). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1012628). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1012628). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1012628). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1012628). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1012628). - drm/ttm: Respect the shrinker core free target (bsc#1012628). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1012628). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1012628). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1012628). - vhost: fail early when __vhost_add_used() fails (bsc#1012628). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1012628). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1012628). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1012628). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1012628). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1012628). - smb: client: fix session setup against servers that require SPN (bsc#1012628). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1012628). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1012628). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1012628). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1012628). - sphinx: kernel_abi: fix performance regression with O= (bsc#1012628). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1012628). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1012628). - phy: rockchip-pcie: Enable all four lanes if required (bsc#1012628). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1012628). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1012628). - watchdog: dw_wdt: Fix default timeout (bsc#1012628). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1012628). - clk: qcom: ipq5018: keep XO clock always on (bsc#1012628). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1012628). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1012628). - ext4: limit the maximum folio order (bsc#1012628). - scsi: bfa: Double-free fix (bsc#1012628). - jfs: truncate good inode pages when hard link is 0 (bsc#1012628). - jfs: Regular file corruption check (bsc#1012628). - jfs: upper bound check of tree index in dbAllocAG (bsc#1012628). - media: hi556: Fix reset GPIO timings (bsc#1012628). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1012628). - crypto: jitter - fix intermediary handling (bsc#1012628). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1012628). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1012628). - media: iris: Add handling for corrupt and drop frames (bsc#1012628). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1012628). - media: i2c: vd55g1: Setup sensor external clock before patching (bsc#1012628). - media: i2c: vd55g1: Fix RATE macros not being expressed in bps (bsc#1012628). - media: ipu-bridge: Add _HID for OV5670 (bsc#1012628). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1012628). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1012628). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1012628). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1012628). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1012628). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1012628). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1012628). - crypto: caam - Support iMX8QXP and variants thereof (bsc#1012628). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1012628). - HID: rate-limit hid_warn to prevent log flooding (bsc#1012628). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1012628). - scsi: pm80xx: Free allocated tags after failure (bsc#1012628). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1012628). - PCI: dw-rockchip: Delay link training after hot reset in EP mode (bsc#1012628). - pinctrl: stm32: Manage irq affinity settings (bsc#1012628). - media: raspberrypi: cfe: Fix min_reqbufs_allocation (bsc#1012628). - media: tc358743: Check I2C succeeded during probe (bsc#1012628). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1012628). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1012628). - media: usb: hdpvr: disable zero-length read messages (bsc#1012628). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1012628). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1012628). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1012628). - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (bsc#1012628). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1012628). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1012628). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1012628). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1012628). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1012628). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1012628). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1012628). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1012628). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1012628). - i3c: add missing include to internal header (bsc#1012628). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1012628). - apparmor: shift ouid when mediating hard links in userns (bsc#1012628). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1012628). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1012628). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1012628). - dm-table: fix checking for rq stackable devices (bsc#1012628). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1012628). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1012628). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1012628). - exfat: add cluster chain loop check for dir (bsc#1012628). - f2fs: check the generic conditions first (bsc#1012628). - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info() (bsc#1012628). - printk: nbcon: Allow reacquire during panic (bsc#1012628). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1012628). - vfio/type1: conditional rescheduling while pinning (bsc#1012628). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1012628). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1012628). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1012628). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1012628). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1012628). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1012628). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1012628). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1012628). - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a minute (bsc#1012628). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1012628). - ipmi: Fix strcpy source and destination the same (bsc#1012628). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1012628). - tools/power turbostat: Fix build with musl (bsc#1012628). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1012628). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1012628). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1012628). - irqchip/mvebu-gicp: Clear pending interrupts on init (bsc#1012628). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1012628). - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU (bsc#1012628). - regmap: irq: Free the regmap-irq mutex (bsc#1012628). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1012628). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1012628). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1012628). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1012628). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1012628). - pNFS: Handle RPC size limit for layoutcommits (bsc#1012628). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1012628). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1012628). - scsi: ufs: core: Fix interrupt handling for MCQ Mode (bsc#1012628). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1012628). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1012628). - ublk: check for unprivileged daemon on each I/O fetch (bsc#1012628). - block: fix kobject double initialization in add_disk (bsc#1012628). - cifs: Fix collect_sample() to handle any iterator type (bsc#1012628). - drm/i915/fbc: fix the implementation of wa_18038517565 (bsc#1012628). - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush (bsc#1012628). - drm/xe/migrate: prevent infinite recursion (bsc#1012628). - drm/xe/migrate: don't overflow max copy size (bsc#1012628). - drm/xe/migrate: prevent potential UAF (bsc#1012628). - drm/xe/hwmon: Add SW clamp for power limits writes (bsc#1012628). - drm/amdgpu: fix vram reservation issue (bsc#1012628). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1012628). - x86/sev: Improve handling of writes to intercepted TSC MSRs (bsc#1012628). - x86/fpu: Fix NULL dereference in avx512_status() (bsc#1012628). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1012628). - futex: Use user_write_access_begin/_end() in futex_put_value() (bsc#1012628). - rust: kbuild: clean output before running `rustdoc` (bsc#1012628). - rust: workaround `rustdoc` target modifiers bug (bsc#1012628). - samples/damon/wsse: fix boot time enable handling (bsc#1012628). - samples/damon/mtier: support boot time enable setup (bsc#1012628). - mm/damon/core: commit damos->target_nid (bsc#1012628). - block: Introduce bio_needs_zone_write_plugging() (bsc#1012628). - dm: Always split write BIOs to zoned device limits (bsc#1012628). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1012628). - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks (bsc#1012628). - cifs: reset iface weights when we cannot find a candidate (bsc#1012628). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1012628). - iommu/arm-smmu-v3: Revert vmaster in the error path (bsc#1012628). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1012628). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1012628). - iommufd: Prevent ALIGN() overflow (bsc#1012628). - ext4: fix zombie groups in average fragment size lists (bsc#1012628). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1012628). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1012628). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1012628). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1012628). - usb: typec: ucsi: Update power_supply on power role change (bsc#1012628). - comedi: fix race between polling and detaching (bsc#1012628). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1012628). - usb: typec: fusb302: cache PD RX state (bsc#1012628). - cdc-acm: fix race between initial clearing halt and open (bsc#1012628). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1012628). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1012628). - btrfs: zoned: reserve data_reloc block group on mount (bsc#1012628). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1012628). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1012628). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1012628). - btrfs: don't ignore inode missing when replaying log tree (bsc#1012628). - btrfs: fix ssd_spread overallocation (bsc#1012628). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1012628). - btrfs: populate otime when logging an inode item (bsc#1012628). - btrfs: don't skip accounting in early ENOTTY return in btrfs_uring_encoded_read() (bsc#1012628). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1012628). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1012628). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1012628). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1012628). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1012628). - btrfs: zoned: do not select metadata BG as finish target (bsc#1012628). - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents() (bsc#1012628). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1012628). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1012628). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1012628). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1012628). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1012628). - fbdev: nvidiafb: add depends on HAS_IOPORT (bsc#1012628). - ocfs2: reset folio to NULL when get folio fails (bsc#1012628). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1012628). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1012628). - i2c: core: Fix double-free of fwnode in i2c_unregister_device() (bsc#1012628). - parisc: Makefile: fix a typo in palo.conf (bsc#1012628). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1012628). - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud() (bsc#1012628). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1012628). - mm/shmem, swap: improve cached mTHP handling and fix potential hang (bsc#1012628). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1012628). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1012628). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1012628). - media: venus: Fix OOB read due to missing payload bound check (bsc#1012628). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1012628). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1012628). - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (bsc#1012628). - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path (bsc#1012628). - tracing: fprobe: Fix infinite recursion using preempt_*_notrace() (bsc#1012628). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1012628). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1012628). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1012628). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1012628). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1012628). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1012628). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1012628). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1012628). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1012628). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1012628). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1012628). - irqchip/mvebu-gicp: Use resource_size() for ioremap() (bsc#1012628). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1012628). - io_uring/zcrx: fix null ifq on area destruction (bsc#1012628). - io_uring/zcrx: don't leak pages on account failure (bsc#1012628). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.2-522-btrfs-fix-log-tree-replay-failure-due-to-file-.patch. - commit b12dbdb ++++ kernel-obs-qa: - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1012628). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1012628). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1012628). - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts (bsc#1012628). - lib/crypto: x86/poly1305: Fix performance regression on short messages (bsc#1012628). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1012628). - Documentation: ACPI: Fix parent device references (bsc#1012628). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1012628). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1012628). - ACPI: EC: Relax sanity check of the ECDT ID string (bsc#1012628). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1012628). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1012628). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1012628). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1012628). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1012628). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1012628). - habanalabs: fix UAF in export_dmabuf() (bsc#1012628). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1012628). - xfrm: flush all states in xfrm_state_fini (bsc#1012628). - xfrm: restore GSO for SW crypto (bsc#1012628). - xfrm: bring back device check in validate_xmit_xfrm (bsc#1012628). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1012628). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1012628). - netfilter: ctnetlink: remove refcounting in expectation dumpers (bsc#1012628). - net: hibmcge: fix rtnl deadlock issue (bsc#1012628). - net: hibmcge: fix the division by zero issue (bsc#1012628). - net: hibmcge: fix the np_link_fail error reporting issue (bsc#1012628). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1012628). - net: page_pool: allow enabling recycling late, fix false positive warning (bsc#1012628). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1012628). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1012628). - net: lapbether: ignore ops-locked netdevs (bsc#1012628). - hamradio: ignore ops-locked netdevs (bsc#1012628). - erofs: fix block count report when 48-bit layout is on (bsc#1012628). - intel_idle: Allow loading ACPI tables for any family (bsc#1012628). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1012628). - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (bsc#1012628). - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (bsc#1012628). - net: stmmac: thead: Get and enable APB clock on initialization (bsc#1012628). - riscv: dts: thead: Add APB clocks for TH1520 GMACs (bsc#1012628). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1012628). - tls: handle data disappearing from under the TLS ULP (bsc#1012628). - ipvs: Fix estimator kthreads preferred affinity (bsc#1012628). - netfilter: nf_tables: reject duplicate device on updates (bsc#1012628). - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE (bsc#1012628). - net: kcm: Fix race condition in kcm_unattach() (bsc#1012628). - hfs: fix general protection fault in hfs_find_init() (bsc#1012628). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1012628). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1012628). - arm64: Handle KCOV __init vs inline mismatches (bsc#1012628). - tpm: Check for completion after timeout (bsc#1012628). - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (bsc#1012628). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1012628). - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents (bsc#1012628). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1012628). - nvme-pci: try function level reset on init failure (bsc#1012628). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1012628). - md/raid10: set chunk_sectors limit (bsc#1012628). - nvme-tcp: log TLS handshake failures at error level (bsc#1012628). - gfs2: Validate i_depth for exhash directories (bsc#1012628). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1012628). - loop: Avoid updating block size under exclusive owner (bsc#1012628). - udf: Verify partition map count (bsc#1012628). - drbd: add missing kref_get in handle_write_conflicts (bsc#1012628). - hfs: fix not erasing deleted b-tree node issue (bsc#1012628). - better lockdep annotations for simple_recursive_removal() (bsc#1012628). - ata: ahci: Disallow LPM policy control if not supported (bsc#1012628). - ata: ahci: Disable DIPM if host lacks support (bsc#1012628). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1012628). - fs/ntfs3: Add sanity check for file name (bsc#1012628). - fs/ntfs3: correctly create symlink for relative path (bsc#1012628). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - landlock: opened file never has a negative dentry (bsc#1012628). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1012628). - fix locking in efi_secret_unlink() (bsc#1012628). - securityfs: don't pin dentries twice, once is enough.. (bsc#1012628). - tracefs: Add d_delete to remove negative dentries (bsc#1012628). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1012628). - staging: gpib: Add init response codes for new ni-usb-hs+ (bsc#1012628). - selftests/kexec: fix test_kexec_jump build (bsc#1012628). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1012628). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1012628). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1012628). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1012628). - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support (bsc#1012628). - bus: mhi: host: pci_generic: Disable runtime PM for QDU100 (bsc#1012628). - usb: xhci: Avoid showing warnings for dying controller (bsc#1012628). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1012628). - usb: xhci: Avoid showing errors during surprise removal (bsc#1012628). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1012628). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1012628). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1012628). - binder: Fix selftest page indexing (bsc#1012628). - gpio: loongson-64bit: Extend GPIO irq support (bsc#1012628). - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi (bsc#1012628). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1012628). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1012628). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1012628). - cpufreq: Exit governor when failed to start old governor (bsc#1012628). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1012628). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1012628). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1012628). - EDAC/synopsys: Clear the ECC counters on init (bsc#1012628). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1012628). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1012628). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1012628). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1012628). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1012628). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1012628). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1012628). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1012628). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1012628). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1012628). - firmware: tegra: Fix IVC dependency problems (bsc#1012628). - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56 (bsc#1012628). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1012628). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1012628). - PM: sleep: console: Fix the black screen issue (bsc#1012628). - ACPI: processor: fix acpi_object initialization (bsc#1012628). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1012628). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1012628). - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND (bsc#1012628). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1012628). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1012628). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1012628). - ASoC: SDCA: Add flag for unused IRQs (bsc#1012628). - x86/sev/vc: Fix EFI runtime instruction emulation (bsc#1012628). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1012628). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1012628). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1012628). - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (bsc#1012628). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1012628). - ALSA: hda: Handle the jack polling always via a work (bsc#1012628). - ALSA: hda: Disable jack polling at shutdown (bsc#1012628). - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700 (bsc#1012628). - x86/bugs: Avoid warning when overriding return thunk (bsc#1012628). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1012628). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1012628). - irqchip/mips-gic: Allow forced affinity (bsc#1012628). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1012628). - tty: serial: fix print format specifiers (bsc#1012628). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1012628). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1012628). - usb: core: usb_submit_urb: downgrade type check (bsc#1012628). - usb: dwc3: xilinx: add shutdown callback (bsc#1012628). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1012628). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1012628). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1012628). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1012628). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1012628). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1012628). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1012628). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1012628). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1012628). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1012628). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1012628). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1012628). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1012628). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1012628). - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (bsc#1012628). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1012628). - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (bsc#1012628). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1012628). - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (bsc#1012628). - xen/netfront: Fix TX response spurious interrupts (bsc#1012628). - wifi: iwlwifi: mld: use spec link id and not FW link id (bsc#1012628). - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (bsc#1012628). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1012628). - net: usb: cdc-ncm: check for filtering capability (bsc#1012628). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1012628). - ktest.pl: Prevent recursion of default variable options (bsc#1012628). - wifi: cfg80211: reject HTC bit for management frames (bsc#1012628). - s390/sclp: Use monotonic clock in sclp_sync_wait() (bsc#1012628). - s390/time: Use monotonic clock in get_cycles() (bsc#1012628). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1012628). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1012628). - idpf: preserve coalescing settings across resets (bsc#1012628). - libbpf: Fix warning in calloc() usage (bsc#1012628). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1012628). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1012628). - et131x: Add missing check after DMA map (bsc#1012628). - net: ag71xx: Add missing check after DMA map (bsc#1012628). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1012628). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1012628). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1012628). - drm/amd/pm: fix null pointer access (bsc#1012628). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1012628). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1012628). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1012628). - net: mctp: Prevent duplicate binds (bsc#1012628). - wifi: mac80211: don't use TPE data from assoc response (bsc#1012628). - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (bsc#1012628). - wifi: cfg80211: Fix interface type validation (bsc#1012628). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1012628). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1012628). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1012628). - net: phy: micrel: Add ksz9131_resume() (bsc#1012628). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1012628). - sched/deadline: Fix accounting after global limits change (bsc#1012628). - bpf: Forget ranges when refining tnum after JSET (bsc#1012628). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1012628). - wifi: iwlwifi: mld: fix scan request validation (bsc#1012628). - um: Re-evaluate thread flags repeatedly (bsc#1012628). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1012628). - wifi: iwlwifi: handle non-overlapping API ranges (bsc#1012628). - drm/sched/tests: Add unit test for cancel_job() (bsc#1012628). - drm/sched: Avoid memory leaks with cancel_job() callback (bsc#1012628). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1012628). - net: phy: bcm54811: PHY initialization (bsc#1012628). - rv: Add #undef TRACE_INCLUDE_FILE (bsc#1012628). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1012628). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1012628). - wifi: mac80211: avoid weird state in error path (bsc#1012628). - s390/early: Copy last breaking event address to pt_regs (bsc#1012628). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1012628). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1012628). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1012628). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1012628). - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (bsc#1012628). - wifi: mt76: fix vif link allocation (bsc#1012628). - drm/fbdev-client: Skip DRM clients if modesetting is absent (bsc#1012628). - drm/msm: Update register xml (bsc#1012628). - drm/msm: use trylock for debugfs (bsc#1012628). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1012628). - perf/arm: Add missing .suppress_bind_attrs (bsc#1012628). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1012628). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1012628). - wifi: rtw89: Disable deep power saving for USB/SDIO (bsc#1012628). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1012628). - wifi: mt76: mt7915: mcu: increase eeprom command timeout (bsc#1012628). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1012628). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1012628). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1012628). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1012628). - xfrm: Duplicate SPI Handling (bsc#1012628). - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization (bsc#1012628). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1012628). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1012628). - net: ieee8021q: fix insufficient table-size assertion (bsc#1012628). - net: enetc: separate 64-bit counters from enetc_port_counters (bsc#1012628). - net: fec: allow disable coalescing (bsc#1012628). - drm/amdgpu: Use correct severity for BP threshold exceed event (bsc#1012628). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1012628). - drm/amd/display: add null check (bsc#1012628). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1012628). - drm/panel: raydium-rm67200: Move initialization from enable() to prepare stage (bsc#1012628). - eth: bnxt: take page size into account for page pool recycling rings (bsc#1012628). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1012628). - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (bsc#1012628). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1012628). - net: phy: realtek: add error handling to rtl8211f_get_wol (bsc#1012628). - lib: packing: Include necessary headers (bsc#1012628). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1012628). - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (bsc#1012628). - wifi: iwlwifi: mld: use the correct struct size for tracing (bsc#1012628). - wifi: iwlwifi: mld: fix last_mlo_scan_time type (bsc#1012628). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1012628). - wifi: iwlwifi: pcie: reinit device properly during TOP reset (bsc#1012628). - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (bsc#1012628). - drm/amdgpu: Add more checks to PSP mailbox (bsc#1012628). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1012628). - drm/amd/display: Initialize mode_select to 0 (bsc#1012628). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1012628). - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (bsc#1012628). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1012628). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1012628). - powerpc: floppy: Add missing checks after DMA map (bsc#1012628). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1012628). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1012628). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1012628). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1012628). - drm/amd/pm: Use pointer type for typecheck() (bsc#1012628). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1012628). - drm/amd/display: Stop storing failures into adev->dm.cached_state (bsc#1012628). - drm/amdgpu: Suspend IH during mode-2 reset (bsc#1012628). - drm/amdgpu: clear pa and mca record counter when resetting eeprom (bsc#1012628). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1012628). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1012628). - gve: Return error for unknown admin queue command (bsc#1012628). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1012628). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1012628). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1012628). - bpftool: Fix JSON writer resource leak in version command (bsc#1012628). - ptp: Use ratelimite for freerun error message (bsc#1012628). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1012628). - ionic: clean dbpage in de-init (bsc#1012628). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1012628). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1012628). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1012628). - drm/ttm: Should to return the evict error (bsc#1012628). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1012628). - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (bsc#1012628). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1012628). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1012628). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1012628). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1012628). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1012628). - drm/ttm: Respect the shrinker core free target (bsc#1012628). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1012628). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1012628). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1012628). - vhost: fail early when __vhost_add_used() fails (bsc#1012628). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1012628). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1012628). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1012628). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1012628). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1012628). - smb: client: fix session setup against servers that require SPN (bsc#1012628). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1012628). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1012628). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1012628). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1012628). - sphinx: kernel_abi: fix performance regression with O= (bsc#1012628). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1012628). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1012628). - phy: rockchip-pcie: Enable all four lanes if required (bsc#1012628). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1012628). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1012628). - watchdog: dw_wdt: Fix default timeout (bsc#1012628). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1012628). - clk: qcom: ipq5018: keep XO clock always on (bsc#1012628). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1012628). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1012628). - ext4: limit the maximum folio order (bsc#1012628). - scsi: bfa: Double-free fix (bsc#1012628). - jfs: truncate good inode pages when hard link is 0 (bsc#1012628). - jfs: Regular file corruption check (bsc#1012628). - jfs: upper bound check of tree index in dbAllocAG (bsc#1012628). - media: hi556: Fix reset GPIO timings (bsc#1012628). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1012628). - crypto: jitter - fix intermediary handling (bsc#1012628). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1012628). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1012628). - media: iris: Add handling for corrupt and drop frames (bsc#1012628). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1012628). - media: i2c: vd55g1: Setup sensor external clock before patching (bsc#1012628). - media: i2c: vd55g1: Fix RATE macros not being expressed in bps (bsc#1012628). - media: ipu-bridge: Add _HID for OV5670 (bsc#1012628). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1012628). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1012628). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1012628). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1012628). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1012628). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1012628). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1012628). - crypto: caam - Support iMX8QXP and variants thereof (bsc#1012628). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1012628). - HID: rate-limit hid_warn to prevent log flooding (bsc#1012628). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1012628). - scsi: pm80xx: Free allocated tags after failure (bsc#1012628). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1012628). - PCI: dw-rockchip: Delay link training after hot reset in EP mode (bsc#1012628). - pinctrl: stm32: Manage irq affinity settings (bsc#1012628). - media: raspberrypi: cfe: Fix min_reqbufs_allocation (bsc#1012628). - media: tc358743: Check I2C succeeded during probe (bsc#1012628). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1012628). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1012628). - media: usb: hdpvr: disable zero-length read messages (bsc#1012628). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1012628). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1012628). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1012628). - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (bsc#1012628). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1012628). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1012628). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1012628). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1012628). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1012628). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1012628). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1012628). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1012628). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1012628). - i3c: add missing include to internal header (bsc#1012628). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1012628). - apparmor: shift ouid when mediating hard links in userns (bsc#1012628). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1012628). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1012628). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1012628). - dm-table: fix checking for rq stackable devices (bsc#1012628). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1012628). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1012628). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1012628). - exfat: add cluster chain loop check for dir (bsc#1012628). - f2fs: check the generic conditions first (bsc#1012628). - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info() (bsc#1012628). - printk: nbcon: Allow reacquire during panic (bsc#1012628). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1012628). - vfio/type1: conditional rescheduling while pinning (bsc#1012628). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1012628). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1012628). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1012628). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1012628). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1012628). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1012628). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1012628). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1012628). - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a minute (bsc#1012628). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1012628). - ipmi: Fix strcpy source and destination the same (bsc#1012628). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1012628). - tools/power turbostat: Fix build with musl (bsc#1012628). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1012628). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1012628). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1012628). - irqchip/mvebu-gicp: Clear pending interrupts on init (bsc#1012628). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1012628). - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU (bsc#1012628). - regmap: irq: Free the regmap-irq mutex (bsc#1012628). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1012628). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1012628). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1012628). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1012628). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1012628). - pNFS: Handle RPC size limit for layoutcommits (bsc#1012628). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1012628). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1012628). - scsi: ufs: core: Fix interrupt handling for MCQ Mode (bsc#1012628). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1012628). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1012628). - ublk: check for unprivileged daemon on each I/O fetch (bsc#1012628). - block: fix kobject double initialization in add_disk (bsc#1012628). - cifs: Fix collect_sample() to handle any iterator type (bsc#1012628). - drm/i915/fbc: fix the implementation of wa_18038517565 (bsc#1012628). - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush (bsc#1012628). - drm/xe/migrate: prevent infinite recursion (bsc#1012628). - drm/xe/migrate: don't overflow max copy size (bsc#1012628). - drm/xe/migrate: prevent potential UAF (bsc#1012628). - drm/xe/hwmon: Add SW clamp for power limits writes (bsc#1012628). - drm/amdgpu: fix vram reservation issue (bsc#1012628). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1012628). - x86/sev: Improve handling of writes to intercepted TSC MSRs (bsc#1012628). - x86/fpu: Fix NULL dereference in avx512_status() (bsc#1012628). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1012628). - futex: Use user_write_access_begin/_end() in futex_put_value() (bsc#1012628). - rust: kbuild: clean output before running `rustdoc` (bsc#1012628). - rust: workaround `rustdoc` target modifiers bug (bsc#1012628). - samples/damon/wsse: fix boot time enable handling (bsc#1012628). - samples/damon/mtier: support boot time enable setup (bsc#1012628). - mm/damon/core: commit damos->target_nid (bsc#1012628). - block: Introduce bio_needs_zone_write_plugging() (bsc#1012628). - dm: Always split write BIOs to zoned device limits (bsc#1012628). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1012628). - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks (bsc#1012628). - cifs: reset iface weights when we cannot find a candidate (bsc#1012628). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1012628). - iommu/arm-smmu-v3: Revert vmaster in the error path (bsc#1012628). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1012628). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1012628). - iommufd: Prevent ALIGN() overflow (bsc#1012628). - ext4: fix zombie groups in average fragment size lists (bsc#1012628). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1012628). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1012628). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1012628). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1012628). - usb: typec: ucsi: Update power_supply on power role change (bsc#1012628). - comedi: fix race between polling and detaching (bsc#1012628). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1012628). - usb: typec: fusb302: cache PD RX state (bsc#1012628). - cdc-acm: fix race between initial clearing halt and open (bsc#1012628). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1012628). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1012628). - btrfs: zoned: reserve data_reloc block group on mount (bsc#1012628). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1012628). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1012628). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1012628). - btrfs: don't ignore inode missing when replaying log tree (bsc#1012628). - btrfs: fix ssd_spread overallocation (bsc#1012628). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1012628). - btrfs: populate otime when logging an inode item (bsc#1012628). - btrfs: don't skip accounting in early ENOTTY return in btrfs_uring_encoded_read() (bsc#1012628). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1012628). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1012628). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1012628). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1012628). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1012628). - btrfs: zoned: do not select metadata BG as finish target (bsc#1012628). - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents() (bsc#1012628). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1012628). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1012628). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1012628). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1012628). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1012628). - fbdev: nvidiafb: add depends on HAS_IOPORT (bsc#1012628). - ocfs2: reset folio to NULL when get folio fails (bsc#1012628). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1012628). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1012628). - i2c: core: Fix double-free of fwnode in i2c_unregister_device() (bsc#1012628). - parisc: Makefile: fix a typo in palo.conf (bsc#1012628). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1012628). - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud() (bsc#1012628). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1012628). - mm/shmem, swap: improve cached mTHP handling and fix potential hang (bsc#1012628). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1012628). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1012628). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1012628). - media: venus: Fix OOB read due to missing payload bound check (bsc#1012628). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1012628). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1012628). - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (bsc#1012628). - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path (bsc#1012628). - tracing: fprobe: Fix infinite recursion using preempt_*_notrace() (bsc#1012628). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1012628). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1012628). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1012628). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1012628). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1012628). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1012628). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1012628). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1012628). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1012628). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1012628). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1012628). - irqchip/mvebu-gicp: Use resource_size() for ioremap() (bsc#1012628). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1012628). - io_uring/zcrx: fix null ifq on area destruction (bsc#1012628). - io_uring/zcrx: don't leak pages on account failure (bsc#1012628). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.2-522-btrfs-fix-log-tree-replay-failure-due-to-file-.patch. - commit b12dbdb ++++ kernel-syms: - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1012628). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1012628). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1012628). - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts (bsc#1012628). - lib/crypto: x86/poly1305: Fix performance regression on short messages (bsc#1012628). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1012628). - Documentation: ACPI: Fix parent device references (bsc#1012628). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1012628). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1012628). - ACPI: EC: Relax sanity check of the ECDT ID string (bsc#1012628). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1012628). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1012628). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1012628). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1012628). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1012628). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1012628). - habanalabs: fix UAF in export_dmabuf() (bsc#1012628). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1012628). - xfrm: flush all states in xfrm_state_fini (bsc#1012628). - xfrm: restore GSO for SW crypto (bsc#1012628). - xfrm: bring back device check in validate_xmit_xfrm (bsc#1012628). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1012628). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1012628). - netfilter: ctnetlink: remove refcounting in expectation dumpers (bsc#1012628). - net: hibmcge: fix rtnl deadlock issue (bsc#1012628). - net: hibmcge: fix the division by zero issue (bsc#1012628). - net: hibmcge: fix the np_link_fail error reporting issue (bsc#1012628). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1012628). - net: page_pool: allow enabling recycling late, fix false positive warning (bsc#1012628). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1012628). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1012628). - net: lapbether: ignore ops-locked netdevs (bsc#1012628). - hamradio: ignore ops-locked netdevs (bsc#1012628). - erofs: fix block count report when 48-bit layout is on (bsc#1012628). - intel_idle: Allow loading ACPI tables for any family (bsc#1012628). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1012628). - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (bsc#1012628). - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (bsc#1012628). - net: stmmac: thead: Get and enable APB clock on initialization (bsc#1012628). - riscv: dts: thead: Add APB clocks for TH1520 GMACs (bsc#1012628). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1012628). - tls: handle data disappearing from under the TLS ULP (bsc#1012628). - ipvs: Fix estimator kthreads preferred affinity (bsc#1012628). - netfilter: nf_tables: reject duplicate device on updates (bsc#1012628). - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE (bsc#1012628). - net: kcm: Fix race condition in kcm_unattach() (bsc#1012628). - hfs: fix general protection fault in hfs_find_init() (bsc#1012628). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1012628). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1012628). - arm64: Handle KCOV __init vs inline mismatches (bsc#1012628). - tpm: Check for completion after timeout (bsc#1012628). - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (bsc#1012628). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1012628). - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents (bsc#1012628). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1012628). - nvme-pci: try function level reset on init failure (bsc#1012628). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1012628). - md/raid10: set chunk_sectors limit (bsc#1012628). - nvme-tcp: log TLS handshake failures at error level (bsc#1012628). - gfs2: Validate i_depth for exhash directories (bsc#1012628). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1012628). - loop: Avoid updating block size under exclusive owner (bsc#1012628). - udf: Verify partition map count (bsc#1012628). - drbd: add missing kref_get in handle_write_conflicts (bsc#1012628). - hfs: fix not erasing deleted b-tree node issue (bsc#1012628). - better lockdep annotations for simple_recursive_removal() (bsc#1012628). - ata: ahci: Disallow LPM policy control if not supported (bsc#1012628). - ata: ahci: Disable DIPM if host lacks support (bsc#1012628). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1012628). - fs/ntfs3: Add sanity check for file name (bsc#1012628). - fs/ntfs3: correctly create symlink for relative path (bsc#1012628). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - landlock: opened file never has a negative dentry (bsc#1012628). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1012628). - fix locking in efi_secret_unlink() (bsc#1012628). - securityfs: don't pin dentries twice, once is enough.. (bsc#1012628). - tracefs: Add d_delete to remove negative dentries (bsc#1012628). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1012628). - staging: gpib: Add init response codes for new ni-usb-hs+ (bsc#1012628). - selftests/kexec: fix test_kexec_jump build (bsc#1012628). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1012628). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1012628). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1012628). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1012628). - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support (bsc#1012628). - bus: mhi: host: pci_generic: Disable runtime PM for QDU100 (bsc#1012628). - usb: xhci: Avoid showing warnings for dying controller (bsc#1012628). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1012628). - usb: xhci: Avoid showing errors during surprise removal (bsc#1012628). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1012628). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1012628). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1012628). - binder: Fix selftest page indexing (bsc#1012628). - gpio: loongson-64bit: Extend GPIO irq support (bsc#1012628). - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi (bsc#1012628). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1012628). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1012628). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1012628). - cpufreq: Exit governor when failed to start old governor (bsc#1012628). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1012628). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1012628). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1012628). - EDAC/synopsys: Clear the ECC counters on init (bsc#1012628). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1012628). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1012628). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1012628). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1012628). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1012628). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1012628). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1012628). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1012628). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1012628). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1012628). - firmware: tegra: Fix IVC dependency problems (bsc#1012628). - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56 (bsc#1012628). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1012628). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1012628). - PM: sleep: console: Fix the black screen issue (bsc#1012628). - ACPI: processor: fix acpi_object initialization (bsc#1012628). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1012628). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1012628). - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND (bsc#1012628). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1012628). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1012628). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1012628). - ASoC: SDCA: Add flag for unused IRQs (bsc#1012628). - x86/sev/vc: Fix EFI runtime instruction emulation (bsc#1012628). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1012628). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1012628). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1012628). - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (bsc#1012628). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1012628). - ALSA: hda: Handle the jack polling always via a work (bsc#1012628). - ALSA: hda: Disable jack polling at shutdown (bsc#1012628). - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700 (bsc#1012628). - x86/bugs: Avoid warning when overriding return thunk (bsc#1012628). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1012628). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1012628). - irqchip/mips-gic: Allow forced affinity (bsc#1012628). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1012628). - tty: serial: fix print format specifiers (bsc#1012628). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1012628). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1012628). - usb: core: usb_submit_urb: downgrade type check (bsc#1012628). - usb: dwc3: xilinx: add shutdown callback (bsc#1012628). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1012628). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1012628). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1012628). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1012628). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1012628). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1012628). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1012628). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1012628). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1012628). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1012628). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1012628). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1012628). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1012628). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1012628). - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (bsc#1012628). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1012628). - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (bsc#1012628). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1012628). - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (bsc#1012628). - xen/netfront: Fix TX response spurious interrupts (bsc#1012628). - wifi: iwlwifi: mld: use spec link id and not FW link id (bsc#1012628). - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (bsc#1012628). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1012628). - net: usb: cdc-ncm: check for filtering capability (bsc#1012628). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1012628). - ktest.pl: Prevent recursion of default variable options (bsc#1012628). - wifi: cfg80211: reject HTC bit for management frames (bsc#1012628). - s390/sclp: Use monotonic clock in sclp_sync_wait() (bsc#1012628). - s390/time: Use monotonic clock in get_cycles() (bsc#1012628). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1012628). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1012628). - idpf: preserve coalescing settings across resets (bsc#1012628). - libbpf: Fix warning in calloc() usage (bsc#1012628). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1012628). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1012628). - et131x: Add missing check after DMA map (bsc#1012628). - net: ag71xx: Add missing check after DMA map (bsc#1012628). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1012628). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1012628). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1012628). - drm/amd/pm: fix null pointer access (bsc#1012628). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1012628). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1012628). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1012628). - net: mctp: Prevent duplicate binds (bsc#1012628). - wifi: mac80211: don't use TPE data from assoc response (bsc#1012628). - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (bsc#1012628). - wifi: cfg80211: Fix interface type validation (bsc#1012628). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1012628). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1012628). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1012628). - net: phy: micrel: Add ksz9131_resume() (bsc#1012628). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1012628). - sched/deadline: Fix accounting after global limits change (bsc#1012628). - bpf: Forget ranges when refining tnum after JSET (bsc#1012628). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1012628). - wifi: iwlwifi: mld: fix scan request validation (bsc#1012628). - um: Re-evaluate thread flags repeatedly (bsc#1012628). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1012628). - wifi: iwlwifi: handle non-overlapping API ranges (bsc#1012628). - drm/sched/tests: Add unit test for cancel_job() (bsc#1012628). - drm/sched: Avoid memory leaks with cancel_job() callback (bsc#1012628). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1012628). - net: phy: bcm54811: PHY initialization (bsc#1012628). - rv: Add #undef TRACE_INCLUDE_FILE (bsc#1012628). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1012628). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1012628). - wifi: mac80211: avoid weird state in error path (bsc#1012628). - s390/early: Copy last breaking event address to pt_regs (bsc#1012628). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1012628). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1012628). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1012628). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1012628). - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (bsc#1012628). - wifi: mt76: fix vif link allocation (bsc#1012628). - drm/fbdev-client: Skip DRM clients if modesetting is absent (bsc#1012628). - drm/msm: Update register xml (bsc#1012628). - drm/msm: use trylock for debugfs (bsc#1012628). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1012628). - perf/arm: Add missing .suppress_bind_attrs (bsc#1012628). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1012628). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1012628). - wifi: rtw89: Disable deep power saving for USB/SDIO (bsc#1012628). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1012628). - wifi: mt76: mt7915: mcu: increase eeprom command timeout (bsc#1012628). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1012628). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1012628). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1012628). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1012628). - xfrm: Duplicate SPI Handling (bsc#1012628). - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization (bsc#1012628). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1012628). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1012628). - net: ieee8021q: fix insufficient table-size assertion (bsc#1012628). - net: enetc: separate 64-bit counters from enetc_port_counters (bsc#1012628). - net: fec: allow disable coalescing (bsc#1012628). - drm/amdgpu: Use correct severity for BP threshold exceed event (bsc#1012628). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1012628). - drm/amd/display: add null check (bsc#1012628). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1012628). - drm/panel: raydium-rm67200: Move initialization from enable() to prepare stage (bsc#1012628). - eth: bnxt: take page size into account for page pool recycling rings (bsc#1012628). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1012628). - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (bsc#1012628). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1012628). - net: phy: realtek: add error handling to rtl8211f_get_wol (bsc#1012628). - lib: packing: Include necessary headers (bsc#1012628). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1012628). - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (bsc#1012628). - wifi: iwlwifi: mld: use the correct struct size for tracing (bsc#1012628). - wifi: iwlwifi: mld: fix last_mlo_scan_time type (bsc#1012628). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1012628). - wifi: iwlwifi: pcie: reinit device properly during TOP reset (bsc#1012628). - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (bsc#1012628). - drm/amdgpu: Add more checks to PSP mailbox (bsc#1012628). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1012628). - drm/amd/display: Initialize mode_select to 0 (bsc#1012628). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1012628). - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (bsc#1012628). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1012628). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1012628). - powerpc: floppy: Add missing checks after DMA map (bsc#1012628). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1012628). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1012628). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1012628). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1012628). - drm/amd/pm: Use pointer type for typecheck() (bsc#1012628). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1012628). - drm/amd/display: Stop storing failures into adev->dm.cached_state (bsc#1012628). - drm/amdgpu: Suspend IH during mode-2 reset (bsc#1012628). - drm/amdgpu: clear pa and mca record counter when resetting eeprom (bsc#1012628). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1012628). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1012628). - gve: Return error for unknown admin queue command (bsc#1012628). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1012628). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1012628). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1012628). - bpftool: Fix JSON writer resource leak in version command (bsc#1012628). - ptp: Use ratelimite for freerun error message (bsc#1012628). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1012628). - ionic: clean dbpage in de-init (bsc#1012628). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1012628). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1012628). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1012628). - drm/ttm: Should to return the evict error (bsc#1012628). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1012628). - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (bsc#1012628). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1012628). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1012628). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1012628). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1012628). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1012628). - drm/ttm: Respect the shrinker core free target (bsc#1012628). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1012628). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1012628). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1012628). - vhost: fail early when __vhost_add_used() fails (bsc#1012628). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1012628). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1012628). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1012628). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1012628). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1012628). - smb: client: fix session setup against servers that require SPN (bsc#1012628). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1012628). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1012628). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1012628). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1012628). - sphinx: kernel_abi: fix performance regression with O= (bsc#1012628). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1012628). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1012628). - phy: rockchip-pcie: Enable all four lanes if required (bsc#1012628). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1012628). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1012628). - watchdog: dw_wdt: Fix default timeout (bsc#1012628). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1012628). - clk: qcom: ipq5018: keep XO clock always on (bsc#1012628). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1012628). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1012628). - ext4: limit the maximum folio order (bsc#1012628). - scsi: bfa: Double-free fix (bsc#1012628). - jfs: truncate good inode pages when hard link is 0 (bsc#1012628). - jfs: Regular file corruption check (bsc#1012628). - jfs: upper bound check of tree index in dbAllocAG (bsc#1012628). - media: hi556: Fix reset GPIO timings (bsc#1012628). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1012628). - crypto: jitter - fix intermediary handling (bsc#1012628). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1012628). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1012628). - media: iris: Add handling for corrupt and drop frames (bsc#1012628). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1012628). - media: i2c: vd55g1: Setup sensor external clock before patching (bsc#1012628). - media: i2c: vd55g1: Fix RATE macros not being expressed in bps (bsc#1012628). - media: ipu-bridge: Add _HID for OV5670 (bsc#1012628). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1012628). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1012628). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1012628). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1012628). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1012628). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1012628). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1012628). - crypto: caam - Support iMX8QXP and variants thereof (bsc#1012628). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1012628). - HID: rate-limit hid_warn to prevent log flooding (bsc#1012628). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1012628). - scsi: pm80xx: Free allocated tags after failure (bsc#1012628). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1012628). - PCI: dw-rockchip: Delay link training after hot reset in EP mode (bsc#1012628). - pinctrl: stm32: Manage irq affinity settings (bsc#1012628). - media: raspberrypi: cfe: Fix min_reqbufs_allocation (bsc#1012628). - media: tc358743: Check I2C succeeded during probe (bsc#1012628). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1012628). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1012628). - media: usb: hdpvr: disable zero-length read messages (bsc#1012628). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1012628). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1012628). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1012628). - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (bsc#1012628). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1012628). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1012628). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1012628). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1012628). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1012628). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1012628). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1012628). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1012628). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1012628). - i3c: add missing include to internal header (bsc#1012628). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1012628). - apparmor: shift ouid when mediating hard links in userns (bsc#1012628). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1012628). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1012628). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1012628). - dm-table: fix checking for rq stackable devices (bsc#1012628). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1012628). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1012628). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1012628). - exfat: add cluster chain loop check for dir (bsc#1012628). - f2fs: check the generic conditions first (bsc#1012628). - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info() (bsc#1012628). - printk: nbcon: Allow reacquire during panic (bsc#1012628). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1012628). - vfio/type1: conditional rescheduling while pinning (bsc#1012628). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1012628). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1012628). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1012628). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1012628). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1012628). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1012628). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1012628). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1012628). - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a minute (bsc#1012628). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1012628). - ipmi: Fix strcpy source and destination the same (bsc#1012628). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1012628). - tools/power turbostat: Fix build with musl (bsc#1012628). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1012628). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1012628). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1012628). - irqchip/mvebu-gicp: Clear pending interrupts on init (bsc#1012628). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1012628). - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU (bsc#1012628). - regmap: irq: Free the regmap-irq mutex (bsc#1012628). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1012628). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1012628). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1012628). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1012628). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1012628). - pNFS: Handle RPC size limit for layoutcommits (bsc#1012628). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1012628). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1012628). - scsi: ufs: core: Fix interrupt handling for MCQ Mode (bsc#1012628). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1012628). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1012628). - ublk: check for unprivileged daemon on each I/O fetch (bsc#1012628). - block: fix kobject double initialization in add_disk (bsc#1012628). - cifs: Fix collect_sample() to handle any iterator type (bsc#1012628). - drm/i915/fbc: fix the implementation of wa_18038517565 (bsc#1012628). - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush (bsc#1012628). - drm/xe/migrate: prevent infinite recursion (bsc#1012628). - drm/xe/migrate: don't overflow max copy size (bsc#1012628). - drm/xe/migrate: prevent potential UAF (bsc#1012628). - drm/xe/hwmon: Add SW clamp for power limits writes (bsc#1012628). - drm/amdgpu: fix vram reservation issue (bsc#1012628). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1012628). - x86/sev: Improve handling of writes to intercepted TSC MSRs (bsc#1012628). - x86/fpu: Fix NULL dereference in avx512_status() (bsc#1012628). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1012628). - futex: Use user_write_access_begin/_end() in futex_put_value() (bsc#1012628). - rust: kbuild: clean output before running `rustdoc` (bsc#1012628). - rust: workaround `rustdoc` target modifiers bug (bsc#1012628). - samples/damon/wsse: fix boot time enable handling (bsc#1012628). - samples/damon/mtier: support boot time enable setup (bsc#1012628). - mm/damon/core: commit damos->target_nid (bsc#1012628). - block: Introduce bio_needs_zone_write_plugging() (bsc#1012628). - dm: Always split write BIOs to zoned device limits (bsc#1012628). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1012628). - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks (bsc#1012628). - cifs: reset iface weights when we cannot find a candidate (bsc#1012628). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1012628). - iommu/arm-smmu-v3: Revert vmaster in the error path (bsc#1012628). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1012628). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1012628). - iommufd: Prevent ALIGN() overflow (bsc#1012628). - ext4: fix zombie groups in average fragment size lists (bsc#1012628). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1012628). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1012628). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1012628). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1012628). - usb: typec: ucsi: Update power_supply on power role change (bsc#1012628). - comedi: fix race between polling and detaching (bsc#1012628). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1012628). - usb: typec: fusb302: cache PD RX state (bsc#1012628). - cdc-acm: fix race between initial clearing halt and open (bsc#1012628). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1012628). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1012628). - btrfs: zoned: reserve data_reloc block group on mount (bsc#1012628). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1012628). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1012628). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1012628). - btrfs: don't ignore inode missing when replaying log tree (bsc#1012628). - btrfs: fix ssd_spread overallocation (bsc#1012628). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1012628). - btrfs: populate otime when logging an inode item (bsc#1012628). - btrfs: don't skip accounting in early ENOTTY return in btrfs_uring_encoded_read() (bsc#1012628). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1012628). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1012628). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1012628). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1012628). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1012628). - btrfs: zoned: do not select metadata BG as finish target (bsc#1012628). - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents() (bsc#1012628). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1012628). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1012628). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1012628). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1012628). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1012628). - fbdev: nvidiafb: add depends on HAS_IOPORT (bsc#1012628). - ocfs2: reset folio to NULL when get folio fails (bsc#1012628). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1012628). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1012628). - i2c: core: Fix double-free of fwnode in i2c_unregister_device() (bsc#1012628). - parisc: Makefile: fix a typo in palo.conf (bsc#1012628). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1012628). - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud() (bsc#1012628). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1012628). - mm/shmem, swap: improve cached mTHP handling and fix potential hang (bsc#1012628). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1012628). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1012628). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1012628). - media: venus: Fix OOB read due to missing payload bound check (bsc#1012628). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1012628). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1012628). - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (bsc#1012628). - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path (bsc#1012628). - tracing: fprobe: Fix infinite recursion using preempt_*_notrace() (bsc#1012628). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1012628). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1012628). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1012628). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1012628). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1012628). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1012628). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1012628). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1012628). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1012628). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1012628). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1012628). - irqchip/mvebu-gicp: Use resource_size() for ioremap() (bsc#1012628). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1012628). - io_uring/zcrx: fix null ifq on area destruction (bsc#1012628). - io_uring/zcrx: don't leak pages on account failure (bsc#1012628). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.2-522-btrfs-fix-log-tree-replay-failure-due-to-file-.patch. - commit b12dbdb ++++ kernel-syms-longterm: - Linux 6.12.43 (bsc#1234429). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1234429). - PCI: Honor Max Link Speed when determining supported speeds (bsc#1234429). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1234429). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1234429). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1234429). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1234429). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1234429). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1234429). - rust: workaround `rustdoc` target modifiers bug (bsc#1234429). - rust: kbuild: clean output before running `rustdoc` (bsc#1234429). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1234429). - arm64: dts: ti: k3-j722s-evm: Fix USB2.0_MUX_SEL to select Type-C (bsc#1234429). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1234429). - PCI: Allow PCI bridges to go to D3Hot on all non-x86 (bsc#1234429). - PCI: Store all PCIe Supported Link Speeds (bsc#1234429). - smb: client: fix netns refcount leak after net_passive changes (bsc#1234429). - net: better track kernel sockets lifetime (bsc#1234429). - net: Add net_passive_inc() and net_passive_dec() (bsc#1234429). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1234429). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1234429). - tools/hv: fcopy: Fix irregularities with size of ring buffer (bsc#1234429). - wifi: mac80211: check basic rates validity in sta_link_apply_parameters (bsc#1234429). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1234429). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1234429). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1234429). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1234429). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1234429). - media: venus: Fix OOB read due to missing payload bound check (bsc#1234429). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1234429). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1234429). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1234429). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1234429). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1234429). - parisc: Makefile: fix a typo in palo.conf (bsc#1234429). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1234429). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1234429). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1234429). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1234429). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1234429). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1234429). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1234429). - btrfs: zoned: do not select metadata BG as finish target (bsc#1234429). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1234429). - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1234429). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1234429). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1234429). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1234429). - btrfs: populate otime when logging an inode item (bsc#1234429). - btrfs: fix ssd_spread overallocation (bsc#1234429). - btrfs: don't ignore inode missing when replaying log tree (bsc#1234429). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1234429). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1234429). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1234429). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1234429). - cdc-acm: fix race between initial clearing halt and open (bsc#1234429). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1234429). - comedi: fix race between polling and detaching (bsc#1234429). - usb: typec: ucsi: Update power_supply on power role change (bsc#1234429). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1234429). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1234429). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1234429). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1234429). - ext4: fix zombie groups in average fragment size lists (bsc#1234429). - iommufd: Prevent ALIGN() overflow (bsc#1234429). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1234429). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1234429). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1234429). - cifs: reset iface weights when we cannot find a candidate (bsc#1234429). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1234429). - dm: Always split write BIOs to zoned device limits (bsc#1234429). - block: Introduce bio_needs_zone_write_plugging() (bsc#1234429). - mm/damon/core: commit damos->target_nid (bsc#1234429). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1234429). - drm/amdgpu: fix vram reservation issue (bsc#1234429). - cifs: Fix collect_sample() to handle any iterator type (bsc#1234429). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1234429). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1234429). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1234429). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1234429). - pNFS: Handle RPC size limit for layoutcommits (bsc#1234429). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1234429). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1234429). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1234429). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1234429). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1234429). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1234429). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1234429). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1234429). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1234429). - tools/power turbostat: Fix build with musl (bsc#1234429). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1234429). - ipmi: Fix strcpy source and destination the same (bsc#1234429). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1234429). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1234429). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1234429). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1234429). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1234429). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1234429). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1234429). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1234429). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1234429). - vfio/type1: conditional rescheduling while pinning (bsc#1234429). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1234429). - printk: nbcon: Allow reacquire during panic (bsc#1234429). - f2fs: check the generic conditions first (bsc#1234429). - exfat: add cluster chain loop check for dir (bsc#1234429). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1234429). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1234429). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1234429). - dm-table: fix checking for rq stackable devices (bsc#1234429). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1234429). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1234429). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1234429). - apparmor: shift ouid when mediating hard links in userns (bsc#1234429). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1234429). - i3c: add missing include to internal header (bsc#1234429). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1234429). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1234429). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1234429). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1234429). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1234429). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1234429). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1234429). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1234429). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1234429). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1234429). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1234429). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1234429). - media: usb: hdpvr: disable zero-length read messages (bsc#1234429). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1234429). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1234429). - media: tc358743: Check I2C succeeded during probe (bsc#1234429). - pinctrl: stm32: Manage irq affinity settings (bsc#1234429). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1234429). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1234429). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1234429). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1234429). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1234429). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1234429). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1234429). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1234429). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1234429). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1234429). - media: ipu-bridge: Add _HID for OV5670 (bsc#1234429). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1234429). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1234429). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1234429). - crypto: jitter - fix intermediary handling (bsc#1234429). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1234429). - media: hi556: Fix reset GPIO timings (bsc#1234429). - jfs: upper bound check of tree index in dbAllocAG (bsc#1234429). - jfs: Regular file corruption check (bsc#1234429). - jfs: truncate good inode pages when hard link is 0 (bsc#1234429). - scsi: bfa: Double-free fix (bsc#1234429). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1234429). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1234429). - clk: qcom: ipq5018: keep XO clock always on (bsc#1234429). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1234429). - watchdog: dw_wdt: Fix default timeout (bsc#1234429). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1234429). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1234429). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1234429). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1234429). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1234429). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1234429). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1234429). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1234429). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1234429). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1234429). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1234429). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1234429). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1234429). - vhost: fail early when __vhost_add_used() fails (bsc#1234429). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1234429). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1234429). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1234429). - drm/ttm: Respect the shrinker core free target (bsc#1234429). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1234429). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1234429). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1234429). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1234429). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1234429). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1234429). - drm/ttm: Should to return the evict error (bsc#1234429). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1234429). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1234429). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1234429). - ionic: clean dbpage in de-init (bsc#1234429). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1234429). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1234429). - ptp: Use ratelimite for freerun error message (bsc#1234429). - bpftool: Fix JSON writer resource leak in version command (bsc#1234429). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1234429). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1234429). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1234429). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1234429). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1234429). - gve: Return error for unknown admin queue command (bsc#1234429). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1234429). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1234429). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1234429). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1234429). - neighbour: add support for NUD_PERMANENT proxy entries (bsc#1234429). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1234429). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1234429). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1234429). - powerpc: floppy: Add missing checks after DMA map (bsc#1234429). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1234429). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1234429). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1234429). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1234429). - drm/amd/display: Initialize mode_select to 0 (bsc#1234429). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1234429). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1234429). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1234429). - lib: packing: Include necessary headers (bsc#1234429). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1234429). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1234429). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1234429). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1234429). - net: fec: allow disable coalescing (bsc#1234429). - net: ieee8021q: fix insufficient table-size assertion (bsc#1234429). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1234429). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1234429). - xfrm: Duplicate SPI Handling (bsc#1234429). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1234429). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1234429). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1234429). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1234429). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1234429). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1234429). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1234429). - perf/arm: Add missing .suppress_bind_attrs (bsc#1234429). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1234429). - drm/msm: use trylock for debugfs (bsc#1234429). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1234429). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1234429). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1234429). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1234429). - s390/early: Copy last breaking event address to pt_regs (bsc#1234429). - wifi: mac80211: avoid weird state in error path (bsc#1234429). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1234429). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1234429). - net: phy: bcm54811: PHY initialization (bsc#1234429). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1234429). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1234429). - um: Re-evaluate thread flags repeatedly (bsc#1234429). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1234429). - bpf: Forget ranges when refining tnum after JSET (bsc#1234429). - sched/deadline: Fix accounting after global limits change (bsc#1234429). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1234429). - net: phy: micrel: Add ksz9131_resume() (bsc#1234429). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1234429). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1234429). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1234429). - wifi: cfg80211: Fix interface type validation (bsc#1234429). - net: mctp: Prevent duplicate binds (bsc#1234429). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1234429). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1234429). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1234429). - drm/amd/pm: fix null pointer access (bsc#1234429). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1234429). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1234429). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1234429). - net: ag71xx: Add missing check after DMA map (bsc#1234429). - et131x: Add missing check after DMA map (bsc#1234429). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1234429). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1234429). - idpf: preserve coalescing settings across resets (bsc#1234429). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1234429). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1234429). - s390/time: Use monotonic clock in get_cycles() (bsc#1234429). - wifi: cfg80211: reject HTC bit for management frames (bsc#1234429). - ktest.pl: Prevent recursion of default variable options (bsc#1234429). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1234429). - net: usb: cdc-ncm: check for filtering capability (bsc#1234429). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1234429). - xen/netfront: Fix TX response spurious interrupts (bsc#1234429). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1234429). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1234429). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1234429). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1234429). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1234429). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1234429). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1234429). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1234429). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1234429). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1234429). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1234429). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1234429). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1234429). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1234429). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1234429). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1234429). - usb: core: usb_submit_urb: downgrade type check (bsc#1234429). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1234429). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1234429). - tty: serial: fix print format specifiers (bsc#1234429). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1234429). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1234429). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1234429). - x86/bugs: Avoid warning when overriding return thunk (bsc#1234429). - ALSA: hda: Disable jack polling at shutdown (bsc#1234429). - ALSA: hda: Handle the jack polling always via a work (bsc#1234429). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1234429). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1234429). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1234429). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1234429). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1234429). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1234429). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1234429). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1234429). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1234429). - ACPI: processor: fix acpi_object initialization (bsc#1234429). - PM: sleep: console: Fix the black screen issue (bsc#1234429). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1234429). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1234429). - firmware: tegra: Fix IVC dependency problems (bsc#1234429). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1234429). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1234429). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1234429). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1234429). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1234429). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1234429). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1234429). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1234429). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1234429). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1234429). - EDAC/synopsys: Clear the ECC counters on init (bsc#1234429). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1234429). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1234429). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1234429). - cpufreq: Exit governor when failed to start old governor (bsc#1234429). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1234429). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1234429). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1234429). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1234429). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1234429). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1234429). - usb: xhci: Avoid showing errors during surprise removal (bsc#1234429). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1234429). - usb: xhci: Avoid showing warnings for dying controller (bsc#1234429). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1234429). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1234429). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1234429). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1234429). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1234429). - tracefs: Add d_delete to remove negative dentries (bsc#1234429). - securityfs: don't pin dentries twice, once is enough.. (bsc#1234429). - fix locking in efi_secret_unlink() (bsc#1234429). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1234429). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1234429). - fs/ntfs3: correctly create symlink for relative path (bsc#1234429). - fs/ntfs3: Add sanity check for file name (bsc#1234429). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1234429). - ata: ahci: Disable DIPM if host lacks support (bsc#1234429). - ata: ahci: Disallow LPM policy control if not supported (bsc#1234429). - better lockdep annotations for simple_recursive_removal() (bsc#1234429). - hfs: fix not erasing deleted b-tree node issue (bsc#1234429). - drbd: add missing kref_get in handle_write_conflicts (bsc#1234429). - udf: Verify partition map count (bsc#1234429). - loop: Avoid updating block size under exclusive owner (bsc#1234429). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1234429). - gfs2: Validate i_depth for exhash directories (bsc#1234429). - nvme-tcp: log TLS handshake failures at error level (bsc#1234429). - md/raid10: set chunk_sectors limit (bsc#1234429). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1234429). - nvme-pci: try function level reset on init failure (bsc#1234429). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1234429). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1234429). - arm64: Handle KCOV __init vs inline mismatches (bsc#1234429). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1234429). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1234429). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1234429). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1234429). - hfs: fix general protection fault in hfs_find_init() (bsc#1234429). - net: kcm: Fix race condition in kcm_unattach() (bsc#1234429). - tls: handle data disappearing from under the TLS ULP (bsc#1234429). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1234429). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1234429). - intel_idle: Allow loading ACPI tables for any family (bsc#1234429). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1234429). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1234429). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1234429). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1234429). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1234429). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1234429). - habanalabs: fix UAF in export_dmabuf() (bsc#1234429). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1234429). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1234429). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1234429). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1234429). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1234429). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1234429). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1234429). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1234429). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1234429). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1234429). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1234429). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1234429). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1234429). - Documentation: ACPI: Fix parent device references (bsc#1234429). - eventpoll: Fix semi-unbounded recursion (bsc#1234429). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1234429). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1234429). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1234429). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1234429). - clk: samsung: exynos850: fix a comment (bsc#1234429). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1234429). - LoongArch: Avoid in-place string operation on FDT content (bsc#1234429). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1234429). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1234429). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1234429). - PCI: Extend isolated function probing to LoongArch (bsc#1234429). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1234429). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1234429). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1234429). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1234429). - net: dpaa: fix device leak when querying time stamp info (bsc#1234429). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1234429). - net: mtk_eth_soc: fix device leak at probe (bsc#1234429). - net: enetc: fix device and OF node leak at probe (bsc#1234429). - net: gianfar: fix device leak when querying time stamp info (bsc#1234429). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1234429). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1234429). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1234429). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1234429). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1234429). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1234429). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1234429). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1234429). - gpio: virtio: Fix config space reading (bsc#1234429). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1234429). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1234429). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1234429). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1234429). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1234429). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1234429). - io_uring: don't use int for ABI (bsc#1234429). - commit 04bb54a ++++ kernel-vanilla: - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (bsc#1012628). - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (bsc#1012628). - fscrypt: Don't use problematic non-inline crypto engines (bsc#1012628). - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts (bsc#1012628). - lib/crypto: x86/poly1305: Fix performance regression on short messages (bsc#1012628). - fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1012628). - Documentation: ACPI: Fix parent device references (bsc#1012628). - ACPI: processor: perflib: Fix initial _PPC limit application (bsc#1012628). - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (bsc#1012628). - ACPI: EC: Relax sanity check of the ECDT ID string (bsc#1012628). - ACPI: processor: perflib: Move problematic pr->performance check (bsc#1012628). - block: Make REQ_OP_ZONE_FINISH a write operation (bsc#1012628). - mm/memory-tier: fix abstract distance calculation overflow (bsc#1012628). - mfd: cros_ec: Separate charge-control probing from USB-PD (bsc#1012628). - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (bsc#1012628). - smb: client: don't wait for info->send_pending == 0 on error (bsc#1012628). - habanalabs: fix UAF in export_dmabuf() (bsc#1012628). - mm/smaps: fix race between smaps_hugetlb_range and migration (bsc#1012628). - xfrm: flush all states in xfrm_state_fini (bsc#1012628). - xfrm: restore GSO for SW crypto (bsc#1012628). - xfrm: bring back device check in validate_xmit_xfrm (bsc#1012628). - udp: also consider secpath when evaluating ipsec use for checksumming (bsc#1012628). - netfilter: ctnetlink: fix refcount leak on table dump (bsc#1012628). - netfilter: ctnetlink: remove refcounting in expectation dumpers (bsc#1012628). - net: hibmcge: fix rtnl deadlock issue (bsc#1012628). - net: hibmcge: fix the division by zero issue (bsc#1012628). - net: hibmcge: fix the np_link_fail error reporting issue (bsc#1012628). - net: ti: icssg-prueth: Fix emac link speed handling (bsc#1012628). - net: page_pool: allow enabling recycling late, fix false positive warning (bsc#1012628). - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (bsc#1012628). - sctp: linearize cloned gso packets in sctp_rcv (bsc#1012628). - net: lapbether: ignore ops-locked netdevs (bsc#1012628). - hamradio: ignore ops-locked netdevs (bsc#1012628). - erofs: fix block count report when 48-bit layout is on (bsc#1012628). - intel_idle: Allow loading ACPI tables for any family (bsc#1012628). - cpuidle: governors: menu: Avoid using invalid recent intervals data (bsc#1012628). - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45 (bsc#1012628). - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (bsc#1012628). - net: stmmac: thead: Get and enable APB clock on initialization (bsc#1012628). - riscv: dts: thead: Add APB clocks for TH1520 GMACs (bsc#1012628). - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (bsc#1012628). - tls: handle data disappearing from under the TLS ULP (bsc#1012628). - ipvs: Fix estimator kthreads preferred affinity (bsc#1012628). - netfilter: nf_tables: reject duplicate device on updates (bsc#1012628). - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE (bsc#1012628). - net: kcm: Fix race condition in kcm_unattach() (bsc#1012628). - hfs: fix general protection fault in hfs_find_init() (bsc#1012628). - hfs: fix slab-out-of-bounds in hfs_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (bsc#1012628). - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1012628). - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (bsc#1012628). - arm64: Handle KCOV __init vs inline mismatches (bsc#1012628). - tpm: Check for completion after timeout (bsc#1012628). - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (bsc#1012628). - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (bsc#1012628). - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents (bsc#1012628). - smb/server: avoid deadlock when linking with ReplaceIfExists (bsc#1012628). - nvme-pci: try function level reset on init failure (bsc#1012628). - dm-stripe: limit chunk_sectors to the stripe size (bsc#1012628). - md/raid10: set chunk_sectors limit (bsc#1012628). - nvme-tcp: log TLS handshake failures at error level (bsc#1012628). - gfs2: Validate i_depth for exhash directories (bsc#1012628). - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1012628). - loop: Avoid updating block size under exclusive owner (bsc#1012628). - udf: Verify partition map count (bsc#1012628). - drbd: add missing kref_get in handle_write_conflicts (bsc#1012628). - hfs: fix not erasing deleted b-tree node issue (bsc#1012628). - better lockdep annotations for simple_recursive_removal() (bsc#1012628). - ata: ahci: Disallow LPM policy control if not supported (bsc#1012628). - ata: ahci: Disable DIPM if host lacks support (bsc#1012628). - ata: libata-sata: Disallow changing LPM state if not supported (bsc#1012628). - fs/ntfs3: Add sanity check for file name (bsc#1012628). - fs/ntfs3: correctly create symlink for relative path (bsc#1012628). - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (bsc#1012628). - landlock: opened file never has a negative dentry (bsc#1012628). - ext2: Handle fiemap on empty files to prevent EINVAL (bsc#1012628). - fix locking in efi_secret_unlink() (bsc#1012628). - securityfs: don't pin dentries twice, once is enough.. (bsc#1012628). - tracefs: Add d_delete to remove negative dentries (bsc#1012628). - usb: xhci: print xhci->xhc_state when queue_command failed (bsc#1012628). - staging: gpib: Add init response codes for new ni-usb-hs+ (bsc#1012628). - selftests/kexec: fix test_kexec_jump build (bsc#1012628). - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (bsc#1012628). - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (bsc#1012628). - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (bsc#1012628). - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (bsc#1012628). - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support (bsc#1012628). - bus: mhi: host: pci_generic: Disable runtime PM for QDU100 (bsc#1012628). - usb: xhci: Avoid showing warnings for dying controller (bsc#1012628). - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (bsc#1012628). - usb: xhci: Avoid showing errors during surprise removal (bsc#1012628). - soc: qcom: rpmh-rsc: Add RSC version 4 support (bsc#1012628). - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (bsc#1012628). - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (bsc#1012628). - binder: Fix selftest page indexing (bsc#1012628). - gpio: loongson-64bit: Extend GPIO irq support (bsc#1012628). - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi (bsc#1012628). - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (bsc#1012628). - pmdomain: ti: Select PM_GENERIC_DOMAINS (bsc#1012628). - gpio: wcd934x: check the return value of regmap_update_bits() (bsc#1012628). - cpufreq: Exit governor when failed to start old governor (bsc#1012628). - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (bsc#1012628). - ARM: rockchip: fix kernel hang during smp initialization (bsc#1012628). - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (bsc#1012628). - EDAC/synopsys: Clear the ECC counters on init (bsc#1012628). - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (bsc#1012628). - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (bsc#1012628). - tools/nolibc: define time_t in terms of __kernel_old_time_t (bsc#1012628). - iio: adc: ad_sigma_delta: don't overallocate scan buffer (bsc#1012628). - gpio: tps65912: check the return value of regmap_update_bits() (bsc#1012628). - ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1012628). - tools/build: Fix s390(x) cross-compilation with clang (bsc#1012628). - selftests: tracing: Use mutex_unlock for testing glob filter (bsc#1012628). - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1012628). - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (bsc#1012628). - firmware: tegra: Fix IVC dependency problems (bsc#1012628). - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56 (bsc#1012628). - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (bsc#1012628). - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (bsc#1012628). - PM: sleep: console: Fix the black screen issue (bsc#1012628). - ACPI: processor: fix acpi_object initialization (bsc#1012628). - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (bsc#1012628). - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (bsc#1012628). - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND (bsc#1012628). - selftests: vDSO: vdso_test_getrandom: Always print TAP header (bsc#1012628). - pps: clients: gpio: fix interrupt handling order in remove path (bsc#1012628). - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (bsc#1012628). - ASoC: SDCA: Add flag for unused IRQs (bsc#1012628). - x86/sev/vc: Fix EFI runtime instruction emulation (bsc#1012628). - char: misc: Fix improper and inaccurate error code returned by misc_init() (bsc#1012628). - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (bsc#1012628). - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (bsc#1012628). - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (bsc#1012628). - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (bsc#1012628). - ALSA: hda: Handle the jack polling always via a work (bsc#1012628). - ALSA: hda: Disable jack polling at shutdown (bsc#1012628). - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700 (bsc#1012628). - x86/bugs: Avoid warning when overriding return thunk (bsc#1012628). - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (bsc#1012628). - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (bsc#1012628). - irqchip/mips-gic: Allow forced affinity (bsc#1012628). - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (bsc#1012628). - tty: serial: fix print format specifiers (bsc#1012628). - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1012628). - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (bsc#1012628). - usb: core: usb_submit_urb: downgrade type check (bsc#1012628). - usb: dwc3: xilinx: add shutdown callback (bsc#1012628). - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (bsc#1012628). - imx8m-blk-ctrl: set ISI panic write hurry level (bsc#1012628). - soc: qcom: mdt_loader: Actually use the e_phoff (bsc#1012628). - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (bsc#1012628). - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (bsc#1012628). - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1012628). - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (bsc#1012628). - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (bsc#1012628). - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (bsc#1012628). - ASoC: codecs: rt5640: Retry DEVICE_ID verification (bsc#1012628). - ASoC: qcom: use drvdata instead of component to keep id (bsc#1012628). - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (bsc#1012628). - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (bsc#1012628). - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (bsc#1012628). - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (bsc#1012628). - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (bsc#1012628). - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event (bsc#1012628). - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (bsc#1012628). - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (bsc#1012628). - xen/netfront: Fix TX response spurious interrupts (bsc#1012628). - wifi: iwlwifi: mld: use spec link id and not FW link id (bsc#1012628). - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (bsc#1012628). - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (bsc#1012628). - net: usb: cdc-ncm: check for filtering capability (bsc#1012628). - wifi: ath12k: Correct tid cleanup when tid setup fails (bsc#1012628). - ktest.pl: Prevent recursion of default variable options (bsc#1012628). - wifi: cfg80211: reject HTC bit for management frames (bsc#1012628). - s390/sclp: Use monotonic clock in sclp_sync_wait() (bsc#1012628). - s390/time: Use monotonic clock in get_cycles() (bsc#1012628). - be2net: Use correct byte order and format string for TCP seq and ack_seq (bsc#1012628). - libbpf: Verify that arena map exists when adding arena relocations (bsc#1012628). - idpf: preserve coalescing settings across resets (bsc#1012628). - libbpf: Fix warning in calloc() usage (bsc#1012628). - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (bsc#1012628). - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (bsc#1012628). - et131x: Add missing check after DMA map (bsc#1012628). - net: ag71xx: Add missing check after DMA map (bsc#1012628). - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (bsc#1012628). - net: pcs: xpcs: mask readl() return value to 16 bits (bsc#1012628). - arm64: Mark kernel as tainted on SAE and SError panic (bsc#1012628). - drm/amd/pm: fix null pointer access (bsc#1012628). - rcu: Protect ->defer_qs_iw_pending from data race (bsc#1012628). - drm/amd/display: limit clear_update_flags to dcn32 and above (bsc#1012628). - can: ti_hecc: fix -Woverflow compiler warning (bsc#1012628). - net: mctp: Prevent duplicate binds (bsc#1012628). - wifi: mac80211: don't use TPE data from assoc response (bsc#1012628). - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (bsc#1012628). - wifi: cfg80211: Fix interface type validation (bsc#1012628). - wifi: mac80211: don't unreserve never reserved chanctx (bsc#1012628). - net: ipv4: fix incorrect MTU in broadcast routes (bsc#1012628). - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (bsc#1012628). - net: phy: micrel: Add ksz9131_resume() (bsc#1012628). - perf/cxlpmu: Remove unintended newline from IRQ name format string (bsc#1012628). - sched/deadline: Fix accounting after global limits change (bsc#1012628). - bpf: Forget ranges when refining tnum after JSET (bsc#1012628). - wifi: iwlwifi: mvm: set gtk id also in older FWs (bsc#1012628). - wifi: iwlwifi: mld: fix scan request validation (bsc#1012628). - um: Re-evaluate thread flags repeatedly (bsc#1012628). - wifi: iwlwifi: mvm: fix scan request validation (bsc#1012628). - wifi: iwlwifi: handle non-overlapping API ranges (bsc#1012628). - drm/sched/tests: Add unit test for cancel_job() (bsc#1012628). - drm/sched: Avoid memory leaks with cancel_job() callback (bsc#1012628). - s390/stp: Remove udelay from stp_sync_clock() (bsc#1012628). - net: phy: bcm54811: PHY initialization (bsc#1012628). - rv: Add #undef TRACE_INCLUDE_FILE (bsc#1012628). - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (bsc#1012628). - wifi: mac80211: don't complete management TX on SAE commit (bsc#1012628). - wifi: mac80211: avoid weird state in error path (bsc#1012628). - s390/early: Copy last breaking event address to pt_regs (bsc#1012628). - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (bsc#1012628). - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc() (bsc#1012628). - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (bsc#1012628). - wifi: mac80211: fix rx link assignment for non-MLO stations (bsc#1012628). - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (bsc#1012628). - wifi: mt76: fix vif link allocation (bsc#1012628). - drm/fbdev-client: Skip DRM clients if modesetting is absent (bsc#1012628). - drm/msm: Update register xml (bsc#1012628). - drm/msm: use trylock for debugfs (bsc#1012628). - drm/msm: Add error handling for krealloc in metadata setup (bsc#1012628). - perf/arm: Add missing .suppress_bind_attrs (bsc#1012628). - drm/imagination: Clear runtime PM errors while resetting the GPU (bsc#1012628). - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (bsc#1012628). - wifi: rtw89: Disable deep power saving for USB/SDIO (bsc#1012628). - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (bsc#1012628). - wifi: mt76: mt7915: mcu: increase eeprom command timeout (bsc#1012628). - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (bsc#1012628). - drm/xe/xe_query: Use separate iterator while filling GT list (bsc#1012628). - net: thunderbolt: Enable end-to-end flow control also in transmit (bsc#1012628). - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (bsc#1012628). - xfrm: Duplicate SPI Handling (bsc#1012628). - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context to ensure correct CKO settings after network interface reinitialization (bsc#1012628). - net: atlantic: add set_power to fw_ops for atl2 to fix wol (bsc#1012628). - ACPI: Suppress misleading SPCR console message when SPCR table is absent (bsc#1012628). - net: ieee8021q: fix insufficient table-size assertion (bsc#1012628). - net: enetc: separate 64-bit counters from enetc_port_counters (bsc#1012628). - net: fec: allow disable coalescing (bsc#1012628). - drm/amdgpu: Use correct severity for BP threshold exceed event (bsc#1012628). - drm/amd/display: Separate set_gsl from set_gsl_source_select (bsc#1012628). - drm/amd/display: add null check (bsc#1012628). - wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1012628). - drm/panel: raydium-rm67200: Move initialization from enable() to prepare stage (bsc#1012628). - eth: bnxt: take page size into account for page pool recycling rings (bsc#1012628). - wifi: ath12k: Add memset and update default rate value in wmi tx completion (bsc#1012628). - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (bsc#1012628). - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (bsc#1012628). - net: phy: realtek: add error handling to rtl8211f_get_wol (bsc#1012628). - lib: packing: Include necessary headers (bsc#1012628). - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (bsc#1012628). - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (bsc#1012628). - wifi: iwlwifi: mld: use the correct struct size for tracing (bsc#1012628). - wifi: iwlwifi: mld: fix last_mlo_scan_time type (bsc#1012628). - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (bsc#1012628). - wifi: iwlwifi: pcie: reinit device properly during TOP reset (bsc#1012628). - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (bsc#1012628). - drm/amdgpu: Add more checks to PSP mailbox (bsc#1012628). - drm/amd/display: Fix 'failed to blank crtc!' (bsc#1012628). - drm/amd/display: Initialize mode_select to 0 (bsc#1012628). - wifi: mac80211: update radar_required in channel context after channel switch (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()` (bsc#1012628). - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (bsc#1012628). - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (bsc#1012628). - wifi: ath12k: Decrement TID on RX peer frag setup error handling (bsc#1012628). - powerpc: floppy: Add missing checks after DMA map (bsc#1012628). - netmem: fix skb_frag_address_safe with unreadable skbs (bsc#1012628). - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (bsc#1012628). - wifi: iwlegacy: Check rate_idx range after addition (bsc#1012628). - dpaa_eth: don't use fixed_phy_change_carrier (bsc#1012628). - drm/amd/pm: Use pointer type for typecheck() (bsc#1012628). - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (bsc#1012628). - drm/amd/display: Stop storing failures into adev->dm.cached_state (bsc#1012628). - drm/amdgpu: Suspend IH during mode-2 reset (bsc#1012628). - drm/amdgpu: clear pa and mca record counter when resetting eeprom (bsc#1012628). - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (bsc#1012628). - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (bsc#1012628). - gve: Return error for unknown admin queue command (bsc#1012628). - net: dsa: b53: ensure BCM5325 PHYs are enabled (bsc#1012628). - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (bsc#1012628). - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (bsc#1012628). - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (bsc#1012628). - bpftool: Fix JSON writer resource leak in version command (bsc#1012628). - ptp: Use ratelimite for freerun error message (bsc#1012628). - wifi: rtw89: scan abort when assign/unassign_vif (bsc#1012628). - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (bsc#1012628). - ionic: clean dbpage in de-init (bsc#1012628). - drm/xe: Make dma-fences compliant with the safe access rules (bsc#1012628). - net: ncsi: Fix buffer overflow in fetching version id (bsc#1012628). - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (bsc#1012628). - drm/ttm: Should to return the evict error (bsc#1012628). - uapi: in6: restore visibility of most IPv6 socket options (bsc#1012628). - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (bsc#1012628). - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (bsc#1012628). - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (bsc#1012628). - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (bsc#1012628). - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (bsc#1012628). - drm/amd/display: Avoid trying AUX transactions on disconnected ports (bsc#1012628). - drm/ttm: Respect the shrinker core free target (bsc#1012628). - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (bsc#1012628). - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (bsc#1012628). - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (bsc#1012628). - vhost: fail early when __vhost_add_used() fails (bsc#1012628). - drm/amd/display: Only finalize atomic_obj if it was initialized (bsc#1012628). - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (bsc#1012628). - drm/amd/display: Disable dsc_power_gate for dcn314 by default (bsc#1012628). - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (bsc#1012628). - cifs: Fix calling CIFSFindFirst() for root path without msearch (bsc#1012628). - smb: client: fix session setup against servers that require SPN (bsc#1012628). - fbdev: fix potential buffer overflow in do_register_framebuffer() (bsc#1012628). - crypto: hisilicon/hpre - fix dma unmap sequence (bsc#1012628). - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1012628). - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (bsc#1012628). - sphinx: kernel_abi: fix performance regression with O= (bsc#1012628). - mfd: axp20x: Set explicit ID for AXP313 regulator (bsc#1012628). - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (bsc#1012628). - phy: rockchip-pcie: Enable all four lanes if required (bsc#1012628). - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1012628). - fs/orangefs: use snprintf() instead of sprintf() (bsc#1012628). - watchdog: dw_wdt: Fix default timeout (bsc#1012628). - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (bsc#1012628). - clk: qcom: ipq5018: keep XO clock always on (bsc#1012628). - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (bsc#1012628). - watchdog: iTCO_wdt: Report error if timeout configuration fails (bsc#1012628). - ext4: limit the maximum folio order (bsc#1012628). - scsi: bfa: Double-free fix (bsc#1012628). - jfs: truncate good inode pages when hard link is 0 (bsc#1012628). - jfs: Regular file corruption check (bsc#1012628). - jfs: upper bound check of tree index in dbAllocAG (bsc#1012628). - media: hi556: Fix reset GPIO timings (bsc#1012628). - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (bsc#1012628). - crypto: jitter - fix intermediary handling (bsc#1012628). - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (bsc#1012628). - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (bsc#1012628). - media: iris: Add handling for corrupt and drop frames (bsc#1012628). - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (bsc#1012628). - media: i2c: vd55g1: Setup sensor external clock before patching (bsc#1012628). - media: i2c: vd55g1: Fix RATE macros not being expressed in bps (bsc#1012628). - media: ipu-bridge: Add _HID for OV5670 (bsc#1012628). - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (bsc#1012628). - leds: leds-lp50xx: Handle reg to get correct multi_index (bsc#1012628). - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (bsc#1012628). - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1012628). - RDMA/core: reduce stack using in nldev_stat_get_doit() (bsc#1012628). - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (bsc#1012628). - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1012628). - crypto: caam - Support iMX8QXP and variants thereof (bsc#1012628). - power: supply: qcom_battmgr: Add lithium-polymer entry (bsc#1012628). - HID: rate-limit hid_warn to prevent log flooding (bsc#1012628). - scsi: mpt3sas: Correctly handle ATA device errors (bsc#1012628). - scsi: pm80xx: Free allocated tags after failure (bsc#1012628). - scsi: mpi3mr: Correctly handle ATA device errors (bsc#1012628). - PCI: dw-rockchip: Delay link training after hot reset in EP mode (bsc#1012628). - pinctrl: stm32: Manage irq affinity settings (bsc#1012628). - media: raspberrypi: cfe: Fix min_reqbufs_allocation (bsc#1012628). - media: tc358743: Check I2C succeeded during probe (bsc#1012628). - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (bsc#1012628). - media: tc358743: Increase FIFO trigger level to 374 (bsc#1012628). - media: usb: hdpvr: disable zero-length read messages (bsc#1012628). - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (bsc#1012628). - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (bsc#1012628). - media: uvcvideo: Add quirk for HP Webcam HD 2300 (bsc#1012628). - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (bsc#1012628). - media: uvcvideo: Fix bandwidth issue for Alcor camera (bsc#1012628). - crypto: octeontx2 - add timeout for load_fvc completion poll (bsc#1012628). - crypto: ccp - Add missing bootloader info reg for pspv6 (bsc#1012628). - clk: renesas: rzg2l: Postpone updating priv->clks[] (bsc#1012628). - soundwire: amd: serialize amd manager resume sequence during pm_prepare (bsc#1012628). - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (bsc#1012628). - soundwire: Move handle_nested_irq outside of sdw_dev_lock (bsc#1012628). - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (bsc#1012628). - module: Prevent silent truncation of module name in delete_module(2) (bsc#1012628). - i3c: add missing include to internal header (bsc#1012628). - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (bsc#1012628). - apparmor: shift ouid when mediating hard links in userns (bsc#1012628). - i3c: don't fail if GETHDRCAP is unsupported (bsc#1012628). - i3c: master: Initialize ret in i3c_i2c_notifier_call() (bsc#1012628). - dm-mpath: don't print the "loaded" message if registering fails (bsc#1012628). - dm-table: fix checking for rq stackable devices (bsc#1012628). - apparmor: use the condition in AA_BUG_FMT even with debug disabled (bsc#1012628). - apparmor: fix x_table_lookup when stacking is not the first entry (bsc#1012628). - i2c: Force DLL0945 touchpad i2c freq to 100khz (bsc#1012628). - exfat: add cluster chain loop check for dir (bsc#1012628). - f2fs: check the generic conditions first (bsc#1012628). - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info() (bsc#1012628). - printk: nbcon: Allow reacquire during panic (bsc#1012628). - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (bsc#1012628). - vfio/type1: conditional rescheduling while pinning (bsc#1012628). - kconfig: nconf: Ensure null termination where strncpy is used (bsc#1012628). - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (bsc#1012628). - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1012628). - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (bsc#1012628). - vfio/mlx5: fix possible overflow in tracking max message size (bsc#1012628). - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (bsc#1012628). - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (bsc#1012628). - kconfig: gconf: fix potential memory leak in renderer_edited() (bsc#1012628). - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a minute (bsc#1012628). - kconfig: lxdialog: fix 'space' to (de)select options (bsc#1012628). - ipmi: Fix strcpy source and destination the same (bsc#1012628). - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (bsc#1012628). - tools/power turbostat: Fix build with musl (bsc#1012628). - tools/power turbostat: Handle cap_get_proc() ENOSYS (bsc#1012628). - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (bsc#1012628). - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (bsc#1012628). - irqchip/mvebu-gicp: Clear pending interrupts on init (bsc#1012628). - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (bsc#1012628). - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU (bsc#1012628). - regmap: irq: Free the regmap-irq mutex (bsc#1012628). - net: phy: smsc: add proper reset flags for LAN8710A (bsc#1012628). - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (bsc#1012628). - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (bsc#1012628). - pNFS: Fix stripe mapping in block/scsi layout (bsc#1012628). - pNFS: Fix disk addr range check in block/scsi layout (bsc#1012628). - pNFS: Handle RPC size limit for layoutcommits (bsc#1012628). - pNFS: Fix uninited ptr deref in block/scsi layout (bsc#1012628). - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (bsc#1012628). - scsi: ufs: core: Fix interrupt handling for MCQ Mode (bsc#1012628). - scsi: lpfc: Remove redundant assignment to avoid memory leak (bsc#1012628). - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (bsc#1012628). - ublk: check for unprivileged daemon on each I/O fetch (bsc#1012628). - block: fix kobject double initialization in add_disk (bsc#1012628). - cifs: Fix collect_sample() to handle any iterator type (bsc#1012628). - drm/i915/fbc: fix the implementation of wa_18038517565 (bsc#1012628). - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush (bsc#1012628). - drm/xe/migrate: prevent infinite recursion (bsc#1012628). - drm/xe/migrate: don't overflow max copy size (bsc#1012628). - drm/xe/migrate: prevent potential UAF (bsc#1012628). - drm/xe/hwmon: Add SW clamp for power limits writes (bsc#1012628). - drm/amdgpu: fix vram reservation issue (bsc#1012628). - drm/amdgpu: fix incorrect vm flags to map bo (bsc#1012628). - x86/sev: Improve handling of writes to intercepted TSC MSRs (bsc#1012628). - x86/fpu: Fix NULL dereference in avx512_status() (bsc#1012628). - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (bsc#1012628). - futex: Use user_write_access_begin/_end() in futex_put_value() (bsc#1012628). - rust: kbuild: clean output before running `rustdoc` (bsc#1012628). - rust: workaround `rustdoc` target modifiers bug (bsc#1012628). - samples/damon/wsse: fix boot time enable handling (bsc#1012628). - samples/damon/mtier: support boot time enable setup (bsc#1012628). - mm/damon/core: commit damos->target_nid (bsc#1012628). - block: Introduce bio_needs_zone_write_plugging() (bsc#1012628). - dm: Always split write BIOs to zoned device limits (bsc#1012628). - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (bsc#1012628). - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks (bsc#1012628). - cifs: reset iface weights when we cannot find a candidate (bsc#1012628). - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (bsc#1012628). - iommu/arm-smmu-v3: Revert vmaster in the error path (bsc#1012628). - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (bsc#1012628). - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (bsc#1012628). - iommufd: Prevent ALIGN() overflow (bsc#1012628). - ext4: fix zombie groups in average fragment size lists (bsc#1012628). - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (bsc#1012628). - ext4: initialize superblock fields in the kballoc-test.c kunit tests (bsc#1012628). - usb: core: config: Prevent OOB read in SS endpoint companion parsing (bsc#1012628). - misc: rtsx: usb: Ensure mmc child device is active when card is present (bsc#1012628). - usb: typec: ucsi: Update power_supply on power role change (bsc#1012628). - comedi: fix race between polling and detaching (bsc#1012628). - thunderbolt: Fix copy+paste error in match_service_id() (bsc#1012628). - usb: typec: fusb302: cache PD RX state (bsc#1012628). - cdc-acm: fix race between initial clearing halt and open (bsc#1012628). - btrfs: zoned: use filesystem size not disk size for reclaim decision (bsc#1012628). - btrfs: abort transaction during log replay if walk_log_tree() failed (bsc#1012628). - btrfs: zoned: reserve data_reloc block group on mount (bsc#1012628). - btrfs: zoned: requeue to unused block group list if zone finish failed (bsc#1012628). - btrfs: zoned: do not remove unwritten non-data block group (bsc#1012628). - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (bsc#1012628). - btrfs: don't ignore inode missing when replaying log tree (bsc#1012628). - btrfs: fix ssd_spread overallocation (bsc#1012628). - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1012628). - btrfs: populate otime when logging an inode item (bsc#1012628). - btrfs: don't skip accounting in early ENOTTY return in btrfs_uring_encoded_read() (bsc#1012628). - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (bsc#1012628). - btrfs: don't skip remaining extrefs if dir not found during log replay (bsc#1012628). - btrfs: clear dirty status from extent buffer on error at insert_new_root() (bsc#1012628). - btrfs: send: use fallocate for hole punching with send stream v2 (bsc#1012628). - btrfs: error on missing block group when unaccounting log tree extent buffers (bsc#1012628). - btrfs: zoned: do not select metadata BG as finish target (bsc#1012628). - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents() (bsc#1012628). - btrfs: fix iteration bug in __qgroup_excl_accounting() (bsc#1012628). - btrfs: do not allow relocation of partially dropped subvolumes (bsc#1012628). - xfs: fix scrub trace with null pointer in quotacheck (bsc#1012628). - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (bsc#1012628). - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1012628). - fbdev: nvidiafb: add depends on HAS_IOPORT (bsc#1012628). - ocfs2: reset folio to NULL when get folio fails (bsc#1012628). - net/sched: ets: use old 'nbands' while purging unused classes (bsc#1012628). - hv_netvsc: Fix panic during namespace deletion with VF (bsc#1012628). - i2c: core: Fix double-free of fwnode in i2c_unregister_device() (bsc#1012628). - parisc: Makefile: fix a typo in palo.conf (bsc#1012628). - mm, slab: restore NUMA policy support for large kmalloc (bsc#1012628). - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud() (bsc#1012628). - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (bsc#1012628). - mm/shmem, swap: improve cached mTHP handling and fix potential hang (bsc#1012628). - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (bsc#1012628). - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (bsc#1012628). - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (bsc#1012628). - media: venus: Fix OOB read due to missing payload bound check (bsc#1012628). - media: uvcvideo: Do not mark valid metadata as invalid (bsc#1012628). - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (bsc#1012628). - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (bsc#1012628). - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path (bsc#1012628). - tracing: fprobe: Fix infinite recursion using preempt_*_notrace() (bsc#1012628). - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (bsc#1012628). - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (bsc#1012628). - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (bsc#1012628). - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (bsc#1012628). - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (bsc#1012628). - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (bsc#1012628). - ata: libata-sata: Add link_power_management_supported sysfs attribute (bsc#1012628). - io_uring/rw: cast rw->flags assignment to rwf_t (bsc#1012628). - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (bsc#1012628). - drm/amd/display: Allow DCN301 to clear update flags (bsc#1012628). - rcu: Fix racy re-initialization of irq_work causing hangs (bsc#1012628). - irqchip/mvebu-gicp: Use resource_size() for ioremap() (bsc#1012628). - dm: split write BIOs on zone boundaries when zone append is not emulated (bsc#1012628). - io_uring/zcrx: fix null ifq on area destruction (bsc#1012628). - io_uring/zcrx: don't leak pages on account failure (bsc#1012628). - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.2-522-btrfs-fix-log-tree-replay-failure-due-to-file-.patch. - commit b12dbdb ++++ keylightctl: - Use current distro go default version. Don't force CGO to off (doesn't work on some archs), use whatever go does by default. ++++ rust-keylime: - Update vendored crates (bsc#1248006, CVE-2025-55159) * slab 0.4.11 - Add Cargo_lock.patch patch to update slab and other dependencies - Update to version 0.2.8+12: * build(deps): bump actions/checkout from 4 to 5 * build(deps): bump cfg-if from 1.0.0 to 1.0.1 * build(deps): bump openssl from 0.10.72 to 0.10.73 * build(deps): bump clap from 4.5.39 to 4.5.45 * build(deps): bump pest from 2.8.0 to 2.8.1 * Fix clippy warnings * Use verifier-provided interval for continuous attestation timing * Add meta object with seconds_to_next_attestation to evidence response * Fix boot time retrieval * Fix IMA log format (it must be ['text/plain']) (#1073) * Remove unnecessary configuration fields * cargo: Bump retry-policies to version 0.4.0 * Bump version to 0.2.8 ++++ krita: - Update to 5.2.11 https://krita.org/en/posts/2025/krita-5.2.11-released/ * Fix an issue updating the canvas when entering/exiting canvas-only mode * Fix an issue in the index colors filter when trying to apply the filter to a layer that has only one, non-transparent color * Fix Python invalid escape sequence warnings (kde#489526) - Add upstream change: * 0001-Fix-compilation-with-heif-1.20.2.patch ++++ kubectl-cnpg: - Update to version 1.27.0: * feat(plugin): remove 386 and arm architectures from the build (#7648) * fix(plugin): cosmetic error in `cnpg status` output (#8146) * Dependencies - chore(deps): pin agilepathway/label-checker action to c3d16ad (main) (#7756) - chore(deps): update actions/download-artifact action to v5 (main) (#8259) - chore(deps): update all non-major github action (main) (#7667) - chore(deps): update all non-major github action (main) (#7734) - chore(deps): update all non-major github action (main) (#7795) - chore(deps): update all non-major github action (main) (#7828) - chore(deps): update all non-major github action (main) (#7873) - chore(deps): update all non-major github action (main) (#8238) - chore(deps): update all non-major github action (main) (#8305) - chore(deps): update backup test tools (main) (#7668) - chore(deps): update backup test tools (main) (#8074) - chore(deps): update backup test tools (main) (#8118) - chore(deps): update container distroless digests (main) (#8255) - chore(deps): update dependency golang to v1.24.4 (main) (#7757) - chore(deps): update dependency golang to v1.24.5 (main) (#7995) - chore(deps): update dependency golang to v1.24.6 (main) (#8274) - chore(deps): update dependency golangci/golangci-lint to v2.2.1 (main) (#7955) - chore(deps): update dependency golangci/golangci-lint to v2.2.2 (main) (#8026) - chore(deps): update dependency golangci/golangci-lint to v2.3.0 (main) (#8083) - chore(deps): update dependency golangci/golangci-lint to v2.3.1 (main) (#8220) - chore(deps): update dependency kubernetes-csi/csi-driver-host-path to v1.17.0 (main) (#7909) - chore(deps): update dependency kubernetes-csi/external-resizer to v1.14.0 (main) (#7806) - chore(deps): update dependency python to 3.13 (main) (#8295) - chore(deps): update dependency redhat-openshift-ecosystem/openshift-preflight to v1.13.2 (main) (#7815) - chore(deps): update dependency redhat-openshift-ecosystem/openshift-preflight to v1.13.3 (main) (#7839) - chore(deps): update dependency redhat-openshift-ecosystem/openshift-preflight to v1.14.0 (main) (#7913) - chore(deps): update dependency rook/rook to v1.17.2 (main) (#7672) - chore(deps): update dependency rook/rook to v1.17.6 (main) (#8027) - chore(deps): update dependency rook/rook to v1.17.7 (main) (#8201) - chore(deps): update dependency vmware-tanzu/velero to v1.16.1 (main) (#7761) - chore(deps): update dependency vmware-tanzu/velero to v1.16.2 (main) (#8187) - chore(deps): update docker/setup-buildx-action digest to e468171 (main) (#7841) - chore(deps): update github/codeql-action digest to 181d5ee (main) (#7948) - chore(deps): update github/codeql-action digest to 39edc49 (main) (#7924) - chore(deps): update github/codeql-action digest to 4e828ff (main) (#8109) - chore(deps): update github/codeql-action digest to 51f7732 (main) (#8186) - chore(deps): update github/codeql-action digest to 76621b6 (main) (#8280) - chore(deps): update github/codeql-action digest to d6bbdef (main) (#8073) - chore(deps): update jonasbn/github-action-spellcheck docker tag to v0.49.0 (main) (#7679) - chore(deps): update jonasbn/github-action-spellcheck docker tag to v0.50.0 (main) (#7832) - chore(deps): update jonasbn/github-action-spellcheck docker tag to v0.51.0 (main) (#7874) - chore(deps): update kindest/node docker tag to v1.33.1 (main) (#7685) - chore(deps): update kindest/node docker tag to v1.33.2 (main) (#8092) - chore(deps): update kubernetes csi (main) (#7739) - chore(deps): update kubernetes csi (main) (#7846) - chore(deps): update minio/minio docker tag to release.2025-06-13t11-33-47z (main) (#7917) - chore(deps): update module github.com/goreleaser/goreleaser to v2.10.2 (main) (#7784) - chore(deps): update module github.com/goreleaser/goreleaser to v2.11.0 (main) (#7999) - chore(deps): update module sigs.k8s.io/controller-tools to v0.18.0 (main) (#7530) - chore(deps): update operator framework (main) (#7686) - chore(deps): update operator framework (main) (#7974) - chore(deps): update operator framework to v1.40.0 (main) (#7740) - chore(deps): update operator framework to v1.41.1 (main) (#8008) - chore(deps): update velero/velero-plugin-for-aws docker tag to v1.12.2 (main) (#8188) - fix(deps): update all non-major go dependencies (main) (#7689) - fix(deps): update all non-major go dependencies (main) (#8148) - fix(deps): update cnpg (main) (#8306) - fix(deps): update k8s.io/utils digest to 4c0f3b2 (main) (#7735) - fix(deps): update kubernetes packages to v0.33.1 (main) (#7485) - fix(deps): update kubernetes patches to v0.33.2 (main) (#7860) - fix(deps): update kubernetes patches to v0.33.3 (main) (#8046) - fix(deps): update module github.com/cloudnative-pg/machinery to v0.3.0 (main) (#7968) - fix(deps): update module github.com/masterminds/semver/v3 to v3.4.0 (main) (#7936) - fix(deps): update module github.com/onsi/gomega to v1.38.0 (main) (#8047) - fix(deps): update module github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring to v0.83.0 (main) (#7963) - fix(deps): update module github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring to v0.84.0 (main) (#8037) - fix(deps): update module github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring to v0.84.1 (main) (#8266) - fix(deps): update module golang.org/x/term to v0.33.0 (main) (#8009) - fix(deps): update module golang.org/x/term to v0.34.0 (main) (#8283) - fix(deps): update module sigs.k8s.io/controller-runtime to v0.21.0 (main) (#7692) - fix(deps): update module sigs.k8s.io/yaml to v1.5.0 (main) (#7918) - fix(deps): update module sigs.k8s.io/yaml to v1.6.0 (main) (#8149) - fix(docs): release notes for 1.26.1 and 1.25.3 (#8131) ++++ kubeseal: - Update to version 0.31.0: * Update release notes for v0.31.0 (#1772) * Simplify VIB helm chart validation (#1771) * Bump VIB action version and updates the service URL (#1770) * helm: add watch for secrets (#1758) * fix: metrics cleanup for deleted SealedSecrets (#1764) * Bump golang version to latest available one for 1.24 (#1769) * Bump k8s.io/client-go from 0.33.2 to 0.33.3 (#1761) * Bump github.com/spf13/pflag from 1.0.6 to 1.0.7 (#1765) * Bump golang.org/x/crypto from 0.40.0 to 0.41.0 (#1768) * Bump k8s.io/api from 0.33.2 to 0.33.3 (#1766) * Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 (#1767) * Bump k8s.io/code-generator from 0.33.2 to 0.33.3 (#1759) * Bump github.com/onsi/gomega from 1.37.0 to 1.38.0 (#1760) * Fix keyrenewperiod template chart (#1756) * Fix namespace validation to prevent mismatch errors (#1754) * Bump golang.org/x/crypto from 0.39.0 to 0.40.0 (#1755) * Bump k8s.io/code-generator from 0.33.1 to 0.33.2 (#1752) * Bump k8s.io/client-go from 0.33.1 to 0.33.2 (#1749) * add watch for secrets (#1737) * Release carvel package 2.17.3 (#1746) * Release chart 2.17.3 (#1745) ++++ kwctl: - Update to version 1.27.3: * Bug Fixes - fix: Don't fail when PolicyGroup has policies with differing execution modes (#1319) * Maintenance - build(deps): update crate-ci/typos action to v1.35.4 (#1317) - build(deps): update all patch level dependencies (#1316) - chore(deps): update actions/checkout action to v5 (#1314) - build(deps): update github-actions (#1313) - build(deps): update all patch level dependencies (#1312) - build(deps): lock file maintenance (#1311) - build(deps): update taiki-e/install-action action to v2.58.6 (#1310) - build(deps): update github-actions (#1309) - build(deps): update github-actions (#1307) - build(deps): update rust crate clap_complete to v4.5.56 (#1308) - build(deps): update taiki-e/install-action action to v2.58.0 (#1306) - build(deps): update rust crate clap to v4.5.43 (#1305) - chore(deps): update actions/download-artifact action to v5 (#1304) - build(deps): update taiki-e/install-action action to v2.57.8 (#1303) ++++ labplot: - Drop netcdf build dependency on 32bit archs ++++ nftables: - Add json.patch ++++ re2: - update to 2025-08-12: * bazel related changes ++++ libshine: - Fix build failures with gcc15: libshine-gcc15-fixes.patch - Use autosetup macro ++++ libspelling: - Update to version 0.4.9: + Improve discovery of no-spell-check tags + Fix various leaks in the testsuite which CI now tests for + Improve life-cycle tracking of text-region from SpellingEngine + CI now runs ASAN/LSAN/UBSAN and others on every commit + Updated translations. ++++ libunicap: - Revert gettextize call as it breaks reproducible builds; call autoreconf with -I /usr/share/gettext/m4 as a workaround, instead - Call gettextize to fix build errors on FACTORY ++++ vlc: - Port to current ffmpeg-7: Remove version constraints on ffmpeg BuildRequires, add upstream patches and pass disable-vdpau to configure, this disables build/shipping of vdpau subpackage. Patches added: 5574.patch, 6168.patch, 6273.patch, 6606.patch and 6527.patch. - Add missing vlc Requires to devel sub-package, previously pulled in via vlc-vdpau package. ++++ weston: - Add patch to allow usage of libdisplay 0.3.0: * weston-libdisplay-info-0.3.0.patch ++++ man-pages-zh_CN: - version update to 1.6.4.3: * Full translation of xargs(1) from findutils v4.10.0. ++++ meson: - Update to version 1.8.4: + compilers: move CFLAGS/CXXFLAGS handling to Environment. + interpreter: rename default_project_options. + options: machine_file_options keys are always OptionKeys + options: tighten types for validating options + interpreter: use correct type for project_default_options + options: split pending subproject options into their own dictionary + options: warn if subproject sets another subproject option too late ++++ meson-test: - Update to version 1.8.4: + compilers: move CFLAGS/CXXFLAGS handling to Environment. + interpreter: rename default_project_options. + options: machine_file_options keys are always OptionKeys + options: tighten types for validating options + interpreter: use correct type for project_default_options + options: split pending subproject options into their own dictionary + options: warn if subproject sets another subproject option too late ++++ noisetorch: - Use current distro go version. Don't force CGO off, that doesn't work on some architectures with PIE mode, instead use whatever upstream go decides to be the correct default. ++++ nudoku: - Update to 6.0.0: * Wrap around board edges when navigating with arrow keys (pr #68) * Update Turkish translation (pr #69) * Print sudoku stream to stdout (pr #71) * Fix build with gettext 0.24.1+ (pr #73) - Drop nudoku-Fix-build-with-gettext-0.24.1.patch - Convert to %autosetup - Add nudoku-Fix-build-with-gettext-0.24.1.patch: Adds the local m4/ directory to the autoconf macro search patch. Fixes an issue with gettext macros not being available at build time. ++++ ocfs2-tools: - ocfs2-tools: Fix build error for Tumbleweed after updating GCC to v15 (boo#1248421) * update ocfs2-tools.spec, add "-std=gnu11" to CFLAGS ++++ patterns-gnome: - Recommend opensuse-welcome-launcher instead of opensuse-welcome: the launcher took over the autostart function and will allow to run different welcome apps per desktop (e.g gnome-tour on gnome). ++++ patterns-xfce: - Only recommend opensuse-welcome-launcher on suse_version >= 1600. This pattern is also still used on Leap 15.6, where the switch to the flexible launcher is not planned to happen. - Recommend opensuse-welcome-launcher instead of opensuse-welcome: the launcher is the new tool that decides which welcome app (per desktop) to use (boo#1248327). ++++ peazip: - Update to 10.6.1: * https://peazip.github.io/changelog.html ++++ perl-Business-ISBN-Data: - updated to 20250815.1.0 (20250815.001) see /usr/share/doc/packages/perl-Business-ISBN-Data/Changes 20250815.001 2025-08-15T11:40:37Z * data update for 2025-08-14 20250813.001 2025-08-14T14:23:19Z * data update for 2025-08-13 20250801.001 2025-08-01T04:15:31Z * data update for 2025-08-01 20250723.001 2025-07-23T22:56:02Z * data update for 2025-07-22 20250722.001 2025-07-22T04:36:37Z * data update for 2025-07-22 ++++ pnpm: - update to 10.15.0: * Minor Changes - Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793. - Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #9780. - pnpm config get now prints an INI string for an object value [#9797]. - pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@babel/parser"].peerDependencies["@babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true). - pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON. * Patch Changes - Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #9835. - When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists [#9775]. - When making requests for the non-abbreviated packument, add * /* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #9862. - The standalone exe version of pnpm works with glibc 2.26 again #9734. - Fix a regression in which pnpm dlx pkg --help doesn't pass - -help to pkg #9823. ++++ product-composer: - update to version 0.6.13: * switching back to SHA-256 for CHECKSUMS file (boo#1247507) ++++ python-gunicorn: - Convert to libalternatives on SLE-16+ only ++++ python-ansible-compat: - update to 25.8.1: * Bugfixes - Restore ansible-lint<25.8.1 behaviour for ansible-lint<25.8.1 (#520) @cidrblock - update to 25.8.0: * Enhancements - Bump the dependencies group in /.config with 5 updates (#507) @dependabot[bot] - Bump markdown-exec from 1.10.3 to 1.11.0 in /.config in the dependencies group (#506) @dependabot[bot] - Bump the dependencies group across 1 directory with 3 updates (#505) @dependabot[bot] * Bugfixes - Fix first-run collection discovery by gating plugin loader initialization (#516) @cidrblock * Maintenance - chore: pre-commit autoupdate (#508) @pre-commit-ci[bot] - Bump the dependencies group in /.config with 4 updates (#503) @dependabot[bot] - Avoid ack failure due to dependabot labels (#502) @ssbarnea ++++ python-geventhttpclient: - Disabled some sni_ssl unittest which just failed on Leap 16.0 * test_implicit_sni_from_host_in_ssl, test_implicit_sni_from_header_in_ssl, and test_explicit_sni_in_ssl ++++ python-joblib: - Skip tests failing with Python 3.13.7 ++++ python-mkdocs-material: - update to 9.6.17: * Fixed #8396: Videos do not autoplay when inside a content tab * Fixed #8394: Stroke width not effective in Mermaid.js diagrams * Fixed disappearing version selector when hiding page title ++++ python-pytest-examples: - Instead of skipping the tests, add upstream ruff.patch ++++ python-textual: - update to 5.3.0: https://github.com/Textualize/textual/releases/tag/v5.3.0 * Added - Added Content.simplify #6023 - Added textual.reactive.Initialize #6023 * Fixed - Fixed issue with IDs in markdown #6019 #6023 - update to 5.2.0: https://github.com/Textualize/textual/releases/tag/v5.2.0 * Added - Added a 'stream' layout, which is a lot like vertical but with fewer supported rules (which is why it is faster), will remain undocumented for now. #6013 - update to 5.1.1: https://github.com/Textualize/textual/releases/tag/v5.1.1 For some reason I still don't understand, poetry included pycache files in the last PyPi release. After updating Poetry, the build is a more sensible size. There are no code changes in this release. - update to 5.1.0: https://github.com/Textualize/textual/releases/tag/v5.1.0 This release adds an :empty pseudo-class which matches widgets with no children. You could use this to hide a container that doesn't have any children, for example: .container:empty { display: none; } Also in this release, support for scrolling left and right via the trackpad or a mouse that supports it. This was a contribution from @fancidev * Added - Added empty pseudo class, which applies when a widget has no displayed children #5999 - Added Screen.action_focus #5999 - Added support for left and right mouse scroll for terminals and input devices which support it #5995 * Changed - last-child, last-of-type, first-child, and first-of-type apply to displayed children only #5999 - textual.compose is now public #5999 - update to 5.0.1: https://github.com/Textualize/textual/releases/tag/v5.0.1 * Fixed - Fixed appending to Markdown widgets that were constructed with an existing document #5990 - update to 5.0.0: https://github.com/Textualize/textual/releases/tag/v5.0.0 This is quite a large release! Fueled in part by my work on Toad. Markdown rendering has been improved, with full text selection, prettier code blocks and tables. Plus streaming support.Plenty of other fixes and additions. Thats to everyone who contributed code and issues! There are two breaking changes (see below). These are unlikely to affect anyone, but Semver requires bumping the major version number. * Added - Added get_minimal_width to Visual protocol #5962 - Added expand and shrink attributes to GridLayout #5962 - Added Markdown.get_stream #5966 - Added textual.highlight module for syntax highlighting #5966 - Added MessagePump.wait_for_refresh method #5966 - Added Widget.container_scroll_offset e84600c - Added Markdown.source attribute to MarkdownBlocks e84600c - Added extension mechanism to Markdown e84600c - Added index to ListView.Selected event #5973 - Added layout switch to Static.update #5973 * Fixed - Fixed TextArea issue with the css theme, where the background color was stuck from the previous theme #5964 * Changed - Improved rendering of Markdown tables (replace Rich table with grid) which allows text selection #5962 - Change look of command palette, to drop accented borders [#5966] - Some style tweaks to Markdown e84600c - Content markup can now accept component classes when preceded by a dot, e.g. "Hello [.my_custo_style]World[/]!" #5981 - Breaking change: Visual.render_strips has a new signature. If you aren't explicitly building Visuals then this won't effect you. #5981 - Breaking change: The component classes on Markdown have been moved to MarkdownBlock. This won't affect you unless you have customize the Markdown CSS #5981 - The textual-speedups library will now be imported automatically if it is installed. Set TEXTUAL_SPEEDUPS=0 to disable. - update to 4.0.0: https://github.com/Textualize/textual/releases/tag/v4.0.0 The highlight of this release is the new Markdown.append method which can be used to efficiently stream markdown content (like you might get from an LLM). The Widget.anchor method has changed semantics (and also works much better), which is the reason for the major version bump. This will only impact you if you are actually using that method. And there are a few fixes and additions. Thanks to the community for these contributions. * Fixed - Fixed query_one and query_exactly_one not raising documented WrongType exception. #5945 - Fixed logging to a file on Windows #5941 - Fixed eight bit colors crashing when applying dim style #5957 * Changed - Breaking change: Widget.anchor now has different semantics. It should be applied to a container and anchors to the bottom of the scroll position. #5950 * Added - Added Markdown.append #5950 - Added Widget.release_anchor #5950 - Added compact parameter to MaskedInput #5952 - update to 3.7.1: https://github.com/Textualize/textual/releases/tag/v3.7.1 * Fixed - Fixed broken text selection with soft_wrap=False #5940 - update to 3.7.0: https://github.com/Textualize/textual/releases/tag/v3.7.0 A few enhancements, including a handy getters module for creating properties to get widgets. Also a potentially breaking change, see below for the details... * Added - Added textual.getters #5930 - Added a show_cursor boolean to TextArea #5934 * Changed - Potential breaking change: Changed default query_one and query_exactly_one search to breadth first #5930 - Cursor is now visible by default when in read only mode (restoring pre 3.6.0 behavior) #5934 * Fixed - Fixed issue with Keylines not scrolling #5936 - update to 3.6.0: https://github.com/Textualize/textual/releases/tag/v3.6.0 * Fixed - Fixed issue with the "transparent" CSS value not being transparent when set using python #5890 - Fixed issue with pushing screens when Input has mouse captured #5900 - Implemented workaround for Ghostty bug which produces negative mouse coordinates #5926 * Changed - Widget.release_mouse will now only release the mouse, if it was captured by self #5900 - Some optimizations to TextArea, which may be noticeable during scrolling (note: may break snapshots with a TextArea) [#5925] - Selecting in the TextArea now hides the cursor until you release the mouse #5925 - Read only TextAreas will no longer display a cursor #5925 * Added - Added TextArea.highlight_cursor_line toggle #5924 - update to 3.5.0: https://github.com/Textualize/textual/releases/tag/v3.5.0 This release contains some optimizations to startup time, which may be significant if you create a lot of widgets. There are also some visual updates to Markdown. This release will break your snapshots, although I don't expect any visual changes. If you are using the snapshot plugin, you will need to regenerate those snapshots. Even if you give them a quick scan, this should only take a few minutes. * Changed - Optimized startup #5869 - New blank visual which makes background faster to render (note this will break snapshots tests this version) #5869 - Exposed code_indent_guides boolean on Markdown widget #5874 - Changed code fence background to use CSS background rather than its code theme #5874 - update to 3.4.0: https://github.com/Textualize/textual/releases/tag/v3.4.0 Mostly fixes, although there is a notable change to markup. Previously anything in square brackets was considered a tag, which resulted in markup errors with Python list literals. i.e. [1,2,3] would be interpreted as a tag. The Content markup parser has been made more lenient in these cases, and treats them as literal text. * Fixed - Fixed issues with initial flicker in TextArea rendering https://github.com/Textualize/textual/issues/5841vcomm - Fixed issue with workers that have large parameter lists breaking dev tools #5850 - Fixed post_message failing on 3.8 #5848 - Fixed log not working from threads #5863 * Added - Added experimental opt-in support for https://github.com/willmcgugan/textual-speedups * Changed - Content markup is now more lenient; if a 'tag' doesn't contain a valid style it will be included verbatim. #5851 - update to 3.3.0: https://github.com/Textualize/textual/releases/tag/v3.3.0 The first community supported release. Mostly fixes and a few helpful additions. See below for details... * Fixed - Fixed VERTICAL_BREAKPOINTS doesn't work #5785 - Fixed Button allowing text selection #5770 - Fixed running App.run after asyncio.run #5799 - Fixed triggering a deprecation warning in py >= 3.10 #5799 - Fixed Input invalid cursor position after updating the value [#5811] - Fixed DEFAULT_CLASSES when applied to App #5827 - Fixed order of implicit content tag closing #5823 * Added - Exposed CollapsibleTitle #5810 - Added Color.hsv property and Color.from_hsv class method [#5803] - Added cursor_at_start and cursor_at_end properties to the Input widget #5830 * Changed - Added a few features to python -m textual.markup playground [#5823] - update to 3.2.0: https://github.com/Textualize/textual/releases/tag/v3.2.0 There are a few interesting features in this release. Many widgets have grown a compact reactive. If you set this to True then the widget will have a compact (borderless) style. Reactives have a new toggle_class attribute, that toggles a TCSS classname according to the truthyness of its value. If that sounds complicated, it really isn't in practice. Let's see it in action: class MyWidget(Widget): compact = reactive(False, toggle_class="-textual-compact") This adds a boolean attribute to the widget. If you set compact=True then it will add the class "-textual-compact". If you set compact=False it will remove the class. Simples. We also have breakpoint support, so you can build UIs that adjust to the dimensions of the screen. This was always possible, but it was a pattern before. Now it is a first class feature. See the breakpoints.py example. We also have two new pseudo classes: :first-child and :last-child, which have the same meaning as browser CSS. Contributed by @sponsfreixes There is one potential breaking change. RadioSet now has a default width of 1fr, meaning they will take up the full available space. This makes RadioSet size like other widgets. If you want the original behavior, then set the width to "auto" * Fixed - Fixed OptionList causing excessive redrawing #5766 - Log messages could be written to stdout when there was no app, which could happen when using run_async or threads. Now they will be suppressed, unless the env var TEXTUAL_DEBUG is set #5782 * Added - Added :first-child and :last-child pseudo classes #5776 - Added toggle_class parameter to reactives #5778 - Added compact parameter and reactive to Button, Input, ToggleButton, RadioSet, OptionList, TextArea #5778 - Added HORIZONTAL_BREAKPOINTS and VERTICAL_BREAKPOINTS to App and Screen #5779 * Changed - RadioSet now has a default width of 1fr #5778 - update to 3.1.1: https://github.com/Textualize/textual/releases/tag/v3.1.1 * Fixed - Fixed issue with tint filter #5757 - Fixed a crash when setting keymap before app mount #5742 - update to 3.1.0: https://github.com/Textualize/textual/releases/tag/v3.1.0 Mostly fixes, some API enhancements. See below. * Fixed - Fixed markup escaping edge cases #5697 - Fixed incorrect auto height in Collapsible #5703 - Fixed issue with keymaps and single-letter keys #5726 - Fixed OptionList size after removing or clearing options [#5728] - Fixed footer / key panel not updating when keymaps are applied #5724 - Fixed alignment not being applied when there are min and max limits on dimensions #5732 - Fixed issues with OptionList scrollbar not updating #5736 - Fixed allow_focus method not overriding can_focus() #5737 - Fixed overlap of Input / TextArea selection with arbitrary text selection #5739 * Changed - Collapsible title now accepts str, Text, or Content #5697 - Rich Text objects will be converted to Content in OptionList and other widgets #5712 - Textual will always convert dim attributes to RGB by default [#5715] - Notifications will now use content markup (previously they used Console markup) #5719 * Added - Added TEXTUAL_DIM_FACTOR env var to set the opacity of the 'dim' ANSI attribute #5715 - notify() now accepts a markup parameter to disable rendering the message as markup #5719 - Added Screen.text_selection_started_signal #5739 - Added App.clear_selection() helper method to clear arbitrary text selection of active screen #5739 - update to 3.0.1: https://github.com/Textualize/textual/releases/tag/v3.0.1 Fixes an issue with modal dialogs not refreshing. * Fixed - Fixed issue with modal dialog not refreshing #5696 - update to 3.0.0: https://github.com/Textualize/textual/releases/tag/v3.0.0 Mostly small enhancements, and fixes. This is a major version bump, due to a change in how app.query works. Previously this would query the active screen, but this would yield surprising results if you push a screen. Now app.query, gets results from the default screen. This is unlikely to impact many apps. If it does, use app.screen.query where you previously used app.query. * Changed - Breaking change: App.query and friends will now always query the default (first) screen, not necessarily the active screen. - Content now has a default argument of an empty string, so Content() is equivalent to Content("") - Assigned names to Textual-specific threads: textual-input, textual-output. These should become visible in monitoring tools (ps, top, htop) as of Python 3.14. #5654 - Tabs now accept Content or content markup #5657 - Breaking change: Buttons will now use Textual markup rather than console markup - tree-sitter languages are now loaded lazily, improving cold-start time #563 * Fixed - Static and Label now accept Content objects, satisfying type checkers #5618 - Fixed click selection not being disabled when allow_select was set to false #5627 - Fixed crash on clicking line API border #5641 - Fixed Select.selection now correctly returns None if Select.BLANK is selected instead of an AssertionError - Fixed additional spaces after text-wrapping #5657 - Added missing scroll_end parameter to the Log.write_line method #5672 - Restored support for blink #5675 - Fixed scrolling breaking on DataTable with overflow: hidden [#5681] * Added - Added Widget.preflight_checks to perform some debug checks after a widget is instantiated, to catch common errors. #5588 - Added text-padding style #5657 - Added Content.first_line property #5657 - Added Content.from_text constructor #5657 - Added Content.empty constructor #5657 - Added Content.pad method #5657 - Added Style.has_transparent_foreground property #5657 - update to 2.1.2: https://github.com/Textualize/textual/releases/tag/v2.1.2 A fix for the command palette's fuzzy search. Will not affect most people. * Fixed - Fixed command palette fuzzy search bailing too early #5579 - update to 2.1.1: https://github.com/Textualize/textual/releases/tag/v2.1.1 Mostly fixes here. There is a small change to behavior around scroll_end. Changes below... * Fixed - Fixed Link binding to open the link #5564 - Fixed IndexError in OptionList #5574 - Fixed issue with clear_panes breaking tabbed content #5573 * Changed - The user can now interrupt a scroll to end by grabbing the scrollbar or scrolling in any other way. Press ++end++ or scroll to the end to restore default behavior. This is more intuitive that it may sound. - update to 2.1.0: https://github.com/Textualize/textual/releases/tag/v2.1.0 Mostly fixes in this release, and a small feature. The mouse event adds pointer_* attributes which contain the pointer coordinates in pixel resolution (if supported by your terminal). * Fixed - Fixed smooth scrolling broken on iTerm over SSH #5551 - Fixed height of auto container which contains auto height children #5552 - Fixed Content.from_markup not stripping control codes #5557 - Fixed delta_x and delta_y in mouse events when smooth scrolling is enabled #5556 - Fixed flipped title colors in panel border #5548 - Fixed detection of smooth scrolling #5558 * Added - Added pointer_x, pointer_y, pointer_screen_x, and pointer_screen_y attributes to mouse events #5556 * Changed - Animating the scrollbar while dragging is disabled if smooth scrolling is available #5558 - Renamed TerminalSupportsInBandWindowResize to InBandWindowResize #5558 - update to 2.0.4: https://github.com/Textualize/textual/releases/tag/v2.0.4 * Fixed - Fixed smooth scrolling breaking mouse support in VSCode (and probably others) #5549 - update to 2.0.3: https://github.com/Textualize/textual/releases/tag/v2.0.3 * Fixed - Fixed traceback from OptionList in Command Palette #5544 - update to 2.0.2: https://github.com/Textualize/textual/releases/tag/v2.0.2 * Fixed - Fixed OptionList.add_options exhausting iterator #5540 - Fixed screen not refreshing after pop #5543 - update to 2.0.1: https://github.com/Textualize/textual/releases/tag/v2.0.1 * Fixed - Fixed escape tags in Content markup #5536 - update to 2.0.0: https://github.com/Textualize/textual/releases/tag/v2.0.0 * This is a big release! Arbitrary text selection. You can now select text, and hit ctrl+c to copy it to the clipboard. This works just about everywhere, although there a re a few widgets were it isn't yet implemented. * Breaking change: Strings returned from render() and other places will now be interpreted with Content.from_markup, rather than Rich.from_markup. This may result in slightly different colors, and emoji codes (like ":smiley:") will no longer be processed automatically. If you want to restore the old behavior you can return Rich.from_markup("Your output here") rather than string literal. * Why 2.0.0 ? It took us more than 3 years to get to 1.0. But a couple of months to get to 2.0? Why? We follow Semver which says that after 1.0, all breaking changes bump the major version number. We have some breaking changes here, which will be trivial to fix -- if they effect you at all. But a breaking change is a breaking change! * Added - Added Select.type_to_search which allows you to type to move the cursor to a matching option #5403 - Added from_app_focus to Focus event to indicate if a widget is being focused because the app itself has regained focus or not #5379 - Added Blurred message to Input widget (matching Submitted and Changed) to make it easier to synchronize with validate_on parameter when set to 'blur'. - Added Offset.transpose #5409 - Added screen--selection component class to define style for selection #5409 - Added Widget.select_container property #5409 - Added Widget.select_all #5409 - Added Region.bottom_right_inclusive #5409 - Added double click to select, triple click to select all in container #5409 - Added arbitrary text selection #5409 - Added Widget.ALLOW_SELECT classvar for a per-widget switch to disable text selection #5409 - Added Widget.allow_select method for programmatic control of text selection #5409 - Added App.ALLOW_SELECT for a global switch to disable text selection #5409 - Added DOMNode.query_ancestor #5409 - Added selection to Log widget #5467 - Added text-wrap and text-overflow CSS values #5485 - Added Textual markup to replace Rich markup #5485 - Added Content.from_markup #5485 * Fixed - Fixed Pilot.click not working with times parameter #5398 - Fixed select refocusing itself too late #5420 - Fixed layout of the keys in the help panel when a key has a tooltip but no description #5436 - The content of an Input will now only be automatically selected when the widget is focused by the user, not when the app itself has regained focus (similar to web browsers). [#5379] - Updated TextArea and Input behavior when there is a selection and the user presses left or right #5400 - Footer can now be scrolled horizontally without holding shift [#5404] - Modified '_on_blur' method in Input to post a Blurred message - Fixed Log widget not refreshing on resize #5460 - Fixed special case with calculating the height of a container where all children have dynamic heights #5463 - Fixed scrollbars ignoring background opacity #5458 - Fixed Header icon showing command palette tooltip when disabled #5427 * Changed - Breaking change: OptionList no longer supports Separator, a separator may be specified with None - Implemented smooth (pixel perfect) scrolling on supported terminals. Set TEXTUAL_SMOOTH_SCROLL=0 to disable. * Removed - Breaking change: Removed wrap argument from OptionList (use CSS text-wrap: nowrap; text-overflow: ellipses) - Breaking change: Removed tooltip argument from OptionList. Use tooltip attribute or with_tooltip(...) method. ++++ python-uv: - update to 0.8.12 * Enhancements * Add an aarch64-pc-windows-msvc target for python-platform * Add fallback parent process detection to uv tool update-shell * Install non-build-isolation packages in a second phase * Add hint when virtual environments are included in source distributions * Add Docker images derived from buildpack-deps:trixie, debian:trixie-slim, alpine:3.22 * Bug fixes * Reject already-installed wheels built with outdated settings * Skip interpreters that are not found on query * Handle dotted package names in script path resolution * Reject match-runtime = true for dynamic packages * Documentation * Document improvements to build-isolation setups * Fix reference documentation recommendation to use uv cache clean instead of clear ++++ yt-dlp: - Update to release 2025.08.20 * Warn against use of `-f mp4` * yt: Add es5 and es6 player JS variants * yt: Default to main player JS variant * yt: Extract title and description from initial data * yt: Handle required preroll waiting period ++++ rubygem-agama-yast: - Removed the heuristic that used to consider some software RAID as bootable devices under some circumstances (bsc#1248195). - Ensure that /boot/efi and /boot/zipl partitions created using the web UI are never encrypted (bsc#1248189, bsc#1247447). ++++ sdbootutil: - Update to version 1+git20250820.077bd8b: * Revert "Ignore UPDATE_NVRAM (bsc#1247952)" * Fix dracut "No '/dev/log' or 'logger'" message * Don't mount /etc in chroot with btrfs subvolume * Fix issue template directory name ++++ tj: - Use current distro go default version. As these are oldish sources, also use GO111MODULE=off. ++++ updatecli: - Update to version 0.105.1: * Bug Fixes - fix: correct decoding logic for GitLab clientSpec to allow overwriting @hebestreit (#5811) * Maintenance - deps: Bump Golang version to 1.24.6 @updateclibot[bot] (#5839) - deps(github/action): bump all dependencies @updateclibot[bot] (#5843) - deps(github/action): bump all dependencies @updateclibot[bot] (#5838) - deps(go): bump module golang.org/x/net to v0.43.0 @updateclibot[bot] (#5832) - deps(go): bump module golang.org/x/mod to v0.27.0 @updateclibot[bot] (#5823) - chore: replace archived go module github.com/mitchellh/mapstructure @olblak (#5817) - deps: bump golangci-lint to v2.3.1 @updateclibot[bot] (#5812) - deps(go): bump module cuelang.org/go to v0.14.0 @updateclibot[bot] (#5798) ++++ waylyrics: - remove --locked from %{cargo_[build|install]} as it's part of these macros now - Update to version 0.3.21: * docs: update changelog [ci skip] * chore: bump version to v0.3.21 * build: bump dependencies * build(deps): bump tokio from 1.43.0 to 1.43.1 * build(deps): bump openssl from 0.10.71 to 0.10.72 * build(deps): bump rust_decimal from 1.36.0 to 1.37.1 * build(deps): bump async-trait from 0.1.86 to 0.1.88 * build(deps): bump reqwest from 0.12.12 to 0.12.15 * build(deps): bump rust_decimal_macros from 1.36.0 to 1.37.1 * build(deps): bump the serde group with 2 updates * fix:.一个错误 * fix: 手动刷新歌词时清空歌词标签缓存 * style: :lipstick: cargo fmt * perf: DashMap 作为歌词标签存在性缓存 * feat: 添加对从音乐文件元数据读取歌词的支持 * build(deps): bump ring from 0.17.11 to 0.17.13 (#303) * chore: add script to export dup deps [ci skip] * fix(CI): remove outdated test of qqmusic api initialization [ci skip] * build: bump dependencies * docs(readme): HotLyric, alternative on windows [ci skip] * docs(readme): note on project status * build(deps): bump openssl from 0.10.68 to 0.10.70 (#301) * build(deps): bump serde_json from 1.0.134 to 1.0.138 in the serde group (#296) * build(deps): bump thiserror from 2.0.9 to 2.0.11 (#297) * build(deps): bump tokio from 1.42.0 to 1.43.0 (#298) * build(deps): bump futures-lite from 2.5.0 to 2.6.0 (#299) * build(deps): bump windows from 0.58.0 to 0.59.0 (#300) * build(deps): bump dark-light to 2.0.0 * build(deps): bump reqwest from 0.12.9 to 0.12.12 (#291) * build(deps): bump the serde group with 2 updates (#290) * build(deps): bump gdk4-win32 from 0.9.3 to 0.9.5 (#292) * build(deps): bump thiserror from 2.0.6 to 2.0.9 (#293) * build(deps): bump glib-macros from 0.20.5 to 0.20.7 (#294) * rust version problem (#289) * enhance: switch to better tray-icon implementation for windows [ci skip] * build: migrate to ksni 0.3 * chore: dedup code * chore: fix deepsource lints * refactor: extract set_by_mode * ci: add .deepsource.toml * docs(readme): add introduction [ci skip] * docs(readme): add alternative `lyric-for-musixfox` [ci skip] * docs(readme): add preview images [ci skip] * docs(readme): replace text with logos * docs: update changelog & metainfo * chore: release v0.3.20 * enhance: comment for sub table in config * log: capture panics * fix: check if instance name used * docs: update metainfo & changelog * hotfix: build on windows * chore: release v0.3.19 * chore(deps): bump dependencies * build(deps): bump the serde group with 2 updates (#280) * build(deps): bump tracing from 0.1.40 to 0.1.41 (#281) * build(deps): bump tray-icon from 0.19.1 to 0.19.2 (#282) * build(deps): bump rfd from 0.15.0 to 0.15.1 (#284) * build(deps): bump url from 2.5.3 to 2.5.4 (#283) * docs(build): check MSRV * chore(clippy): fix clippy warnings * chore: update lock file * fix: setCookies for QQMusicApi * fix: instance format * feat: support multi-monitor setup (#278) * feat: Implement color-scheme autoswitch (light/dark mode) (#277) * enhance: unregister latest theme * build(deps): bump rustls from 0.23.16 to 0.23.18 (#276) * fix: LazyLock is not stable yet in 1.73 rustc * chore: fix details URL in metainfo * chore: bump version to 0.3.18 * test: search/query via lrclib * feat: support LRCLib provider * chore: apply clippy fix * fix: `login_qqmusic` call was not awaited * chore(deps): bump dependencies * feat: show errors from providers in search_window * fix: search failure dialog cannot be spawned outside GTK thread * docs: fix typo in filename * docs(i18n): translation for contribution.md and build guide ubuntu (#272) * fix: add artists to QQMusic keyword * fix(test): initialize QQMusic * feat: set cookies for QQMusicApi in config * chore: migrate to qqmusic-rs 0.2.0 * enhance: init lyric provider with any struct * build(deps): bump the serde group with 2 updates (#266) * build(deps): bump glib-macros from 0.20.4 to 0.20.5 (#267) * build(deps): bump thiserror from 1.0.64 to 1.0.66 (#268) * build(deps): bump regex from 1.11.0 to 1.11.1 (#269) * build(deps): bump tray-icon from 0.19.0 to 0.19.1 (#270) * chore: support nix flake (#264) * fix: set text wrap to show very-long lyric * docs(readme): add alternative `lyrica` * chore(deps): bump once_cell to `1.20.2` * chore: release v0.3.17 * fix(tray/unix): Avoid calling list_players() from tray thread (#262) * fix(tray): export translated lyrics * build(deps): bump reqwest from 0.12.7 to 0.12.8 (#261) * fix(win32): crash with Motrix runnig * i18n: Create Italian Translation it_IT (#260) * chore: release v0.3.16 * build(fix): ""desktop * docs(build): fix i18n part (#259) * chore(deps): bump dependencies * docs(readme): intro SPlayer [ci skip] * docs(readme): desktop support of desktop_lyric, #258 * fix: build error on linux * refactor: dedup function signature * docs(readme): add alternative * i18n: translate tips * test: add test for make_lrc_line * build(fix): fix build with MSVC * feat: show error dialog if search failed * enhance: TrackMeta from Metadata will not fail now * chore: release v0.3.15 * enhance: select output file after generation * fix: sec field in exported lyric * enhance: make import/export pormpt different * chore: release v0.3.14 * i18n: update locale for 0.3.14 * build: enable export-lyric for win build [ci skip] * chore(dep): bump dependencies * chore: disable unused warn * fix: build with export-lyric/import-lyric disabled * feat: export-lyric * refactor: dedup import-*-lyric * enhance: dedup import-lyric * build(deps): bump the serde group with 2 updates (#252) * build(deps): bump opencc-rust from 1.1.18 to 1.1.19 (#253) * build(deps): bump gettext-rs from 0.7.0 to 0.7.1 (#254) * build(deps): bump reqwest from 0.12.5 to 0.12.7 (#255) * build(deps): bump rust_decimal from 1.35.0 to 1.36.0 (#256) * build(deps): bump orhun/git-cliff-action from 3 to 4 (#257) * fix: build with `opencc` disabled * refactor: unify naming of same component in different mod * refactor: prefer lazy-binding rather than multiple `cfg` flag * docs(readme): fix broken link for DeaDBeeF plugin [ci skip] * build(deps): bump tokio from 1.39.1 to 1.39.2 (#248) * build(deps): bump serde_json from 1.0.120 to 1.0.121 in the serde group (#247) * docs: mark issue/workaround for Better Comments * fix: support new type of HWND inner * docs(readme): intro DeaDBeeF close #245 * fix: migrate to window-rs 0.58 * build(deps): bump openssl from 0.10.64 to 0.10.66 (#246) * refactor: migrate to new-style clone! * refactor: migrate to gtk4-rs clone! new style * chore: bump dependencies * build(deps): bump serde_json from 1.0.118 to 1.0.119 in the serde group (#244) ++++ werf: - Update to version 2.47.0: * Features - build, stapel: add a possibility to import from external images (import.from) (#7020) (b109e98) - build, stapel: unify from and fromImage directives (#7028) (9aa5ca0) - deploy: display logs only from 1 replica by default (configured with annotation werf.io/show-logs-only-for-number-of-replicas) (36a29fa) - deploy: greatly decrease Kubernetes apiserver load (e56ceed) * Bug Fixes - host-cleanup: clean up context archives (b65a557) - include context.Cause in error handling (#7022) (1ba2129) - Update to version 2.46.0: * Features - deploy: add werf.io/log-regex-skip annotation (aa327f3) * Bug Fixes - build: fix error when syncing submodules in worktree pool (#7023) (062e0e5) ++++ xtables-addons: - Update to release 3.29 * Support for Linux 6.17 ++++ zswap-cli: - update to 1.1.0: * Add swap space check to the --stats handler * Implement hiding of unsupported by current kernel options from the --stats output * Add support of new kernel module variables * Add shell completion support * Document all configuration options in the default configuration file * Fix incorrect estimation of total RAM size on various architectures * Fix incorrect estimation of total swap size on various architectures ------------------------------------------------------------------ ------------------ 2025-8-19 - Aug 19 2025 ------------------- ------------------------------------------------------------------ ++++ CorsixTH: - Update to version 0.69.1: * Bug Fixes - Fixed a crash when placing staff in a room while a patient is being treated. ++++ agama: - Fix software configuration cache (bsc#1247933). ++++ aide: - Update to 0.19.2 (2025-08-13): * Security bug fixes - CVE-2025-54389: Escape control characters in report and log output (bsc#1247884) - CVE-2025-54409: Fix null pointer dereference after reading incorrectly encoded xattr attributes from database (bsc#1247885) ++++ apko: - Update to version 0.30.5: * build(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 (#1817) * ci - make verify workflow use golang 1.24 for compat with golangci-lint (#1820) * Updates and fixes to writing of apk/db/installed (#1811) * build(deps): bump github/codeql-action from 3.29.8 to 3.29.9 (#1812) * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1809) * build(deps): bump chainguard-dev/actions from 1.4.8 to 1.4.9 (#1808) - Update to version 0.30.4: * Revert "fix: include root-level files in the installed apk database. (#1807) - Update to version 0.30.3: * build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 (#1798) * build(deps): bump google.golang.org/api from 0.245.0 to 0.246.0 (#1799) * build(deps): bump go.step.sm/crypto from 0.67.0 to 0.69.0 (#1800) * build(deps): bump github/codeql-action from 3.29.7 to 3.29.8 (#1803) * build(deps): bump sigs.k8s.io/release-utils from 0.12.0 to 0.12.1 (#1804) * fix: include root-level files in the installed apk database. (#1801) * build(deps): bump chainguard-dev/actions from 1.4.7 to 1.4.8 (#1796) * build(deps): bump google.golang.org/api from 0.243.0 to 0.245.0 (#1797) ++++ arkade: - Update to version 0.11.41: * Add opencode - thanks Cursor for the assistance ++++ bcc: - tools/filetop: fix script failing after kernel 6.14 update (bsc#1240644) * Add 0001-tools-filetop-fix-DNAME_INLINE_LEN-by-folding-to-int.patch ++++ nextcloud-desktop: - Update to 3.17.1: * fix(cfapi): set up connections before requesting hydration (gh#nextcloud/desktop#8583) * fix(cfapi): only log process info if it's present (gh#nextcloud/desktop#8586) * fix(i18n): Fix grammar (gh#nextcloud/desktop#8593) * Updated NextcloudFileProviderKit (gh#nextcloud/desktop#8601) * feat: set LocalizedResourceName for sync folders. (gh#nextcloud/desktop#8613) ++++ chromium: - Chromium 139.0.7258.138 (boo#1248315): * CVE-2025-9132: Out of bounds write in V8 ++++ csound: - add csound-opadr.patch (fixes Factory/TW/Slowroll builds) ++++ d2: - Update to Version 0.7.1: * Output txt for d2 to render diagrams as ASCII art #2572 * cross arrowhead shape is available #2190 * style.underline support for class fields and methods #2544 * markdown, latex, and code can be used as edge labels #2545 * border-x label positioning functionality #2549 * tooltips with near set always show even without hover #2564 * CLI supports customizing monospace fonts with --font-mono, - -font-mono-bold, --font-mono-italic, and --font-mono-semibold flags #2590 * labels on scenario/step boards can be set with primary value (like layers) #2579 * autoformatter preserves order of boards #2580 * rename "Legend" with a title/label of your choosing (especially useful for non-English diagrams) #2582 * sketch mode fonts will use custom fonts if provided #2582 * actors in sequence diagrams with labels and icons together no longer overlap, position keywords now work too #2548 * fix double glob behavior in scenarios (wasn't propagating correctly) #2557 * fix diagram bounding box not accounting for legend in some cases #2584 * Breaking Changes: If you are using D2 as a library/API, passing in a FontFamily with sketch renders will now use the font, instead of previously ignoring it. ++++ dpdk: - Update to version 24.11.3 * LTS release update contains ~180 fixes from main branch up to DPDK 25.07 * remove patch 0001-dts-generate-random-capture_name-per-call.patch - Remove obsolete build option -Denable_kmods (upstream a52d472c5) - dpdk-tools requires "which" and is noarch ++++ drbd-utils: - drbd_passive didn't start due to drbd.rules returning error (bsc#1247534) * update patch - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch ++++ python-fasttext: - Convert to libalternatives on SLE-16-based and newer systems ++++ flake-pilot: - Pass --init option for resume type flakes In resume mode a sleep command is used to keep the container open. However, without the --init option there is no signal handling available. This commit fixes it - Revert "kill prior remove when using %remove flag" This reverts commit 06c7d4aa71f74865dfecba399fd08cc2fde2e1f2. no hard killing needed with the event loop entrypoint - Fixed CVE-2025-55159 slab: incorrect bounds check Update to slab 0.4.11 to fix the mentioned CVE. This Fixes bsc#1248004 - Apply clippy fixes - Create sequence number for the same invocation If a flake which is not a resume or attach flake is called twice with the same invocation arguments an error message is displayed to give this invocation a new name via the @NAME runtime option. This commit makes this more comfortable and automatically assigns a random sequence number for the call if no @NAME is given. ++++ focuswriter: - Update to 1.8.13: * FIXED: Crash when dragging justified text ++++ gerbera: - Update to 2.6.1 * FIXES - Configuration error when creating MySQL from scratch - Internal subtitles seem to be broken on older ffmpeg * NEW Features - Inotify support for script folders allows developing scripts without restarting the server * Code Improvements - Increased size of debug-mode config option to unsigned long long to avoid overflow. Includes new very long integer config option. - Support for loading scripts in tests is dropped in preperation of dropping the feature completely. * Changes - Gerbera 2.6.1 (#3565), thanks @KarlStraussberger - Catch exceptions from metadata handlers (#3563) - Remove test support for loading scripts (#3562) - Fix MySQL database upgrade from 23 to 24 (#3558) - Bump docker/build-push-action from 5 to 6 (#3561) - Bump peter-evans/dockerhub-description from 3 to 4 (#3560) - Bump DoozyX/clang-format-lint-action from 0.18 to 0.20 (#3559) - Update Actions (#3556) - Fix for MultiInsert statement (#3555) - Fix resource file pattern with braces (#3554) - Pull config dependencies (#3549) - Inotify for scripts: reload without server restart (#3548) - Bump tmp from 0.2.3 to 0.2.4 in /gerbera-web (#3547) - Fix MySql config load (#3545) - Bump master (#3544) ++++ git-delta: - Update vendored dependencies to fix build ++++ go-sendxmpp: - Update to 0.15.0: Added: * Add flag --verbose to show debug information. * Add flag --recipients to specify recipients by file. * Add flag --retry-connect to try after a waiting time if the connection fails. * Add flag --retry-connect-max to specify the amount of retry attempts. * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys. * Add support for punycode domains. Changed: * Update gopenpgp library to v3. * Improve error detection for MUC joins. * Don't try to connect to other SRV record targets if error contains 'auth-failure'. * Remove support for old SSDP version (via go-xmpp v0.2.15). * Http-upload: Stop checking other disco items after finding upload component. * Increase default TLS version to 1.3. - bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0 ++++ govc: - Update to version 0.52.0: * Fix - [5c16d3f] vcsim: Avoid panic in QueryAvailablePerfMetric if VM has no Datastore * API Changes - [2278e0e] Update folder.PlaceVMsXCluster to return available candidate networks - [28eeab9] fix comments and doc links - [7a3647c] fix action parameters - [8ee9995] update drafts bindings - [37dd0c8] bindings for esx/settings/clusters/cluster/configuration/drafts - [7074655] Placement policy WSDL names changed - [55501e2] add bindings for recent tasks and schema - [3230765] add bindings for esx/settings/cluster/configuration - [74eea10] add bindings for esx/settings/cluster/enablement/configuration/transition - [e61ad35] Update folder.PlaceVMsXCluster to filter clusters based on candidate networks availability - Add GoVmomi Bindings to CandidateNetworks - Made changes suggested by Shengjie - [8784335] Add "lsilogicsas" alias for "lsilogic-sas" in CreateSCSIController * govc (CLI) - [0b0e0cc] Add vmclass configSpec options * Documentation - [d0143b1] update CHANGELOG.md (#3839) (#3839) * Chore - [e53c30d] Update version.go for v0.52.0 ++++ grype: - Update to version 0.98.0: * chore(deps): update Syft to v1.31.0 (#2867) * chore(deps): bump github/codeql-action from 3.29.8 to 3.29.9 (#2865) * chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#2864) * feat(debian): move debian 13 (trixie) to released and debian 14 (forky) to testing/sid/unstable (#2861) ++++ grype-db: - Update to version 0.38.0: * Added Features - Add custom compressor commands to the config [#635 @wagoodman] - Update to version 0.37.0: * Added Features - Maximize compression for gzip [#632 @wagoodman] - Update to version 0.36.1: * Bug Fixes - update generated mapping code for trixie [#626 @anchore-actions-token-generator] - Update to version 0.36.0: * Added Features - move debian 13 (trixie) to released and debian 14 (forky) to testing/sid/unstable [#628 @westonsteimel] * Additional Changes - migrate golangci-lint to v2 [#614 @cpanato] - skip main repo workflows in forks [#618 @kzantow] * Dependencies - chore(deps): Bump actions/cache from 4.2.3 to 4.2.4 (#623) - chore(deps): Bump actions/cache in /.github/actions/bootstrap (#625) - chore(deps): update tools to latest versions (#620) - chore(deps): Bump github.com/anchore/grype from 0.97.0 to 0.97.1 (#621) - chore(deps): update tools to latest versions (#613) - chore(deps): Bump github.com/anchore/grype (#619) ++++ harbor-cli: - Update to version 0.0.9: * Fix: login `--name` flag to `context-name` (#520) * Update README.md (#529) * chnage robot account to supported * Typo solved (#522) * Add Support for System-Level Robot Accounts (#507) * build(deps): bump golang.org/x/text from 0.23.0 to 0.27.0 (#519) * build(deps): bump github.com/charmbracelet/bubbletea from 1.3.5 to 1.3.6 (#515) * build(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 (#514) * Increased the logs follow refresh interval to 5s as a default (#516) * Replication Start/Stop Management (#501) * Replication Policy Management with Configuration File Support (#510) * feat(logs): add audit logs command with follow support (#511) * build(deps): bump github.com/goharbor/go-client from 0.210.0 to 0.213.1 (#509) * Change the print statements in func preblock() (#513) * Replication Policy Management (#499) * enhancing artifact view command (#485) * Enhanced Robot Account Configuration Format (#504) ++++ helm: - Update to version 3.18.5: * fix Chart.yaml handling 7799b48 (Matt Farina) * Handle messy index files dd8502f (Matt Farina) * json schema fix cb8595b (Robert Sirchia) ++++ ibus-m17n: - Update to 1.4.36: * Generate translations into metainfo.xml files with autotools (Related: mike-fabian#2) * Rename m17n.appdata.xml to org.freedesktop.ibus.engine.m17n.metainfo.xml (Resolves: mike-fabian#2) * Fix match pattern for layout for inscript * Fix match pattern for rank for inscript2 * Translation update from Weblate (new: fi 100%, kab 100%) ++++ jdupes: - update to 1.29.0: * jdupes 1.29.0 (2025-08-15) * Switch to libjodycode 4.0 API * Add -Y/--hash-db-populate to force-populate a hash database * Strip leading dot-slashes from file lists and hash database entries * Builds now run a libjodycode version check ++++ kakasi: - Fix patch typedef-character.patch + need the Character typedef to be above actual usage ++++ kargo-cli: - Update to version 1.7.3: * no CLI-related changes ++++ kernel-default: - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (bsc#1248270). - commit c6ee58b - proc: fix missing pde_set_flags() for net proc files (bsc#1248156). - commit 1955117 ++++ kernel-source: - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (bsc#1248270). - commit c6ee58b - proc: fix missing pde_set_flags() for net proc files (bsc#1248156). - commit 1955117 ++++ kernel-docs: - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (bsc#1248270). - commit c6ee58b - proc: fix missing pde_set_flags() for net proc files (bsc#1248156). - commit 1955117 ++++ kernel-firmware-iwlwifi: - Update to version 20250818 (git commit 72a326cda491): * iwlwifi: add Bz/gl FW for core97-84 release * iwlwifi: update ty/So/Ma firmwares for core97-84 release * iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release ++++ kernel-kvmsmall: - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (bsc#1248270). - commit c6ee58b - proc: fix missing pde_set_flags() for net proc files (bsc#1248156). - commit 1955117 ++++ kernel-obs-build: - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (bsc#1248270). - commit c6ee58b - proc: fix missing pde_set_flags() for net proc files (bsc#1248156). - commit 1955117 ++++ kernel-obs-qa: - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (bsc#1248270). - commit c6ee58b - proc: fix missing pde_set_flags() for net proc files (bsc#1248156). - commit 1955117 ++++ kernel-syms: - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (bsc#1248270). - commit c6ee58b - proc: fix missing pde_set_flags() for net proc files (bsc#1248156). - commit 1955117 ++++ kernel-vanilla: - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (bsc#1248270). - commit c6ee58b - proc: fix missing pde_set_flags() for net proc files (bsc#1248156). - commit 1955117 ++++ kicad: - Update to 9.0.4: See https://www.kicad.org/blog/2025/08/KiCad-9.0.4-Release/ for details ++++ kicad-doc: - Update to 9.0.4: See https://www.kicad.org/blog/2025/08/KiCad-9.0.4-Release/ for details ++++ kicad-footprints: - Update to 9.0.4: See https://www.kicad.org/blog/2025/08/KiCad-9.0.4-Release/ for details ++++ kicad-packages3D: - Update to 9.0.4: See https://www.kicad.org/blog/2025/08/KiCad-9.0.4-Release/ for details ++++ kicad-symbols: - Update to 9.0.4: See https://www.kicad.org/blog/2025/08/KiCad-9.0.4-Release/ for details ++++ kicad-templates: - Update to 9.0.4: See https://www.kicad.org/blog/2025/08/KiCad-9.0.4-Release/ for details ++++ kompose: - Update to version 1.37.0: * 1.37.0 Release (#2040) * refactor: use slices.Equal to simplify code (#2036) * chore(deps)(deps): bump github.com/compose-spec/compose-go/v2 * chore(deps)(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.7 * chore(deps)(deps): bump github.com/go-viper/mapstructure/v2 * chore(deps)(deps): bump github.com/spf13/cast from 1.7.0 to 1.9.2 ++++ kubeshark-cli: - Update to version 52.8.1: * Bug Fixes & New Features - Fixed support for Cgroup V2 in cases where additional privileges are required. - Implemented a traffic processing timeout for periods of complete inactivity: - A new Helm value has been introduced to define the timeout duration when there is no dashboard streaming traffic, no active recordings, and no agents operating. - In such cases, Kubeshark will transition into a Dormant state until new activity is detected. - During the Dormant state, traffic processing is halted, and resource consumption is minimized. - This ensures Kubeshark consumes negligible system resources unless actively in use. ++++ kyverno: - Update to version 1.15.1: No CLI-related changes * Dependencies - chore: update go.mod to 1.24.6 (latest) (#13822) (#13823) ++++ labplot: - Update to 2.12.1 * Fix using default font for axis title * Fix build with system QXlsx * Fix build with system QADS 4.4 * Fix crash on import when no projects opened (kde#503800) * Save rotation of axis title separately for x and y axis * Fix disappearing axis ticks * Fix crash when creating the data spreadsheet for analysis curves (kde#504662) * Fix crash when aspect is added and all docks in content area are hidden (kde#504794, kde#502043) * Fix crash when column or row was added to spreadsheet from toolbar and no column or row was selected (kde#504839) * Fix issue when the statistics spreadsheet was not shown if the spreadsheet was a child of workbook * Fix issue which caused the context menu of an aspect to not be shown after being re-parented * Handle Windows logical font “MS Shell Dlg 2” * Fix crash when deleting a live-data source with missing source file * Parser: Remove not required function and reuse function instead of copying (kde#506925) * Fix the export of spreadsheets to SQLite, wrong format was selected internally in the export dialog * Fix the export to SQLite of text values in the spreadsheet containing single quotes * Fix FITS import and export issues * Don’t show any error messages and NaN values in the process behavior chart if no column or an empty column was selected * Remove unwanted entries on the undo stack that were created when modifying properties of the process behavior and run charts * Improve the quality of the fit model preview in the properties explorer and formula view in the random values dialog on hi-dpi screens * Initialize the parameters for the baseline subtraction with reasonable values on first startup and improve the appearance of the preview plot * Fix save/load of the background color for the center value label in the process behavior chart ++++ libguestfs: - Update to version 1.56.2 (jsc#PED-12706) * generator: Allow StringList(Pathname) parameters * generator: Implement StringList for OCaml functions * daemon: sysroot: Avoid copying the path every time we call sysroot () * daemon: sysroot: Avoid double-/ when creating sysroot paths in OCaml * docs: Fix dead ntfs-3g doc links * appliance/init: Add lsblk and blkid output to verbose log * daemon: Add contents of /etc/fstab to verbose log * lib: libvirt: Sleep before retrying virDomainDestroyFlags * lib: libvirt: Debug error from virDomainDestroyFlags * appliance: Ignore sit0 network device in the guest ++++ libjodycode: - update to 4.0: * Add loads of new jc_* functions and constants * Add jc_errno to replace errno * Completely remove API feature tables * Fixes for building on macOS and Hurd * Add rolling hash capability to jc_block_hash() * Add jc_get_d_namlen() to enable strlen() skips for directory objects * Add file linking functions with batch processing (incomplete, do not use yet) * Time functions now have nanosecond precision on Windows * Add jc_str_t data type (string prefixed with its own length) * Add jc_close() stub function * jc_get_proc_cacheinfo() is a stub function on non-Linux for future use ++++ profanity: - Remove the URL part from the patches. For some reason GH seems to change the patches even though we used them from commits on master, resulting in OBS to decline the submission due to the differences ++++ linkerd-cli-edge: - Update to version 25.8.3: No CLI-related changes in the changelog * Dependencies - build(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 (#14370) - build(deps): bump github.com/linkerd/linkerd2-proxy-api (#14371) - build(deps): bump tj-actions/changed-files (#14372) - build(deps): bump the kube group with 7 updates (#14369) - build(deps): bump rand_core from 0.9.0 to 0.9.3 (#14368) - build(deps): bump docker/login-action from 3.4.0 to 3.5.0 (#14373) - build(deps): bump indexmap from 2.2.6 to 2.10.0 (#14367) - build(deps): bump syn from 2.0.104 to 2.0.105 (#14366) - chore(deps): Update tonic deps to 0.13 (#14365) - build(deps): bump tj-actions/changed-files (#14363) - build(deps): bump the clap group with 2 updates (#14361) - build(deps): bump anyhow from 1.0.98 to 1.0.99 (#14357) - build(deps): bump the clap group with 2 updates (#14356) - build(deps): bump glob from 0.3.2 to 0.3.3 (#14352) - build(deps): bump libc from 0.2.174 to 0.2.175 (#14355) - build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#14353) - build(deps): bump golang.org/x/tools from 0.35.0 to 0.36.0 (#14336) - build(deps): bump google-github-actions/setup-gcloud (#14344) - build(deps): bump slab from 0.4.10 to 0.4.11 (#14341) - build(deps): bump proc-macro2 from 1.0.95 to 1.0.96 (#14342) - build(deps): bump rustversion from 1.0.21 to 1.0.22 (#14340) - build(deps): bump cc from 1.2.31 to 1.2.32 (#14343) - build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 (#14337) - build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 (#14335) ++++ mcomix: - replace Requires: /usr/bin/chardetect with %{pythons}-chardet * let chardetect use the same python version as mcomix ++++ melange: - Update to version 0.30.6: * Remove 'melange convert' (#2117) ++++ nelm: - Update to version 1.12.2: * Bug Fixes - release namespace deletes after stopping being part of a release (2bba22b) - Update to version 1.12.1: * Bug Fixes - error "werf.io/show-logs-only-for-containers", expected integer value (209bd1c) - Update to version 1.12.0: * Features - display logs only from 1 replica by default (configured with annotation werf.io/show-logs-only-for-number-of-replicas) (47072bf) - Update to version 1.11.0: * Features - greatly decrease Kubernetes apiserver load (7afe7ad) * Bug Fixes - panic "rules file not valid" (075b8e0) - panic "validate rules file" (6bb4e3b) ++++ nemo-extensions: - Drop build requirement mhash-devel, no longer needed. ++++ nodejs-electron: - New upstream release 35.7.5 * Fixed an issue where shell.openPath was not non-blocking as expected. - Leap 16: compile v8 code with x86-64-v2 instructions since the system requires them * v8-assume-x86-64-v2-support.patch ++++ nova: - Update to version 3.11.8: * INS-1304: fix CVE-2025-47907 (#389) ++++ openQA: - Update to version 5.1755616303.131c0f0a: * Add space in concatenation of args and string for the fall back note - Update to version 5.1755609067.e3c951fe: * Stash gru_dependencies to avoid helper usage in view * Move infopanel gru task link creation to the controller * Create test for GRU task in test details * Link minion job from openQA job with waiting task ++++ opensuse-welcome-launcher: - Change autostart to always launch, but internally decide if we already showed the greeter. This allows us to bump the version for next Leap versions and have the welcome screen show at least once every while. ++++ osv-scanner: - Update to version 2.2.1: * Fixes - Bug #2151 Filter by ecosystem before querying. ++++ pam: - Make sure that the buffer containing encrypted passwords get's erased, before free. [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234, CVE-2024-10041] ++++ pam-full-src: - Make sure that the buffer containing encrypted passwords get's erased, before free. [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234, CVE-2024-10041] ++++ patterns-base: - No longer recommend initviocons: this is long deprecated. ++++ pluto: - Update to version 5.22.5: * Fix typo (#579) - Update to version 5.22.4: * INS-1302: fix CVE-2025-47907 (#578) ++++ podman: - Remove patch: * 0001-remove-appending-rw-as-the-default-mount-option.patch (merged upstream) - Update to version 5.6.0: * Bump to v5.6.0 * Update release notes for v5.6.0 final release * [v5.6] Bump Buildah to v1.41.3 * [v5.6] Reverse skipped test for 26773 * Add a deprecation notice for users of BoltDB * Bump Podman to v5.6.0-dev * Bump to v5.6.0-rc2 * Update release notes for v5.6.0-RC2 * feat: add Podman artifact support to Go bindings and remote clients * compat: remove deprecated VirtualSize * compat: add shared-size par to GET /images/json * compat: RepoTags and RepoDigest return [] and not null * compat: remove GET /system/df BuilderSize * compat: GET /_ping return Builder-Version: 1 * [v5.6] Bump Buildah to v1.41.1 * [v5.6] Skip failing Buildah v1.41.1 test * Remove Experimental from Artifacts man pages * [v5.6] Bump c/storage to v1.59.1, c/image 5.36.1, and * Bump Podman to v5.6.0-dev * Bump to v5.6.0-rc1 * Add release notes for Podman v5.6.0-rc1 * Temp fix for #26680 * Update "podman diff container and image with same name" e2e test * API server: drop inherit-labels/annotations for compat builds * buildah-bud tests: handle "-t oci:" and such, skip a new --output * API handler: don't force the SkipUnusedStages flag * API handler: don't force the CompatVolumes flag * API handler: don't force the IdentityLabel flag * Update compat-volumes setting for remotes * Update inherit-labels setting for remotes * pkg/emulation.parseBinfmtMisc(): accept empty "flags" fields * build endpoint: document the "timestamp" flag * remote build: relay more new flags introduced in buildah 1.41 * Feat: send additional build contexts for remote builds * Add Buildah build's passwd test helper * Add CLI updates for inherit and unset annotations * Add missing manpages options for Buildah v1.41.0 * Bump to Buildah v1.41.0 * fix(deps): update module github.com/onsi/gomega to v1.38.0 * test/system: add quadlet drop-in regression test for subdirs * Quadlet - fix dropin overwrites if different parent dirs * chore(deps): update dependency golangci/golangci-lint to v2.3.0 * added updated state in podman-auto-update.1.md.in * Initial implementation of `podman quadlet` commands * fix(deps): update module github.com/containers/common to v0.64.0 * docs: add description about our code structure * fix(deps): update common, image, and storage deps * podman rm: handle case where conmon was killed * podman inspect: fix error difference between local and remote * Update module github.com/containers/storage to v1.59.0 * Update module github.com/opencontainers/cgroups to v0.0.4 * Fix test that checks for podman exec leaks * Update common, image, and storage deps * volume export: refuse to write to terminal (TTY) * podman auto-update: include container in invalid policy message * Update module github.com/go-viper/mapstructure/v2 to v2.3.0 [SECURITY] * chore(deps): update dependency golangci/golangci-lint to v2.2.2 * Maintainers: add Nicola Sella as Reviewer * Maintainers: add Jan Kaluza as Reviewer * Maintainers: add Lewis Roy as Reviewer * fix(deps): update module golang.org/x/net to v0.42.0 * fix(deps): update module golang.org/x/crypto to v0.40.0 * test/e2e: podman update make env check stricter * pkg/bindings/containers: do not ignore ErrUnexpectedEOF * pkg/bindings/containers: do not create sub slice * pkg/bindings/containers: don't check for short read * Quadlet - add support for the Policy key for .image files * Clarifies error message when using an improperly formatted secret with kube * Fix seccomp profile path on Windows * fix(deps): update module golang.org/x/term to v0.33.0 * docs: replace fuse-overlayfs example with additionalimagestore * hack/podman_cleanup_tracer.bt: check map before deleting keys * hack/podman_cleanup_tracer.bt: clamp str size for strcontains() * hack/podman_cleanup_tracer.bt: use new max str lenth * libpod/build: add headers * Update the journalctl function to ignore No entry message * fix(deps): update common, image, and storage deps * [Artifacts] Remove erroneous ArtifactListOptions var ImagePushOptions * [Artifacts] Add note about ArtifactInspectOptions Remote var * Quadlet - print warning when fail to parse * manpages: adds example for podman system renumber * Add basic locking to Libartifact * Fix documentation around checkpoints * cirrus: setup WSL logging * fix(deps): update github.com/containers/image/v5 digest to 3532547 * Fix `podman inspect` to correctly handle log_size_max * warn instead of error, lift logic to main.go * Enforce wsl.exe UTF-8 encoded output * WSL commands execution refactoring * Clarify meaning of --syslog * Quadlet - Error when units define User, Group, or DynamicUser in Service group * fix(deps): update common, image, and storage deps * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.6 * Makefile: add Makefile to sources * rpm: add grpcnotrace build tag * Makefile: add grpcnotrace build tag * Add conditional release-checking system test * api: Don't HTML escape application/json responses * update CI images 2025-06-27 * chore(deps): update dependency golangci/golangci-lint to v2.2.1 * vendor: update c/{common,image,storage} to main * fix new lint errors from the docker update * Quadlet - Do not override existing Environment in Service group for Pod units * vendor: update docker to v28.3.0 * pkg/domain/infra/tunnel: ignore error from removeContainer() * libpod: remove deadcode * remove test/framework/framework.go * pkg/util: remove deadcode * remove pkg/util/camelcase * pkg/rootless: remove deadcode * pkg/parallel: remove deadcode * pkg/namespaces: remove deadcode * pkg/machine: remove deadcode * pkg/libartifact: remove deadcode * pkg/fileserver: remove deadcode * pkg/farm: remove deadcode * pkg/errorhandling: remove deadcode * podman images --sort use ChoiceValue flag * pkg/domain: remove deadcode * pkg/bindings: remove deadcode * pkg/api: remove deadcode * remove unused ShouldRestart() code * cmd/podman: remove deadcode * podman images --sort autocomplete options * Update Neil Smith's GitHub username in MAINTAINERS.md * machine: enable nested virt on libkrun by default * pkg/machine/e2e: add CVE-2025-6032 regression test * test/e2e: fix podman run check dns flake * Bump bundled krunkit from 0.2.1 to 0.2.2 * Secret create - add ignore option to allow noop * cmd/podman: add --latest option to update #26380 * docs: document when a volume is chowned * Refactor `volume import` to support the remote client * update image_fix -> automation_images#407 skip test duo to rawhide know issues * Podman pull - add policy flag * Pod YAML: Add support for `lifecycle.stopSignal` * machine init: fix tls check * update podman-machine-start with examples for --no-info and --quiet * test/e2e: fix "with unsafe hostPath subpaths" test * quadlet: remove indirect logrus import * docs: add three examples to podman-generate-spec man page * fix panic on state refresh * pkg/systemd: expose [Pod] ExitPolicy key for pod create --exit-policy * volumes: add new --uid and --gid option * docs: add an example to podman-secret-rm man page * chore(deps): update dependency pytest to v8.4.1 * [CI:DOCS] Tweak Governace slightly * remove .github/workflows/pr-title.yml * remove hack/install_catatonit.sh * Makefile: remove some old files from clean target * remove cni/ * remove pkg/timetype * remove contrib/modules-load.d * remove contrib/snapcraft * remove contrib/script/size.sh * remove contrib/remote/containers.conf * remove contrib/dependabot-dance * remove contrib/dependencies.txt * remove contrib/containers-common * Removed the 'Deleted: ' prefix from each example * add more exmples applying current style for each page * docs: add an example to podman-network-rm man page * [CI] Correct ST1005 staticcheck lint rule * docs: add examples to podman-system-migrate man page * Refactor `podman export` to work with the remote client * artifact mount: add new name option to specify filename * Fixes: #26374 add example network connect with mac address * artifact mount: improve single blob behavior * docs: remove bogus markdown heading in podman-ps * Update podman system prune doc * fix 26348: add container diff --latest doc * Add missing --pod examples to podman ps manpage * Move 'Examples' section down in the podman-volume-create man page * fix(ci): add ST1005 linter rule * Add examples of `--all` flag * Manpages: podman machine init add example with --now * Update docs/source/markdown/podman-secret-inspect.1.md * Improve documentation for podman-secret-inspect, closes #26362 * Add Craig Loewen to Reviewer role * man pages: Add an example about --no-prune * Manpages: add podman exec missing example of detach option * fix(cmd): improve ValidURL reliability * Bunch of trivial manpage fixes * libpod: log file doesn't need to be executable * libpod: do not dereference nil pointer * libpod: fix file descriptor leak * podman-update: fix EXAMPLES * test: check podman update errors on non-block devices * pkg/specgen: error out when a block device isn't * pkg/specgen: refactor FinishThrottleDevices, WeightDevices * quadlet: handle generate environment params that inherit from host * fix(deps): update module go.etcd.io/bbolt to v1.4.1 * make validate-in-container changes * Clarified the consequences of --network=host * podman machine: pull wsl image from machine-os * remove hack/libdm_tag.sh * rpm: build rpm with libsqlite3 tag * Makefile: use libsqlite3 build when possible * Remove bin/podman.cross Make target * Allow generate-bindings on darwin * Update module github.com/go-swagger/go-swagger to v0.32.3 * docs: replace RemapUsers=keep-id with UserNS=keep-id * tmpfs: Add support for noatime mount option * fix(deps): update module golang.org/x/net to v0.41.0 * pkg/machine: remove unsused net recover file * Revert "podman machine: fix proxy test" * pkg/machine: remove old fw_cfg service * podman machine: fix proxy test * pkg/machine/e2e: skip rosetta test * RPM: Limit Epoch 102 to podman-next copr * quadlet: generate RequiresMountsFor for Type=bind volumes * Make podman.io update action reusable * Skip layer digests for podman system check --quick * test/buildah-bud: skip new build-with-two-outputs on remote * test/buildah-bud: update buildah-tests.diff * Build the `dumpspec` test helper for the `buildah bud` tests * vendor: update buildah to latest main * vendor: update c/{common,image,storage} to latest main * vendor: update github.com/docker/docker to v28.2.2 * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.10.2 * quadlet: add InterfaceName option to network unit * fix wsl install workflow on machine init command * feat: Add OCI Artifact support to the Podman REST API * build: reuse parse.ContainerIgnoreFile from buildah * podman buildx inspect support * chore(deps): update dependency pytest to v8.4.0 * test/system: check --dns-option behavior * podman system check: Fix error check logic * libpod: don't force only network search domains * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.5 * update c/common to latest main * play kube: never add empty alias * fix(deps): update github.com/opencontainers/runtime-tools digest to 0ea5ed0 * Don't BuildRequires: ostree-devel * Allow not specifying type with --mount flag * Add "dest" as an alias for "destination" in `--mount` * docs: quadlet can translate names now * e2e: ref full URL for aarch64 criu precheckpoint issues * specgen/generate: Fix log tag priority * e2e: skip pre-checkpoint tests on aarch64 * Handle "Entrypoint":[] in compat containers/create API. * system df --verbose don't crash * Fix SQLite volume lookup queries matching too liberally * vendor: update c/{buildah,common,image,storage} to main * Recreate the Rootfs in mountStorage for infra-container. * test: fix race conditions in /dev/kmsg tests * Fix overlay volumes on Windows * chore(deps): update dependency setuptools to ~=80.9.0 * libpod: Don't exclude running deps from the container graph inputs * compat API: respect base_hosts_file containers.conf option * Trigger podman.io version bump from release action * Packit: remove propose-downstream for centos stream * Packit: use fedora-all alias for tests * Disable the tests for rootless pods * Support --cpuset- in podman kube play * pkg/machine: don't use dummy linger service * pkg/machine: correctly enable lingering * Update expected output for a machine copy test * Replace alpine_nginx with TESTIMAGE in e2e tests * Support '$FOCUS' env variable on winmake too * pre-commit: exclude rpm/gating.yaml from check-yaml * lint: Fix linter issues on TMT files * Update release notes on main * fix CONTRIBUTING to say reference issue number 'or' url * compat: fix Container State.Status JSON values * chore(deps): update dependency setuptools to ~=80.8.0 * libpod: fix mount order for "/" volume * Update RELEASE_PROCESS.md * github: remove fcos next image workflow * [skip-ci] Packit: set fedora-all after F40 EOL * test/e2e: do not check dns.podman * compat: Add DefaultAddressPools field to GET /info * Be explicit about ssh configs suitable only for localhost * compat: Add CgroupnsMode to POST /containers/create * Update dependency setuptools to ~=80.7.1 * docs: drop --pre-checkpoint requirement * podman: remember hooks-dir on restarts * GHA Release: Fix windows installer uploads * Revert "GHA: Pin Go to 1.24.2" * fix macos compile issue with go 1.24.3 * Packit: disable OpenScanHub scans * GHA: Pin Go to 1.24.2 * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.10.1 * fix issues found by nilness * Bump bundled krunkit to 0.2.1 * chore(deps): update dependency setuptools to ~=80.4.0 * chore(deps): update dependency docker to v7 * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.5 * fix(deps): update module github.com/crc-org/vfkit to v0.6.1 * fix(deps): update module github.com/containernetworking/plugins to v1.7.1 * Fix: Use SIGKILL instead of SIGTERM when ExecStopContainer timeout is 0 * Fix: Ensure HealthCheck exec session terminates on timeout * [skip-ci] Tighten version match * Quadlet - Update the docs to reflect the default naming of resources * Revert "Quadlet - fix pod name to depend on the name of the generate service" * Fix a shellcheck warning about word splitting * fix(deps): update module github.com/vishvananda/netlink to v1.3.1 * Fix parsing of paths for unmask * Take path for wsl instead of forcing through WindowsApps * fix(deps): update module golang.org/x/net to v0.40.0 * Update win-installer github job for arm64 * Build windows arm64 artifacts * Fix windows arm64 installer build * README.md: add openssf passing badge * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.6 * Update podman-secret-create.1.md * Quadlet - fix pod name to depend on the name of the generate service * fix(deps): update module golang.org/x/crypto to v0.38.0 * Verify the ExecSession pid before killing it. * fix(deps): update module golang.org/x/term to v0.32.0 * fix(deps): update github.com/vishvananda/netlink digest to 9d88d83 * fix(deps): update module golang.org/x/sys to v0.33.0 * fix(deps): update module golang.org/x/sync to v0.14.0 * docs: fix markdown format * chore(deps): update dependency golangci/golangci-lint to v2.1.6 * chore(deps): update dependency setuptools to ~=80.2.0 * Automatically bump to -dev after tag * Update winmake.ps1 to build arm64 artifacts * [skip-ci] TMT: system tests * pkg/machinie: use TZ env for reading local timezone * pkg/machine: rework getLocalTimeZone on linux * pkg/machine: properly setup zoneinfo symlink * pkg/machine: do not add broken localtime symlink * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.10.0 * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.4 * fix(deps): update github.com/hugelgupf/p9 digest to abc96d2 * chore(deps): update dependency setuptools to ~=80.1.0 * pkg/signal: ignore SIGTOP for signal proxy * pkg/signal: rework CatchAll() behavior * sigproxy: ignore if container already removed * ci: Load null_blk for I/O limit tests * test/e2e: Use nullb0 for IO limit tests * test/system: Use correct device for I/O limit tests * inspect: Ignore character devices for IO limits * Do not error on tz detection * Stop setting btrfs_noversion build tag * Remove providers checks from the Windows Installer * Quadlet - remove the usage of cid and podid for container and pod files * Fix running machines with volumes containing spaces * Makefile: move some Go-related variable definitions up * Handle signal preventing Start from completing * Build documentation in a container on Win arm64 * Fix mach os pr release action * bump main to 5.6-dev * pkg/bindings: wrap image push decode error * pkg/bindings: fix infinite loop/memory leak in image pull * Update "check.c" to be C23 compliant * feat: Add support for configuring swap in Podman machine * fix(deps): update module github.com/opencontainers/cgroups to v0.0.2 * Quadlet - use helper function to initialize service struct * Fix logging podman machine server9 output * OWNERS: Fix Github handle * Fix handling of "r_limits" in Podman REST API /libpod/containers/create * chore(deps): update dependency setuptools to v80 * bug: Correct Docker compat REST API image delete endpoint * update podman socket output to include also exposed ports * Disable FS mount in volume only test * Added tests for inheritlabel fix * Fix: inheritlabels=true if query param absent * Add Mohan Boddu as community manager * chore(deps): update dependency golangci/golangci-lint to v2.1.5 * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.7 * Quadlet - use helper function for handling key=val type keys * Add Label to quadlet pod * podman start: remove container if needed * remote: don't print bogus error when starting container attached * [skip-ci] Packit: do not merge PR in CI * [skip-ci] Packit: re-enable fedora-41 targets * hack/bats: Pass --tap (-t) option to bats * hack/bats: Fix to allow multiple tests * Fix: Remove appending rw as the default mount option * hack/bats: Allow specifying PODMAN_ROOTLESS_USER * libpod: fix a confusing error message from 'podman system reset' on FreeBSD ++++ polaris: - Update to version 10.1.1: * INS-1303: fix CVE-2025-47907 (#1141) * Revert "INS-1303: fix CVE-2025-47907" * INS-1303: fix CVE-2025-47907 ++++ postfix: - update to 3.10.4 * Fixes for postscreen(8): - Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. - Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. * Fixes for tlsproxy(8): - Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). - Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. * Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. * Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. ++++ postfix-bdb: - update to 3.10.4 * Fixes for postscreen(8): - Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. - Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. * Fixes for tlsproxy(8): - Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). - Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. * Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. * Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. ++++ profanity-mini: - Remove the URL part from the patches. For some reason GH seems to change the patches even though we used them from commits on master, resulting in OBS to decline the submission due to the differences ++++ python-falcon: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-flake8: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-Faker: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-FontTools: - Update to 4.59.1 * [varLib] Lets not add mac names if the rest of name doesn't have them * [cffLib.specializer] Add cmdline to specialize a CFF2 font * [varLib.interpolatable] Support CFF2 fonts * Python 3.13 support * [TupleVariation] Optimize for loading speed, not size * [varStore] Sort the input todo list with the same sorting key used for the opimizer's output * [ttLib.__main__] Improvements around the -t flag * [varLib.hvar] New module to add HVAR table to the font * Drop Python 3.8, require 3.9+ * [HVAR, VVAR] Prune unused regions when using a direct mapping * [GVAR] Add support for new GVAR table * [feaLib] Remove duplicates from class pair pos classes instead of raising an error * [voltLib] Add some missing functionality and fixes to voltLib and VoltToFea * Removed hard-dependency on pyfilesystem2 (fs package) from fonttools[ufo] extra. This is replaced by the fontTools.misc.filesystem package, a stdlib-only, drop-in replacement for the subset of the pyfilesystem2's API used by fontTools.ufoLib * [xmlWriter] Replace illegal XML characters (e.g. control or non-characters) with "?" when dumping to ttx * More changes, see upstream changelog - Convert to libalternatives on SLE-16-based and newer systems ++++ python-coverage: - Add _multibuild for running tests, it's required to call "coverage" command when using libalternatives. ++++ python-dill: - Still use update-alternatives on SLE-15 ++++ python-fastapi: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-flit: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-numba: - Update to 0.61.2 * Support for NumPy 2.2 * Fix static type checker support for numba.core.types - Drop merged numpy22.patch - Add upstream patches adding compatibility with numpy 2.3: * np-tobytes.patch * np-frombuffer.patch * numpy23.patch ++++ python-poetry: - Update to 2.1.4 * Improve performance of locking dependencies * Fix many issues with markers * Fix an issue where re-locking failed for incomplete multiple-constraints dependencies with explicit sources * Fix an issue where the --directory option did not work if a plugin, which accesses the poetry instance during its activation, was installed * Fix an issue where poetry env activate -v printed additional information to stdout instead of stderr so that the output could not be used as designed * Improve the error messages for the validation of the pyproject.toml file * Fix an issue where project plugins were installed even though poetry install was called with --no-plugins ++++ python-poetry-core: - Update to 2.1.3 * Improve performance of marker operations * Fix various issues with markers * Update list of supported licenses * Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section * Fix an issue where local versions with upper case letters caused an error * Fix an issue where inheriting from WheelBuilder was unnecessarily difficult ++++ python-pyftpdlib: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pythran: - Drop np-frombuffer.patch and np-fromstring.patch and substitute them with np.patch, which is a PR which contains both of them and also other fixes, unskip the previously skipped test ++++ python-typer: - Update to 0.16.1 * Avoid printing additional output with no_args_is_help=True and Click 8.2. ++++ python-typer-slim: - Update to 0.16.1 * Avoid printing additional output with no_args_is_help=True and Click 8.2. - Drop patch handle-excess-whitespace-not-exists.patch. * This patch is no longer needed, as the issue it fixed has been resolved upstream. ++++ rpcs3: - Update to version 0.0.37~git20250817: * Fixes for AppImage not targeting Gamemode (#17398) * SPULLVMRecompiler: add overload for _ptr * SPULLVMRecompiler: remove unused parameters from spu_ptr and _ptr * llvm: use CreatePtrAdd * Update FAudio to 25.08 * Remove alternative default device detection in Cubeb backend * Fix description of system wolfSSL option * Add option to use system Vulkan Memory Allocator * Add option to use system hidapi * Add option to use system zstd * Add option to use system glslang * Add option to use system RtMidi * Add option to use system MiniUPnPc * Set USE_SYSTEM_OPENAL default to OFF on macOS and Windows * Fix USE_SYSTEM_OPENAL to use system headers * Update wolfssl to 5.8.2 ++++ rubygem-activerecord-8.0: - Add CVE-2025-55193.patch (bsc#1248106) IDs passed to `find` or similar methods may be logged without escaping ++++ rubygem-nokogiri: - 1.18.9: see included CHANGELOG.md ++++ sequoia-sq: - Update vendored dependencies due to security issues ++++ spek: - add spek-autotools.patch (GH PR #333, fixes x86_64 build) - remove update-desktop-files ++++ stalld: - Add run-dir.patch: * let the systemd unit file create /run/stalld with the proper permissions ++++ supertuxkart: - Add supertuxkart-cmake4.patch: Fix build using cmake 4. ++++ syft: - Update to version 1.31.0: * Added Features - Option to set PackageSupplier in root of SPDX document generated by CLI [#3098 #4131 @spiffcs] * Bug Fixes - closed reader during java binary detection [#4129 @kzantow] - support multiple letters in openssl patch version [#4106 @honigbot] - Can not have license ID [#1964 #4132 @spiffcs] - Syft sometimes reports URL for license value when scanning JARs with a URL in Bundle-License field of manifest [#3186] * Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.1.1 to 0.1.2 (#4135) - chore(deps): bump github/codeql-action from 3.29.8 to 3.29.9 (#4134) - chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#4130) - chore(deps): update CPE dictionary index (#4126) ++++ telegraf: - Update to version 1.35.4: * Telegraf v1.35.4 * Update changelog for v1.35.4 * Update build_version.txt for v1.35.4 * chore(deps): Fix collectd dependency not resolving (#17448) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.45.3 to 1.48.0 (#17461) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.231.0 to 1.242.0 (#17470) * chore(deps): Bump google.golang.org/protobuf from 1.36.6 to 1.36.7 (#17465) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.37.0 to 1.38.0 (#17469) * chore(deps): Bump actions/checkout from 4 to 5 (#17454) * chore(deps): Bump google.golang.org/api from 0.244.0 to 0.246.0 (#17459) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.55.0 to 1.56.0 (#17473) * chore(deps): Bump go.step.sm/crypto from 0.68.0 to 0.69.0 (#17462) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.33.0 to 1.34.0 (#17464) * chore(deps): Bump github.com/docker/go-connections from 0.5.0 to 0.6.0 (#17463) * chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.10.1 to 1.11.0 (#17455) * chore(deps): Bump github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1 (#17456) * chore(deps): Bump github.com/clarify/clarify-go from 0.4.0 to 0.4.1 (#17457) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.30.1 to 1.31.0 (#17458) * chore(deps): Bump golang.org/x/crypto from 0.40.0 to 0.41.0 (#17460) * fix(inputs.redfish): Log correct address on HTTP error (#17445) * fix(agent): Update help message for CLI flag --test (#17451) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.54.0 to 1.55.0 (#17440) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.18.1 to 1.18.3 (#17436) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/sts from 1.35.0 to 1.36.0 (#17432) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.44.0 to 1.46.0 (#17431) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.0 to 1.18.2 (#17434) * chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.1 to 1.18.2 (#17428) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.32.0 to 1.33.0 (#17421) * chore(deps): Bump github.com/nats-io/nats-server/v2 from 2.11.6 to 2.11.7 (#17433) * chore(deps): Bump github.com/gopacket/gopacket from 1.3.1 to 1.4.0 (#17423) * chore(deps): Bump github.com/shirou/gopsutil/v4 from 4.25.6 to 4.25.7 (#17420) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.36.0 to 1.37.0 (#17430) * chore(deps): Bump go.step.sm/crypto from 0.67.0 to 0.68.0 (#17425) * chore(deps): Bump github.com/aws/aws-sdk-go-v2 from 1.37.0 to 1.37.2 (#17437) * chore(deps): Bump github.com/yuin/goldmark from 1.7.12 to 1.7.13 (#17427) * chore(deps): Bump github.com/ClickHouse/clickhouse-go/v2 from 2.39.0 to 2.40.1 (#17435) * chore(deps): Bump github.com/nats-io/nats.go from 1.43.0 to 1.44.0 (#17426) * chore(deps): Bump github.com/miekg/dns from 1.1.67 to 1.1.68 (#17429) * chore(deps): Bump github.com/apache/inlong/inlong-sdk/dataproxy-sdk-twins/dataproxy-sdk-golang from 1.0.3 to 1.0.5 (#17439) * chore(deps): Bump google.golang.org/api from 0.243.0 to 0.244.0 (#17424) * chore(deps): Bump github.com/lxc/incus/v6 from 6.14.0 to 6.15.0 (#17422) * chore(deps): Migrate from cloud.google.com/go/pubsub to v2 (#17410) * docs(outputs.microsoft_fabric): Changes as per Fabric (#17348) * fix(inputs.gnmi): handle empty updates in gnmi notification response (#17413) * chore(deps): Bump github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.2.3 (#17394) * chore(deps): Bump go.opentelemetry.io/collector/pdata from 1.36.0 to 1.36.1 (#17386) * chore(deps): Bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#17407) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.29.17 to 1.30.0 (#17402) * chore(deps): Bump k8s.io/client-go from 0.33.2 to 0.33.3 (#17389) * chore(deps): Bump github.com/ClickHouse/clickhouse-go/v2 from 2.37.2 to 2.39.0 (#17383) * chore(deps): Bump github.com/testcontainers/testcontainers-go/modules/kafka from 0.37.0 to 0.38.0 (#17382) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.70 to 1.18.0 (#17391) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.51.0 to 1.54.0 (#17392) * chore(deps): Bump modernc.org/sqlite from 1.38.0 to 1.38.1 (#17396) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/timestreamwrite from 1.31.2 to 1.32.0 (#17401) * chore(deps): Bump github.com/jedib0t/go-pretty/v6 from 6.6.7 to 6.6.8 (#17399) * chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kinesis from 1.35.3 to 1.36.0 (#17397) * chore(deps): Bump github.com/apache/arrow-go/v18 from 18.3.1 to 18.4.0 (#17393) * chore(deps): Bump super-linter/super-linter from 7.4.0 to 8.0.0 (#17390) * chore(deps): Bump github.com/testcontainers/testcontainers-go/modules/azure from 0.37.0 to 0.38.0 (#17388) * chore(deps): Bump software.sslmate.com/src/go-pkcs12 from 0.5.0 to 0.6.0 (#17385) * chore(deps): Bump k8s.io/apimachinery from 0.33.2 to 0.33.3 (#17384) * chore(deps): Bump cloud.google.com/go/storage from 1.55.0 to 1.56.0 (#17404) ++++ terragrunt: - Update to version 0.85.0: * Breaking Changes - Removal of legacy Terragrunt flags All deprecated flags that start with --terragrunt- have been removed in favor of their modern counterparts. This is the next step in the removal of deprecated features in Terragrunt on the road to Terragrunt 1.0, with more to follow. Read the CLI Redesign migration guide for future breaking changes. - Update of stack run directory context The stack run command no longer assumes that users will have a .terragrunt-stack directory present in the same directory as the terragrunt.stack.hcl file. This caused issues for users that were leveraging the no_dot_terragrunt_stack attribute, as the run might have skipped over units generated outside the .terragrunt-stack directory and thrown an error if all units were generated without the .terragrunt-stack directory. (see example in the release notes) https://github.com/gruntwork-io/terragrunt/releases/tag/v0.85.0 * Features - The runner-pool experiment has been integrated with OpenTelemetry The runner-pool experiment has been updated to integrate properly with OpenTelemetry. * Bug Fixes - stack output now respects no_dot_terragrunt_stack Previously, when running the stack output command, Terragrunt would incorrectly assume that all units were generated within a .terragrunt-stack directory. This bug has been fixed, and Terragrunt will know to look directly in the stack directory for a given unit when supplied with no_dot_terragrunt_stack. - The runner-pool experiment no longer parses stack files as units during discovery A bug in the logic for the discovery package resulted in discovery errors due to terragrunt.stack.hcl files being parsed as units. That bug has been fixed. - Fixed filesystem context for find_in_parent_folders() when used in terragrunt.stack.hcl The use of find_in_parent_folders() now functions correctly when run in the context of a terragrunt.stack.hcl file. Previously, it relied on the current working directory of the Terragrunt CLI, which incorrectly assumed that users would always be generating terragrunt.stack.hcl files from the current working directory. - The discovery package now emits less false positive warnings during parsing The discovery package used by the find and list commands, and the runner-pool experiment has been updated to emit less unimportant warnings when parsing configurations. These warnings were for early phase parsing that are known to be safe to ignore. - The discovery package no longer attempts to parse stack configurations as units A bug in the implementation of the discovery package resulted in attempts from Terragrunt to parse terragrunt.stack.hcl files as units. That has been remediated. * Docs - Edit Link Added The terragrunt-v1.gruntwork.io docs now include an "Edit page" button that conveniently allows the community to contribute fixes to documentation from within their browsers, using the GitHub UI. * What's Changed - chore: Addressing review feedback (#4672) - docs: Updating migration guide for `--terragrunt-` flag removal (#4671) - feat: Sequencing workflows so that faster workflows run before slower ones (#4670) - chore: Remove legacy terragrunt flags (#4650) - fix: Addressing provider cache test flake (#4639) - fix: Fixing `find_in_parent_folders` for `terragrunt.stack.hcl` files (#4669) - fix: Fixing `stack run` when there are only units with `no_dot_terragrunt_stack` set (#4628) - chore: Getting rid of strict lint workflow (#4651) - fix: Fixing bad link to `stack output` command (#4652) - ensure queue-include-dir includes stack paths that have not yet been generated (#4649) - fix: Improve error handling for missing includes and dependencies (#4637) - chore: Adding error message bug report (#4638) - Fix broken screenshot in logging page (#4630) - feat: Discovey false positive parsing errors (#4605) - fix: Make `stack output` respect `no_dot_terragrunt_stack` (#4606) - fix: Adding edit link back (#4629) - feat: runner-pool opntelemetry integration (#4616) - fix: Fixing discovery parsing stacks as units (#4615) ++++ trurl: - Add trurl-395-exculdes-uppercase.patch to fix failing test, upstream from https://github.com/curl/trurl/pull/395 ++++ wolfictl: - update to 0.38.11: * withdraw: add option to read from file by @javacruft in #1716 * build(deps): bump github.com/anchore/syft from 1.29.1 to 1.30.0 by @dependabot[bot] in #1718 * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 in /.github/actions by @dependabot[bot] in #1721 * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #1717 * build(deps): bump the chainguard group across 1 directory with 4 updates by @dependabot[bot] in #1722 * build(deps): bump chainguard-dev/actions from 1.4.8 to 1.4.9 by @dependabot[bot] in #1720 * build(deps): bump github.com/anchore/grype from 0.97.1 to 0.97.2 by @dependabot[bot] in #1723 * build(deps): bump github.com/anchore/syft from 1.30.0 to 1.31.0 by @dependabot[bot] in #1724 * build(deps): bump github.com/anchore/grype from 0.97.2 to 0.98.0 by @dependabot[bot] in #1725 * build(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 by @dependabot[bot] in #1726 * build(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2 by @dependabot[bot] in #1714 - Update to version 0.38.10: * build(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 (#1726) * build(deps): bump github.com/anchore/grype from 0.97.2 to 0.98.0 * update SBOM int test goldenfiles for syft 1.31.0 * build(deps): bump github.com/anchore/syft from 1.30.0 to 1.31.0 * build(deps): bump github.com/anchore/grype from 0.97.1 to 0.97.2 * build(deps): bump chainguard-dev/actions from 1.4.8 to 1.4.9 (#1720) * build(deps): bump the chainguard group across 1 directory with 4 updates (#1722) * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1717) * build(deps): bump actions/checkout in /.github/actions (#1721) * build(deps): bump github.com/anchore/syft from 1.29.1 to 1.30.0 * Refresh docs again * Rename option to packages-file * withdrawn-packages-file -> withdrawn-packages * Refresh docs with new option for withdraw command. * withdraw: add option to read from file * build(deps): bump sigs.k8s.io/release-utils from 0.12.0 to 0.12.1 (#1715) * build(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2 * build(deps): bump chainguard-dev/actions from 1.4.7 to 1.4.8 (#1709) * build(deps): bump the chainguard group with 2 updates (#1710) ++++ xpra: - Update to version 6.4.0+git20250819.404462be66: * forgot to add x11init * move screenshot pasting code to a module * the xor encoding no longer exists * move drm info to a subsystem * remove debug logging * simplify: one logger is enough * forgot to update paths and add module * clang is only needed for the cuda kernels * oops: forgot to add new module to packaging * #3871 simplify: move x11 base to submodules * avoid loading X11 bindings under wayland * move extension initialization to where it is used * fixup cut&paste * now redundant * #3871 move more code to x11 subsystems * #3871 move more X11 features to submodules * #3871 move more functions to the keyboard device interface * #3871 move more X11 device bits to modules * move x11 keyboard bits to generic platform import * Bump actions/checkout from 4 to 5 * #3871 make plain X11 backend the default * #3871 avoid using get_pywindow * xid should be set early, it does not change * derp: X11Event uses plain attributes * #3871 move loop to its own module * add ability to log context checks * show X11 vendor and version info * oops: forgot to close display after testing * duplicate import * if more damage events are coming for sure, wait a bit * dict cannot be None * simplify * the drawable is not a pixmap, XFreePixmap on it was causing X11 errors * type hints * use correct initial size * Fedora 43 package list: just default python * this may be less racy? * need patch to build with newer Python / Cython * run_scaled script installed should use default python interpreter * oops: webp scaling errors on undefined attribute * #3871 get_screen_sizes requires the ui thread * errors when _NET_WORKAREA is unset or invalid * #3871 listen for randr screen change events * prettify * remove unused vars * #3871 move desktop info to gtk module * #3871 no need to use gtk when we have randr * simplify: xid is always valid here * no need to check: the function is always defined, can be a noop * make it more readable: use plain string * warn if we see IntEnum * IntEnum is an instance of int, so it must be checked before int * DPI notification message can cause connection to drop * #3871 simplify * no need to duplicate depth logic, report first error * #3871 move constants to core * #3871 only sync on outer context, raise errors * simplify * #3871 make it possible to run with a pure X11 event loop * cosmetic * #3871 add pure x11 event loop * cosmetic logging changes * this method requires an X11 context check * reduce code duplication * prettier output * show extension info * unused * #3871 move paint overlay functions to module * #3871 use plain x11 functions for keyval lookup * #3871 replace gtk with plain x11 * annotate constant, remove oudated docstring * this is a constant * add more info on source code and quality metrics * cython 3.1.3 * yuk: cursor packet needs to use cleaner interface * #3871 also block import of xpra.gtk module when XPRA_GTK=0 * #3871 delay gtk import - waiting to be replaced with pure x11 calls * #3871 no need for gtk here * 'XStringToKeysym' does not raise errors * #3871 some platforms support different values for each axis * #3871 use native x11 calls to get cursor size * fixup import location following refactoring * #3871 handle blocked gtk more gracefully * #3871 xsettings is now pure X11 * fix type hints * #3871 remove world window, wm is now pure X11 * #3871 convert ManagerSelection to plain X11 * fix debug logging * use python string unless we're calling the C api * type hint * add debug logging * honour 'XPRA_GTK' toggle here too * load bindings later, and as needed * oops: missed from 573ef3b851c5d9b15cac4cacb892b0eda557d070 * #3871 extract non-gtk bits * use enum * better logical split of method locations * move value to where it is used * split to functions * also split the core clipboard module * split large clipboard code into submodules * honour clipboard toggle * delete the temporary property after use * make it possible to use the x11 clipboard without xfixes * also set name on ewmh window * #3871 remove 'windows' gobject attribute and use direct getter * #3871 remove 'toplevel' attribute and use world-window directly * constify * #3871 use indirect import for get_pywindow * match method signature * #3871 use pure X11 calls for deriving the modifier map * more complete struct definitions * #4639 enumarate all the groups * stronger type hints * #3871 reuse xroot props module for more attributes * #3871 use plain x11 utility functions to access root properties * oops: forgot to update callers in 13308d47d3be88ac097a8809224693c3386fc6c1 * always check display status when verify_display is called * #3871 don't initialize gtk early when checking display * split to functions * move verify_gdk_display to gtk module * must have access to the display to get the screen * simplify * unit tests block x11, fail more gracefully * add debug logging * forgot to update test path * #3871 simplify: the root window xid never changes * #3871 move root properties to pure x11 module * root window always exists and does not need an error context manager * #3871 initialize X11 display source later * #3871 clipboard is now (almost) pure X11 * #4638 add env var to override the new-stream-sound * #3871 make it easier to try to start servers without gtk * #3871 no longer used * #3871 use plain X11 calls to create EWMH window * #3871 use plain X11 calls for creating the clipboard window * #3871 use plain X11 calls and window ids * remove unused attribute * pass the root xid in, avoids importing gtk * no need for gtk here * simplify * the tray subsystem requires gtk for its menu * move tray to common location * simplify * #3871 move screen info to gtk and display subsystems * #4499 daemonizer changed the command form * never use zero value as vertical refresh rate * #3871 inject Gtk icon lookup into windowicon source module * #3871 move server tray menu to a subsystem * move gtk functions to where they belong * #4637 fix 404 link, replace with templates * incorrect in 53a90b7b95b43b928e229b48f531cee6a24764c4 * simplify * fixup refactoring: super() already provides self * ensure 'local_logging' is always a Callable * unused import * #3871 delay gtk import, avoid it for root xid * stronger type * #3871 'runner' subcommand is more like 'encoder' and does not need gtk * #4636 use correct libname for noble * #3871 extract constants out of gtk module * remove duplicate statement * help linters figure out the return type * stronger type hints * silence linter warning: documentation string should not be changed to https * use noop to simplify type hints * matcher superclass interface * match new http script interface added in 09b9bb8c7073c122d82a8e2c8331228880efbb26 * there is only one superclass now * simplify: use noop to keep 'local_logging' always callable * silence linter warnings: ensure scores only contains rectangles * model references to the root window were removed in 5a09fe1f04f6ee064309cc8ee5c22e9aa5c76086 * markdown is now rendering the trailing backslash, sometimes * catch gio file monitor setup errors * don't leak event receiver hooks * type hint was wrong, handlers are just objects * #3871 move Gdk Display initialization to gtk subsystem * add docstring * #3871 tray no longer uses gtk * #3871 pass world window xid so composite doesn't import anything gtk related * #3871 wm_check doesn't use gtk * #3871 split X11 event dispatch from gtk * #3871 window info no longer uses gtk * #3871 property module no longer uses gtk * dependency inversion: x11 calls use the generic error manager (#3871) * simplify * fix https linter warnings, or ignore if they're wrong * match parent signature * derp: typo in fallback code path * minor sonarqube warnings * match refactoring * derp: IDE imported some random module.. * #3871 split glib bits from gtk * #3871 move remaining gtk bits to a subsystem module * #3871 remove references to root window * #3871 the GLib main loop is sufficient * #3871 move display name to display subsystem * cosmetic * missing type hints * remove debug logging * #4208 more flexible grouping: combine attributes with '+' * #4634 try to preserve the window position during opengl reinit * forgot the xkb subtype attribute, as there's only on value for now.. * #3871 move more keyboard code to subsystem * this is already handled in GLibServer * try harder to find a matching display: ':0' and ':0.0' are considered the same for matching * push root window down to the capture backends that actually needed it * better debug logging * fixup renaming missed during refactoring * #3871 make it easier to figure out what is trying to import Gtk * finish refactoring power events: generic use in client * automatically enable debug logging when re-running github actions * #4634 make it possible to not reinitialize the windows * #4631 revert 2551a32bac64aee8354c4962426e80eb9fe3a298 * #3871 don't use gtk for rectangles * oops: remove debug logging * GLibServer already takes care of this * #3871 move notification bits where they belong * #3871 remove unused methods * #3871 split ui watcher to a server subsystem, move cursor bits where they belong * avoid 'noexcept clause is ignored for function returning Python object' warning * #4499 forgot packaging updates for new libexec script * #4566 use accessor method * #4566 this should be backwards compatible with older versions * #4496 make it easier to drop legacy 'sound' prefix * stricter signature * #4499 record the correct pid for ibus-daemon * suggest installing the client for the remote encoder * remove debug logging * don't bother trying to enable notification forwarding without dbus * unbreak X11 shadow mode: slots prevent saving bindings instance * merge 'posix' display source into main module * prefer the python specific cython version * include X11 bindings with fat builds * remove duplicated / unused imports * many cdef functions don't need exception handling wrappers * add info for all windows * now only returns major + minor, no event base * remove winbar from RHEL 10 clones * remove winbar from RHEL < 9 clones * missed from 883a068e4c094f2d228b0db4870554ab3b7a2556 * move gobject out of gtk * tweak session dir name on MS Windows, can't have ':' in it * abstract sockets have restrictions on path characters * support connecting to X11 displays via TCP * robustify: verify display has randr before using it * stronger return types * make it possible to load xwayland bindings without having randr * show available bindings * don't assume macos or win32 don't have x11 bindings * more generic keyboard and pointer device emulation * add xinfo test subcommand * use correct pkgconfig file for each binding * minor x11 availability check refactoring * split off saveset and classhints to separate bindinds * shape has already been moved out * xdriinfo can be useful * import cleanup * simplify: don't create the X11Event object in parsers * use memalign via cython module for portability * no xshm support on win32 * don't assume, check for module * don't retry shmget errors * bundle x11 libs if x11 is enabled * more x11 bindings can be built on win32 * support spaces between tokens, skip empty args * simplify * add bufferbloat link * move composite bits out of image * split off XShm * XFreePixmap lives in Xlib.h * split more extensions * split more extensions * make it possible to try to build x11 bindings on win32 * split more extensions and inject the dependency * split shape to its own module, inject the dependency * merge GenericEvent in the more generic codepath * use a parser registry * split parsing to separate functions * simplify + stronger types * the shade / unshade state requires the X11 bindings, load them if needed * more errors are (semi) permanent: no valid presets or cuda context * #4545 missed from 5111f3b0bc19f308b2aec165f9481e6e252cc417 * make lossless quality more sticky * #3735 configure refresh rate from gui * #4618 add av1 to docs * #3735 apply refresh rate modifier to all sources for vrefresh * I keep getting this one wrong * limit 'xpra info' output line size * Use pkgconfig for libproc on Fedora * #4579 convert RLE8 to RGB so mmap can handle it * this extra depth attribute is not documented * #4608 missed from 6322096d9900fef8d308c480a8d4ad7c5a951128 * reusable functions * #4608 add pointer=emulate3button option * don't duplicate the code * #4618 wait for current image to be uploaded * ping was moved to its own source module * need pings for backwards compatibility * #3680 bundle winloop * #3680 packaging for winloop * #3950 enable winloop * #2767 no longer used * formatting * make it easier to dump X11 info * #4549 remove extra URI args * this is rendundant * move more cursor bits to subsystem * minor linter warnings * suspend_event now belongs in PowerEventServer * finish moving cursor bits to subsystem * avoid warnings when running without pings, ie: minimal * remove dependency on ping subsystem * can't have dragndrop without file transfer * simplify and avoid linter warnings * update type hints to match new http script interface * can't have printer forwarding without file-transfer * socket test is now fast enough to run * speedup test and avoid warnings * no need for dbus either, also avoids X11 warnings * runner does not need a vfb * also show the file containing the test * 'runner' subcommand is much faster to start * 'pulseaudio' feature was split from 'audio', must also be disabled * show encoder server in subcommand list * rethrow more exception types * silence linter warnings * contrary to what pycharm says, this should not be simplified * make 'checkitem' widget function reusable * rename function: it doesn't do any sending * http handlers can receive post data * use a dedicated logger for asyncio * make http functions reusable * move asyncio bits to their own module * split install uvloop to a function * add debug logging * only register switch event once, when we're ready to handle it * use the plural form to match the config option * must call unrealize when handling close button * fixup d8c0ffeb76d9d1e15d8fb4fe6ae1d288d2304fee also remove function from tests * chop test name string properly * forgot to sudo * install pip via apt * remove unused functions * silence cython warning * #4484 timestamps are already unsigned ints * #4465 remove dav1d, aom will do * #4625 always preserve path * all IP socket types support URL scheme * clang 20 no longer supports no-error=unreachable-code-fallthrough * timeout means the connection failed * derp: unused arg * don't retry forever * error message should not assume this is server mode * fix breakage introduced in a61c300ec3532368f23a9eeddd7300504bb6a93d * stronger type hints * must convert to int to be able to cythonize :( * cannot use the original socket once wrapped as ssl * don't poll so hard when the result is unlikely to change * shortcut out when socket is not accessible * typo caused connect test subcommand / request to fail * cosmetic: actually log the value * no point in polling if workspace support is disabled * #4623 add the display to the user uuid * simplify * silence compilation warning ++++ yast2-iscsi-client: - Fix the initialization of the valid iscsi offload cards not bringing up the network cards with an empty iface name (bsc#1246210). - 5.0.10 ++++ zvm: - Update to 0.8.8: * added functionality to ls --all by @mipdableep in #132 ------------------------------------------------------------------ ------------------ 2025-8-18 - Aug 18 2025 ------------------- ------------------------------------------------------------------ ++++ abseil-cpp: - update to 20250814.0: * absl::Mutex now contains lower-case method names like lock() and shared_lock() to align with standard C++ mutex methods. This allows absl::Mutex to be used with std::scoped_lock and friends. The old names are still present but may be removed in a future release. * The RAII Mutex-locker types like absl::MutexLock, absl::ReaderMutexLock, and friends now accept references to absl::Mutex. The pointer-accepting constructors are now deprecated, and may be removed in a future release. * Breaking change: Nullability template types, which were deprecated in the May 2025 release, have been removed. * Breaking change: absl::string_view(nullptr), which is undefined behavior according to the C++ standard, now triggers an assert failure. Note that unless you changed absl/base/options.h, absl::string_view is an alias for std::string_view, so by default you will be inheriting the behavior of your standard library instead of using the Abseil implementation. * Breaking change: Abseil's hash tables now require a hash function that has a return type with size >= sizeof(size_t). - added libs: libabsl_hashtable_profiler, libabsl_log_entry, libabsl_profile_builder - dropped libs: libabsl_low_level_hash ++++ agama-products: - products: sles, sle-sap: remove Beta tag, switch to the final EULAs (gh#agama-project/agama#2666). ++++ amavisd-milter: - Fix C23 build problem (rh#2336394) ++++ ansible-linux-system-roles: - Ensure galaxy.yml version is aligned with spec Version to avoid build failures ++++ ast-grep: - Update to 0.39.4: * Improve error messages for ast-grep test failures based on failure type #2174 * Add comprehensive GitHub Copilot development instructions #2152 * Address all code review comments: move make_rule_finder to lsp.rs, simplify logic, reduce indentation, update file watchers, remove unused deps 8ef8ed6 * Decouple rule finding logic from LSP crate as requested 531aac3 * Complete LSP rule reloading implementation with tests 683f20e ++++ audio-recorder: - Workaround to compile with gcc >= 15, export CFLAGS="%{optflags} - std=gnu17" ++++ btrfsprogs: - update to 6.16 * mkfs: * print label of existing filesystem if attempting to overwrite * remove note about changed defaults in 6.15 * discard support detection uses the ioctl and not sysfs, this should work for all types of block devices * device usage: fix printing units of partition sizes, used to be in 512B sectors * defrag: new option --nocomp to request no compression (kernel 6.17) * check: detect missing orphan items for deleted subvolumes * subvol delete: don't print warning if filesystem is mounted with user_subvol_rm_allowed * build: add build support for Android * other: * cleanups and refactoring * sync sources with kernel * documentation updates * CI and test updates ++++ calc: - Update to 2.16.0.0: * Starting with calc version 2.16.0.0, the ability to perform arithmetic on addresses of values in calc objects has been greatly restricted. * Most arithmetic on of value addresses could easily cause calc to crash. For example, prior to calc version 2.16.0.0, the following command was likely to crash calc: calc '*((&.)+1e9)' * Subtracting two value addresses is permitted, however there is NO guarantee that the address of a value will remain consistent across calc runs. Addresses of values depend on the circumstances of when the calc values were formed. * The above restrictions and caveats apply to addresses of values. Such restrictions and caveats to NOT apply to the addresses of octets, NOR to the addresses within strings. If isptr(x) == 2, then x is value-pointer and the above mentioned restrictions and caveats apply. * See "help address" for more information on value address arithmetic. * Added E_INVALID_DEREF (10610) error code to indicate the invalid dereferencing a non-variable. * Added E_INVALID_ADDR_OP (10611) error code to indicate an invalid arithmetic address operation. ++++ capnproto: - switch to cmake for building which will actually provide the last missing file for the cmake files CapnProtoTargets-relwithdebinfo.cmake - properly set CC/CXX based on the compiler used - shared library naming changes from libsomething-%{version}.so to libsomething.so.%{version} ++++ checkmedia: - merge gh#openSUSE/checkmedia#21 - set LC_MESSAGES to C when running gpg (bsc#1248168) - fix minor issue when printing app_id - 6.5 ++++ copacetic: - Update to version 0.11.1: * fix: os version format in tdnf install (#1215) * feat: Add Parsable format for buildkit progress output within Copa (#1238) * chore: bump docker/login-action from 3.4.0 to 3.5.0 in the all group across 1 directory (#1245) * chore: bump github.com/aquasecurity/trivy from 0.64.1 to 0.65.0 (#1244) * chore: bump github.com/docker/cli from 28.3.2+incompatible to 28.3.3+incompatible (#1242) * chore: bump typescript from 5.8.3 to 5.9.2 in /website in the all group (#1241) * chore: bump github/codeql-action from 3.29.4 to 3.29.5 in the all group (#1240) * feat: modularize patching logic (#1228) * ci: Fix osv-scanner config: replace [[ignore]] with [[IgnoredVulns]] (#1214) * fix: Get host platform info in single arch integration test (#1197) * fix: Add actionable logs and improve UX after buildkit endpoint checks are exhausted (#1186) * chore: bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#1233) * chore: bump the all group in /website with 3 updates (#1231) * chore: bump google.golang.org/grpc from 1.73.0 to 1.74.2 (#1229) * chore: add robbie to codeowners (#1226) * fix: add almalinux to pkgmanager os type check (#1220) * fix: set azurelinux base image tag (#1216) * chore: bump k8s.io/apimachinery from 0.33.2 to 0.33.3 (#1217) * chore: bump golang.org/x/sync from 0.15.0 to 0.16.0 (#1205) * chore: bump github.com/docker/cli from 28.3.1+incompatible to 28.3.2+incompatible (#1204) * chore: bump github.com/cpuguy83/go-docker from 0.3.1 to 0.4.0 (#1203) * chore: bump github.com/docker/docker from 28.3.1+incompatible to 28.3.2+incompatible (#1202) * chore: bump the all group across 1 directory with 3 updates (#1224) * chore: Exempt good first issues from getting stale (#1219) * chore: remove fluentbit eol img from tests (#1222) * fix: Fix landing page dark mode (#1210) * fix: Remove excessive token permissions (#1172) * feat: Add landing page to copa docs (#1206) * chore: bump dotenv from 17.0.1 to 17.2.0 in /website in the all group (#1201) * chore: add Robbie Cronin to maintainers (#1200) * docs: optimize docs (#1189) * feat: patch non-host alpine (#1194) * feat: add riscv64 to validPlatforms (#1199) * chore: bump github.com/docker/cli from 28.3.0+incompatible to 28.3.1+incompatible (#1192) * chore: bump github.com/docker/docker from 28.3.0+incompatible to 28.3.1+incompatible (#1191) * chore: bump github.com/aquasecurity/trivy from 0.64.0 to 0.64.1 (#1190) * docs: update tradeoffs section to reflect scanner independence (#818) (#888) * chore: Generate v0.11.x docs (#1182) * docs: add Devtron to adopters list (#1163) * feat: Add stale bot (#1180) ++++ crmsh: - Update to version 5.0.0+20250818.c02d21b0: * Dev: add asciidoc to the test image ++++ debhelper: - update to 13.25 * debhelper-documentation.json: Correct command for `.ucf` files * dh: Support `DH_OVERRIDDEN_COMMAND` variable for `override` targets for cases where the original command is useful as a base. * debhelper.pod: Update description on automated dependencies * dh_gencontrol: Fix off-by-one compat guard affecting compat 14. * In compat 14: Add `Commands` field to binaries to aid `command-not-found` (Closes: #638517) * dh_assistant: Explicitly use `JSON::PP::{true,false}` * dh_assistant: Provide a compat upgrade checklist when upgrading from compat 7 and on. This can be done via the command `dh_assistant compat-upgrade-checklist`. * No longer run `dh_dwz` by default in compat 14+ (Closes: 1016563) * dh_installmodules: install .modprobe files in /usr/lib with compat 14+ (Closes: #1107373) * dh_assistant: Improve wording * dh_installsystemd: Always stop the service on remove (Closes: #1079181) - list all installed scripts explicitly in spec to avoid shared-dir-glob-in-files ++++ transactional-update: - Version 5.1.0 - tukit: signalize errors from plugins; transactions will be aborted by default now - t-u: Added `--keep` option; please only use this for debugging or recovery when a tukit plugin is failing - setup-fips: could be called multiple times now - setup-fips: call update-crypto-policies in the correct context [boo#1246013] - reboot: Print both requested and actual reboot method for [poo#163352] - snapper plugin: Don't touch fstab's timestamp on every run - t-u: Chaining commands will also work on BLS systems now; this is also necessary for some regular commands (such as setup-fips or setup-selinux) - tukit: Only mount journal dir if available - tukit: Return full, non-truncated error number when calling external applications - tests: Adopt tests to obs environment to avoid root perms - t-u: Simplified various calls when changing files in /etc (made possible by the new btrfs subvolume based layout), tukit is called less often now - t-u: optimized check for BLS systems - Removed journalmount.patch (part of regular release now) ++++ ed: - GNU ed 1.22.2: * Newline characters are no longer allowed in file names even if '--unsafe-names' is specified. * The file name is now printed escaped also when replaced into a shell command. ++++ gdk-pixbuf: - Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217). ++++ git: - Update to 2.51.0 - UI, Workflows & Features - Userdiff patterns for the R language have been added. - Documentation for "git send-email" has been updated with a bit more credential helper and OAuth information. - "git cat-file --batch" learns to understand %(objectmode) atom to allow the caller to tell missing objects (due to repository corruption) and submodules (whose commit objects are OK to be missing) apart. - "git diff --no-index dirA dirB" can limit the comparison with pathspec at the end of the command line, just like normal "git diff". - "git subtree" (in contrib/) learned to grok GPG signing its commits. - "git whatchanged" that is longer to type than "git log --raw" which is its modern rough equivalent has outlived its usefulness more than 10 years ago. Plan to deprecate and remove it. - An interchange format for stash entries is defined, and subcommand of "git stash" to import/export has been added. - "git merge/pull" has been taught the "--compact-summary" option to use the compact-summary format, intead of diffstat, when showing the summary of the incoming changes. - "git imap-send" has been broken for a long time, which has been resurrected and then taught to talk OAuth2.0 etc. - Some error messages from "git imap-send" has been updated. - When "git daemon" sees a signal while attempting to accept() a new client, instead of retrying, it skipped it by mistake, which has been corrected. - The reftable ref backend has matured enough; Git 3.0 will make it the default format in a newly created repositories by default. - "netrc" credential helper has been improved to understand textual service names (like smtp) in addition to the numeric port numbers (like 25). - Lift the limitation to use changed-path filter in "git log" so that it can be used for a pathspec with multiple literal paths. - Clean up the way how signature on commit objects are exported to and imported from fast-import stream. - Remove unsupported, unused, and unsupportable old option from "git log". - Document recently added "git imap-send --list" with an example. - "git pull" learned to pay attention to pull.autostash configuration variable, which overrides rebase/merge.autostash. - "git for-each-ref" learns "--start-after" option to help applications that want to page its output. - "git switch" and "git restore" are declared to be no longer experimental. - "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased to 'bar'" and then went on to run "git foo -h baz", which was unexpected. Tighten the rule so that alias expansion is reported only when "-h" is the sole option. - Performance, Internal Implementation, Development Support etc. - "git pack-objects" learned to find delta bases from blobs at the same path, using the --path-walk API. - CodingGuidelines update. - Add settings for Solaris 10 & 11. - Meson-based build/test framework now understands TAP output generated by our tests. - "Do not explicitly initialize to zero" rule has been clarified in the CodingGuidelines document. - A test helper "test_seq" function learned the "-f " option, which allowed us to simplify a lot of test scripts. - A lot of stale stuff has been removed from the contrib/ hierarchy. - "git push" and "git fetch" are taught to update refs in batches to gain performance. - Some code paths in "git prune" used to ignore the passed-in repository object and used the `the_repository` singleton instance instead, which has been corrected. - Update ".clang-format" and ".editorconfig" to match our style guide a bit better. - "make coccicheck" succeeds even when spatch made suggestions, which has been updated to fail in such a case. - Code clean-up around object access API. - Define .precision to more canned parse-options type to avoid bugs coming from using a variable with a wrong type to capture the parsed values. - Flipping the default hash function to SHA-256 at Git 3.0 boundary is planned. - Declare weather-balloon we raised for "bool" type 18 months ago a success and officially allow using the type in our codebase. - GIT_TEST_INSTALLED was not honored in the recent topic related to SHA256 hashes, which has been corrected. - The pop_most_recent_commit() function can have quite expensive worst case performance characteristics, which has been optimized by using prio-queue data structure. - Move structure definition from unrelated header file to where it belongs. - To help our developers, document what C99 language features are being considered for adoption, in addition to what past experiments have already decided. - The reftable unit tests are now ported to the "clar" unit testing framework. - Redefine where the multi-pack-index sits in the object subsystem, which recently was restructured to allow multiple backends that support a single object source that belongs to one repository. A MIDX does span multiple "object sources". - Reduce implicit assumption and dependence on the_repository in the object-file subsystem. - Fixes since v2.50 Unless otherwise noted, all the changes in 2.50.X maintenance track, including security updates, are included in this release. - A memory-leak in an error code path has been plugged. (merge 7082da85cb ly/commit-graph-graph-write-leakfix later to maint). - A memory-leak in an error code path has been plugged. (merge aedebdb6b9 ly/fetch-pack-leakfix later to maint). - Some leftover references to documentation source files that no longer exist, due to recent ".txt" -> ".adoc" renaming, have been corrected. (merge 3717a5775a jw/doc-txt-to-adoc-refs later to maint). - "git stash -p " improvements. (merge 468817bab2 pw/stash-p-pathspec-fixes later to maint). - "git send-email" incremented its internal message counter when a message was edited, which made logic that treats the first message specially misbehave, which has been corrected. (merge 2cc27b3501 ag/send-email-edit-threading-fix later to maint). - "git stash" recorded a wrong branch name when submodules are present in the current checkout, which has been corrected. (merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to maint). - When asking to apply mailmap to both author and committer field while showing a commit object, the field that appears later was not correctly parsed and replaced, which has been corrected. (merge abf94a283f sa/multi-mailmap-fix later to maint). - "git maintenance" lacked the care "git gc" had to avoid holding onto the repository lock for too long during packing refs, which has been remedied. (merge 1b5074e614 ps/maintenance-ref-lock later to maint). - Avoid regexp_constraint and instead use comparison_constraint when listing functions to exclude from application of coccinelle rules, as spatch can be built with different regexp engine X-<. (merge f2ad545813 jc/cocci-avoid-regexp-constraint later to maint). - Updating submodules from the upstream did not work well when submodule's HEAD is detached, which has been improved. (merge ca62f524c1 jk/submodule-remote-lookup-cleanup later to maint). - Remove unnecessary check from "git daemon" code. (merge 0c856224d2 cb/daemon-fd-check-fix later to maint). - Use of sysctl() system call to learn the total RAM size used on BSDs has been corrected. (merge 781c1cf571 cb/total-ram-bsd-fix later to maint). - Drop FreeBSD 4 support and declare that we support only FreeBSD 12 or later, which has memmem() supported. (merge 0392f976a7 bs/config-mak-freebsd later to maint). - A diff-filter with negative-only specification like "git log - -diff-filter=d" did not trigger correctly, which has been fixed. (merge 375ac087c5 jk/all-negative-diff-filter-fix later to maint). - A failure to open the index file for writing due to conflicting access did not state what went wrong, which has been corrected. (merge 9455397a5c hy/read-cache-lock-error-fix later to maint). - Tempfile removal fix in the codepath to sign commits with SSH keys. (merge 4498127b04 re/ssh-sign-buffer-fix later to maint). - Code and test clean-up around string-list API. (merge 6e5b26c3ff sj/string-list later to maint). - "git apply -N" should start from the current index and register only new files, but it instead started from an empty index, which has been corrected. (merge 2b49d97fcb rp/apply-intent-to-add-fix later to maint). - Leakfix with a new and a bit invasive test on pack-bitmap files. (merge bfd5522e98 ly/load-bitmap-leakfix later to maint). - "git fetch --prune" used to be O(n^2) expensive when there are many refs, which has been corrected. (merge 87d8d8c5d0 ph/fetch-prune-optim later to maint). - When a ref creation at refs/heads/foo/bar fails, the files backend now removes refs/heads/foo/ if the directory is otherwise not used. (merge a3a7f20516 ps/refs-files-remove-empty-parent later to maint). - "pack-objects" has been taught to avoid pointing into objects in cruft packs from midx. - "git remote" now detects remote names that overlap with each other (e.g., remote nickname "outer" and "outer/inner" are used at the same time), as it will lead to overlapping remote-tracking branches. (merge a5a727c448 jk/remote-avoid-overlapping-names later to maint). - The gpg.program configuration variable, which names a pathname to the (custom) GPG compatible program, can now be spelled with ~tilde expansion. (merge 7d275cd5c0 jb/gpg-program-variable-is-a-pathname later to maint). - Our header file relied on that the system-supplied header is not later included, which would override our macro definitions, but "amazon linux" broke this assumption. Fix this by preemptively including near the beginning of ourselves. (merge 9d3b33125f ps/sane-ctype-workaround later to maint). - Clean-up compat/bswap.h mess. (merge f4ac32c03a ss/compat-bswap-revamp later to maint). - Meson-based build did not handle libexecdir setting correctly, which has been corrected. (merge 056dbe8612 rj/meson-libexecdir-fix later to maint). - Document that we do not require "real" name when signing your patches off. (merge 1f0fed312a bc/contribution-under-non-real-names later to maint). - "git commit" that concludes a conflicted merge failed to notice and remove existing comment added automatically (like "# Conflicts:") when the core.commentstring is set to 'auto'. (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint). - "git rebase -i" with bogus rebase.instructionFormat configuration failed to produce the todo file after recording the state files, leading to confused "git status"; this has been corrected. (merge ade14bffd7 ow/rebase-verify-insn-fmt-before-initializing-state later to maint). - A few file descriptors left unclosed upon program completion in a few test helper programs are now closed. (merge 0f1b33815b hl/test-helper-fd-close later to maint). - Interactive prompt code did not correctly strip CRLF from the end of line on Windows. (merge 711a20827b js/prompt-crlf-fix later to maint). - The config API had a set of convenience wrapper functions that implicitly use the_repository instance; they have been removed and inlined at the calling sites. - "git add/etc -p" now honor the diff.context configuration variable, and also they learn to honor the -U command-line option. (merge 2b3ae04011 lm/add-p-context later to maint). - The case where a new submodule takes a path where there used to be a completely different subproject is now dealt with a bit better than before. (merge 5ed8c5b465 kj/renamed-submodule later to maint). - The deflate codepath in "git archive --format=zip" had a longstanding bug coming from misuse of zlib API, which has been corrected. - drop patches included in update: 0001-git-gui-Replace-null_sha1-with-nullid.patch 0001-gitk-Add-support-of-SHA256-repo.patch 0002-git-gui-Add-support-of-SHA256-repo.patch - refreshed patches: CVE-2024-24577.patch completion-wordbreaks.diff git-tcsh-completion-fixes.diff setup-don-t-fail-if-commondir-reference-is-deleted.patch - contrib/workdir is dropped. remove references for it. ++++ gitlab-container-registry: - Update to version 4.26.1: * Bug Fixes - use redis cache interface instead of concreate object for urlcache init (2a958da) - Update to version 4.26.0: * Features - add endpoint labels to pending and status notification metrics (c501105) - add event delivery and retries metrics (fa0dc43) - add latency histograms for notifications subsystem (5cb127b) - add storage retries metric for Azure, S3 and improve existing metric fro GCS (e49688e) - api/v2: enable DLB for List Repository Tags API endpoint (52600c2) - bbm: add WAL archive based throttling (d6e3c58) - notifications queue size limits (6533604) * Bug Fixes - add s3 zero blon upload support (575e8c4) - prevent races in backoff notifications sink (2b9058d) - urlcache should use dual-cache interface (578e6ff) * Performance Improvements - remove redundant sentry error (f3ed0b6) - remove redundant sentry error (840696d) * Build - deps: update module cloud.google.com/go/storage to v1.56.0 (c493a6c) - deps: update module github.com/aws/aws-sdk-go-v2 to v1.36.6 (ff8ef26) - deps: update module github.com/aws/aws-sdk-go-v2/config to v1.29.18 (7470f29) - deps: update module github.com/aws/aws-sdk-go-v2/credentials to v1.17.71 (233a4b5) - deps: update module github.com/aws/aws-sdk-go-v2/credentials to v1.18.2 (ec93ac1) - deps: update module github.com/aws/aws-sdk-go-v2/credentials to v1.18.3 (0df3ae0) - deps: update module github.com/aws/aws-sdk-go-v2/feature/cloudfront/sign to v1.8.14 (0ab3a1a) - deps: update module github.com/aws/aws-sdk-go-v2/feature/cloudfront/sign to v1.9.1 (b137552) - deps: update module github.com/aws/aws-sdk-go-v2/feature/cloudfront/sign to v1.9.2 (0e9b57f) - deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.85.0 (e812267) - deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.86.0 (cbbcd0b) - deps: update module github.com/azure/azure-sdk-for-go/sdk/azcore to v1.18.2 (ac3c040) - deps: update module github.com/azure/azure-sdk-for-go/sdk/storage/azblob to v1.6.2 (6ce3a81) - deps: update module github.com/olekukonko/tablewriter to v1.0.9 (b16d166) - deps: update module github.com/testcontainers/testcontainers-go/modules/postgres to v0.38.0 (653edf3) - deps: update module gitlab.com/gitlab-org/api/client-go to v0.137.0 (3d83581) - deps: update module google.golang.org/api to v0.242.0 (4f86b60) ++++ glab: - Update to version 1.67.0: * refactor(release download): cleanup request creation * fix(release download): use unauthenticated client for non-GitLab asset links * feat(opentofu): add `terraform` and `tf` as aliases for the `opentofu` * feat(debug): support `GLAB_DEBUG_HTTP` env variable to log HTTP traffic * chore(deps): update module k8s.io/client-go to v0.33.4 - Update to version 1.66.0: * feat(agent token): generate new token if cached token has been revoked * feat(agent token): lock token creation for concurrent plugin calls * feat(agent token): force keyring mode by default * feat(opentofu): add delete command * chore(deps): update module gitlab.com/gitlab-org/api/client-go to v0.139.0 * chore(opentofu): fix command docs * fix(tests): Add missing can_create_organization to mock * chore(deps): update module gitlab.com/gitlab-org/api/client-go to v0.138.0 * feat(state list): add OpenTofu state download command * feat(state list): add OpenTofu state unlock command * feat(state list): add OpenTofu state lock command * feat(state list): add OpenTofu state list command * refactor(release): avoid repeating calls to cmd.Flags() * feat(release): support configuring name of release asset package * fix(git): fix git test * chore: Apply 3 suggestion(s) to 3 file(s) * feat(cluster/graph): support ignoring arc direction when filtering by roots * feat(opentofu): implement new `opentofu init` command * feat(project): enhance fork handling for existing repos * chore: add .vscode/launch.json for debugging configuration * fix(mr checkout): respect git_protocol configuration instead of hardcoding SSH * fix(warnings): fix misc warnings across the code base * chore(deps): update module golang.org/x/crypto to v0.41.0 * refactor(factory): rename GitLab client variables * refactor(factory): rename misleading HttpClient func to GitLabClient * refactor: simplify tests with t.TempDir and t.Chdir * chore(deps): bump go to v1.24.6 * chore(deps): update dependency golang to v1.24.6 * feat(cluster/graph): support filtering by roots * feat: add autofill flags to mr update command * docs: Add a troubleshooting subheading to the README * feat(help): document -h short option * chore: Add additional mocks to git package * chore: don't run tests for doc changes only * chore(deps): remove duplicate golangci-lint entry from tools-versions * chore(deps): update dependency golangci-lint to v2.3.1 * docs: testing against staging * chore(hostname): remove h flag for hostname * chore(gen-docs): run gen docs without cmdtest package dependency * fix(api): respect --hostname argument * chore(deps): update module github.com/golang-jwt/jwt/v5 to v5.3.0 * feat(mr-list): support "Any" user * chore: simplified token validation * feat(duo ask): self-hosted instance url check ++++ gosec: - Update to version 2.22.8: * Add support for go version 1.25.0 * Update go version in CI to 1.24.6 and 1.23.12 * chore(deps): update all dependencies * chore(deps): update all dependencies * Update github action to release v2.22.7 ++++ govulncheck-vulndb: - Update to version 0.0.20250818T190335 2025-08-18T19:03:35Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2023-2385 CVE-2023-26154 GHSA-5844-q3fc-56rh * GO-2025-3861 CVE-2025-48731 GHSA-cmpr-8prq-w5p5 * GO-2025-3862 CVE-2025-49221 GHSA-rfg4-2m63-fw2q * GO-2025-3863 CVE-2025-44001 GHSA-vpcr-fqpc-386h * GO-2025-3864 CVE-2025-53857 GHSA-42m6-5vm7-fjv2 * GO-2025-3865 CVE-2025-44004 GHSA-6ff3-jgxh-vffj * GO-2025-3866 CVE-2025-54463 GHSA-gjpm-6w34-ppvf * GO-2025-3867 CVE-2025-54458 GHSA-j66h-xhpr-7q5g * GO-2025-3868 CVE-2025-8285 GHSA-qjrx-j8wm-xf83 * GO-2025-3869 CVE-2025-53910 GHSA-v6c8-g53h-mc2h * GO-2025-3870 CVE-2025-52931 GHSA-vc77-c2hx-h5x2 * GO-2025-3871 CVE-2025-53514 GHSA-w92j-c6gr-hj8r * GO-2025-3872 CVE-2025-54525 GHSA-3cg3-3mmr-w8hj * GO-2025-3873 GHSA-jhmr-57cj-q6g9 * GO-2025-3874 GHSA-q355-h244-969h * GO-2025-3875 CVE-2025-54478 GHSA-qpjq-c5hr-7925 * GO-2025-3885 CVE-2025-55196 GHSA-fcxq-v2r3-cc8h * GO-2025-3886 CVE-2025-50946 GHSA-p3qf-84rg-jxfc * GO-2025-3887 CVE-2025-55199 GHSA-9h84-qmv7-982p * GO-2025-3888 CVE-2025-55198 GHSA-f9f8-9pmf-xv68 * GO-2025-3891 CVE-2025-9039 GHSA-wm7x-ww72-r77q ++++ grml-zsh-config: - Update to 0.19.24: * zshrc: add special code for cdt() for FreeBSD * Remove is4 from etc/skel/.zshrc * Fix chpwd error when DIRSTACKSIZE is unset by Claude Code ++++ gtick: - Workaround to compile with gcc >= 15, export CFLAGS="%{optflags} - std=gnu17" ++++ hawk2: - bump rails version from 8.0.2 to 8.0.2.1 (bsc#1248100) * actioncable-8.0.2.gem --> actioncable-8.0.2.1.gem * actionmailbox-8.0.2.gem --> actionmailbox-8.0.2.1.gem * actionmailer-8.0.2.gem --> actionmailer-8.0.2.1.gem * actionpack-8.0.2.gem --> actionpack-8.0.2.1.gem * actiontext-8.0.2.gem --> actiontext-8.0.2.1.gem * actionview-8.0.2.gem --> actionview-8.0.2.1.gem * activejob-8.0.2.gem --> activejob-8.0.2.1.gem * activemodel-8.0.2.gem --> activemodel-8.0.2.1.gem * activerecord-8.0.2.gem --> activerecord-8.0.2.1.gem * activestorage-8.0.2.gem --> activestorage-8.0.2.1.gem * activesupport-8.0.2.gem --> activesupport-8.0.2.1.gem * rails-8.0.2.gem --> rails-8.0.2.1.gem * railties-8.0.2.gem --> railties-8.0.2.1.gem ++++ hubble: - Update to version 1.18.0: * Minor Changes: - hubble-cli: new --print-policy-names option to show the names of (C)CNPs that allowed or denied traffic (cilium/cilium#39453, @antonipp) - hubble: send server version using metadata in gRPC responses (cilium/cilium#38668, @devodev) - loader: attach datapath to IPIP tunnel devices (cilium/cilium#37346, @gyutaeb) * Bugfixes: - hubble: escape terminal special characters from observe output (cilium/cilium#37401, @devodev) * Misc Changes: - chore(deps): update dependency helm/helm to v3.18.4 (#1695, @renovate[bot]) - chore(deps): update golang to v1.24.5 (patch) (#1696, @renovate[bot]) - chore(deps): update library/golang:1.24.5-alpine docker digest to daae04e (#1698, @renovate[bot]) - chore(deps): update dependency cilium/cilium to v1.18.0 - chore(deps): update dependency cilium/cilium to v1.17.6 - chore(deps): update dependency cilium/cilium to v1.17.5 ++++ inkscape: - Update to version 1.4.2+git48.4b73df015e: * Fix for node-editting slow-down when Object Properties dialog open (1.4.x). * Update libcroco with latest fixes * Fix measure tool endpoint snapping * Reduce text pick-box size to allow easier picking of background. * Import preview page when using Cairo PDF import. * Don't crash when importing files containing symbols or markers. * Fix axis flip causing vector exports to be cropped * Added GtkSource-4.typelib for Windows installation * Fix crash on dropping Layer on itself in Layers and Objects dialog. * Fix user interface for right-to-left. Backport. ++++ jfrog-cli: - Update to version 2.78.3: * Improvements - Remove empty properties field from build-info by @reshmifrog in #3046 * Bug Fixes - Use GitHub token for CLI version checks (avoid anonymous rate‑limit) by @nirvanin in #3050 * Other Changes - Add GitHub Actions summary section for the create evidence command by @mnsboev in #3042 ++++ kernel-default: - Unselect CONFIG_FB_VESA (bsc#1206264) Support for vesafb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect vesafb. - commit 13e07c8 - Unselect CONFIG_FB_EFI (bsc#1206264) Support for efifb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect efifb. - commit badcd62 - Update config files. Re-enable HIGHMEM on PAE (bsc#1248148) This was a mistake when upstream dropped HIGHMEM64G in commit e4c97fd368d0 (update to 6.15-rc1). - commit f9359c1 ++++ kernel-source: - Unselect CONFIG_FB_VESA (bsc#1206264) Support for vesafb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect vesafb. - commit 13e07c8 - Unselect CONFIG_FB_EFI (bsc#1206264) Support for efifb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect efifb. - commit badcd62 - Update config files. Re-enable HIGHMEM on PAE (bsc#1248148) This was a mistake when upstream dropped HIGHMEM64G in commit e4c97fd368d0 (update to 6.15-rc1). - commit f9359c1 ++++ kernel-docs: - Unselect CONFIG_FB_VESA (bsc#1206264) Support for vesafb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect vesafb. - commit 13e07c8 - Unselect CONFIG_FB_EFI (bsc#1206264) Support for efifb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect efifb. - commit badcd62 - Update config files. Re-enable HIGHMEM on PAE (bsc#1248148) This was a mistake when upstream dropped HIGHMEM64G in commit e4c97fd368d0 (update to 6.15-rc1). - commit f9359c1 ++++ kernel-kvmsmall: - Unselect CONFIG_FB_VESA (bsc#1206264) Support for vesafb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect vesafb. - commit 13e07c8 - Unselect CONFIG_FB_EFI (bsc#1206264) Support for efifb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect efifb. - commit badcd62 - Update config files. Re-enable HIGHMEM on PAE (bsc#1248148) This was a mistake when upstream dropped HIGHMEM64G in commit e4c97fd368d0 (update to 6.15-rc1). - commit f9359c1 ++++ kernel-obs-build: - Unselect CONFIG_FB_VESA (bsc#1206264) Support for vesafb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect vesafb. - commit 13e07c8 - Unselect CONFIG_FB_EFI (bsc#1206264) Support for efifb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect efifb. - commit badcd62 - Update config files. Re-enable HIGHMEM on PAE (bsc#1248148) This was a mistake when upstream dropped HIGHMEM64G in commit e4c97fd368d0 (update to 6.15-rc1). - commit f9359c1 ++++ kernel-obs-qa: - Unselect CONFIG_FB_VESA (bsc#1206264) Support for vesafb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect vesafb. - commit 13e07c8 - Unselect CONFIG_FB_EFI (bsc#1206264) Support for efifb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect efifb. - commit badcd62 - Update config files. Re-enable HIGHMEM on PAE (bsc#1248148) This was a mistake when upstream dropped HIGHMEM64G in commit e4c97fd368d0 (update to 6.15-rc1). - commit f9359c1 ++++ kernel-syms: - Unselect CONFIG_FB_VESA (bsc#1206264) Support for vesafb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect vesafb. - commit 13e07c8 - Unselect CONFIG_FB_EFI (bsc#1206264) Support for efifb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect efifb. - commit badcd62 - Update config files. Re-enable HIGHMEM on PAE (bsc#1248148) This was a mistake when upstream dropped HIGHMEM64G in commit e4c97fd368d0 (update to 6.15-rc1). - commit f9359c1 ++++ kernel-vanilla: - Unselect CONFIG_FB_VESA (bsc#1206264) Support for vesafb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect vesafb. - commit 13e07c8 - Unselect CONFIG_FB_EFI (bsc#1206264) Support for efifb was required by older versions of the proprietary Nvidia driver. This has meanwhile been updated to also work with DRM drivers. Hence unselect efifb. - commit badcd62 - Update config files. Re-enable HIGHMEM on PAE (bsc#1248148) This was a mistake when upstream dropped HIGHMEM64G in commit e4c97fd368d0 (update to 6.15-rc1). - commit f9359c1 ++++ kubectl-switch: - Update to version 2.2.12: * Bug Fixes - go: update k8s.io/client-go ( v0.33.3 → v0.33.4 ) (85eeb2c) * CI/CD - github-action: update github/codeql-action ( v3.29.8 → v3.29.9 ) (ffd9c5d) * Chores - mise: update aqua:golangci/golangci-lint ( 2.3.1 → 2.4.0 ) (#202) (32bd2b6) - mise: update go ( 1.24.6 → 1.25.0 ) (10f4c72) - Update to version 2.2.11: * Bug Fixes - go: update k8s.io/apimachinery ( v0.33.3 → v0.33.4 ) (0372f00) * Chores - mise: update go ( 1.24.5 → 1.24.6 ) (74f1dd6) - mise: update aqua:golangci/golangci-lint ( 2.3.0 → 2.3.1 ) (4d3c482) - mise: update aqua:goreleaser/goreleaser ( 2.11.1 → 2.11.2 ) (40f4c90) - mise: update aqua:goreleaser/goreleaser ( 2.11.0 → 2.11.1 ) (0e9790f) - mise: update aqua:golangci/golangci-lint ( 2.2.2 → 2.3.0 ) (a89034c) ++++ kubescape: - Update to version 3.0.38: * refactor output formatting in prettyprinter and related files * bump helm.sh/helm/v3 to 3.18.5 * return error on image when severity threshold exceeded ++++ mozilla-nss: - update to NSS 3.115 * bmo#1970304 - CID 1648399 - Resource leak in shlibsign.c * bmo#1981034 - CKA_SEED needs to be marked as a private attribute * bmo#1981518 - Fix bad syntax on Windows in softoken_gtest.cc * bmo#1974505 - Key private/public/secret keys by key type in softoken keydb * bmo#1980990 - add PK11_HPKE_GetSharedSecret to abi-check expected report * bmo#1980429 - remove NetscapeStepUpMatchesServerAuth from mozpkix TrustDomain * bmo#1927351 - Fixup ABI * bmo#1927351 - add ECH_SECRET and ECH_CONFIG to SSLKEYLOG for both client and server * bmo#1900841 - ECH fuzz target * bmo#1965331 - Implement PKCS #11 v3.2 FIPS indicator and validation objects * bmo#1978677 - remove expired explicitly distrusted DigiNotar lookalike root * bmo#1965329 - Implement PKCS #11 v3.2 functions - update to NSS 3.114 * bmo#1977376 - NSS 3.114 source distribution should include NSPR 4.37 * bmo#1970079 - Prevent leaks during pkcs12 decoding * bmo#1953731 - Remove redundant assert in p7local.c * bmo#1974515 - Bump nssckbi version to 2.80 * bmo#1961848 - Remove expired Baltimore CyberTrust Root * bmo#1972391 - Add TrustAsia Dedicated Roots to NSS * bmo#1974511 - Add SwissSign 2022 Roots to NSS * bmo#1836559 - Add backwards compatibility for CK_PKCS5_PBKD2_PARAMS * bmo#1965328 - Implement PKCS #11 v3.2 trust objects in softoken * bmo#1965328 - Implement PKCS #11 v3.2 trust objects - nss proper * bmo#1974331 - remove dead code in ssl3con.c * bmo#1934867 - DTLS (excl DTLS1.3) Changing Holddown timer logic * bmo#1974299 - Bump nssckbi version to 2.79 * bmo#1967826 - remove unneccessary assertion * bmo#1948485 - Update mechanisms for Softoken PCT * bmo#1974299 - convert Chunghwa Telecom ePKI Root removal to a distrust after * bmo#1973925 - Ensure ssl_HaveRecvBufLock and friends respect opt.noLocks * bmo#1973930 - use -O2 for asan build * bmo#1973187 - Fix leaking locks when toggling SSL_NO_LOCKS * bmo#1973105 - remove out-of-function semicolon * bmo#1963009 - Extend pkcs8 fuzz target * bmo#1963008 - Extend pkcs7 fuzz target * bmo#1908763 - Remove unused assignment to pageno * bmo#1908762 - Remove unused assignment to nextChunk * bmo#1973490 - don't run commands as part of shell `local` declarations * bmo#1973490 - fix sanitizer setup * bmo#1973187 - don't silence ssl_gtests output when running with coverage * bmo#1967411 - Release docs and housekeeping * bmo#1972768 - migrate to new linux tester pool - rebase FIPS patches to adjust for upstream FIPS work ++++ libreoffice: - Add bash-completion-key.patch: Bash completion support for Apple Keynote files (tdf#167995) ++++ openQA: - Update to version 5.1755504216.b51ff4b1: * Use signatures in worker reactor error handler * Use signatures in worker job code and related mocking ++++ opensuse-welcome-launcher: - Ensure ${HOME}/.config/autostart exists before copying to it (boo#1248197). - Install autostart to /usr/etc/xdg/autosttart - Build as noarch: this package only consists of a shell script. ++++ orthanc: - version 1.12.9 * long changelog - see NEWS for details ++++ orthanc-authorization: - version 0.10.1 * Fix audit-logs export in CSV format. * New configuration "ExtraPermissions" to ADD new permissions to the default "Permissions" entries. * Improved handling of "Anonymous" user profiles (when no auth-tokens are provided): The plugin will now request the auth-service to get an anonymous user profile even if there are no auth-tokens in the HTTP request. * The User profile can now contain a "groups" field if the auth-service provides it. * The User profile can now contain an "id" field if the auth-service provides it. * New experimental feature: audit-logs - Enabled by the "EnableAuditLogs" configuration. - Audit-logs are currently handled by the PostgreSQL plugin and can be browsed through the route /auth/audit-logs. - New default permission "audit-logs" to grant access to the "/auth/audit-logs" route. * Fix: The "server-id" field is now included in all requests sent to the auth-service. ++++ orthanc-dicomweb: - version 1.21 * New configuration "WadoRsLoaderThreadsCount" to configure how many threads are loading files from the storage when answering to a WADO-RS query. A value > 1 is meaningful only if the storage is a distributed network storage (e.g object storage plugin). A value of 0 means reading and writing are performed in sequence (default behaviour). * New configuration "EnablePerformanceLogs" to display performance logs. Currently only showing the time required to execute a WADO-RS query. For example: WADO-RS: elapsed: 26106623 us, rate: 14.86 instances/s, 155.23Mbps * Fix false errors logs generated e.g when OHIF requests the /dicom-web/studies/../metadata route: "dicom-web:/Configuration.cpp:643] Unsupported return MIME type: application/dicom+json, multipart/related; type=application/octet-stream; transfer-syntax=*, will return DICOM+JSON" ++++ orthanc-ohif: - version 1.7 * Updated OHIF to 3.11.0 ++++ orthanc-postgresql: - version 9.0 * DB-scheme rev. 6 - check Orthanc book ++++ orthanc-python: - version 6.0 * The auto-generation of the Python wrapper is now part of the build, to exploit the ORTHANC_PLUGIN_SINCE_SDK macro. This provides backward compatibility with the SDK that is actually installed on the system * Added Windows builder for Python 3.13 * Added Docker-based builder scripts for Debian 13 (trixie) ++++ pan: - Update to version 0.164: * Fix article part detection where multipart articles were detected as many articles instaed of one article with many parts. * Fix crash when displaying emoticon replacement - Force GCC 11 on Leap 15.6 and older for c++ filesystem support. - Drop empty %check section. ++++ perl-Net-DNS: - updated to 1.520.0 (1.52) see /usr/share/doc/packages/perl-Net-DNS/Changes ++++ praat: - Update to version 6.4.40: * Faster computation of spectrograms and formants (because of multithreading). * Full awareness of processors with up to 400 physical threads (i.e. 200 or 400 cores). ++++ pyenv: - Update 2.6.7 * Skip Zlib from XCode for XCode 16+ by @native-api in #3298 * Don't fail the build if xcodebuild fails by @native-api in #3302 * Add CPython 3.14.0rc2 and 3.13.7 by @nedbat in #3303 - Update 2.6.6 * Add anaconda3-2025.06-0, anaconda3-2025.06-1, miniconda3-25.3.1-1, miniconda3-25.5.1-0, miniconda3-25.5.1-1 by @native-api in #3295 * Add CPython 3.13.6 by @cesarcoatl in #3297 ++++ python-matplotlib: - Update to 3.10.5 * Bugfix release. No notable changes beyond the GitHub statistics of merged PRs. (https://matplotlib.org/stable/users/github_stats.html#github-stats) - Remove "%python-numpy-devel < 2.3" BuildRequires upper limit - Drop not needed patch Pillow-13-compat.patch ++++ python-pytest-examples: - Skip tests failing with ruff 0.12.9 ++++ python-rpmfile: - Add %{?sle15_python_module_pythons} - Fix alternatives, and use update-alternatives in SLE-15 ++++ python-social-auth-core: - Add pyproject-license.patch to work around setup failure on Leap - Update to 4.7.0: * multiple versions skipped, reference upstream changelog - Build SAML support by default again (remove conditionals, update dependencies) ++++ redis: - Updated to 8.2.1 * https://github.com/redis/redis/releases/tag/8.2.1 - Bug fixes * #14240 INFO KEYSIZES - potential incorrect histogram updates on cluster mode with modules * #14274 Disable Active Defrag during flushing replica * #14276 XADD or XTRIM can crash the server after loading RDB * #Q6601 Potential crash when running FLUSHDB (MOD-10681) * Performance and resource utilization * Query Engine - LeanVec and LVQ proprietary Intel optimizations were removed from Redis Open Source * #Q6621 Fix regression in INFO (MOD-10779) ++++ rioterm: - Update to version 0.2.29: * update deps * docs: update releases.md with recent fixes * flake.lock: Update * fix blinking cursor (closes #1269) * fix Rio uses UNC (\?\) path as working directory, breaking Neovim subprocesses * add NSCameraUseContinuityCameraDeviceType to plist * update com.rioterm.Rio.metainfo.xml ++++ shotcut: - Update to 25.08.16: * Fixed Gain/Volume filter from a previous version project does not show its UI or keyframes * Fixed artifacts in Gain/Volume, Fade In Audio, and Fade Out Audio filters (broke in v25.07). * Fixed frequent crashing in Fedora Linux RPM package (broke in v25.05). * Fixed converting BT.709 color space to BT.2020. * Added BT.2020 color space support to the preview. * Fixed Export File with & in the path or name saves wrong name. * Added Embed Markers as Chapters to export job context menu. ++++ stackit-cli: - Update to version 0.39.1 (0.39.0 is on the same commit): * feat(ske): show cluster errors in table output (#907) * fix(deps): update stackit sdk modules (#903) * chore(deps): bump actions/checkout from 4 to 5 (#920) * chore(deps): bump github.com/stackitcloud/stackit-sdk-go/services/serviceaccount (#917) * chore(deps): bump renovatebot/github-action from 43.0.5 to 43.0.7 (#919) * chore(deps): update module golang.org/x/tools to v0.36.0 (#911) * fix(cli): stackit auth get-access-token does not work as expected (#922) ++++ stalld: - Add systemd-execstart.patch: * fix "Service has more than one ExecStart= setting" error introduced in 9f2e4fc3 - Add util-linux to the dependencies due to chrt - update to 1.20.3: * stalld.service: Fix failure to set FIFO scheduling class * bpf: Improve task tracking in sched_switch * bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch * stalld: Automatically switch to log-only mode if DL-server present * bpf/stalld: Implement and use find_queued_task helper in dequeue_task * bpf/stalld: Introduce and use for_each_task_entry/ for_each_queued_task macros * stalld: sched_attr: Do not define for glibc >= 2.41 * stalld: Refactor verbose logging with dedicated macros * bpf/stalld: Introduce generic 'log' macro for BPF debug prints * bpf/stalld: Unify and generalize debug macro to DEBUG_STALLD - build with BPF support on aarch64/x86_64 ++++ swappy: - Update to 1.7.1: * render: fix drawing transparent images (49f84fd) - Update to 1.7.0: Features: * auto saving on quit app (72a511c) * config: custom_color config option (726159d) * i18n: add zh_CN locale (9e7f3b2) * auto saving on quit app (72a511c) * config: custom_color config option (726159d) * i18n: add zh_CN locale (9e7f3b2) Bug Fixes: * config: fix segfault at exit (182322d) * ui: add non-versioned fontawesome (3941fec) * config: fix segfault at exit (182322d) * ui: add non-versioned fontawesome (3941fec) ++++ trufflehog: - Update to version 3.90.5: * Update proto definitions for custom bitbucket oauth (#4390) * Update PreCommit.md with audit mode details (#4280) * Add additional unicode escape support (#4296) * Utf16 bom support (#4326) * fix(deps): update module github.com/sendgrid/sendgrid-go to v3.16.1+incompatible (#4232) * fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.16.0 (#4342) * Improved and fixed copper detector (#4394) * Fixed and improved currentsapi detector (#4391) ++++ weechat: - Update to 4.7.1: Fixed * relay/api: fix crash when an invalid HTTP request is received from a client ++++ wicked2nm: - Update to v1.2.1 * bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 [bsc#1248010] ++++ yast2-trans: - Update to version 84.87.20250814.c1572246ad: * Translated using Weblate (Catalan) * Update translation files * New POT for text domain 'bootloader'. * Update translation files * New POT for text domain 'bootloader'. * Translated using Weblate (German) * Translated using Weblate (German) ++++ zizmor: - Update to version 1.12.1: * Bug Fixes - Fixed a bug where the cache-poisoning would incorrectly detect the opposite cases for cache enablement (#1081) - Update to version 1.12.0: * New Features - New audit: unsound-condition detects if: conditions that inadvertently always evaluate to true (#1053) * Enhancements - The cache-poisoning audit now supports auto-fixes for many findings (#923) - The known-vulnerable-actions audit now supports auto-fixes for many findings (#1019) - zizmor is now stricter about parsing uses: clauses. In particular, zizmor will no longer accept uses: org/repo without a trailing @ref, as GitHub Actions itself does not accept this syntax (#1019) - The use-trusted-publishing audit now detects many more patterns, including cargo publish and other run: blocks that make use of publishing commands directly (#1042) - The insecure-commands audit now supports auto-fixes for many findings (#1045) - The template-injection audit now detects more action injection sinks (#1059) * Bug Fixes - Fixed a bug where --fix would fail to preserve comments when modifying block-style YAML mappings (#995) - Fixed a bug where zizmor would crash when given a GitHub API token with leading or trailing whitespace (#1027) - Fixed a bug where template-injection findings in --fix mode would be incorrectly patched when referencing an env.* context (#1052) - Fixed a bug where template-injection findings in --fix mode would be patched with shell syntax that didn't match the step's actual shell (#1064) ------------------------------------------------------------------ ------------------ 2025-8-17 - Aug 17 2025 ------------------- ------------------------------------------------------------------ ++++ distribution-gpg-keys: - update to 1.114: + Add Fedora 45 key ++++ firefox-esr: - Firefox Extended Support Release 140.2.0 ESR * Fixed: Various security fixes. - Mozilla Firefox ESR 140.2.0 https://www.mozilla.org/security/advisories/mfsa2025-67 MFSA 2025-67 (boo#1248162) * CVE-2025-9179 (bmo#1979527) Sandbox escape due to invalid pointer in the Audio/Video: GMP component * CVE-2025-9180 (bmo#1979782) Same-origin policy bypass in the Graphics: Canvas2D component * CVE-2025-9181 (bmo#1977130) Uninitialized memory in the JavaScript Engine component * CVE-2025-9182 (bmo#1975837) Denial-of-service due to out-of-memory in the Graphics: WebRender component * CVE-2025-9183 (bmo#1976102) Spoofing issue in the Address Bar component * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163, bmo#1979955) Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166) Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 ++++ forgejo-runner: - update to version 9.1.0: * feat: support actions with 'using: node24' * feat: fail when using an invalid label during non interactive registration * feat: added support for dereferenced map properties * feat: support evaluation of concurrency clauses in runner * feat: log parsed commands and step summary * feat: added info log when container image platform mismatched * feat: wait for services to be healthy before starting a job * fix: report the job as failed when the [runner].timeout expires * fix: data race in 'runs-on' expressions causes incorrect job labels during execution * fix: race condition in matrix job result state may result in failed jobs being marked as successful * fix: ensure unique container names for reusable workflows * fix: data race condition causing incorrect shell on a task step if it referenced a matrix variable * fix: use a unique random name to derive network and volumes for a job * fix: the configuration must not be used as temporary storage * fix: container removal is the runner responsibility * fix: update reusable workflow input handling * fix(security): multline secrets trivially transformed are redacted * fix: prevent unintended input replacement in reusable workflows with workflow_dispatch when using workflow_call * fix: composite action input pollution * fix: prevent space prefix/suffix in runner labels * fix: valueMasker concurrent map write * fix: short sha has at least four digits ++++ llamacpp: - Update to version 6188: * Vulkan backend improvements: larger workgroups, optimized argsort, fused adds, bounds checking, out-of-bounds and compile warning fixes, performance logging. * OpenCL backend: initial FA and mxfp4 support. * Model support: vision LiquidAI LFM2-VL family, 18-layer Gemma 3-270m model type. * Common: fixed double BOS, improved chat templates, added override-tensor and CPU MoE draft parameters. * GGML: initial IBM zDNN backend, rope_multi update, conv_1d_dw bug fix, block_iq4_nlx8 repack, improved Mistral integration. * Server: SWA checkpoints, -td/-tbd parameters, harmony thought message filtering. * Perplexity: improved error hints and constraint reporting. * GPT-OSS: harmony parsing implemented. ++++ ghc-happy-lib: - Update happy-lib to version 2.1.7. [#]# 2.1.7 * Add support for `{-# OPTIONS_HAPPY ... #-}` pragmas ([#342](https://github.com/haskell/happy/issues/342)). * Tested with GHC 8.0 - 9.12.2. The Haskell code generated by Happy is for GHC 8.0 and up. ++++ manga-tui: - Update to version 0.9.0: * Add save filters used mangadex * Add functions to delete manga from history ++++ maven-javadoc-plugin: - Upgrade to upstream version 3.11.3 * Removed + Remove workaround for long patched CVE in javadoc * New features and improvements + Issue #369 Support --no-fonts option per default for jdk 23+ * Bug Fixes + Make the legacyMode consistent (Filter out all of the module-info.java files in legacy mode, do not use - -source-path in legacy mode) + MJAVADOC-826: Don't try to modify project source roots * Documentation updates + Correct javadoc-no-fork description on index-page + MNGSITE-529: Rename "Goals" to "Plugin Documentation" + (doc) Close links tag in links parameter javadoc example * Maintenance + Be consistent about data encoding when copying files + Clean up JavadocUtilTest + Use Java 7 relativization instead of hand-rolled code + Rephrase source code fix interactive messages for clarity + Reduce non-debug logging + Delete duplicate @throws clause + Use Java 7 relativization instead of our hand-rolled code + Clean up comments and argument names + Issue #378 Cleanup of code related to old non supported Java version + Cure deprecation warning + MJAVADOC-773: deprecate toRelative + Issue #373 Fix JDK 23 build + Fix aggregate Javadoc typo + Enable GH issues + MJAVADOC-825: Prefer NullPointerExceptions for null arguments - Removed patches: * 0001-Be-consistent-about-data-encoding-when-copying-files.patch * 0002-Make-the-legacyMode-consistent-and-actually-useful.patch + integrated in this version ++++ python-feedgenerator: - update to version 2.2.1: * Restore missing content property to default item dictionary - change documentation to README.md to match upstream ------------------------------------------------------------------ ------------------ 2025-8-16 - Aug 16 2025 ------------------- ------------------------------------------------------------------ ++++ lapack: - Re-download lapack-deprecated-lwork-use.patch and lapack-update-patch-version.patch: github is known not to be very stable on offering patches without changes (the length of the references keeps on changing). ++++ lapack-static: - Re-download lapack-deprecated-lwork-use.patch and lapack-update-patch-version.patch: github is known not to be very stable on offering patches without changes (the length of the references keeps on changing). ++++ capnet-assist: - update to version 8.0.2: * MainWindow: Fix build warnings ++++ chocolate-doom: - Update to release 3.1.1 * Use native OpenGL texture format for better performance * Add option to enable or disable smooth pixel scaling * Allow spaces in GUS patch folder path * Add support for non-US backslash key * Use $TMPDIR to find tempdir on Unix - Delete declare_code_as_C99_compliant.patch ++++ cosmic-comp: - apply fix-vendor.patch and fix-Cargo.toml.patch, as we need to update a dependency, so it can build against a higher version ++++ ddskk: - Split ddskk-doc out of ddskk: Since too many documents files installed with the binary package, seperate them to a solo doc package. User could have a choice to install or not. ++++ fastfetch: - Update to 2.50.2: Bugfixes: * Fixes linglong package detection V2 (gh#fastfetch-cli/fastfetch#1903) * Fixes building with -DENABLE_SYSTEM_YYJSON=ON (gh#fastfetch-cli/fastfetch#1904) * Fixes showMac does not honor defaultRouteOnly (gh#fastfetch-cli/fastfetch#1902) * Fixes failing to acquire default route on Linux in certain cases (gh#fastfetch-cli/fastfetch#1902) ++++ ghex: - Update to version 48.0: + gtkhex: Improve {ascii,hex}_to_pointer accuracy + common: Don't gtk_window_destroy in ::response signal in AdwAlertDialog. + Updated translations. ++++ happy: - Update happy to version 2.1.7. [#]# 2.1.7 * Add support for `{-# OPTIONS_HAPPY ... #-}` pragmas ([#342](https://github.com/haskell/happy/issues/342)). * Tested with GHC 8.0 - 9.12.2. The Haskell code generated by Happy is for GHC 8.0 and up. ++++ kernel-firmware-amdgpu: - Update to version 20250815 (git commit 07ed893df57c): * amdgpu: DMCUB updates for various ASICs ++++ level-zero: - Change - level-zero-1.22.4.tar.gz (original link) ++++ lxc: - Update to LXC 6.0.5. The upstream changelog can be found at * Fixes a regression introduced in LXC 6.0.4 which was causing some hooks to fail due to no-new-priv handling * Removed support for building with the bionic C library (Android) as it hadn’t been functional for a long time * Fixed handling of the container_ttys environment variable + Added support for both move and nosymfollow mount options * Improved testsuite coverage - Remove upstreamed patches: - fix-apparmor.patch ++++ PackageKit-Qt5: - Add upstream change to fix a discover crash (kde#508235): * 0001-offline-Ensure-the-enum-is-registered.patch ++++ PackageKit-Qt6: - Add upstream change to fix a discover crash (kde#508235): * 0001-offline-Ensure-the-enum-is-registered.patch ++++ planify: - update to version 4.13.2: * Fixed all-day events detection to use local time instead of UTC * Fixed project view destruction timing during transitions * Only allow valid SSL certificates * Added option to manually enter Todoist token * Disabled keyboard shortcuts when Entry regains focus after closing a dialog * Avoided resetting TextView content when clicking while editing * Limited description text area height and enabled scroll * Fixed placeholder behavior in TextView * Simplified time label formatting logic * Added natural sort comparison for strings with numbers * Fixed duplication turning notes into tasks * Improved layout alignment for note-type tasks * Fixed Pinboard not updating correctly * Show completed tasks below pending tasks with pagination - update to version 4.13.0: * Improved task handling in the Today view * Nextcloud login flow redesigned for better UX and stability * Fixed crashes caused by UTF-8 character handling * Refactored utility methods and internal cleanup ++++ profanity: - rework spec file to wrap bcond around optional dependencies. This allows a clean generation of the -mini headless build boo#1246851 - split the library and -devel packages - enable xscreensaver awareness, use gtk3 - run some tests - add profanity-0.15.0-Fix-tests-with-gcc15-uintptr_t.patch to fix tests with gcc15 - package the license files ++++ switchboard: - update to version 8.0.3: * Application: don't set gtk_use_portal * SettingsSideBar: Fix selection of the correct row * Add System Updates action * SettingsSidebar: Fix null access when selection of SettingsSidebarRow is cleared ++++ limine: - Update to 9.6.1: * EFI chainloading: Make EFI device path of loaded image relative to the loaded image device handle. This now complies with the EFI specification, and, amongst others, it fixes chainloading Shim. * Miscellaneous build system changes and improvements. * Do not disable linker relaxations for LoongArch64. * `limine` host tool: Add check to ensure that a provided GPT BIOS partition is at least 32KiB in size. ++++ lxcfs: - Update to 6.0.5. The upstream changelog can be found at * No code changes, just a version bump to match the LXC and Incus LTS. ++++ openQA: - Update to version 5.1755366162.ba8741a1: * Use backticks in docs for querying job settings ++++ pantheon-bluetooth-daemon: - update to version 1.1.0: * Application: Refactoring * Manager: Fix always checking whether the first adapter is discovering * ObjectManager: Refactoring * DeviceRow: GTK4 prep * Application: move dark style support to startup * SenderDialog: GTK4 prep * Manager: track and set global state * Fix send files by Bluetooth ++++ pantheon-screenshot: - update to version 8.0.2: * ScreenshotBackend: check for redacted font * Use Gtk.FileDialog to choose screenshots folder * Fix screenshot is not saved to the selected folder if changed ++++ pantheon-settings-daemon: - update to version 8.3.1: * Fix orientation lock sync * Sync Wingpanel transparency to Greeter * Add application shortcuts backend * Cache dynamic accent color in account settings and use it in Portal * Fix housekeeping ++++ pantheon-stylesheet: - update to version 8.2.1: * Adw.ViewSwitcher: Fix crash with icon size * Add Latte stylesheet ++++ profanity-mini: - rework spec file to wrap bcond around optional dependencies. This allows a clean generation of the -mini headless build boo#1246851 - split the library and -devel packages - enable xscreensaver awareness, use gtk3 - run some tests - add profanity-0.15.0-Fix-tests-with-gcc15-uintptr_t.patch to fix tests with gcc15 - package the license files ++++ python-findpython: - Update to 0.7.0 * Add an option to show the python path only * Separate free-threaded python from normal ones * Add support for uv installed python * Correct the uv python dir with platformdirs * Return the original python executable if resolve_symlink=True - Update BuildRequires and Requires from pyproject.toml ++++ rapidcsv: - Update to version 8.88: * utf-16 handling for stream-based constructor ++++ rocm-cmake: - Use the default cmake rules for installing ++++ switchboard-plug-display: - update to version 8.0.2: * Styles: add scale.warmth * Fix crash on enabling mirror display * Fix Scale set by adding modes before set calling * Fix crash and display arrangement when pluging new monitor ++++ switchboard-plug-keyboard: - update to version 8.1.0: * Cleanup CustomShortcutListBox * Remove ConflictDialog * Update POTFILES * Add standard system shortcuts to list of conflicts * ConflictsManager: Add comments for translators * Add settings-daemon application launcher support ++++ switchboard-plug-sharing: - update to version 8.0.2: * DLNAPage: use Gtk.FileDialog * Fix no titlebar buttons when network is not available ++++ taradino: - Update to release 20250816 * Fix a rendering bug on systems with the X11 render driver ++++ wayshot: - Update to version 1.3.1+git62.g4f130921361abcbf23159478ebb16c25c808f442: * clippy: apply "collapsible if" suggestion here too * clippy: apply more "collapsible if" suggestions * clippy: apply "collapsible if" suggestion * clippy: apply "collapsible if" suggestion * clippy: apply clippy fixes * fix: logic for argument `-` will not produce a file at the current directory ++++ wine: - updated to 10.13 release - Windows.Gaming.Input configuration tab in the Joystick Control Panel. - ECDSA_P521 and ECDH_P521 algorithms in BCrypt. - OpenGL WoW64 thunks are all generated. - Still more support for Windows Runtime metadata in WIDL. - Various bug fixes. - update staging to 10.13 release ++++ wine-staging: - updated to 10.13 release - Windows.Gaming.Input configuration tab in the Joystick Control Panel. - ECDSA_P521 and ECDH_P521 algorithms in BCrypt. - OpenGL WoW64 thunks are all generated. - Still more support for Windows Runtime metadata in WIDL. - Various bug fixes. - update staging to 10.13 release ++++ wine-staging-wow64: - updated to 10.13 release - Windows.Gaming.Input configuration tab in the Joystick Control Panel. - ECDSA_P521 and ECDH_P521 algorithms in BCrypt. - OpenGL WoW64 thunks are all generated. - Still more support for Windows Runtime metadata in WIDL. - Various bug fixes. - update staging to 10.13 release ++++ wine-wow64: - updated to 10.13 release - Windows.Gaming.Input configuration tab in the Joystick Control Panel. - ECDSA_P521 and ECDH_P521 algorithms in BCrypt. - OpenGL WoW64 thunks are all generated. - Still more support for Windows Runtime metadata in WIDL. - Various bug fixes. - update staging to 10.13 release ++++ xfce4-screensaver: - Update to version 4.20.1 * configure.py: Quote only command line args * README.md: Add uninstall info * Remove reference to INSTALL file from README * Remove outdated INSTALL file * build: Install xfce4-screensaver-configure.py in libexecdir * build: Rename POTFILES.in to POTFILES * Remove autotools build * Update README after switchover to meson * meson-build: Add "none" to authentication-scheme combo * meson-build: Add "none" to session-manager combo * Translation Updates ------------------------------------------------------------------ ------------------ 2025-8-15 - Aug 15 2025 ------------------- ------------------------------------------------------------------ ++++ akonadi: - Add upstream fix: * 0001-Fix-opening-agent-configuration.patch ++++ aws-efs-utils: - Update to version 2.3.3 (bsc#1248055, CVE-2025-55159) * Add environment variable support for AWS profiles and regions * Regenerate Cargo.lock with rust 1.70.0 * Update circle-ci config * Fix AWS Env Variable Test and Code Style Issue * Remove CentOS 8 and Ubuntu 16.04 from verified Linux distribution list - from version 2.3.2 * Update version in amazon-efs-utils.spec to 2.3.1 * Fix incorrect package version ++++ lapack: - Fix update-alternatives fallout: Make sure *.cmake files point to the correct locations after libraries have been moved. - Add tmglib-devel as requires to lapack-devel as this is needed for cmake (bsc#1248134). ++++ lapack-static: - Fix update-alternatives fallout: Make sure *.cmake files point to the correct locations after libraries have been moved. - Add tmglib-devel as requires to lapack-devel as this is needed for cmake (bsc#1248134). ++++ bottom: - Update to version 0.11.1: * Bug Fixes * Fix disk.columns being incorrectly interpreted as blank. * Fix issue with battery widget time and small widths. * Other * Speed up time between startup and displaying data. ++++ chirp: - Update to version 20250815: * icv80: Fix duplex/tx-inhibit setting * add Baofeng BF-F8HP PRO firmware V0.44 support ++++ crmsh: - Update to version 5.0.0+20250815.8d89c3d0: * Dev: ChangeLog: update ChangeLog for release 5.0.0 ++++ darktable: - Update tp version 5.2.1: * https://www.darktable.org/2025/08/darktable-5.2.1-released/ ++++ drbd-utils: - drbd_passive didn't start due to drbd.rules returning error (bsc#1247534) * remove patch - bsc-1239437_drbd.rules-fix-missing-udev-device.patch * add patch - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch ++++ fcitx5: - Fix Fcitx 5 not starting on Plasma Wayland * A regression of the previous fix for boo#1246418 * Run ibus-autostart only from the desktop file for XDG autostart * Drop fcitx5-autostart.patch ++++ forgejo-cli: - update vendor dependencies, fixing bsc#1248047 bsc#1242683 ++++ git-cola: - Update to 4.14.0 - Usability, bells and whistles * The clone dialog now defaults to cloning into the parent directory by default. (#1402) * The Reset actions now remember the last value used. (#1406) * git dag --follow is now supported for viewing the history of files that have been renamed. (#1328) * HTTP proxies are now automatically configured on Gnome and KDE Desktop Environments. (#1420) (#1431) * The Git http.proxy configuration can now be edited on the settings page. (#1420) * The NO_COLOR environment variable is now set to 1 when running the git commit, git fetch, git push and git pull commands. This is done to disable ANSI color output in third-party tools that can be integrated into these commands via git hooks. TERM is also set to dumb for tools that do not honor this variable. (#1426) * The commit message editor now has a “Set Commit Date” option that allows you to override the recorded date and time when authoring commits. (#1429) * The DAG’s automatic column resizing behavior has been improved. (#1432) * The “Copy Commit” Alt + Ctrl + C action was added to the main menu. (#1430) * The DAG and main interfaces have been streamlined to reduce visual clutter. * The DAG viewer now displays staged and modified changes alongside other commits. (#1428) (#1439) * The commit message’s Summary field now resizes itself to match the size of the configured font. (#1301) (#1435) * Git Cola refreshes Git’s “index” (.git/index) automatically on startup by default. This can now be disabled by configuring cola.updateindex to false. (#1438) * The “Set Upstream Branch” menu in the “Branches” tool can grow too large to fit on screen when repositories contain many remote branches. A new dialog with autocomplete and scrollable entry fields was added for selecting a new upstream branch. (#1440) * The DAG viewer will now copy text into the your clipboard when any of the commit ID, author, date or summary fields are clicked in the commit diff view. (#1456) * The DAG viewer now has an option to disable the display of staged and modified changes. * The commit message line length warning is no longer dependent on the cursor position. The longest line in the commit message is now used to enable the warning. (#1448) * Most users will now default to editing the per-repo config by default when opening the settings dialog. New users that do not have the user.name and user.email settings configured will default to editing the global user settings, which was previously the default behavior for all users. (#1460) * The rebase tool now honors the rebase.updateRefs git configuration. The tool will only prompt you whether or not to update stacked branches / refs when this configuration is unset. (#1458) * The rebase.updateRefs configuration can now be configured through the “Update stacked branches/refs when rebasing” checkbox in the settings. * The branches tool would previously make its branches and tags bold when text was input into its filter field. This behavior has been changed so that the branches and tags are now filtered so that only the matching branches and tags are displayed. (#1457) * The value of the Force checkbox, which causes git push --force to be used in the Push tool, now persists across sessions. (#1461) * The push dialog will now prompt when creating new remote branches when the local branch name does not match the new remote branch name. * The diff viewer now displays the number of removed (-) and added (+) lines when the “Show filenames” tool menu option is enabled. (#1471) * The commit tool has a new “Set Commit Author” tool menu action that temporarily switches between author identities independent of your git config settings. The value specified in the dialog is passed directly to git commit --author=.... (#1469) * Widget layouts can now be saved and loaded to *.layout files. Layouts are saved to ~/.config/git-cola/layouts by default and can be saved and loaded using the View > Layouts menu actions. (#1467) * The status tool has been updated to launch editors with multiple files when invoking its “Edit” action. * The commit date tool now has a button to set the time and date to the current time. * The commit message editor now moves up and down visually when word-wrapping is enabled. The cursor previously jumped to the beginning and end of a word-wrapped line when Up and Down were pressed. - Fixes * Qt6 support was improved for the right-click context menus. (#1409) (#1410) * The Ctrl+C “Copy Diff” hotkey was restored in the DAG diff viewer. (#1412) * The repository selection startup dialog was updated to work on Qt6/PyQt6. (#1422) * “Open Using Default Application” now handles paths inside a subdirectory correctly. (#1419) * Qt6 support was improved for the Recent and Favorites filters. * A regression in the tab order when tabbing from the Summary field into the Extended Description field has been fixed. (#1436) * The file system monitoring was made more resilient on Windows when using WSL. (#1441) * A regression in the rebase editor which prevented the display of commits was fixed. (#1442) * File system monitoring on Windows when using WSL was further improved. (#1441) * The DAG view now updates itself when merging branches using the “Branches” tool. (#1454) * Proxy autodetection on KDE was improved to correctly handle the host and port output from kreadconfig*. (#1450) (#1451) (#1452) (#1453) * Various widgets were made more resilient to errors when the Git worktree is externally deleted while Git Cola has it open. (#1445) * Cosmetic typos were fixed in the documentation, translations, docstrings and command-line help messages. (#1446) * The push dialog was fixed to use the correct refspec arguments when pushing a local branch into a differently-named remote branch. (#1462) * The commit message length warning was not being updated in some scenarios. (#1459) * The “Ambiguous shortcut warning” that could be triggered in rare scenarios when using the Amend hotkey has been eliminated. * The “Set Upstream Branch” action in the Branches tool was fixed so that it is robust to scenarios where the upstream branch is renamed. (#1475) * The “Prune Missing Entries” action in the startup dialog and the Bookmarks and Recent tools now save the settings after pruning. (#1479) * The default history viewer on Windows, used by the “Visualize Current Branch…” and “Visualize All Branches…” actions, was updated to avoid issues when settings are edited. (#1496) - Packaging and Dependencies * The setup.cfg file has been removed and pyproject.toml has been updated to handle all of the packaging configuration. pip will no longer install data files such as share/applications, share/metainfo, and the hotkey html files, so the garden.yaml and Makefile commands have been updated to provide this functionality instead. The html files installed in the cola/data/ python package area are necessary for Git Cola’s ? hotkey window and should not be relocated. * notify2 (sudo apt install python3-notify2) is now supported and preferred over notify-py for sending desktop notifications. This is an optional dependency that enables additional features when installed. notify-py will continue to be used if only it is installed, but only notify2 will be used when both are available. Support for the current notifypy API will be kept around for now but if a breaking change is ever introduced then support for notify-py will be dropped in favor of supporting notify2 exclusively. * Improved support for PySide6. PySide2 has some breaking divergences from PyQt6. * The vendored qtpy library was updated to v2.4.2. * The Windows installer now uses Python 3.12 and PyQt 6.9. - Translations * Updated Japanese translation. (#1411) * Updated Chinese (Taiwan) translations. (#1424) * Updated Japanese translation. (#1472) * New Tamil translation. (#1478) - Development * The version number reported by git cola version and the “About” dialog was made more accurate when Git Cola is run directly from a Git worktree. (#1425) ++++ gsoap: - Update to release 2.8.139 * Minor improvement of the `SOAP_XML_IGNORENS` (ignore XML namespaces) logic when performing non-strict XML validation (`SOAP_XML_STRICT` is not enabled) when ignoring extra XML extensibility elements in an inbound SOAP/XML message; no longer produces validation errors for non-serializable XML to "safely" ignore, unless strict XML validation is enabled with `SOAP_XML_STRICT`, as expected. ++++ hawk2: - require openssl explicitelly (bsc#1247899) ++++ helmfile: - Update to version 1.1.5: What's Changed * build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #2128 * Update recommended Helm versions in init.go and run.sh by @yxxhero in #2129 * Add comprehensive .github/copilot-instructions.md for coding agents by @Copilot in #2131 * refactor(state): extract getMissingFileHandler method for clarity by @yxxhero in #2133 * Fix parseHelmVersion to handle helm versions without 'v' prefix by @Copilot in #2132 * build(deps): bump k8s.io/apimachinery from 0.33.3 to 0.33.4 by @dependabot[bot] in #2136 * build(deps): bump github.com/helmfile/chartify from 0.24.6 to 0.24.7 by @dependabot[bot] in #2135 ++++ hplip: - Fix verification of HP plugin with new GPG key (lp#2120738) * add hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch - Fix python crash in hp-setup on compressed PPD file (lp#2120739) * add hp-setup-fix-python-crash-when-manually-importing-gz.patch - Fix missing urllib.URLopener in python 3.14 (lp#2115046) * add hplip-no-urlopener.patch - Only run cupstestppd if explicitly requested with "--with testppd" build parameter - Updated hplip gpg public key fingerprint: 82FF A7C6 AA74 11D9 34BD E173 AC69 536A 2CF3 A243 https://developers.hp.com/hp-linux-imaging-and-printing/hplipDigitalCertificate.html - Update to hplip 3.25.6 - Added support for new printers: * HP LaserJet Enterprise Flow MFP 8601z * HP LaserJet Pro MFP M126a plus * HP LaserJet Pro MFP M126nw plus * HP LaserJet Pro MFP M126snw plus * HP Envy Photo 7200 series * HP Envy Photo 7900 series * HP OfficeJet Pro 9110 Series * HP OfficeJet 9120 Series * HP OfficeJet Pro 9120 Series * HP OfficeJet Pro 9130 Series ++++ kakasi: - Fix build using newer gettext versions - Add patch for missing type definition: + typedef-character.patch ++++ kanidm: - Update to version 1.7.2~git0.d331ea986: * Release 1.7.2 * Resolve replication show-cert issue (#3792) * Add json codec wrapper for unix integration (#3789) * Trying to clean up order of operations in kanidm_unixd_tasks (#3762) * Break-glass account disable command (#3780) * Make it clearer why the user can't login with unixd (#3778) * Improve argon2id parameter search speed (#3768) ++++ kbuild: - Update to snapshot 0.1.9998+svn3686 * header.kmk,footer-pass2-compiling-targets.kmk: Added EARLY_LIBS and LATE_LIBS properties to better control the library order when using templates. The libraries are collected from EARLY_LIBS first, then LIBS, and LATE_LIBS last. * header.kmk: Added KB_FN_LOAD_TOOL and KB_FN_LOAD_SDK for explictly loading a tool or an sdk implementation. * kmk: Automatically ascend if no makefile found and a goal was given on the command line. This is to eliminating the need for Makefile.kup-files as far as compiling individual source files from an editor is concerned. * header.kmk: Always zap the IFS variable so it won't confuse kmk_ash. * kmk/job.c: Deal with escape sequences inside double quotes when we're using kmk_ash. * kBuild/header.kmk: drop the .noarch suffix for KBUILD_DEVTOOLS_TRG_NOARCH and KBUILD_DEVTOOLS_HST_NOARCH. ++++ kernel-default: - Linux 6.16.1 (bsc#1012628). - audit,module: restore audit logging in load failure case (bsc#1012628). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1012628). - fs_context: fix parameter name in infofc() macro (bsc#1012628). - selftests/landlock: Fix readlink check (bsc#1012628). - selftests/landlock: Fix build of audit_test (bsc#1012628). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1012628). - landlock: Fix warning from KUnit tests (bsc#1012628). - ublk: use vmalloc for ublk_device's __queues (bsc#1012628). - hfsplus: make splice write available again (bsc#1012628). - hfs: make splice write available again (bsc#1012628). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1012628). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1012628). - block: mtip32xx: Fix usage of dma_map_sg() (bsc#1012628). - gfs2: Minor do_xmote cancelation fix (bsc#1012628). - nbd: fix lockdep deadlock warning (bsc#1012628). - md: allow removing faulty rdev during resync (bsc#1012628). - kunit/fortify: Add back "volatile" for sizeof() constants (bsc#1012628). - ublk: speed up ublk server exit handling (bsc#1012628). - ublk: validate ublk server pid (bsc#1012628). - md/raid10: fix set but not used variable in sync_request_write() (bsc#1012628). - gfs2: No more self recovery (bsc#1012628). - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (bsc#1012628). - block: sanitize chunk_sectors for atomic write limits (bsc#1012628). - io_uring: fix breakage in EXPERT menu (bsc#1012628). - btrfs: remove partial support for lowest level from btrfs_search_forward() (bsc#1012628). - eventpoll: Fix semi-unbounded recursion (bsc#1012628). - eventpoll: fix sphinx documentation build warning (bsc#1012628). - block: restore two stage elevator switch while running nr_hw_queue update (bsc#1012628). - sched/task_stack: Add missing const qualifier to end_of_stack() (bsc#1012628). - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (bsc#1012628). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1012628). - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (bsc#1012628). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1012628). - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration (bsc#1012628). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1012628). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (bsc#1012628). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1012628). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1012628). - soc: qcom: QMI encoding/decoding for big endian (bsc#1012628). - soc: qcom: fix endianness for QMI header (bsc#1012628). - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (bsc#1012628). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: qcs615: disable the CTI device of the camera block (bsc#1012628). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1012628). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1012628). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1012628). - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (bsc#1012628). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1012628). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1012628). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1012628). - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (bsc#1012628). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI (bsc#1012628). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1012628). - ARM: dts: microchip: sama7d65: Add clock name property (bsc#1012628). - ARM: dts: microchip: sam9x7: Add clock name property (bsc#1012628). - cpufreq: armada-8k: make both cpu masks static (bsc#1012628). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1012628). - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (bsc#1012628). - x86/bugs: Simplify the retbleed=stuff checks (bsc#1012628). - x86/bugs: Introduce cdt_possible() (bsc#1012628). - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (bsc#1012628). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1012628). - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (bsc#1012628). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1012628). - mei: vsc: Event notifier fixes (bsc#1012628). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1012628). - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (bsc#1012628). - mei: vsc: Run event callback from a workqueue (bsc#1012628). - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (bsc#1012628). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1012628). - drivers: misc: sram: fix up some const issues with recent attribute changes (bsc#1012628). - rust: devres: require T: Send for Devres (bsc#1012628). - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855 (bsc#1012628). - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C (bsc#1012628). - ASoC: SDCA: Add missing default in switch in entity_pde_event() (bsc#1012628). - staging: gpib: fix unset padding field copy back to userspace (bsc#1012628). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1012628). - rust: miscdevice: clarify invariant for `MiscDeviceRegistration` (bsc#1012628). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1012628). - pps: fix poll support (bsc#1012628). - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio (bsc#1012628). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1012628). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1012628). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up (bsc#1012628). - selftests/nolibc: correctly report errors from printf() and friends (bsc#1012628). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1012628). - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through waitpid() (bsc#1012628). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1012628). - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install target (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction (bsc#1012628). - staging: gpib: Fix error code in board_type_ioctl() (bsc#1012628). - staging: gpib: Fix error handling paths in cb_gpib_probe() (bsc#1012628). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1012628). - arm64: dts: rockchip: fix PHY handling for ROCK 4D (bsc#1012628). - arm64: dts: st: fix timer used for ticks (bsc#1012628). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1012628). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio (bsc#1012628). - arm64: dts: rockchip: Fix pinctrl node names for RK3528 (bsc#1012628). - PM / devfreq: Check governor before using governor->name (bsc#1012628). - PM / devfreq: Fix a index typo in trans_stat (bsc#1012628). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1012628). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1012628). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1012628). - arm64: dts: rockchip: Fix UART DMA support for RK3528 (bsc#1012628). - kexec_core: Fix error code path in the KEXEC_JUMP flow (bsc#1012628). - ASoC: SDCA: Update memory allocations to zero initialise (bsc#1012628). - ASoC: SDCA: Allow read-only controls to be deferrable (bsc#1012628). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1012628). - driver core: auxiliary bus: fix OF node leak (bsc#1012628). - samples: mei: Fix building on musl libc (bsc#1012628). - soc: qcom: pmic_glink: fix OF node leak (bsc#1012628). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1012628). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1012628). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1012628). - drm/xe: Correct the rev value for the DVSEC entries (bsc#1012628). - drm/xe: Correct BMG VSEC header sizing (bsc#1012628). - platform/x86: oxpec: Fix turbo register for G1 AMD (bsc#1012628). - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property (bsc#1012628). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1012628). - selftests/tracing: Fix false failure of subsystem event test (bsc#1012628). - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the remaining chips (bsc#1012628). - Revert "udmabuf: fix vmap_udmabuf error page set" (bsc#1012628). - udmabuf: fix vmap missed offset page (bsc#1012628). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1012628). - drm/sitronix: Remove broken backwards-compatibility layer (bsc#1012628). - drm/connector: hdmi: Evaluate limited range after computing format (bsc#1012628). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1012628). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1012628). - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (bsc#1012628). - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (bsc#1012628). - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (bsc#1012628). - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (bsc#1012628). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1012628). - netconsole: Only register console drivers when targets are configured (bsc#1012628). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1012628). - net, bpf: Fix RCU usage in task_cls_state() for BPF programs (bsc#1012628). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1012628). - bpf: handle jset (if a & b ...) as a jump in CFG computation (bsc#1012628). - selftests/bpf: Fix unintentional switch case fall through (bsc#1012628). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1012628). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1012628). - slub: Fix a documentation build error for krealloc() (bsc#1012628). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1012628). - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine() (bsc#1012628). - net: mana: Fix potential deadlocks in mana napi ops (bsc#1012628). - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (bsc#1012628). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1012628). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1012628). - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (bsc#1012628). - wifi: ath12k: update channel list in worker when wait flag is set (bsc#1012628). - wifi: ath12k: Fix double budget decrement while reaping monitor ring (bsc#1012628). - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1012628). - caif: reduce stack size, again (bsc#1012628). - net: annotate races around sk->sk_uid (bsc#1012628). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1012628). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1012628). - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (bsc#1012628). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1012628). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1012628). - drm/xe/uapi: Correct sync type definition in comments (bsc#1012628). - team: replace team lock with rtnl lock (bsc#1012628). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1012628). - wifi: ath12k: Clear auth flag only for actual association in security mode (bsc#1012628). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1012628). - net/mlx5: Check device memory pointer before usage (bsc#1012628). - net: dst: annotate data-races around dst->input (bsc#1012628). - net: dst: annotate data-races around dst->output (bsc#1012628). - net: dst: add four helpers to annotate data-races around dst->dev (bsc#1012628). - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (bsc#1012628). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1012628). - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (bsc#1012628). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1012628). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1012628). - m68k: Don't unregister boot console needlessly (bsc#1012628). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1012628). - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (bsc#1012628). - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (bsc#1012628). - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (bsc#1012628). - drm/amdkfd: Move the process suspend and resume out of full access (bsc#1012628). - drm/amdgpu: rework queue reset scheduler interaction (bsc#1012628). - drm/amdgpu: move force completion into ring resets (bsc#1012628). - drm/amdgpu/gfx10: fix KGQ reset sequence (bsc#1012628). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1012628). - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini" (bsc#1012628). - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (bsc#1012628). - wifi: ath12k: Block radio bring-up in FTM mode (bsc#1012628). - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (bsc#1012628). - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1012628). - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when there are multi display output on rk3588/rk3568 (bsc#1012628). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1012628). - fbcon: Fix outdated registered_fb reference in comment (bsc#1012628). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1012628). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1012628). - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (bsc#1012628). - wifi: ath12k: update unsupported bandwidth flags in reg rules (bsc#1012628). - wifi: ath12k: pack HTT pdev rate stats structs (bsc#1012628). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1012628). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1012628). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1012628). - spi: spi-nxp-fspi: Check return value of devm_mutex_init() (bsc#1012628). - leds: lp8860: Check return value of devm_mutex_init() (bsc#1012628). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1012628). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1012628). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1012628). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1012628). - sched/deadline: Reset extra_bw to max_bw when clearing root domains (bsc#1012628). - iommu/vt-d: Do not wipe out the page table NID when devices detach (bsc#1012628). - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (bsc#1012628). - iommu/arm-smmu: disable PRR on SM8250 (bsc#1012628). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1012628). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1012628). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1012628). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1012628). - mwl8k: Add missing check after DMA map (bsc#1012628). - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (bsc#1012628). - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (bsc#1012628). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1012628). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1012628). - selftests/bpf: fix implementation of smp_mb() (bsc#1012628). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1012628). - rcu: Fix delayed execution of hurry callbacks (bsc#1012628). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1012628). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1012628). - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1012628). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1012628). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1012628). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1012628). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1012628). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1012628). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1012628). - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (bsc#1012628). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1012628). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1012628). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1012628). - kcsan: test: Initialize dummy variable (bsc#1012628). - memcg_slabinfo: Fix use of PG_slab (bsc#1012628). - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (bsc#1012628). - wifi: mac80211: fix WARN_ON for monitor mode on some devices (bsc#1012628). - arm64/gcs: task_gcs_el0_enable() should use passed task (bsc#1012628). - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (bsc#1012628). - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (bsc#1012628). - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (bsc#1012628). - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (bsc#1012628). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1012628). - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (bsc#1012628). - Bluetooth: btintel: Define a macro for Intel Reset vendor command (bsc#1012628). - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (bsc#1012628). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1012628). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1012628). - bpf: Reject narrower access to pointer ctx fields (bsc#1012628). - tools/rv: Do not skip idle in trace (bsc#1012628). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1012628). - selftests: drv-net: tso: enable test cases based on hw_features (bsc#1012628). - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type (bsc#1012628). - selftests: drv-net: tso: fix non-tunneled tso6 test case name (bsc#1012628). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1012628). - can: tscan1: Kconfig: add COMPILE_TEST (bsc#1012628). - can: tscan1: CAN_TSCAN1 can depend on PC104 (bsc#1012628). - can: kvaser_pciefd: Store device channel index (bsc#1012628). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1012628). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1012628). - selftests: netfilter: Ignore tainted kernels in interface stress test (bsc#1012628). - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface tunl0 (bsc#1012628). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1012628). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1012628). - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (bsc#1012628). - macsec: set IFF_UNICAST_FLT priv flag (bsc#1012628). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1012628). - neighbour: Fix null-ptr-deref in neigh_flush_dev() (bsc#1012628). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1012628). - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (bsc#1012628). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1012628). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1012628). - ipv6: add a retry logic in net6_rt_notify() (bsc#1012628). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1012628). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1012628). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1012628). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1012628). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1012628). - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (bsc#1012628). - rv: Remove trailing whitespace from tracepoint string (bsc#1012628). - rv: Use strings in da monitors tracepoints (bsc#1012628). - rv: Adjust monitor dependencies (bsc#1012628). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1012628). - fortify: Fix incorrect reporting of read buffer size (bsc#1012628). - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings() (bsc#1012628). - remoteproc: qcom: pas: Conclude the rename from adsp (bsc#1012628). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1012628). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1012628). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1012628). - crypto: qat - use unmanaged allocation for dc_data (bsc#1012628). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1012628). - crypto: s390/hmac - Fix counter in export state (bsc#1012628). - crypto: s390/sha3 - Use cpu byte-order when exporting (bsc#1012628). - padata: Fix pd UAF once and for all (bsc#1012628). - crypto: ccp - Fix dereferencing uninitialized error pointer (bsc#1012628). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1012628). - crypto: qat - fix state restore for banks with exceptions (bsc#1012628). - mtd: fix possible integer overflow in erase_xfer() (bsc#1012628). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1012628). - media: imx-jpeg: Account for data_offset when getting image address (bsc#1012628). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1012628). - perf parse-events: Set default GH modifier properly (bsc#1012628). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1012628). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1012628). - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC (bsc#1012628). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1012628). - power: supply: qcom_pmi8998_charger: fix wakeirq (bsc#1012628). - power: supply: max1720x correct capacity computation (bsc#1012628). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1012628). - crypto: ahash - Add support for drivers with no fallback (bsc#1012628). - crypto: ahash - Stop legacy tfms from using the set_virt fallback path (bsc#1012628). - crypto: qat - restore ASYM service support for GEN6 devices (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1012628). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1012628). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1012628). - pinctrl: canaan: k230: add NULL check in DT parse (bsc#1012628). - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (bsc#1012628). - PCI: Adjust the position of reading the Link Control 2 register (bsc#1012628). - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (bsc#1012628). - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - soundwire: Correct some property names (bsc#1012628). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1012628). - soundwire: debugfs: move debug statement outside of error handling (bsc#1012628). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1012628). - fanotify: sanitize handle_type values when reporting fid (bsc#1012628). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1012628). - RDMA/ipoib: Use parent rdma device net namespace (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (bsc#1012628). - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (bsc#1012628). - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (bsc#1012628). - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (bsc#1012628). - Fix dma_unmap_sg() nents value (bsc#1012628). - leds: pca955x: Avoid potential overflow when filling default_label (take 2) (bsc#1012628). - gitignore: allow .pylintrc to be tracked (bsc#1012628). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1012628). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1012628). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1012628). - perf sched: Make sure it frees the usage string (bsc#1012628). - perf sched: Free thread->priv using priv_destructor (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1012628). - perf sched: Fix thread leaks in 'perf sched timehist' (bsc#1012628). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1012628). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1012628). - clk: spacemit: mark K1 pll1_d8 as critical (bsc#1012628). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1012628). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1012628). - crypto: ccp - Fix locking on alloc failure handling (bsc#1012628). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1012628). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1012628). - RDMA/hns: Get message length of ack_req from FW (bsc#1012628). - RDMA/hns: Fix accessing uninitialized resources (bsc#1012628). - RDMA/hns: Drop GFP_NOWARN (bsc#1012628). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1012628). - tracing: Use queue_rcu_work() to free filters (bsc#1012628). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1012628). - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (bsc#1012628). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1012628). - cxl/core: Introduce a new helper cxl_resource_contains_addr() (bsc#1012628). - cxl/edac: Fix wrong dpa checking for PPR operation (bsc#1012628). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1012628). - perf tests bp_account: Fix leaked file descriptor (bsc#1012628). - perf hwmon_pmu: Avoid shortening hwmon PMU name (bsc#1012628). - perf python: Fix thread check in pyrf_evsel__read (bsc#1012628). - perf python: Correct pyrf_evsel__read for tool PMUs (bsc#1012628). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1012628). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1012628). - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (bsc#1012628). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1012628). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: core: Fix kernel doc for scsi_track_queue_full() (bsc#1012628). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1012628). - PCI: Fix driver_managed_dma check (bsc#1012628). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1012628). - selftests/cgroup: fix cpu.max tests (bsc#1012628). - ext4: fix inode use after free in ext4_end_io_rsv_work() (bsc#1012628). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1012628). - clk: at91: sam9x7: update pll clk ranges (bsc#1012628). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1012628). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1012628). - crypto: qat - fix virtual channel configuration for GEN6 devices (bsc#1012628). - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (bsc#1012628). - cgroup: Add compatibility option for content of /proc/cgroups (bsc#1012628). - soundwire: stream: restore params when prepare ports fail (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1012628). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1012628). - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence (bsc#1012628). - remoteproc: xlnx: Disable unsupported features (bsc#1012628). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1012628). - clk: thead: th1520-ap: Describe mux clocks with clk_mux (bsc#1012628). - tools subcmd: Tighten the filename size in check_if_command_finished (bsc#1012628). - perf pmu: Switch FILENAME_MAX to NAME_MAX (bsc#1012628). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1012628). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1012628). - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string (bsc#1012628). - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers (bsc#1012628). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1012628). - ASoC: fsl_xcvr: get channel status data with firmware exists (bsc#1012628). - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (bsc#1012628). - sh: Do not use hyphen in exported variable name (bsc#1012628). - perf tools: Remove libtraceevent in .gitignore (bsc#1012628). - clk: clocking-wizard: Fix the round rate handling for versal (bsc#1012628). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1012628). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1012628). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1012628). - smb: client: allow parsing zero-length AV pairs (bsc#1012628). - drm/xe/configfs: Fix pci_dev reference leak (bsc#1012628). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1012628). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1012628). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1012628). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1012628). - drm/xe/vf: Disable CSC support on VF (bsc#1012628). - selftests: ALSA: fix memory leak in utimer test (bsc#1012628). - ALSA: usb: scarlett2: Fix missing NULL check (bsc#1012628). - perf record: Cache build-ID of hit DSOs only (bsc#1012628). - bpf: Add cookie object to bpf maps (bsc#1012628). - bpf: Move bpf map owner out of common struct (bsc#1012628). - bpf: Move cgroup iterator helpers to bpf.h (bsc#1012628). - bpf: Fix oob access in cgroup local storage (bsc#1012628). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1012628). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1012628). - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (bsc#1012628). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1012628). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1012628). - vhost: Reintroduce kthread API and add mode selection (bsc#1012628). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1012628). - bpf: Check netfilter ctx accesses are aligned (bsc#1012628). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1012628). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1012628). - dm-flakey: Fix corrupt_bio_byte setup checks (bsc#1012628). - uprobes: revert ref_ctr_offset in uprobe_unregister error path (bsc#1012628). - scripts: gdb: move MNT_* constants to gdb-parsed (bsc#1012628). - squashfs: use folios in squashfs_bio_read_cached() (bsc#1012628). - squashfs: fix incorrect argument to sizeof in kmalloc_array call (bsc#1012628). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1012628). - i3c: fix module_i3c_i2c_driver() with I3C=n (bsc#1012628). - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk (bsc#1012628). - module: Restore the moduleparam prefix length check (bsc#1012628). - ucount: fix atomic_long_inc_below() argument type (bsc#1012628). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1012628). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1012628). - f2fs: fix bio memleak when committing super block (bsc#1012628). - f2fs: fix to avoid invalid wait context issue (bsc#1012628). - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (bsc#1012628). - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (bsc#1012628). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1012628). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1012628). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1012628). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1012628). - f2fs: doc: fix wrong quota mount option description (bsc#1012628). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1012628). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1012628). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1012628). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1012628). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1012628). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1012628). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1012628). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1012628). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1012628). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1012628). - vfio: Prevent open_count decrement to negative (bsc#1012628). - vfio/pds: Fix missing detach_ioas op (bsc#1012628). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1012628). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1012628). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1012628). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1012628). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1012628). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1012628). - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD (bsc#1012628). - sched/psi: Fix psi_seq initialization (bsc#1012628). - padata: Remove comment for reorder_work (bsc#1012628). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1012628). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1012628). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1012628). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1012628). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1012628). - tools/power turbostat: regression fix: --show C1E% (bsc#1012628). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1012628). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1012628). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1012628). - NFSv4.2: another fix for listxattr (bsc#1012628). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1012628). - ARM: s3c/gpio: complete the conversion to new GPIO value setters (bsc#1012628). - md/md-cluster: handle REMOVE message earlier (bsc#1012628). - kcm: Fix splice support (bsc#1012628). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1012628). - phy: mscc: Fix parsing of unicast frames (bsc#1012628). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1012628). - net: mdio_bus: Use devm for getting reset GPIO (bsc#1012628). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1012628). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1012628). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1012628). - s390/mm: Set high_memory at the end of the identity mapping (bsc#1012628). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1012628). - block: Fix default IO priority if there is no IO context (bsc#1012628). - block: ensure discard_granularity is zero when discard is not supported (bsc#1012628). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1012628). - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show() (bsc#1012628). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1012628). - selftests: avoid using ifconfig (bsc#1012628). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1012628). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1012628). - net: drop UFO packets in udp_rcv_segment() (bsc#1012628). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1012628). - md: make rdev_addable usable for rcu mode (bsc#1012628). - sunrpc: fix client side handling of tls alerts (bsc#1012628). - drm/xe/pf: Disable PF restart worker on device removal (bsc#1012628). - x86/irq: Plug vector setup race (bsc#1012628). - eth: fbnic: unlink NAPIs from queues on error to open (bsc#1012628). - ipa: fix compile-testing with qcom-mdt=m (bsc#1012628). - net: devmem: fix DMA direction on unmapping (bsc#1012628). - net: airoha: npu: Add missing MODULE_FIRMWARE macros (bsc#1012628). - benet: fix BUG when creating VFs (bsc#1012628). - Revert "net: mdio_bus: Use devm for getting reset GPIO" (bsc#1012628). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1012628). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1012628). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1012628). - eth: fbnic: Fix tx_dropped reporting (bsc#1012628). - eth: fbnic: Lock the tx_dropped update (bsc#1012628). - NFS/localio: nfs_close_local_fh() fix check for file closed (bsc#1012628). - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh() (bsc#1012628). - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file (bsc#1012628). - net: ti: icssg-prueth: Fix skb handling for XDP_PASS (bsc#1012628). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1012628). - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies (bsc#1012628). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1012628). - s390/boot: Fix startup debugging log (bsc#1012628). - smb: server: remove separate empty_recvmsg_queue (bsc#1012628). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1012628). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - smb: client: remove separate empty_packet_queue (bsc#1012628). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1012628). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - nvmet: exit debugfs after discovery subsystem exits (bsc#1012628). - pptp: fix pptp_xmit() error path (bsc#1012628). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1012628). - tools/power turbostat: Fix bogus SysWatt for forked program (bsc#1012628). - tools/power turbostat: Fix DMR support (bsc#1012628). - nfsd: don't set the ctime on delegated atime updates (bsc#1012628). - nfsd: avoid ref leak in nfsd_open_local_fh() (bsc#1012628). - sunrpc: fix handling of server side tls alerts (bsc#1012628). - perf/core: Preserve AUX buffer allocation failure result (bsc#1012628). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1012628). - perf/core: Exit early on perf_mmap() fail (bsc#1012628). - perf/core: Handle buffer mapping fail correctly in perf_mmap() (bsc#1012628). - perf/core: Prevent VMA split of buffer mappings (bsc#1012628). - selftests/perf_events: Add a mmap() correctness test (bsc#1012628). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1012628). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1012628). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1012628). - ksmbd: fix Preauh_HashValue race condition (bsc#1012628). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1012628). - smb: client: fix netns refcount leak after net_passive changes (bsc#1012628). - smb: client: set symlink type as native for POSIX mounts (bsc#1012628). - smb: client: default to nonativesocket under POSIX mounts (bsc#1012628). - ksmbd: limit repeated connections from clients with the same IP (bsc#1012628). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1012628). - USB: serial: option: add Foxconn T99W709 (bsc#1012628). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1012628). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1012628). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1012628). - x86/sev: Evict cache lines during SNP memory validation (bsc#1012628). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1012628). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1012628). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1012628). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1012628). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1012628). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1012628). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1012628). - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (bsc#1012628). - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (bsc#1012628). - zloop: fix KASAN use-after-free of tag set (bsc#1012628). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1012628). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1012628). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1012628). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1012628). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1012628). - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap() to swap_range_alloc() (bsc#1012628). - mm: shmem: fix the shmem large folio allocation for the i915 driver (bsc#1012628). - usb: gadget: uvc: Initialize frame-based format color matching descriptor (bsc#1012628). - perf/arm-ni: Set initial IRQ affinity (bsc#1012628). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1012628). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1012628). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1012628). - HID: core: Harden s32ton() against conversion to 0 bits (bsc#1012628). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1012628). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1012628). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1012628). - wifi: ath12k: install pairwise key first (bsc#1012628). - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.1-522-spi-cs42l43-Property-entry-should-be-a-null-te.patch. - commit 2e1765c - Update config files. Enable FIPS (bsc#1247998) CRYPTO_MANAGER_DISABLE_TESTS (we had "is not set") became CRYPTO_SELFTESTS (we still have "is not set"), but the logic was inverted: CRYPTO_MANAGER_DISABLE_TESTS <=> !CRYPTO_SELFTESTS. Set CRYPTO_SELFTESTS=y and restore the otehr values to pre-6.16-rc1. - commit fd401db ++++ kernel-source: - Linux 6.16.1 (bsc#1012628). - audit,module: restore audit logging in load failure case (bsc#1012628). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1012628). - fs_context: fix parameter name in infofc() macro (bsc#1012628). - selftests/landlock: Fix readlink check (bsc#1012628). - selftests/landlock: Fix build of audit_test (bsc#1012628). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1012628). - landlock: Fix warning from KUnit tests (bsc#1012628). - ublk: use vmalloc for ublk_device's __queues (bsc#1012628). - hfsplus: make splice write available again (bsc#1012628). - hfs: make splice write available again (bsc#1012628). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1012628). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1012628). - block: mtip32xx: Fix usage of dma_map_sg() (bsc#1012628). - gfs2: Minor do_xmote cancelation fix (bsc#1012628). - nbd: fix lockdep deadlock warning (bsc#1012628). - md: allow removing faulty rdev during resync (bsc#1012628). - kunit/fortify: Add back "volatile" for sizeof() constants (bsc#1012628). - ublk: speed up ublk server exit handling (bsc#1012628). - ublk: validate ublk server pid (bsc#1012628). - md/raid10: fix set but not used variable in sync_request_write() (bsc#1012628). - gfs2: No more self recovery (bsc#1012628). - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (bsc#1012628). - block: sanitize chunk_sectors for atomic write limits (bsc#1012628). - io_uring: fix breakage in EXPERT menu (bsc#1012628). - btrfs: remove partial support for lowest level from btrfs_search_forward() (bsc#1012628). - eventpoll: Fix semi-unbounded recursion (bsc#1012628). - eventpoll: fix sphinx documentation build warning (bsc#1012628). - block: restore two stage elevator switch while running nr_hw_queue update (bsc#1012628). - sched/task_stack: Add missing const qualifier to end_of_stack() (bsc#1012628). - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (bsc#1012628). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1012628). - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (bsc#1012628). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1012628). - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration (bsc#1012628). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1012628). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (bsc#1012628). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1012628). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1012628). - soc: qcom: QMI encoding/decoding for big endian (bsc#1012628). - soc: qcom: fix endianness for QMI header (bsc#1012628). - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (bsc#1012628). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: qcs615: disable the CTI device of the camera block (bsc#1012628). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1012628). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1012628). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1012628). - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (bsc#1012628). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1012628). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1012628). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1012628). - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (bsc#1012628). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI (bsc#1012628). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1012628). - ARM: dts: microchip: sama7d65: Add clock name property (bsc#1012628). - ARM: dts: microchip: sam9x7: Add clock name property (bsc#1012628). - cpufreq: armada-8k: make both cpu masks static (bsc#1012628). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1012628). - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (bsc#1012628). - x86/bugs: Simplify the retbleed=stuff checks (bsc#1012628). - x86/bugs: Introduce cdt_possible() (bsc#1012628). - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (bsc#1012628). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1012628). - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (bsc#1012628). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1012628). - mei: vsc: Event notifier fixes (bsc#1012628). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1012628). - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (bsc#1012628). - mei: vsc: Run event callback from a workqueue (bsc#1012628). - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (bsc#1012628). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1012628). - drivers: misc: sram: fix up some const issues with recent attribute changes (bsc#1012628). - rust: devres: require T: Send for Devres (bsc#1012628). - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855 (bsc#1012628). - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C (bsc#1012628). - ASoC: SDCA: Add missing default in switch in entity_pde_event() (bsc#1012628). - staging: gpib: fix unset padding field copy back to userspace (bsc#1012628). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1012628). - rust: miscdevice: clarify invariant for `MiscDeviceRegistration` (bsc#1012628). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1012628). - pps: fix poll support (bsc#1012628). - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio (bsc#1012628). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1012628). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1012628). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up (bsc#1012628). - selftests/nolibc: correctly report errors from printf() and friends (bsc#1012628). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1012628). - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through waitpid() (bsc#1012628). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1012628). - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install target (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction (bsc#1012628). - staging: gpib: Fix error code in board_type_ioctl() (bsc#1012628). - staging: gpib: Fix error handling paths in cb_gpib_probe() (bsc#1012628). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1012628). - arm64: dts: rockchip: fix PHY handling for ROCK 4D (bsc#1012628). - arm64: dts: st: fix timer used for ticks (bsc#1012628). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1012628). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio (bsc#1012628). - arm64: dts: rockchip: Fix pinctrl node names for RK3528 (bsc#1012628). - PM / devfreq: Check governor before using governor->name (bsc#1012628). - PM / devfreq: Fix a index typo in trans_stat (bsc#1012628). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1012628). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1012628). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1012628). - arm64: dts: rockchip: Fix UART DMA support for RK3528 (bsc#1012628). - kexec_core: Fix error code path in the KEXEC_JUMP flow (bsc#1012628). - ASoC: SDCA: Update memory allocations to zero initialise (bsc#1012628). - ASoC: SDCA: Allow read-only controls to be deferrable (bsc#1012628). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1012628). - driver core: auxiliary bus: fix OF node leak (bsc#1012628). - samples: mei: Fix building on musl libc (bsc#1012628). - soc: qcom: pmic_glink: fix OF node leak (bsc#1012628). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1012628). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1012628). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1012628). - drm/xe: Correct the rev value for the DVSEC entries (bsc#1012628). - drm/xe: Correct BMG VSEC header sizing (bsc#1012628). - platform/x86: oxpec: Fix turbo register for G1 AMD (bsc#1012628). - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property (bsc#1012628). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1012628). - selftests/tracing: Fix false failure of subsystem event test (bsc#1012628). - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the remaining chips (bsc#1012628). - Revert "udmabuf: fix vmap_udmabuf error page set" (bsc#1012628). - udmabuf: fix vmap missed offset page (bsc#1012628). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1012628). - drm/sitronix: Remove broken backwards-compatibility layer (bsc#1012628). - drm/connector: hdmi: Evaluate limited range after computing format (bsc#1012628). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1012628). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1012628). - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (bsc#1012628). - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (bsc#1012628). - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (bsc#1012628). - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (bsc#1012628). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1012628). - netconsole: Only register console drivers when targets are configured (bsc#1012628). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1012628). - net, bpf: Fix RCU usage in task_cls_state() for BPF programs (bsc#1012628). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1012628). - bpf: handle jset (if a & b ...) as a jump in CFG computation (bsc#1012628). - selftests/bpf: Fix unintentional switch case fall through (bsc#1012628). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1012628). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1012628). - slub: Fix a documentation build error for krealloc() (bsc#1012628). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1012628). - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine() (bsc#1012628). - net: mana: Fix potential deadlocks in mana napi ops (bsc#1012628). - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (bsc#1012628). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1012628). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1012628). - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (bsc#1012628). - wifi: ath12k: update channel list in worker when wait flag is set (bsc#1012628). - wifi: ath12k: Fix double budget decrement while reaping monitor ring (bsc#1012628). - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1012628). - caif: reduce stack size, again (bsc#1012628). - net: annotate races around sk->sk_uid (bsc#1012628). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1012628). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1012628). - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (bsc#1012628). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1012628). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1012628). - drm/xe/uapi: Correct sync type definition in comments (bsc#1012628). - team: replace team lock with rtnl lock (bsc#1012628). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1012628). - wifi: ath12k: Clear auth flag only for actual association in security mode (bsc#1012628). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1012628). - net/mlx5: Check device memory pointer before usage (bsc#1012628). - net: dst: annotate data-races around dst->input (bsc#1012628). - net: dst: annotate data-races around dst->output (bsc#1012628). - net: dst: add four helpers to annotate data-races around dst->dev (bsc#1012628). - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (bsc#1012628). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1012628). - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (bsc#1012628). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1012628). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1012628). - m68k: Don't unregister boot console needlessly (bsc#1012628). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1012628). - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (bsc#1012628). - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (bsc#1012628). - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (bsc#1012628). - drm/amdkfd: Move the process suspend and resume out of full access (bsc#1012628). - drm/amdgpu: rework queue reset scheduler interaction (bsc#1012628). - drm/amdgpu: move force completion into ring resets (bsc#1012628). - drm/amdgpu/gfx10: fix KGQ reset sequence (bsc#1012628). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1012628). - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini" (bsc#1012628). - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (bsc#1012628). - wifi: ath12k: Block radio bring-up in FTM mode (bsc#1012628). - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (bsc#1012628). - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1012628). - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when there are multi display output on rk3588/rk3568 (bsc#1012628). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1012628). - fbcon: Fix outdated registered_fb reference in comment (bsc#1012628). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1012628). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1012628). - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (bsc#1012628). - wifi: ath12k: update unsupported bandwidth flags in reg rules (bsc#1012628). - wifi: ath12k: pack HTT pdev rate stats structs (bsc#1012628). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1012628). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1012628). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1012628). - spi: spi-nxp-fspi: Check return value of devm_mutex_init() (bsc#1012628). - leds: lp8860: Check return value of devm_mutex_init() (bsc#1012628). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1012628). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1012628). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1012628). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1012628). - sched/deadline: Reset extra_bw to max_bw when clearing root domains (bsc#1012628). - iommu/vt-d: Do not wipe out the page table NID when devices detach (bsc#1012628). - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (bsc#1012628). - iommu/arm-smmu: disable PRR on SM8250 (bsc#1012628). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1012628). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1012628). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1012628). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1012628). - mwl8k: Add missing check after DMA map (bsc#1012628). - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (bsc#1012628). - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (bsc#1012628). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1012628). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1012628). - selftests/bpf: fix implementation of smp_mb() (bsc#1012628). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1012628). - rcu: Fix delayed execution of hurry callbacks (bsc#1012628). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1012628). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1012628). - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1012628). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1012628). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1012628). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1012628). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1012628). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1012628). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1012628). - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (bsc#1012628). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1012628). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1012628). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1012628). - kcsan: test: Initialize dummy variable (bsc#1012628). - memcg_slabinfo: Fix use of PG_slab (bsc#1012628). - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (bsc#1012628). - wifi: mac80211: fix WARN_ON for monitor mode on some devices (bsc#1012628). - arm64/gcs: task_gcs_el0_enable() should use passed task (bsc#1012628). - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (bsc#1012628). - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (bsc#1012628). - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (bsc#1012628). - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (bsc#1012628). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1012628). - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (bsc#1012628). - Bluetooth: btintel: Define a macro for Intel Reset vendor command (bsc#1012628). - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (bsc#1012628). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1012628). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1012628). - bpf: Reject narrower access to pointer ctx fields (bsc#1012628). - tools/rv: Do not skip idle in trace (bsc#1012628). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1012628). - selftests: drv-net: tso: enable test cases based on hw_features (bsc#1012628). - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type (bsc#1012628). - selftests: drv-net: tso: fix non-tunneled tso6 test case name (bsc#1012628). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1012628). - can: tscan1: Kconfig: add COMPILE_TEST (bsc#1012628). - can: tscan1: CAN_TSCAN1 can depend on PC104 (bsc#1012628). - can: kvaser_pciefd: Store device channel index (bsc#1012628). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1012628). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1012628). - selftests: netfilter: Ignore tainted kernels in interface stress test (bsc#1012628). - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface tunl0 (bsc#1012628). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1012628). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1012628). - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (bsc#1012628). - macsec: set IFF_UNICAST_FLT priv flag (bsc#1012628). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1012628). - neighbour: Fix null-ptr-deref in neigh_flush_dev() (bsc#1012628). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1012628). - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (bsc#1012628). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1012628). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1012628). - ipv6: add a retry logic in net6_rt_notify() (bsc#1012628). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1012628). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1012628). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1012628). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1012628). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1012628). - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (bsc#1012628). - rv: Remove trailing whitespace from tracepoint string (bsc#1012628). - rv: Use strings in da monitors tracepoints (bsc#1012628). - rv: Adjust monitor dependencies (bsc#1012628). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1012628). - fortify: Fix incorrect reporting of read buffer size (bsc#1012628). - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings() (bsc#1012628). - remoteproc: qcom: pas: Conclude the rename from adsp (bsc#1012628). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1012628). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1012628). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1012628). - crypto: qat - use unmanaged allocation for dc_data (bsc#1012628). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1012628). - crypto: s390/hmac - Fix counter in export state (bsc#1012628). - crypto: s390/sha3 - Use cpu byte-order when exporting (bsc#1012628). - padata: Fix pd UAF once and for all (bsc#1012628). - crypto: ccp - Fix dereferencing uninitialized error pointer (bsc#1012628). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1012628). - crypto: qat - fix state restore for banks with exceptions (bsc#1012628). - mtd: fix possible integer overflow in erase_xfer() (bsc#1012628). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1012628). - media: imx-jpeg: Account for data_offset when getting image address (bsc#1012628). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1012628). - perf parse-events: Set default GH modifier properly (bsc#1012628). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1012628). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1012628). - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC (bsc#1012628). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1012628). - power: supply: qcom_pmi8998_charger: fix wakeirq (bsc#1012628). - power: supply: max1720x correct capacity computation (bsc#1012628). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1012628). - crypto: ahash - Add support for drivers with no fallback (bsc#1012628). - crypto: ahash - Stop legacy tfms from using the set_virt fallback path (bsc#1012628). - crypto: qat - restore ASYM service support for GEN6 devices (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1012628). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1012628). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1012628). - pinctrl: canaan: k230: add NULL check in DT parse (bsc#1012628). - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (bsc#1012628). - PCI: Adjust the position of reading the Link Control 2 register (bsc#1012628). - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (bsc#1012628). - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - soundwire: Correct some property names (bsc#1012628). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1012628). - soundwire: debugfs: move debug statement outside of error handling (bsc#1012628). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1012628). - fanotify: sanitize handle_type values when reporting fid (bsc#1012628). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1012628). - RDMA/ipoib: Use parent rdma device net namespace (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (bsc#1012628). - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (bsc#1012628). - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (bsc#1012628). - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (bsc#1012628). - Fix dma_unmap_sg() nents value (bsc#1012628). - leds: pca955x: Avoid potential overflow when filling default_label (take 2) (bsc#1012628). - gitignore: allow .pylintrc to be tracked (bsc#1012628). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1012628). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1012628). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1012628). - perf sched: Make sure it frees the usage string (bsc#1012628). - perf sched: Free thread->priv using priv_destructor (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1012628). - perf sched: Fix thread leaks in 'perf sched timehist' (bsc#1012628). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1012628). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1012628). - clk: spacemit: mark K1 pll1_d8 as critical (bsc#1012628). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1012628). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1012628). - crypto: ccp - Fix locking on alloc failure handling (bsc#1012628). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1012628). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1012628). - RDMA/hns: Get message length of ack_req from FW (bsc#1012628). - RDMA/hns: Fix accessing uninitialized resources (bsc#1012628). - RDMA/hns: Drop GFP_NOWARN (bsc#1012628). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1012628). - tracing: Use queue_rcu_work() to free filters (bsc#1012628). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1012628). - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (bsc#1012628). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1012628). - cxl/core: Introduce a new helper cxl_resource_contains_addr() (bsc#1012628). - cxl/edac: Fix wrong dpa checking for PPR operation (bsc#1012628). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1012628). - perf tests bp_account: Fix leaked file descriptor (bsc#1012628). - perf hwmon_pmu: Avoid shortening hwmon PMU name (bsc#1012628). - perf python: Fix thread check in pyrf_evsel__read (bsc#1012628). - perf python: Correct pyrf_evsel__read for tool PMUs (bsc#1012628). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1012628). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1012628). - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (bsc#1012628). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1012628). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: core: Fix kernel doc for scsi_track_queue_full() (bsc#1012628). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1012628). - PCI: Fix driver_managed_dma check (bsc#1012628). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1012628). - selftests/cgroup: fix cpu.max tests (bsc#1012628). - ext4: fix inode use after free in ext4_end_io_rsv_work() (bsc#1012628). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1012628). - clk: at91: sam9x7: update pll clk ranges (bsc#1012628). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1012628). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1012628). - crypto: qat - fix virtual channel configuration for GEN6 devices (bsc#1012628). - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (bsc#1012628). - cgroup: Add compatibility option for content of /proc/cgroups (bsc#1012628). - soundwire: stream: restore params when prepare ports fail (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1012628). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1012628). - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence (bsc#1012628). - remoteproc: xlnx: Disable unsupported features (bsc#1012628). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1012628). - clk: thead: th1520-ap: Describe mux clocks with clk_mux (bsc#1012628). - tools subcmd: Tighten the filename size in check_if_command_finished (bsc#1012628). - perf pmu: Switch FILENAME_MAX to NAME_MAX (bsc#1012628). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1012628). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1012628). - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string (bsc#1012628). - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers (bsc#1012628). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1012628). - ASoC: fsl_xcvr: get channel status data with firmware exists (bsc#1012628). - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (bsc#1012628). - sh: Do not use hyphen in exported variable name (bsc#1012628). - perf tools: Remove libtraceevent in .gitignore (bsc#1012628). - clk: clocking-wizard: Fix the round rate handling for versal (bsc#1012628). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1012628). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1012628). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1012628). - smb: client: allow parsing zero-length AV pairs (bsc#1012628). - drm/xe/configfs: Fix pci_dev reference leak (bsc#1012628). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1012628). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1012628). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1012628). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1012628). - drm/xe/vf: Disable CSC support on VF (bsc#1012628). - selftests: ALSA: fix memory leak in utimer test (bsc#1012628). - ALSA: usb: scarlett2: Fix missing NULL check (bsc#1012628). - perf record: Cache build-ID of hit DSOs only (bsc#1012628). - bpf: Add cookie object to bpf maps (bsc#1012628). - bpf: Move bpf map owner out of common struct (bsc#1012628). - bpf: Move cgroup iterator helpers to bpf.h (bsc#1012628). - bpf: Fix oob access in cgroup local storage (bsc#1012628). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1012628). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1012628). - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (bsc#1012628). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1012628). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1012628). - vhost: Reintroduce kthread API and add mode selection (bsc#1012628). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1012628). - bpf: Check netfilter ctx accesses are aligned (bsc#1012628). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1012628). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1012628). - dm-flakey: Fix corrupt_bio_byte setup checks (bsc#1012628). - uprobes: revert ref_ctr_offset in uprobe_unregister error path (bsc#1012628). - scripts: gdb: move MNT_* constants to gdb-parsed (bsc#1012628). - squashfs: use folios in squashfs_bio_read_cached() (bsc#1012628). - squashfs: fix incorrect argument to sizeof in kmalloc_array call (bsc#1012628). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1012628). - i3c: fix module_i3c_i2c_driver() with I3C=n (bsc#1012628). - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk (bsc#1012628). - module: Restore the moduleparam prefix length check (bsc#1012628). - ucount: fix atomic_long_inc_below() argument type (bsc#1012628). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1012628). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1012628). - f2fs: fix bio memleak when committing super block (bsc#1012628). - f2fs: fix to avoid invalid wait context issue (bsc#1012628). - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (bsc#1012628). - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (bsc#1012628). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1012628). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1012628). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1012628). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1012628). - f2fs: doc: fix wrong quota mount option description (bsc#1012628). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1012628). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1012628). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1012628). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1012628). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1012628). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1012628). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1012628). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1012628). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1012628). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1012628). - vfio: Prevent open_count decrement to negative (bsc#1012628). - vfio/pds: Fix missing detach_ioas op (bsc#1012628). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1012628). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1012628). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1012628). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1012628). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1012628). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1012628). - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD (bsc#1012628). - sched/psi: Fix psi_seq initialization (bsc#1012628). - padata: Remove comment for reorder_work (bsc#1012628). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1012628). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1012628). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1012628). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1012628). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1012628). - tools/power turbostat: regression fix: --show C1E% (bsc#1012628). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1012628). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1012628). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1012628). - NFSv4.2: another fix for listxattr (bsc#1012628). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1012628). - ARM: s3c/gpio: complete the conversion to new GPIO value setters (bsc#1012628). - md/md-cluster: handle REMOVE message earlier (bsc#1012628). - kcm: Fix splice support (bsc#1012628). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1012628). - phy: mscc: Fix parsing of unicast frames (bsc#1012628). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1012628). - net: mdio_bus: Use devm for getting reset GPIO (bsc#1012628). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1012628). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1012628). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1012628). - s390/mm: Set high_memory at the end of the identity mapping (bsc#1012628). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1012628). - block: Fix default IO priority if there is no IO context (bsc#1012628). - block: ensure discard_granularity is zero when discard is not supported (bsc#1012628). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1012628). - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show() (bsc#1012628). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1012628). - selftests: avoid using ifconfig (bsc#1012628). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1012628). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1012628). - net: drop UFO packets in udp_rcv_segment() (bsc#1012628). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1012628). - md: make rdev_addable usable for rcu mode (bsc#1012628). - sunrpc: fix client side handling of tls alerts (bsc#1012628). - drm/xe/pf: Disable PF restart worker on device removal (bsc#1012628). - x86/irq: Plug vector setup race (bsc#1012628). - eth: fbnic: unlink NAPIs from queues on error to open (bsc#1012628). - ipa: fix compile-testing with qcom-mdt=m (bsc#1012628). - net: devmem: fix DMA direction on unmapping (bsc#1012628). - net: airoha: npu: Add missing MODULE_FIRMWARE macros (bsc#1012628). - benet: fix BUG when creating VFs (bsc#1012628). - Revert "net: mdio_bus: Use devm for getting reset GPIO" (bsc#1012628). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1012628). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1012628). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1012628). - eth: fbnic: Fix tx_dropped reporting (bsc#1012628). - eth: fbnic: Lock the tx_dropped update (bsc#1012628). - NFS/localio: nfs_close_local_fh() fix check for file closed (bsc#1012628). - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh() (bsc#1012628). - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file (bsc#1012628). - net: ti: icssg-prueth: Fix skb handling for XDP_PASS (bsc#1012628). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1012628). - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies (bsc#1012628). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1012628). - s390/boot: Fix startup debugging log (bsc#1012628). - smb: server: remove separate empty_recvmsg_queue (bsc#1012628). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1012628). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - smb: client: remove separate empty_packet_queue (bsc#1012628). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1012628). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - nvmet: exit debugfs after discovery subsystem exits (bsc#1012628). - pptp: fix pptp_xmit() error path (bsc#1012628). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1012628). - tools/power turbostat: Fix bogus SysWatt for forked program (bsc#1012628). - tools/power turbostat: Fix DMR support (bsc#1012628). - nfsd: don't set the ctime on delegated atime updates (bsc#1012628). - nfsd: avoid ref leak in nfsd_open_local_fh() (bsc#1012628). - sunrpc: fix handling of server side tls alerts (bsc#1012628). - perf/core: Preserve AUX buffer allocation failure result (bsc#1012628). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1012628). - perf/core: Exit early on perf_mmap() fail (bsc#1012628). - perf/core: Handle buffer mapping fail correctly in perf_mmap() (bsc#1012628). - perf/core: Prevent VMA split of buffer mappings (bsc#1012628). - selftests/perf_events: Add a mmap() correctness test (bsc#1012628). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1012628). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1012628). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1012628). - ksmbd: fix Preauh_HashValue race condition (bsc#1012628). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1012628). - smb: client: fix netns refcount leak after net_passive changes (bsc#1012628). - smb: client: set symlink type as native for POSIX mounts (bsc#1012628). - smb: client: default to nonativesocket under POSIX mounts (bsc#1012628). - ksmbd: limit repeated connections from clients with the same IP (bsc#1012628). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1012628). - USB: serial: option: add Foxconn T99W709 (bsc#1012628). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1012628). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1012628). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1012628). - x86/sev: Evict cache lines during SNP memory validation (bsc#1012628). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1012628). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1012628). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1012628). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1012628). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1012628). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1012628). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1012628). - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (bsc#1012628). - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (bsc#1012628). - zloop: fix KASAN use-after-free of tag set (bsc#1012628). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1012628). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1012628). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1012628). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1012628). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1012628). - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap() to swap_range_alloc() (bsc#1012628). - mm: shmem: fix the shmem large folio allocation for the i915 driver (bsc#1012628). - usb: gadget: uvc: Initialize frame-based format color matching descriptor (bsc#1012628). - perf/arm-ni: Set initial IRQ affinity (bsc#1012628). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1012628). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1012628). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1012628). - HID: core: Harden s32ton() against conversion to 0 bits (bsc#1012628). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1012628). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1012628). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1012628). - wifi: ath12k: install pairwise key first (bsc#1012628). - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.1-522-spi-cs42l43-Property-entry-should-be-a-null-te.patch. - commit 2e1765c - Update config files. Enable FIPS (bsc#1247998) CRYPTO_MANAGER_DISABLE_TESTS (we had "is not set") became CRYPTO_SELFTESTS (we still have "is not set"), but the logic was inverted: CRYPTO_MANAGER_DISABLE_TESTS <=> !CRYPTO_SELFTESTS. Set CRYPTO_SELFTESTS=y and restore the otehr values to pre-6.16-rc1. - commit fd401db ++++ kernel-source-longterm: - Update config files for 6.12.42. Adding CONFIG_VHOST_ENABLE_FORK_OWNER_CONTROL=y for aarch64 and x86_64. - commit 13330df - Linux 6.12.42 (bsc#1234429). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1234429). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1234429). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1234429). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1234429). - perf/arm-ni: Set initial IRQ affinity (bsc#1234429). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1234429). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1234429). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1234429). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1234429). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1234429). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1234429). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1234429). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1234429). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1234429). - x86/sev: Evict cache lines during SNP memory validation (bsc#1234429). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1234429). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1234429). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1234429). - PCI/ASPM: Fix L1SS saving (bsc#1234429). - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state() (bsc#1234429). - USB: serial: option: add Foxconn T99W709 (bsc#1234429). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1234429). - ksmbd: limit repeated connections from clients with the same IP (bsc#1234429). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1234429). - ksmbd: fix Preauh_HashValue race condition (bsc#1234429). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1234429). - drm/i915/ddi: only call shutdown hooks for valid encoders (bsc#1234429). - drm/i915/display: add intel_encoder_is_hdmi() (bsc#1234429). - drm/i915/ddi: gracefully handle errors from intel_ddi_init_hdmi_connector() (bsc#1234429). - drm/i915/hdmi: add error handling in g4x_hdmi_init() (bsc#1234429). - drm/i915/hdmi: propagate errors from intel_hdmi_init_connector() (bsc#1234429). - drm/i915/ddi: change intel_ddi_init_{dp, hdmi}_connector() return type (bsc#1234429). - selftests/bpf: Fix build error with llvm 19 (bsc#1234429). - selftests/bpf: Add a test for arena range tree algorithm (bsc#1234429). - ice/ptp: fix crosstimestamp reporting (bsc#1234429). - Revert "bcache: remove heap-related macros and switch to generic min_heap" (bsc#1234429). - accel/ivpu: Fix reset_engine debugfs file logic (bsc#1234429). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1234429). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1234429). - selftests/perf_events: Add a mmap() correctness test (bsc#1234429). - perf/core: Prevent VMA split of buffer mappings (bsc#1234429). - perf/core: Exit early on perf_mmap() fail (bsc#1234429). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1234429). - sunrpc: fix handling of server side tls alerts (bsc#1234429). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1234429). - pptp: fix pptp_xmit() error path (bsc#1234429). - nvmet: exit debugfs after discovery subsystem exits (bsc#1234429). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1234429). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1234429). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1234429). - smb: client: remove separate empty_packet_queue (bsc#1234429). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1234429). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1234429). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1234429). - smb: server: remove separate empty_recvmsg_queue (bsc#1234429). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1234429). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1234429). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1234429). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1234429). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1234429). - benet: fix BUG when creating VFs (bsc#1234429). - x86/irq: Plug vector setup race (bsc#1234429). - sunrpc: fix client side handling of tls alerts (bsc#1234429). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1234429). - net: drop UFO packets in udp_rcv_segment() (bsc#1234429). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1234429). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1234429). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1234429). - spi: cs42l43: Property entry should be a null-terminated array (bsc#1234429). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1234429). - block: ensure discard_granularity is zero when discard is not supported (bsc#1234429). - block: Fix default IO priority if there is no IO context (bsc#1234429). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1234429). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1234429). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1234429). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1234429). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1234429). - phy: mscc: Fix parsing of unicast frames (bsc#1234429). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1234429). - md/md-cluster: handle REMOVE message earlier (bsc#1234429). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1234429). - NFSv4.2: another fix for listxattr (bsc#1234429). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1234429). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1234429). - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (bsc#1234429). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1234429). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1234429). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1234429). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1234429). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1234429). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1234429). - sched/psi: Fix psi_seq initialization (bsc#1234429). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1234429). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1234429). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1234429). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1234429). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1234429). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1234429). - vfio/pds: Fix missing detach_ioas op (bsc#1234429). - vfio: Prevent open_count decrement to negative (bsc#1234429). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1234429). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1234429). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1234429). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1234429). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1234429). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1234429). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1234429). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1234429). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1234429). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1234429). - f2fs: doc: fix wrong quota mount option description (bsc#1234429). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1234429). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1234429). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1234429). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1234429). - f2fs: fix bio memleak when committing super block (bsc#1234429). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1234429). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1234429). - ucount: fix atomic_long_inc_below() argument type (bsc#1234429). - module: Restore the moduleparam prefix length check (bsc#1234429). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1234429). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1234429). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1234429). - bpf: Check netfilter ctx accesses are aligned (bsc#1234429). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1234429). - vhost: Reintroduce kthread API and add mode selection (bsc#1234429). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1234429). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1234429). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1234429). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1234429). - perf record: Cache build-ID of hit DSOs only (bsc#1234429). - selftests: ALSA: fix memory leak in utimer test (bsc#1234429). - drm/xe/vf: Disable CSC support on VF (bsc#1234429). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1234429). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1234429). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1234429). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1234429). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1234429). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1234429). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1234429). - perf tools: Remove libtraceevent in .gitignore (bsc#1234429). - sh: Do not use hyphen in exported variable name (bsc#1234429). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1234429). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1234429). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1234429). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1234429). - remoteproc: xlnx: Disable unsupported features (bsc#1234429). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1234429). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1234429). - soundwire: stream: restore params when prepare ports fail (bsc#1234429). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1234429). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1234429). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1234429). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1234429). - clk: at91: sam9x7: update pll clk ranges (bsc#1234429). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1234429). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1234429). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1234429). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1234429). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1234429). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1234429). - perf tests bp_account: Fix leaked file descriptor (bsc#1234429). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1234429). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1234429). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1234429). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1234429). - RDMA/hns: Drop GFP_NOWARN (bsc#1234429). - RDMA/hns: Fix accessing uninitialized resources (bsc#1234429). - RDMA/hns: Get message length of ack_req from FW (bsc#1234429). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1234429). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1234429). - crypto: ccp - Fix locking on alloc failure handling (bsc#1234429). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1234429). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1234429). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1234429). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1234429). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1234429). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1234429). - perf sched: Free thread->priv using priv_destructor (bsc#1234429). - perf sched: Make sure it frees the usage string (bsc#1234429). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1234429). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1234429). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1234429). - Fix dma_unmap_sg() nents value (bsc#1234429). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1234429). - fanotify: sanitize handle_type values when reporting fid (bsc#1234429). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1234429). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1234429). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1234429). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1234429). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1234429). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1234429). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1234429). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1234429). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1234429). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1234429). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1234429). - mtd: fix possible integer overflow in erase_xfer() (bsc#1234429). - crypto: qat - fix state restore for banks with exceptions (bsc#1234429). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1234429). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1234429). - crypto: qat - use unmanaged allocation for dc_data (bsc#1234429). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1234429). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1234429). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1234429). - fortify: Fix incorrect reporting of read buffer size (bsc#1234429). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1234429). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1234429). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1234429). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1234429). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1234429). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1234429). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1234429). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1234429). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1234429). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1234429). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1234429). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1234429). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1234429). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1234429). - can: kvaser_pciefd: Store device channel index (bsc#1234429). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1234429). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1234429). - tools/rv: Do not skip idle in trace (bsc#1234429). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1234429). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1234429). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1234429). - memcg_slabinfo: Fix use of PG_slab (bsc#1234429). - kcsan: test: Initialize dummy variable (bsc#1234429). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1234429). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1234429). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1234429). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1234429). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1234429). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1234429). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1234429). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1234429). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1234429). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1234429). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1234429). - rcu: Fix delayed execution of hurry callbacks (bsc#1234429). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1234429). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1234429). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1234429). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1234429). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1234429). - mwl8k: Add missing check after DMA map (bsc#1234429). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1234429). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1234429). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1234429). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1234429). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1234429). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1234429). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1234429). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1234429). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1234429). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1234429). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1234429). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1234429). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1234429). - fbcon: Fix outdated registered_fb reference in comment (bsc#1234429). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1234429). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1234429). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1234429). - m68k: Don't unregister boot console needlessly (bsc#1234429). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1234429). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1234429). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1234429). - net: dst: annotate data-races around dst->output (bsc#1234429). - net: dst: annotate data-races around dst->input (bsc#1234429). - net/mlx5: Check device memory pointer before usage (bsc#1234429). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1234429). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1234429). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1234429). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1234429). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1234429). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1234429). - caif: reduce stack size, again (bsc#1234429). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1234429). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1234429). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1234429). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1234429). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1234429). - selftests/bpf: Fix unintentional switch case fall through (bsc#1234429). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1234429). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1234429). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1234429). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1234429). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1234429). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1234429). - selftests/tracing: Fix false failure of subsystem event test (bsc#1234429). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1234429). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1234429). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1234429). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1234429). - soc: qcom: pmic_glink: fix OF node leak (bsc#1234429). - samples: mei: Fix building on musl libc (bsc#1234429). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1234429). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1234429). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1234429). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1234429). - PM / devfreq: Fix a index typo in trans_stat (bsc#1234429). - PM / devfreq: Check governor before using governor->name (bsc#1234429). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1234429). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1234429). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1234429). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1234429). - arm64: dts: st: fix timer used for ticks (bsc#1234429). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1234429). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1234429). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1234429). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1234429). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1234429). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1234429). - pps: fix poll support (bsc#1234429). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1234429). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1234429). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1234429). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1234429). - mei: vsc: Event notifier fixes (bsc#1234429). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1234429). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1234429). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1234429). - cpufreq: armada-8k: make both cpu masks static (bsc#1234429). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1234429). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1234429). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1234429). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1234429). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1234429). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1234429). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1234429). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1234429). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1234429). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1234429). - soc: qcom: QMI encoding/decoding for big endian (bsc#1234429). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1234429). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1234429). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1234429). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1234429). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1234429). - io_uring: fix breakage in EXPERT menu (bsc#1234429). - gfs2: No more self recovery (bsc#1234429). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1234429). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1234429). - hfs: make splice write available again (bsc#1234429). - hfsplus: make splice write available again (bsc#1234429). - ublk: use vmalloc for ublk_device's __queues (bsc#1234429). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1234429). - fs_context: fix parameter name in infofc() macro (bsc#1234429). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1234429). - audit,module: restore audit logging in load failure case (bsc#1234429). - ASoC: amd: yc: add DMI quirk for ASUS M6501RM (bsc#1234429). - ASoC: Intel: fix SND_SOC_SOF dependencies (bsc#1234429). - ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX (bsc#1234429). - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx (bsc#1234429). - ethernet: intel: fix building with large NR_CPUS (bsc#1234429). - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx (bsc#1234429). - commit 28b079c ++++ kernel-docs: - Linux 6.16.1 (bsc#1012628). - audit,module: restore audit logging in load failure case (bsc#1012628). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1012628). - fs_context: fix parameter name in infofc() macro (bsc#1012628). - selftests/landlock: Fix readlink check (bsc#1012628). - selftests/landlock: Fix build of audit_test (bsc#1012628). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1012628). - landlock: Fix warning from KUnit tests (bsc#1012628). - ublk: use vmalloc for ublk_device's __queues (bsc#1012628). - hfsplus: make splice write available again (bsc#1012628). - hfs: make splice write available again (bsc#1012628). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1012628). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1012628). - block: mtip32xx: Fix usage of dma_map_sg() (bsc#1012628). - gfs2: Minor do_xmote cancelation fix (bsc#1012628). - nbd: fix lockdep deadlock warning (bsc#1012628). - md: allow removing faulty rdev during resync (bsc#1012628). - kunit/fortify: Add back "volatile" for sizeof() constants (bsc#1012628). - ublk: speed up ublk server exit handling (bsc#1012628). - ublk: validate ublk server pid (bsc#1012628). - md/raid10: fix set but not used variable in sync_request_write() (bsc#1012628). - gfs2: No more self recovery (bsc#1012628). - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (bsc#1012628). - block: sanitize chunk_sectors for atomic write limits (bsc#1012628). - io_uring: fix breakage in EXPERT menu (bsc#1012628). - btrfs: remove partial support for lowest level from btrfs_search_forward() (bsc#1012628). - eventpoll: Fix semi-unbounded recursion (bsc#1012628). - eventpoll: fix sphinx documentation build warning (bsc#1012628). - block: restore two stage elevator switch while running nr_hw_queue update (bsc#1012628). - sched/task_stack: Add missing const qualifier to end_of_stack() (bsc#1012628). - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (bsc#1012628). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1012628). - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (bsc#1012628). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1012628). - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration (bsc#1012628). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1012628). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (bsc#1012628). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1012628). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1012628). - soc: qcom: QMI encoding/decoding for big endian (bsc#1012628). - soc: qcom: fix endianness for QMI header (bsc#1012628). - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (bsc#1012628). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: qcs615: disable the CTI device of the camera block (bsc#1012628). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1012628). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1012628). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1012628). - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (bsc#1012628). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1012628). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1012628). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1012628). - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (bsc#1012628). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI (bsc#1012628). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1012628). - ARM: dts: microchip: sama7d65: Add clock name property (bsc#1012628). - ARM: dts: microchip: sam9x7: Add clock name property (bsc#1012628). - cpufreq: armada-8k: make both cpu masks static (bsc#1012628). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1012628). - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (bsc#1012628). - x86/bugs: Simplify the retbleed=stuff checks (bsc#1012628). - x86/bugs: Introduce cdt_possible() (bsc#1012628). - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (bsc#1012628). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1012628). - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (bsc#1012628). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1012628). - mei: vsc: Event notifier fixes (bsc#1012628). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1012628). - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (bsc#1012628). - mei: vsc: Run event callback from a workqueue (bsc#1012628). - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (bsc#1012628). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1012628). - drivers: misc: sram: fix up some const issues with recent attribute changes (bsc#1012628). - rust: devres: require T: Send for Devres (bsc#1012628). - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855 (bsc#1012628). - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C (bsc#1012628). - ASoC: SDCA: Add missing default in switch in entity_pde_event() (bsc#1012628). - staging: gpib: fix unset padding field copy back to userspace (bsc#1012628). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1012628). - rust: miscdevice: clarify invariant for `MiscDeviceRegistration` (bsc#1012628). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1012628). - pps: fix poll support (bsc#1012628). - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio (bsc#1012628). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1012628). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1012628). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up (bsc#1012628). - selftests/nolibc: correctly report errors from printf() and friends (bsc#1012628). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1012628). - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through waitpid() (bsc#1012628). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1012628). - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install target (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction (bsc#1012628). - staging: gpib: Fix error code in board_type_ioctl() (bsc#1012628). - staging: gpib: Fix error handling paths in cb_gpib_probe() (bsc#1012628). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1012628). - arm64: dts: rockchip: fix PHY handling for ROCK 4D (bsc#1012628). - arm64: dts: st: fix timer used for ticks (bsc#1012628). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1012628). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio (bsc#1012628). - arm64: dts: rockchip: Fix pinctrl node names for RK3528 (bsc#1012628). - PM / devfreq: Check governor before using governor->name (bsc#1012628). - PM / devfreq: Fix a index typo in trans_stat (bsc#1012628). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1012628). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1012628). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1012628). - arm64: dts: rockchip: Fix UART DMA support for RK3528 (bsc#1012628). - kexec_core: Fix error code path in the KEXEC_JUMP flow (bsc#1012628). - ASoC: SDCA: Update memory allocations to zero initialise (bsc#1012628). - ASoC: SDCA: Allow read-only controls to be deferrable (bsc#1012628). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1012628). - driver core: auxiliary bus: fix OF node leak (bsc#1012628). - samples: mei: Fix building on musl libc (bsc#1012628). - soc: qcom: pmic_glink: fix OF node leak (bsc#1012628). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1012628). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1012628). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1012628). - drm/xe: Correct the rev value for the DVSEC entries (bsc#1012628). - drm/xe: Correct BMG VSEC header sizing (bsc#1012628). - platform/x86: oxpec: Fix turbo register for G1 AMD (bsc#1012628). - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property (bsc#1012628). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1012628). - selftests/tracing: Fix false failure of subsystem event test (bsc#1012628). - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the remaining chips (bsc#1012628). - Revert "udmabuf: fix vmap_udmabuf error page set" (bsc#1012628). - udmabuf: fix vmap missed offset page (bsc#1012628). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1012628). - drm/sitronix: Remove broken backwards-compatibility layer (bsc#1012628). - drm/connector: hdmi: Evaluate limited range after computing format (bsc#1012628). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1012628). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1012628). - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (bsc#1012628). - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (bsc#1012628). - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (bsc#1012628). - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (bsc#1012628). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1012628). - netconsole: Only register console drivers when targets are configured (bsc#1012628). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1012628). - net, bpf: Fix RCU usage in task_cls_state() for BPF programs (bsc#1012628). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1012628). - bpf: handle jset (if a & b ...) as a jump in CFG computation (bsc#1012628). - selftests/bpf: Fix unintentional switch case fall through (bsc#1012628). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1012628). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1012628). - slub: Fix a documentation build error for krealloc() (bsc#1012628). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1012628). - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine() (bsc#1012628). - net: mana: Fix potential deadlocks in mana napi ops (bsc#1012628). - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (bsc#1012628). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1012628). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1012628). - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (bsc#1012628). - wifi: ath12k: update channel list in worker when wait flag is set (bsc#1012628). - wifi: ath12k: Fix double budget decrement while reaping monitor ring (bsc#1012628). - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1012628). - caif: reduce stack size, again (bsc#1012628). - net: annotate races around sk->sk_uid (bsc#1012628). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1012628). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1012628). - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (bsc#1012628). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1012628). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1012628). - drm/xe/uapi: Correct sync type definition in comments (bsc#1012628). - team: replace team lock with rtnl lock (bsc#1012628). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1012628). - wifi: ath12k: Clear auth flag only for actual association in security mode (bsc#1012628). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1012628). - net/mlx5: Check device memory pointer before usage (bsc#1012628). - net: dst: annotate data-races around dst->input (bsc#1012628). - net: dst: annotate data-races around dst->output (bsc#1012628). - net: dst: add four helpers to annotate data-races around dst->dev (bsc#1012628). - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (bsc#1012628). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1012628). - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (bsc#1012628). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1012628). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1012628). - m68k: Don't unregister boot console needlessly (bsc#1012628). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1012628). - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (bsc#1012628). - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (bsc#1012628). - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (bsc#1012628). - drm/amdkfd: Move the process suspend and resume out of full access (bsc#1012628). - drm/amdgpu: rework queue reset scheduler interaction (bsc#1012628). - drm/amdgpu: move force completion into ring resets (bsc#1012628). - drm/amdgpu/gfx10: fix KGQ reset sequence (bsc#1012628). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1012628). - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini" (bsc#1012628). - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (bsc#1012628). - wifi: ath12k: Block radio bring-up in FTM mode (bsc#1012628). - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (bsc#1012628). - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1012628). - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when there are multi display output on rk3588/rk3568 (bsc#1012628). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1012628). - fbcon: Fix outdated registered_fb reference in comment (bsc#1012628). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1012628). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1012628). - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (bsc#1012628). - wifi: ath12k: update unsupported bandwidth flags in reg rules (bsc#1012628). - wifi: ath12k: pack HTT pdev rate stats structs (bsc#1012628). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1012628). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1012628). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1012628). - spi: spi-nxp-fspi: Check return value of devm_mutex_init() (bsc#1012628). - leds: lp8860: Check return value of devm_mutex_init() (bsc#1012628). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1012628). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1012628). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1012628). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1012628). - sched/deadline: Reset extra_bw to max_bw when clearing root domains (bsc#1012628). - iommu/vt-d: Do not wipe out the page table NID when devices detach (bsc#1012628). - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (bsc#1012628). - iommu/arm-smmu: disable PRR on SM8250 (bsc#1012628). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1012628). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1012628). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1012628). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1012628). - mwl8k: Add missing check after DMA map (bsc#1012628). - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (bsc#1012628). - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (bsc#1012628). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1012628). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1012628). - selftests/bpf: fix implementation of smp_mb() (bsc#1012628). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1012628). - rcu: Fix delayed execution of hurry callbacks (bsc#1012628). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1012628). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1012628). - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1012628). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1012628). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1012628). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1012628). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1012628). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1012628). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1012628). - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (bsc#1012628). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1012628). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1012628). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1012628). - kcsan: test: Initialize dummy variable (bsc#1012628). - memcg_slabinfo: Fix use of PG_slab (bsc#1012628). - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (bsc#1012628). - wifi: mac80211: fix WARN_ON for monitor mode on some devices (bsc#1012628). - arm64/gcs: task_gcs_el0_enable() should use passed task (bsc#1012628). - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (bsc#1012628). - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (bsc#1012628). - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (bsc#1012628). - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (bsc#1012628). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1012628). - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (bsc#1012628). - Bluetooth: btintel: Define a macro for Intel Reset vendor command (bsc#1012628). - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (bsc#1012628). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1012628). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1012628). - bpf: Reject narrower access to pointer ctx fields (bsc#1012628). - tools/rv: Do not skip idle in trace (bsc#1012628). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1012628). - selftests: drv-net: tso: enable test cases based on hw_features (bsc#1012628). - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type (bsc#1012628). - selftests: drv-net: tso: fix non-tunneled tso6 test case name (bsc#1012628). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1012628). - can: tscan1: Kconfig: add COMPILE_TEST (bsc#1012628). - can: tscan1: CAN_TSCAN1 can depend on PC104 (bsc#1012628). - can: kvaser_pciefd: Store device channel index (bsc#1012628). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1012628). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1012628). - selftests: netfilter: Ignore tainted kernels in interface stress test (bsc#1012628). - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface tunl0 (bsc#1012628). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1012628). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1012628). - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (bsc#1012628). - macsec: set IFF_UNICAST_FLT priv flag (bsc#1012628). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1012628). - neighbour: Fix null-ptr-deref in neigh_flush_dev() (bsc#1012628). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1012628). - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (bsc#1012628). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1012628). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1012628). - ipv6: add a retry logic in net6_rt_notify() (bsc#1012628). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1012628). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1012628). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1012628). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1012628). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1012628). - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (bsc#1012628). - rv: Remove trailing whitespace from tracepoint string (bsc#1012628). - rv: Use strings in da monitors tracepoints (bsc#1012628). - rv: Adjust monitor dependencies (bsc#1012628). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1012628). - fortify: Fix incorrect reporting of read buffer size (bsc#1012628). - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings() (bsc#1012628). - remoteproc: qcom: pas: Conclude the rename from adsp (bsc#1012628). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1012628). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1012628). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1012628). - crypto: qat - use unmanaged allocation for dc_data (bsc#1012628). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1012628). - crypto: s390/hmac - Fix counter in export state (bsc#1012628). - crypto: s390/sha3 - Use cpu byte-order when exporting (bsc#1012628). - padata: Fix pd UAF once and for all (bsc#1012628). - crypto: ccp - Fix dereferencing uninitialized error pointer (bsc#1012628). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1012628). - crypto: qat - fix state restore for banks with exceptions (bsc#1012628). - mtd: fix possible integer overflow in erase_xfer() (bsc#1012628). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1012628). - media: imx-jpeg: Account for data_offset when getting image address (bsc#1012628). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1012628). - perf parse-events: Set default GH modifier properly (bsc#1012628). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1012628). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1012628). - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC (bsc#1012628). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1012628). - power: supply: qcom_pmi8998_charger: fix wakeirq (bsc#1012628). - power: supply: max1720x correct capacity computation (bsc#1012628). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1012628). - crypto: ahash - Add support for drivers with no fallback (bsc#1012628). - crypto: ahash - Stop legacy tfms from using the set_virt fallback path (bsc#1012628). - crypto: qat - restore ASYM service support for GEN6 devices (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1012628). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1012628). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1012628). - pinctrl: canaan: k230: add NULL check in DT parse (bsc#1012628). - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (bsc#1012628). - PCI: Adjust the position of reading the Link Control 2 register (bsc#1012628). - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (bsc#1012628). - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - soundwire: Correct some property names (bsc#1012628). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1012628). - soundwire: debugfs: move debug statement outside of error handling (bsc#1012628). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1012628). - fanotify: sanitize handle_type values when reporting fid (bsc#1012628). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1012628). - RDMA/ipoib: Use parent rdma device net namespace (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (bsc#1012628). - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (bsc#1012628). - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (bsc#1012628). - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (bsc#1012628). - Fix dma_unmap_sg() nents value (bsc#1012628). - leds: pca955x: Avoid potential overflow when filling default_label (take 2) (bsc#1012628). - gitignore: allow .pylintrc to be tracked (bsc#1012628). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1012628). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1012628). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1012628). - perf sched: Make sure it frees the usage string (bsc#1012628). - perf sched: Free thread->priv using priv_destructor (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1012628). - perf sched: Fix thread leaks in 'perf sched timehist' (bsc#1012628). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1012628). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1012628). - clk: spacemit: mark K1 pll1_d8 as critical (bsc#1012628). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1012628). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1012628). - crypto: ccp - Fix locking on alloc failure handling (bsc#1012628). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1012628). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1012628). - RDMA/hns: Get message length of ack_req from FW (bsc#1012628). - RDMA/hns: Fix accessing uninitialized resources (bsc#1012628). - RDMA/hns: Drop GFP_NOWARN (bsc#1012628). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1012628). - tracing: Use queue_rcu_work() to free filters (bsc#1012628). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1012628). - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (bsc#1012628). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1012628). - cxl/core: Introduce a new helper cxl_resource_contains_addr() (bsc#1012628). - cxl/edac: Fix wrong dpa checking for PPR operation (bsc#1012628). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1012628). - perf tests bp_account: Fix leaked file descriptor (bsc#1012628). - perf hwmon_pmu: Avoid shortening hwmon PMU name (bsc#1012628). - perf python: Fix thread check in pyrf_evsel__read (bsc#1012628). - perf python: Correct pyrf_evsel__read for tool PMUs (bsc#1012628). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1012628). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1012628). - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (bsc#1012628). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1012628). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: core: Fix kernel doc for scsi_track_queue_full() (bsc#1012628). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1012628). - PCI: Fix driver_managed_dma check (bsc#1012628). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1012628). - selftests/cgroup: fix cpu.max tests (bsc#1012628). - ext4: fix inode use after free in ext4_end_io_rsv_work() (bsc#1012628). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1012628). - clk: at91: sam9x7: update pll clk ranges (bsc#1012628). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1012628). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1012628). - crypto: qat - fix virtual channel configuration for GEN6 devices (bsc#1012628). - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (bsc#1012628). - cgroup: Add compatibility option for content of /proc/cgroups (bsc#1012628). - soundwire: stream: restore params when prepare ports fail (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1012628). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1012628). - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence (bsc#1012628). - remoteproc: xlnx: Disable unsupported features (bsc#1012628). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1012628). - clk: thead: th1520-ap: Describe mux clocks with clk_mux (bsc#1012628). - tools subcmd: Tighten the filename size in check_if_command_finished (bsc#1012628). - perf pmu: Switch FILENAME_MAX to NAME_MAX (bsc#1012628). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1012628). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1012628). - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string (bsc#1012628). - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers (bsc#1012628). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1012628). - ASoC: fsl_xcvr: get channel status data with firmware exists (bsc#1012628). - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (bsc#1012628). - sh: Do not use hyphen in exported variable name (bsc#1012628). - perf tools: Remove libtraceevent in .gitignore (bsc#1012628). - clk: clocking-wizard: Fix the round rate handling for versal (bsc#1012628). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1012628). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1012628). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1012628). - smb: client: allow parsing zero-length AV pairs (bsc#1012628). - drm/xe/configfs: Fix pci_dev reference leak (bsc#1012628). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1012628). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1012628). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1012628). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1012628). - drm/xe/vf: Disable CSC support on VF (bsc#1012628). - selftests: ALSA: fix memory leak in utimer test (bsc#1012628). - ALSA: usb: scarlett2: Fix missing NULL check (bsc#1012628). - perf record: Cache build-ID of hit DSOs only (bsc#1012628). - bpf: Add cookie object to bpf maps (bsc#1012628). - bpf: Move bpf map owner out of common struct (bsc#1012628). - bpf: Move cgroup iterator helpers to bpf.h (bsc#1012628). - bpf: Fix oob access in cgroup local storage (bsc#1012628). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1012628). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1012628). - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (bsc#1012628). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1012628). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1012628). - vhost: Reintroduce kthread API and add mode selection (bsc#1012628). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1012628). - bpf: Check netfilter ctx accesses are aligned (bsc#1012628). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1012628). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1012628). - dm-flakey: Fix corrupt_bio_byte setup checks (bsc#1012628). - uprobes: revert ref_ctr_offset in uprobe_unregister error path (bsc#1012628). - scripts: gdb: move MNT_* constants to gdb-parsed (bsc#1012628). - squashfs: use folios in squashfs_bio_read_cached() (bsc#1012628). - squashfs: fix incorrect argument to sizeof in kmalloc_array call (bsc#1012628). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1012628). - i3c: fix module_i3c_i2c_driver() with I3C=n (bsc#1012628). - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk (bsc#1012628). - module: Restore the moduleparam prefix length check (bsc#1012628). - ucount: fix atomic_long_inc_below() argument type (bsc#1012628). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1012628). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1012628). - f2fs: fix bio memleak when committing super block (bsc#1012628). - f2fs: fix to avoid invalid wait context issue (bsc#1012628). - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (bsc#1012628). - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (bsc#1012628). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1012628). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1012628). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1012628). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1012628). - f2fs: doc: fix wrong quota mount option description (bsc#1012628). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1012628). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1012628). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1012628). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1012628). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1012628). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1012628). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1012628). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1012628). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1012628). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1012628). - vfio: Prevent open_count decrement to negative (bsc#1012628). - vfio/pds: Fix missing detach_ioas op (bsc#1012628). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1012628). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1012628). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1012628). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1012628). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1012628). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1012628). - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD (bsc#1012628). - sched/psi: Fix psi_seq initialization (bsc#1012628). - padata: Remove comment for reorder_work (bsc#1012628). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1012628). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1012628). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1012628). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1012628). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1012628). - tools/power turbostat: regression fix: --show C1E% (bsc#1012628). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1012628). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1012628). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1012628). - NFSv4.2: another fix for listxattr (bsc#1012628). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1012628). - ARM: s3c/gpio: complete the conversion to new GPIO value setters (bsc#1012628). - md/md-cluster: handle REMOVE message earlier (bsc#1012628). - kcm: Fix splice support (bsc#1012628). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1012628). - phy: mscc: Fix parsing of unicast frames (bsc#1012628). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1012628). - net: mdio_bus: Use devm for getting reset GPIO (bsc#1012628). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1012628). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1012628). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1012628). - s390/mm: Set high_memory at the end of the identity mapping (bsc#1012628). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1012628). - block: Fix default IO priority if there is no IO context (bsc#1012628). - block: ensure discard_granularity is zero when discard is not supported (bsc#1012628). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1012628). - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show() (bsc#1012628). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1012628). - selftests: avoid using ifconfig (bsc#1012628). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1012628). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1012628). - net: drop UFO packets in udp_rcv_segment() (bsc#1012628). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1012628). - md: make rdev_addable usable for rcu mode (bsc#1012628). - sunrpc: fix client side handling of tls alerts (bsc#1012628). - drm/xe/pf: Disable PF restart worker on device removal (bsc#1012628). - x86/irq: Plug vector setup race (bsc#1012628). - eth: fbnic: unlink NAPIs from queues on error to open (bsc#1012628). - ipa: fix compile-testing with qcom-mdt=m (bsc#1012628). - net: devmem: fix DMA direction on unmapping (bsc#1012628). - net: airoha: npu: Add missing MODULE_FIRMWARE macros (bsc#1012628). - benet: fix BUG when creating VFs (bsc#1012628). - Revert "net: mdio_bus: Use devm for getting reset GPIO" (bsc#1012628). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1012628). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1012628). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1012628). - eth: fbnic: Fix tx_dropped reporting (bsc#1012628). - eth: fbnic: Lock the tx_dropped update (bsc#1012628). - NFS/localio: nfs_close_local_fh() fix check for file closed (bsc#1012628). - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh() (bsc#1012628). - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file (bsc#1012628). - net: ti: icssg-prueth: Fix skb handling for XDP_PASS (bsc#1012628). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1012628). - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies (bsc#1012628). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1012628). - s390/boot: Fix startup debugging log (bsc#1012628). - smb: server: remove separate empty_recvmsg_queue (bsc#1012628). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1012628). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - smb: client: remove separate empty_packet_queue (bsc#1012628). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1012628). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - nvmet: exit debugfs after discovery subsystem exits (bsc#1012628). - pptp: fix pptp_xmit() error path (bsc#1012628). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1012628). - tools/power turbostat: Fix bogus SysWatt for forked program (bsc#1012628). - tools/power turbostat: Fix DMR support (bsc#1012628). - nfsd: don't set the ctime on delegated atime updates (bsc#1012628). - nfsd: avoid ref leak in nfsd_open_local_fh() (bsc#1012628). - sunrpc: fix handling of server side tls alerts (bsc#1012628). - perf/core: Preserve AUX buffer allocation failure result (bsc#1012628). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1012628). - perf/core: Exit early on perf_mmap() fail (bsc#1012628). - perf/core: Handle buffer mapping fail correctly in perf_mmap() (bsc#1012628). - perf/core: Prevent VMA split of buffer mappings (bsc#1012628). - selftests/perf_events: Add a mmap() correctness test (bsc#1012628). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1012628). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1012628). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1012628). - ksmbd: fix Preauh_HashValue race condition (bsc#1012628). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1012628). - smb: client: fix netns refcount leak after net_passive changes (bsc#1012628). - smb: client: set symlink type as native for POSIX mounts (bsc#1012628). - smb: client: default to nonativesocket under POSIX mounts (bsc#1012628). - ksmbd: limit repeated connections from clients with the same IP (bsc#1012628). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1012628). - USB: serial: option: add Foxconn T99W709 (bsc#1012628). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1012628). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1012628). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1012628). - x86/sev: Evict cache lines during SNP memory validation (bsc#1012628). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1012628). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1012628). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1012628). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1012628). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1012628). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1012628). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1012628). - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (bsc#1012628). - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (bsc#1012628). - zloop: fix KASAN use-after-free of tag set (bsc#1012628). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1012628). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1012628). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1012628). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1012628). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1012628). - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap() to swap_range_alloc() (bsc#1012628). - mm: shmem: fix the shmem large folio allocation for the i915 driver (bsc#1012628). - usb: gadget: uvc: Initialize frame-based format color matching descriptor (bsc#1012628). - perf/arm-ni: Set initial IRQ affinity (bsc#1012628). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1012628). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1012628). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1012628). - HID: core: Harden s32ton() against conversion to 0 bits (bsc#1012628). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1012628). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1012628). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1012628). - wifi: ath12k: install pairwise key first (bsc#1012628). - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.1-522-spi-cs42l43-Property-entry-should-be-a-null-te.patch. - commit 2e1765c - Update config files. Enable FIPS (bsc#1247998) CRYPTO_MANAGER_DISABLE_TESTS (we had "is not set") became CRYPTO_SELFTESTS (we still have "is not set"), but the logic was inverted: CRYPTO_MANAGER_DISABLE_TESTS <=> !CRYPTO_SELFTESTS. Set CRYPTO_SELFTESTS=y and restore the otehr values to pre-6.16-rc1. - commit fd401db ++++ kernel-firmware-realtek: - Update to version 20250814 (git commit a312f85c8033): * realtek: rt1321: Add patch firmware of MCU ++++ kernel-kvmsmall: - Linux 6.16.1 (bsc#1012628). - audit,module: restore audit logging in load failure case (bsc#1012628). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1012628). - fs_context: fix parameter name in infofc() macro (bsc#1012628). - selftests/landlock: Fix readlink check (bsc#1012628). - selftests/landlock: Fix build of audit_test (bsc#1012628). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1012628). - landlock: Fix warning from KUnit tests (bsc#1012628). - ublk: use vmalloc for ublk_device's __queues (bsc#1012628). - hfsplus: make splice write available again (bsc#1012628). - hfs: make splice write available again (bsc#1012628). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1012628). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1012628). - block: mtip32xx: Fix usage of dma_map_sg() (bsc#1012628). - gfs2: Minor do_xmote cancelation fix (bsc#1012628). - nbd: fix lockdep deadlock warning (bsc#1012628). - md: allow removing faulty rdev during resync (bsc#1012628). - kunit/fortify: Add back "volatile" for sizeof() constants (bsc#1012628). - ublk: speed up ublk server exit handling (bsc#1012628). - ublk: validate ublk server pid (bsc#1012628). - md/raid10: fix set but not used variable in sync_request_write() (bsc#1012628). - gfs2: No more self recovery (bsc#1012628). - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (bsc#1012628). - block: sanitize chunk_sectors for atomic write limits (bsc#1012628). - io_uring: fix breakage in EXPERT menu (bsc#1012628). - btrfs: remove partial support for lowest level from btrfs_search_forward() (bsc#1012628). - eventpoll: Fix semi-unbounded recursion (bsc#1012628). - eventpoll: fix sphinx documentation build warning (bsc#1012628). - block: restore two stage elevator switch while running nr_hw_queue update (bsc#1012628). - sched/task_stack: Add missing const qualifier to end_of_stack() (bsc#1012628). - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (bsc#1012628). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1012628). - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (bsc#1012628). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1012628). - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration (bsc#1012628). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1012628). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (bsc#1012628). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1012628). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1012628). - soc: qcom: QMI encoding/decoding for big endian (bsc#1012628). - soc: qcom: fix endianness for QMI header (bsc#1012628). - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (bsc#1012628). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: qcs615: disable the CTI device of the camera block (bsc#1012628). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1012628). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1012628). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1012628). - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (bsc#1012628). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1012628). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1012628). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1012628). - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (bsc#1012628). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI (bsc#1012628). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1012628). - ARM: dts: microchip: sama7d65: Add clock name property (bsc#1012628). - ARM: dts: microchip: sam9x7: Add clock name property (bsc#1012628). - cpufreq: armada-8k: make both cpu masks static (bsc#1012628). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1012628). - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (bsc#1012628). - x86/bugs: Simplify the retbleed=stuff checks (bsc#1012628). - x86/bugs: Introduce cdt_possible() (bsc#1012628). - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (bsc#1012628). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1012628). - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (bsc#1012628). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1012628). - mei: vsc: Event notifier fixes (bsc#1012628). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1012628). - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (bsc#1012628). - mei: vsc: Run event callback from a workqueue (bsc#1012628). - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (bsc#1012628). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1012628). - drivers: misc: sram: fix up some const issues with recent attribute changes (bsc#1012628). - rust: devres: require T: Send for Devres (bsc#1012628). - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855 (bsc#1012628). - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C (bsc#1012628). - ASoC: SDCA: Add missing default in switch in entity_pde_event() (bsc#1012628). - staging: gpib: fix unset padding field copy back to userspace (bsc#1012628). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1012628). - rust: miscdevice: clarify invariant for `MiscDeviceRegistration` (bsc#1012628). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1012628). - pps: fix poll support (bsc#1012628). - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio (bsc#1012628). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1012628). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1012628). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up (bsc#1012628). - selftests/nolibc: correctly report errors from printf() and friends (bsc#1012628). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1012628). - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through waitpid() (bsc#1012628). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1012628). - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install target (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction (bsc#1012628). - staging: gpib: Fix error code in board_type_ioctl() (bsc#1012628). - staging: gpib: Fix error handling paths in cb_gpib_probe() (bsc#1012628). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1012628). - arm64: dts: rockchip: fix PHY handling for ROCK 4D (bsc#1012628). - arm64: dts: st: fix timer used for ticks (bsc#1012628). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1012628). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio (bsc#1012628). - arm64: dts: rockchip: Fix pinctrl node names for RK3528 (bsc#1012628). - PM / devfreq: Check governor before using governor->name (bsc#1012628). - PM / devfreq: Fix a index typo in trans_stat (bsc#1012628). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1012628). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1012628). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1012628). - arm64: dts: rockchip: Fix UART DMA support for RK3528 (bsc#1012628). - kexec_core: Fix error code path in the KEXEC_JUMP flow (bsc#1012628). - ASoC: SDCA: Update memory allocations to zero initialise (bsc#1012628). - ASoC: SDCA: Allow read-only controls to be deferrable (bsc#1012628). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1012628). - driver core: auxiliary bus: fix OF node leak (bsc#1012628). - samples: mei: Fix building on musl libc (bsc#1012628). - soc: qcom: pmic_glink: fix OF node leak (bsc#1012628). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1012628). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1012628). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1012628). - drm/xe: Correct the rev value for the DVSEC entries (bsc#1012628). - drm/xe: Correct BMG VSEC header sizing (bsc#1012628). - platform/x86: oxpec: Fix turbo register for G1 AMD (bsc#1012628). - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property (bsc#1012628). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1012628). - selftests/tracing: Fix false failure of subsystem event test (bsc#1012628). - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the remaining chips (bsc#1012628). - Revert "udmabuf: fix vmap_udmabuf error page set" (bsc#1012628). - udmabuf: fix vmap missed offset page (bsc#1012628). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1012628). - drm/sitronix: Remove broken backwards-compatibility layer (bsc#1012628). - drm/connector: hdmi: Evaluate limited range after computing format (bsc#1012628). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1012628). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1012628). - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (bsc#1012628). - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (bsc#1012628). - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (bsc#1012628). - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (bsc#1012628). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1012628). - netconsole: Only register console drivers when targets are configured (bsc#1012628). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1012628). - net, bpf: Fix RCU usage in task_cls_state() for BPF programs (bsc#1012628). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1012628). - bpf: handle jset (if a & b ...) as a jump in CFG computation (bsc#1012628). - selftests/bpf: Fix unintentional switch case fall through (bsc#1012628). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1012628). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1012628). - slub: Fix a documentation build error for krealloc() (bsc#1012628). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1012628). - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine() (bsc#1012628). - net: mana: Fix potential deadlocks in mana napi ops (bsc#1012628). - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (bsc#1012628). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1012628). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1012628). - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (bsc#1012628). - wifi: ath12k: update channel list in worker when wait flag is set (bsc#1012628). - wifi: ath12k: Fix double budget decrement while reaping monitor ring (bsc#1012628). - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1012628). - caif: reduce stack size, again (bsc#1012628). - net: annotate races around sk->sk_uid (bsc#1012628). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1012628). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1012628). - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (bsc#1012628). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1012628). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1012628). - drm/xe/uapi: Correct sync type definition in comments (bsc#1012628). - team: replace team lock with rtnl lock (bsc#1012628). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1012628). - wifi: ath12k: Clear auth flag only for actual association in security mode (bsc#1012628). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1012628). - net/mlx5: Check device memory pointer before usage (bsc#1012628). - net: dst: annotate data-races around dst->input (bsc#1012628). - net: dst: annotate data-races around dst->output (bsc#1012628). - net: dst: add four helpers to annotate data-races around dst->dev (bsc#1012628). - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (bsc#1012628). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1012628). - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (bsc#1012628). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1012628). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1012628). - m68k: Don't unregister boot console needlessly (bsc#1012628). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1012628). - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (bsc#1012628). - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (bsc#1012628). - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (bsc#1012628). - drm/amdkfd: Move the process suspend and resume out of full access (bsc#1012628). - drm/amdgpu: rework queue reset scheduler interaction (bsc#1012628). - drm/amdgpu: move force completion into ring resets (bsc#1012628). - drm/amdgpu/gfx10: fix KGQ reset sequence (bsc#1012628). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1012628). - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini" (bsc#1012628). - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (bsc#1012628). - wifi: ath12k: Block radio bring-up in FTM mode (bsc#1012628). - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (bsc#1012628). - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1012628). - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when there are multi display output on rk3588/rk3568 (bsc#1012628). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1012628). - fbcon: Fix outdated registered_fb reference in comment (bsc#1012628). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1012628). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1012628). - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (bsc#1012628). - wifi: ath12k: update unsupported bandwidth flags in reg rules (bsc#1012628). - wifi: ath12k: pack HTT pdev rate stats structs (bsc#1012628). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1012628). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1012628). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1012628). - spi: spi-nxp-fspi: Check return value of devm_mutex_init() (bsc#1012628). - leds: lp8860: Check return value of devm_mutex_init() (bsc#1012628). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1012628). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1012628). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1012628). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1012628). - sched/deadline: Reset extra_bw to max_bw when clearing root domains (bsc#1012628). - iommu/vt-d: Do not wipe out the page table NID when devices detach (bsc#1012628). - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (bsc#1012628). - iommu/arm-smmu: disable PRR on SM8250 (bsc#1012628). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1012628). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1012628). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1012628). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1012628). - mwl8k: Add missing check after DMA map (bsc#1012628). - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (bsc#1012628). - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (bsc#1012628). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1012628). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1012628). - selftests/bpf: fix implementation of smp_mb() (bsc#1012628). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1012628). - rcu: Fix delayed execution of hurry callbacks (bsc#1012628). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1012628). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1012628). - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1012628). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1012628). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1012628). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1012628). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1012628). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1012628). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1012628). - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (bsc#1012628). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1012628). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1012628). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1012628). - kcsan: test: Initialize dummy variable (bsc#1012628). - memcg_slabinfo: Fix use of PG_slab (bsc#1012628). - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (bsc#1012628). - wifi: mac80211: fix WARN_ON for monitor mode on some devices (bsc#1012628). - arm64/gcs: task_gcs_el0_enable() should use passed task (bsc#1012628). - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (bsc#1012628). - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (bsc#1012628). - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (bsc#1012628). - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (bsc#1012628). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1012628). - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (bsc#1012628). - Bluetooth: btintel: Define a macro for Intel Reset vendor command (bsc#1012628). - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (bsc#1012628). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1012628). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1012628). - bpf: Reject narrower access to pointer ctx fields (bsc#1012628). - tools/rv: Do not skip idle in trace (bsc#1012628). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1012628). - selftests: drv-net: tso: enable test cases based on hw_features (bsc#1012628). - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type (bsc#1012628). - selftests: drv-net: tso: fix non-tunneled tso6 test case name (bsc#1012628). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1012628). - can: tscan1: Kconfig: add COMPILE_TEST (bsc#1012628). - can: tscan1: CAN_TSCAN1 can depend on PC104 (bsc#1012628). - can: kvaser_pciefd: Store device channel index (bsc#1012628). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1012628). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1012628). - selftests: netfilter: Ignore tainted kernels in interface stress test (bsc#1012628). - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface tunl0 (bsc#1012628). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1012628). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1012628). - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (bsc#1012628). - macsec: set IFF_UNICAST_FLT priv flag (bsc#1012628). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1012628). - neighbour: Fix null-ptr-deref in neigh_flush_dev() (bsc#1012628). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1012628). - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (bsc#1012628). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1012628). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1012628). - ipv6: add a retry logic in net6_rt_notify() (bsc#1012628). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1012628). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1012628). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1012628). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1012628). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1012628). - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (bsc#1012628). - rv: Remove trailing whitespace from tracepoint string (bsc#1012628). - rv: Use strings in da monitors tracepoints (bsc#1012628). - rv: Adjust monitor dependencies (bsc#1012628). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1012628). - fortify: Fix incorrect reporting of read buffer size (bsc#1012628). - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings() (bsc#1012628). - remoteproc: qcom: pas: Conclude the rename from adsp (bsc#1012628). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1012628). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1012628). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1012628). - crypto: qat - use unmanaged allocation for dc_data (bsc#1012628). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1012628). - crypto: s390/hmac - Fix counter in export state (bsc#1012628). - crypto: s390/sha3 - Use cpu byte-order when exporting (bsc#1012628). - padata: Fix pd UAF once and for all (bsc#1012628). - crypto: ccp - Fix dereferencing uninitialized error pointer (bsc#1012628). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1012628). - crypto: qat - fix state restore for banks with exceptions (bsc#1012628). - mtd: fix possible integer overflow in erase_xfer() (bsc#1012628). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1012628). - media: imx-jpeg: Account for data_offset when getting image address (bsc#1012628). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1012628). - perf parse-events: Set default GH modifier properly (bsc#1012628). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1012628). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1012628). - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC (bsc#1012628). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1012628). - power: supply: qcom_pmi8998_charger: fix wakeirq (bsc#1012628). - power: supply: max1720x correct capacity computation (bsc#1012628). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1012628). - crypto: ahash - Add support for drivers with no fallback (bsc#1012628). - crypto: ahash - Stop legacy tfms from using the set_virt fallback path (bsc#1012628). - crypto: qat - restore ASYM service support for GEN6 devices (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1012628). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1012628). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1012628). - pinctrl: canaan: k230: add NULL check in DT parse (bsc#1012628). - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (bsc#1012628). - PCI: Adjust the position of reading the Link Control 2 register (bsc#1012628). - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (bsc#1012628). - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - soundwire: Correct some property names (bsc#1012628). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1012628). - soundwire: debugfs: move debug statement outside of error handling (bsc#1012628). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1012628). - fanotify: sanitize handle_type values when reporting fid (bsc#1012628). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1012628). - RDMA/ipoib: Use parent rdma device net namespace (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (bsc#1012628). - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (bsc#1012628). - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (bsc#1012628). - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (bsc#1012628). - Fix dma_unmap_sg() nents value (bsc#1012628). - leds: pca955x: Avoid potential overflow when filling default_label (take 2) (bsc#1012628). - gitignore: allow .pylintrc to be tracked (bsc#1012628). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1012628). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1012628). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1012628). - perf sched: Make sure it frees the usage string (bsc#1012628). - perf sched: Free thread->priv using priv_destructor (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1012628). - perf sched: Fix thread leaks in 'perf sched timehist' (bsc#1012628). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1012628). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1012628). - clk: spacemit: mark K1 pll1_d8 as critical (bsc#1012628). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1012628). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1012628). - crypto: ccp - Fix locking on alloc failure handling (bsc#1012628). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1012628). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1012628). - RDMA/hns: Get message length of ack_req from FW (bsc#1012628). - RDMA/hns: Fix accessing uninitialized resources (bsc#1012628). - RDMA/hns: Drop GFP_NOWARN (bsc#1012628). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1012628). - tracing: Use queue_rcu_work() to free filters (bsc#1012628). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1012628). - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (bsc#1012628). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1012628). - cxl/core: Introduce a new helper cxl_resource_contains_addr() (bsc#1012628). - cxl/edac: Fix wrong dpa checking for PPR operation (bsc#1012628). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1012628). - perf tests bp_account: Fix leaked file descriptor (bsc#1012628). - perf hwmon_pmu: Avoid shortening hwmon PMU name (bsc#1012628). - perf python: Fix thread check in pyrf_evsel__read (bsc#1012628). - perf python: Correct pyrf_evsel__read for tool PMUs (bsc#1012628). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1012628). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1012628). - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (bsc#1012628). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1012628). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: core: Fix kernel doc for scsi_track_queue_full() (bsc#1012628). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1012628). - PCI: Fix driver_managed_dma check (bsc#1012628). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1012628). - selftests/cgroup: fix cpu.max tests (bsc#1012628). - ext4: fix inode use after free in ext4_end_io_rsv_work() (bsc#1012628). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1012628). - clk: at91: sam9x7: update pll clk ranges (bsc#1012628). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1012628). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1012628). - crypto: qat - fix virtual channel configuration for GEN6 devices (bsc#1012628). - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (bsc#1012628). - cgroup: Add compatibility option for content of /proc/cgroups (bsc#1012628). - soundwire: stream: restore params when prepare ports fail (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1012628). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1012628). - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence (bsc#1012628). - remoteproc: xlnx: Disable unsupported features (bsc#1012628). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1012628). - clk: thead: th1520-ap: Describe mux clocks with clk_mux (bsc#1012628). - tools subcmd: Tighten the filename size in check_if_command_finished (bsc#1012628). - perf pmu: Switch FILENAME_MAX to NAME_MAX (bsc#1012628). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1012628). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1012628). - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string (bsc#1012628). - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers (bsc#1012628). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1012628). - ASoC: fsl_xcvr: get channel status data with firmware exists (bsc#1012628). - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (bsc#1012628). - sh: Do not use hyphen in exported variable name (bsc#1012628). - perf tools: Remove libtraceevent in .gitignore (bsc#1012628). - clk: clocking-wizard: Fix the round rate handling for versal (bsc#1012628). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1012628). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1012628). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1012628). - smb: client: allow parsing zero-length AV pairs (bsc#1012628). - drm/xe/configfs: Fix pci_dev reference leak (bsc#1012628). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1012628). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1012628). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1012628). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1012628). - drm/xe/vf: Disable CSC support on VF (bsc#1012628). - selftests: ALSA: fix memory leak in utimer test (bsc#1012628). - ALSA: usb: scarlett2: Fix missing NULL check (bsc#1012628). - perf record: Cache build-ID of hit DSOs only (bsc#1012628). - bpf: Add cookie object to bpf maps (bsc#1012628). - bpf: Move bpf map owner out of common struct (bsc#1012628). - bpf: Move cgroup iterator helpers to bpf.h (bsc#1012628). - bpf: Fix oob access in cgroup local storage (bsc#1012628). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1012628). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1012628). - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (bsc#1012628). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1012628). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1012628). - vhost: Reintroduce kthread API and add mode selection (bsc#1012628). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1012628). - bpf: Check netfilter ctx accesses are aligned (bsc#1012628). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1012628). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1012628). - dm-flakey: Fix corrupt_bio_byte setup checks (bsc#1012628). - uprobes: revert ref_ctr_offset in uprobe_unregister error path (bsc#1012628). - scripts: gdb: move MNT_* constants to gdb-parsed (bsc#1012628). - squashfs: use folios in squashfs_bio_read_cached() (bsc#1012628). - squashfs: fix incorrect argument to sizeof in kmalloc_array call (bsc#1012628). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1012628). - i3c: fix module_i3c_i2c_driver() with I3C=n (bsc#1012628). - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk (bsc#1012628). - module: Restore the moduleparam prefix length check (bsc#1012628). - ucount: fix atomic_long_inc_below() argument type (bsc#1012628). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1012628). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1012628). - f2fs: fix bio memleak when committing super block (bsc#1012628). - f2fs: fix to avoid invalid wait context issue (bsc#1012628). - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (bsc#1012628). - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (bsc#1012628). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1012628). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1012628). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1012628). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1012628). - f2fs: doc: fix wrong quota mount option description (bsc#1012628). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1012628). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1012628). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1012628). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1012628). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1012628). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1012628). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1012628). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1012628). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1012628). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1012628). - vfio: Prevent open_count decrement to negative (bsc#1012628). - vfio/pds: Fix missing detach_ioas op (bsc#1012628). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1012628). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1012628). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1012628). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1012628). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1012628). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1012628). - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD (bsc#1012628). - sched/psi: Fix psi_seq initialization (bsc#1012628). - padata: Remove comment for reorder_work (bsc#1012628). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1012628). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1012628). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1012628). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1012628). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1012628). - tools/power turbostat: regression fix: --show C1E% (bsc#1012628). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1012628). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1012628). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1012628). - NFSv4.2: another fix for listxattr (bsc#1012628). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1012628). - ARM: s3c/gpio: complete the conversion to new GPIO value setters (bsc#1012628). - md/md-cluster: handle REMOVE message earlier (bsc#1012628). - kcm: Fix splice support (bsc#1012628). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1012628). - phy: mscc: Fix parsing of unicast frames (bsc#1012628). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1012628). - net: mdio_bus: Use devm for getting reset GPIO (bsc#1012628). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1012628). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1012628). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1012628). - s390/mm: Set high_memory at the end of the identity mapping (bsc#1012628). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1012628). - block: Fix default IO priority if there is no IO context (bsc#1012628). - block: ensure discard_granularity is zero when discard is not supported (bsc#1012628). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1012628). - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show() (bsc#1012628). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1012628). - selftests: avoid using ifconfig (bsc#1012628). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1012628). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1012628). - net: drop UFO packets in udp_rcv_segment() (bsc#1012628). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1012628). - md: make rdev_addable usable for rcu mode (bsc#1012628). - sunrpc: fix client side handling of tls alerts (bsc#1012628). - drm/xe/pf: Disable PF restart worker on device removal (bsc#1012628). - x86/irq: Plug vector setup race (bsc#1012628). - eth: fbnic: unlink NAPIs from queues on error to open (bsc#1012628). - ipa: fix compile-testing with qcom-mdt=m (bsc#1012628). - net: devmem: fix DMA direction on unmapping (bsc#1012628). - net: airoha: npu: Add missing MODULE_FIRMWARE macros (bsc#1012628). - benet: fix BUG when creating VFs (bsc#1012628). - Revert "net: mdio_bus: Use devm for getting reset GPIO" (bsc#1012628). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1012628). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1012628). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1012628). - eth: fbnic: Fix tx_dropped reporting (bsc#1012628). - eth: fbnic: Lock the tx_dropped update (bsc#1012628). - NFS/localio: nfs_close_local_fh() fix check for file closed (bsc#1012628). - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh() (bsc#1012628). - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file (bsc#1012628). - net: ti: icssg-prueth: Fix skb handling for XDP_PASS (bsc#1012628). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1012628). - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies (bsc#1012628). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1012628). - s390/boot: Fix startup debugging log (bsc#1012628). - smb: server: remove separate empty_recvmsg_queue (bsc#1012628). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1012628). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - smb: client: remove separate empty_packet_queue (bsc#1012628). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1012628). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - nvmet: exit debugfs after discovery subsystem exits (bsc#1012628). - pptp: fix pptp_xmit() error path (bsc#1012628). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1012628). - tools/power turbostat: Fix bogus SysWatt for forked program (bsc#1012628). - tools/power turbostat: Fix DMR support (bsc#1012628). - nfsd: don't set the ctime on delegated atime updates (bsc#1012628). - nfsd: avoid ref leak in nfsd_open_local_fh() (bsc#1012628). - sunrpc: fix handling of server side tls alerts (bsc#1012628). - perf/core: Preserve AUX buffer allocation failure result (bsc#1012628). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1012628). - perf/core: Exit early on perf_mmap() fail (bsc#1012628). - perf/core: Handle buffer mapping fail correctly in perf_mmap() (bsc#1012628). - perf/core: Prevent VMA split of buffer mappings (bsc#1012628). - selftests/perf_events: Add a mmap() correctness test (bsc#1012628). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1012628). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1012628). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1012628). - ksmbd: fix Preauh_HashValue race condition (bsc#1012628). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1012628). - smb: client: fix netns refcount leak after net_passive changes (bsc#1012628). - smb: client: set symlink type as native for POSIX mounts (bsc#1012628). - smb: client: default to nonativesocket under POSIX mounts (bsc#1012628). - ksmbd: limit repeated connections from clients with the same IP (bsc#1012628). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1012628). - USB: serial: option: add Foxconn T99W709 (bsc#1012628). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1012628). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1012628). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1012628). - x86/sev: Evict cache lines during SNP memory validation (bsc#1012628). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1012628). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1012628). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1012628). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1012628). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1012628). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1012628). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1012628). - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (bsc#1012628). - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (bsc#1012628). - zloop: fix KASAN use-after-free of tag set (bsc#1012628). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1012628). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1012628). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1012628). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1012628). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1012628). - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap() to swap_range_alloc() (bsc#1012628). - mm: shmem: fix the shmem large folio allocation for the i915 driver (bsc#1012628). - usb: gadget: uvc: Initialize frame-based format color matching descriptor (bsc#1012628). - perf/arm-ni: Set initial IRQ affinity (bsc#1012628). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1012628). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1012628). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1012628). - HID: core: Harden s32ton() against conversion to 0 bits (bsc#1012628). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1012628). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1012628). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1012628). - wifi: ath12k: install pairwise key first (bsc#1012628). - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.1-522-spi-cs42l43-Property-entry-should-be-a-null-te.patch. - commit 2e1765c - Update config files. Enable FIPS (bsc#1247998) CRYPTO_MANAGER_DISABLE_TESTS (we had "is not set") became CRYPTO_SELFTESTS (we still have "is not set"), but the logic was inverted: CRYPTO_MANAGER_DISABLE_TESTS <=> !CRYPTO_SELFTESTS. Set CRYPTO_SELFTESTS=y and restore the otehr values to pre-6.16-rc1. - commit fd401db ++++ kernel-longterm: - Update config files for 6.12.42. Adding CONFIG_VHOST_ENABLE_FORK_OWNER_CONTROL=y for aarch64 and x86_64. - commit 13330df - Linux 6.12.42 (bsc#1234429). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1234429). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1234429). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1234429). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1234429). - perf/arm-ni: Set initial IRQ affinity (bsc#1234429). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1234429). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1234429). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1234429). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1234429). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1234429). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1234429). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1234429). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1234429). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1234429). - x86/sev: Evict cache lines during SNP memory validation (bsc#1234429). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1234429). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1234429). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1234429). - PCI/ASPM: Fix L1SS saving (bsc#1234429). - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state() (bsc#1234429). - USB: serial: option: add Foxconn T99W709 (bsc#1234429). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1234429). - ksmbd: limit repeated connections from clients with the same IP (bsc#1234429). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1234429). - ksmbd: fix Preauh_HashValue race condition (bsc#1234429). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1234429). - drm/i915/ddi: only call shutdown hooks for valid encoders (bsc#1234429). - drm/i915/display: add intel_encoder_is_hdmi() (bsc#1234429). - drm/i915/ddi: gracefully handle errors from intel_ddi_init_hdmi_connector() (bsc#1234429). - drm/i915/hdmi: add error handling in g4x_hdmi_init() (bsc#1234429). - drm/i915/hdmi: propagate errors from intel_hdmi_init_connector() (bsc#1234429). - drm/i915/ddi: change intel_ddi_init_{dp, hdmi}_connector() return type (bsc#1234429). - selftests/bpf: Fix build error with llvm 19 (bsc#1234429). - selftests/bpf: Add a test for arena range tree algorithm (bsc#1234429). - ice/ptp: fix crosstimestamp reporting (bsc#1234429). - Revert "bcache: remove heap-related macros and switch to generic min_heap" (bsc#1234429). - accel/ivpu: Fix reset_engine debugfs file logic (bsc#1234429). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1234429). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1234429). - selftests/perf_events: Add a mmap() correctness test (bsc#1234429). - perf/core: Prevent VMA split of buffer mappings (bsc#1234429). - perf/core: Exit early on perf_mmap() fail (bsc#1234429). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1234429). - sunrpc: fix handling of server side tls alerts (bsc#1234429). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1234429). - pptp: fix pptp_xmit() error path (bsc#1234429). - nvmet: exit debugfs after discovery subsystem exits (bsc#1234429). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1234429). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1234429). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1234429). - smb: client: remove separate empty_packet_queue (bsc#1234429). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1234429). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1234429). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1234429). - smb: server: remove separate empty_recvmsg_queue (bsc#1234429). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1234429). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1234429). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1234429). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1234429). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1234429). - benet: fix BUG when creating VFs (bsc#1234429). - x86/irq: Plug vector setup race (bsc#1234429). - sunrpc: fix client side handling of tls alerts (bsc#1234429). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1234429). - net: drop UFO packets in udp_rcv_segment() (bsc#1234429). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1234429). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1234429). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1234429). - spi: cs42l43: Property entry should be a null-terminated array (bsc#1234429). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1234429). - block: ensure discard_granularity is zero when discard is not supported (bsc#1234429). - block: Fix default IO priority if there is no IO context (bsc#1234429). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1234429). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1234429). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1234429). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1234429). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1234429). - phy: mscc: Fix parsing of unicast frames (bsc#1234429). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1234429). - md/md-cluster: handle REMOVE message earlier (bsc#1234429). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1234429). - NFSv4.2: another fix for listxattr (bsc#1234429). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1234429). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1234429). - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (bsc#1234429). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1234429). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1234429). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1234429). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1234429). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1234429). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1234429). - sched/psi: Fix psi_seq initialization (bsc#1234429). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1234429). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1234429). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1234429). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1234429). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1234429). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1234429). - vfio/pds: Fix missing detach_ioas op (bsc#1234429). - vfio: Prevent open_count decrement to negative (bsc#1234429). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1234429). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1234429). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1234429). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1234429). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1234429). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1234429). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1234429). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1234429). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1234429). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1234429). - f2fs: doc: fix wrong quota mount option description (bsc#1234429). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1234429). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1234429). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1234429). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1234429). - f2fs: fix bio memleak when committing super block (bsc#1234429). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1234429). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1234429). - ucount: fix atomic_long_inc_below() argument type (bsc#1234429). - module: Restore the moduleparam prefix length check (bsc#1234429). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1234429). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1234429). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1234429). - bpf: Check netfilter ctx accesses are aligned (bsc#1234429). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1234429). - vhost: Reintroduce kthread API and add mode selection (bsc#1234429). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1234429). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1234429). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1234429). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1234429). - perf record: Cache build-ID of hit DSOs only (bsc#1234429). - selftests: ALSA: fix memory leak in utimer test (bsc#1234429). - drm/xe/vf: Disable CSC support on VF (bsc#1234429). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1234429). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1234429). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1234429). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1234429). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1234429). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1234429). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1234429). - perf tools: Remove libtraceevent in .gitignore (bsc#1234429). - sh: Do not use hyphen in exported variable name (bsc#1234429). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1234429). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1234429). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1234429). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1234429). - remoteproc: xlnx: Disable unsupported features (bsc#1234429). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1234429). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1234429). - soundwire: stream: restore params when prepare ports fail (bsc#1234429). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1234429). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1234429). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1234429). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1234429). - clk: at91: sam9x7: update pll clk ranges (bsc#1234429). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1234429). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1234429). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1234429). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1234429). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1234429). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1234429). - perf tests bp_account: Fix leaked file descriptor (bsc#1234429). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1234429). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1234429). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1234429). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1234429). - RDMA/hns: Drop GFP_NOWARN (bsc#1234429). - RDMA/hns: Fix accessing uninitialized resources (bsc#1234429). - RDMA/hns: Get message length of ack_req from FW (bsc#1234429). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1234429). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1234429). - crypto: ccp - Fix locking on alloc failure handling (bsc#1234429). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1234429). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1234429). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1234429). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1234429). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1234429). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1234429). - perf sched: Free thread->priv using priv_destructor (bsc#1234429). - perf sched: Make sure it frees the usage string (bsc#1234429). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1234429). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1234429). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1234429). - Fix dma_unmap_sg() nents value (bsc#1234429). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1234429). - fanotify: sanitize handle_type values when reporting fid (bsc#1234429). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1234429). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1234429). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1234429). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1234429). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1234429). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1234429). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1234429). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1234429). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1234429). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1234429). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1234429). - mtd: fix possible integer overflow in erase_xfer() (bsc#1234429). - crypto: qat - fix state restore for banks with exceptions (bsc#1234429). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1234429). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1234429). - crypto: qat - use unmanaged allocation for dc_data (bsc#1234429). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1234429). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1234429). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1234429). - fortify: Fix incorrect reporting of read buffer size (bsc#1234429). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1234429). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1234429). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1234429). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1234429). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1234429). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1234429). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1234429). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1234429). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1234429). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1234429). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1234429). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1234429). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1234429). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1234429). - can: kvaser_pciefd: Store device channel index (bsc#1234429). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1234429). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1234429). - tools/rv: Do not skip idle in trace (bsc#1234429). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1234429). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1234429). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1234429). - memcg_slabinfo: Fix use of PG_slab (bsc#1234429). - kcsan: test: Initialize dummy variable (bsc#1234429). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1234429). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1234429). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1234429). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1234429). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1234429). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1234429). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1234429). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1234429). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1234429). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1234429). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1234429). - rcu: Fix delayed execution of hurry callbacks (bsc#1234429). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1234429). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1234429). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1234429). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1234429). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1234429). - mwl8k: Add missing check after DMA map (bsc#1234429). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1234429). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1234429). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1234429). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1234429). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1234429). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1234429). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1234429). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1234429). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1234429). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1234429). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1234429). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1234429). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1234429). - fbcon: Fix outdated registered_fb reference in comment (bsc#1234429). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1234429). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1234429). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1234429). - m68k: Don't unregister boot console needlessly (bsc#1234429). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1234429). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1234429). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1234429). - net: dst: annotate data-races around dst->output (bsc#1234429). - net: dst: annotate data-races around dst->input (bsc#1234429). - net/mlx5: Check device memory pointer before usage (bsc#1234429). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1234429). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1234429). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1234429). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1234429). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1234429). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1234429). - caif: reduce stack size, again (bsc#1234429). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1234429). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1234429). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1234429). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1234429). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1234429). - selftests/bpf: Fix unintentional switch case fall through (bsc#1234429). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1234429). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1234429). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1234429). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1234429). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1234429). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1234429). - selftests/tracing: Fix false failure of subsystem event test (bsc#1234429). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1234429). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1234429). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1234429). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1234429). - soc: qcom: pmic_glink: fix OF node leak (bsc#1234429). - samples: mei: Fix building on musl libc (bsc#1234429). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1234429). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1234429). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1234429). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1234429). - PM / devfreq: Fix a index typo in trans_stat (bsc#1234429). - PM / devfreq: Check governor before using governor->name (bsc#1234429). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1234429). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1234429). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1234429). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1234429). - arm64: dts: st: fix timer used for ticks (bsc#1234429). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1234429). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1234429). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1234429). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1234429). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1234429). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1234429). - pps: fix poll support (bsc#1234429). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1234429). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1234429). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1234429). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1234429). - mei: vsc: Event notifier fixes (bsc#1234429). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1234429). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1234429). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1234429). - cpufreq: armada-8k: make both cpu masks static (bsc#1234429). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1234429). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1234429). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1234429). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1234429). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1234429). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1234429). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1234429). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1234429). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1234429). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1234429). - soc: qcom: QMI encoding/decoding for big endian (bsc#1234429). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1234429). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1234429). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1234429). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1234429). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1234429). - io_uring: fix breakage in EXPERT menu (bsc#1234429). - gfs2: No more self recovery (bsc#1234429). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1234429). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1234429). - hfs: make splice write available again (bsc#1234429). - hfsplus: make splice write available again (bsc#1234429). - ublk: use vmalloc for ublk_device's __queues (bsc#1234429). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1234429). - fs_context: fix parameter name in infofc() macro (bsc#1234429). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1234429). - audit,module: restore audit logging in load failure case (bsc#1234429). - ASoC: amd: yc: add DMI quirk for ASUS M6501RM (bsc#1234429). - ASoC: Intel: fix SND_SOC_SOF dependencies (bsc#1234429). - ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX (bsc#1234429). - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx (bsc#1234429). - ethernet: intel: fix building with large NR_CPUS (bsc#1234429). - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx (bsc#1234429). - commit 28b079c ++++ kernel-obs-build: - Linux 6.16.1 (bsc#1012628). - audit,module: restore audit logging in load failure case (bsc#1012628). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1012628). - fs_context: fix parameter name in infofc() macro (bsc#1012628). - selftests/landlock: Fix readlink check (bsc#1012628). - selftests/landlock: Fix build of audit_test (bsc#1012628). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1012628). - landlock: Fix warning from KUnit tests (bsc#1012628). - ublk: use vmalloc for ublk_device's __queues (bsc#1012628). - hfsplus: make splice write available again (bsc#1012628). - hfs: make splice write available again (bsc#1012628). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1012628). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1012628). - block: mtip32xx: Fix usage of dma_map_sg() (bsc#1012628). - gfs2: Minor do_xmote cancelation fix (bsc#1012628). - nbd: fix lockdep deadlock warning (bsc#1012628). - md: allow removing faulty rdev during resync (bsc#1012628). - kunit/fortify: Add back "volatile" for sizeof() constants (bsc#1012628). - ublk: speed up ublk server exit handling (bsc#1012628). - ublk: validate ublk server pid (bsc#1012628). - md/raid10: fix set but not used variable in sync_request_write() (bsc#1012628). - gfs2: No more self recovery (bsc#1012628). - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (bsc#1012628). - block: sanitize chunk_sectors for atomic write limits (bsc#1012628). - io_uring: fix breakage in EXPERT menu (bsc#1012628). - btrfs: remove partial support for lowest level from btrfs_search_forward() (bsc#1012628). - eventpoll: Fix semi-unbounded recursion (bsc#1012628). - eventpoll: fix sphinx documentation build warning (bsc#1012628). - block: restore two stage elevator switch while running nr_hw_queue update (bsc#1012628). - sched/task_stack: Add missing const qualifier to end_of_stack() (bsc#1012628). - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (bsc#1012628). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1012628). - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (bsc#1012628). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1012628). - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration (bsc#1012628). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1012628). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (bsc#1012628). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1012628). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1012628). - soc: qcom: QMI encoding/decoding for big endian (bsc#1012628). - soc: qcom: fix endianness for QMI header (bsc#1012628). - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (bsc#1012628). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: qcs615: disable the CTI device of the camera block (bsc#1012628). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1012628). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1012628). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1012628). - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (bsc#1012628). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1012628). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1012628). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1012628). - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (bsc#1012628). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI (bsc#1012628). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1012628). - ARM: dts: microchip: sama7d65: Add clock name property (bsc#1012628). - ARM: dts: microchip: sam9x7: Add clock name property (bsc#1012628). - cpufreq: armada-8k: make both cpu masks static (bsc#1012628). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1012628). - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (bsc#1012628). - x86/bugs: Simplify the retbleed=stuff checks (bsc#1012628). - x86/bugs: Introduce cdt_possible() (bsc#1012628). - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (bsc#1012628). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1012628). - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (bsc#1012628). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1012628). - mei: vsc: Event notifier fixes (bsc#1012628). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1012628). - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (bsc#1012628). - mei: vsc: Run event callback from a workqueue (bsc#1012628). - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (bsc#1012628). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1012628). - drivers: misc: sram: fix up some const issues with recent attribute changes (bsc#1012628). - rust: devres: require T: Send for Devres (bsc#1012628). - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855 (bsc#1012628). - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C (bsc#1012628). - ASoC: SDCA: Add missing default in switch in entity_pde_event() (bsc#1012628). - staging: gpib: fix unset padding field copy back to userspace (bsc#1012628). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1012628). - rust: miscdevice: clarify invariant for `MiscDeviceRegistration` (bsc#1012628). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1012628). - pps: fix poll support (bsc#1012628). - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio (bsc#1012628). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1012628). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1012628). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up (bsc#1012628). - selftests/nolibc: correctly report errors from printf() and friends (bsc#1012628). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1012628). - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through waitpid() (bsc#1012628). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1012628). - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install target (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction (bsc#1012628). - staging: gpib: Fix error code in board_type_ioctl() (bsc#1012628). - staging: gpib: Fix error handling paths in cb_gpib_probe() (bsc#1012628). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1012628). - arm64: dts: rockchip: fix PHY handling for ROCK 4D (bsc#1012628). - arm64: dts: st: fix timer used for ticks (bsc#1012628). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1012628). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio (bsc#1012628). - arm64: dts: rockchip: Fix pinctrl node names for RK3528 (bsc#1012628). - PM / devfreq: Check governor before using governor->name (bsc#1012628). - PM / devfreq: Fix a index typo in trans_stat (bsc#1012628). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1012628). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1012628). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1012628). - arm64: dts: rockchip: Fix UART DMA support for RK3528 (bsc#1012628). - kexec_core: Fix error code path in the KEXEC_JUMP flow (bsc#1012628). - ASoC: SDCA: Update memory allocations to zero initialise (bsc#1012628). - ASoC: SDCA: Allow read-only controls to be deferrable (bsc#1012628). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1012628). - driver core: auxiliary bus: fix OF node leak (bsc#1012628). - samples: mei: Fix building on musl libc (bsc#1012628). - soc: qcom: pmic_glink: fix OF node leak (bsc#1012628). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1012628). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1012628). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1012628). - drm/xe: Correct the rev value for the DVSEC entries (bsc#1012628). - drm/xe: Correct BMG VSEC header sizing (bsc#1012628). - platform/x86: oxpec: Fix turbo register for G1 AMD (bsc#1012628). - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property (bsc#1012628). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1012628). - selftests/tracing: Fix false failure of subsystem event test (bsc#1012628). - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the remaining chips (bsc#1012628). - Revert "udmabuf: fix vmap_udmabuf error page set" (bsc#1012628). - udmabuf: fix vmap missed offset page (bsc#1012628). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1012628). - drm/sitronix: Remove broken backwards-compatibility layer (bsc#1012628). - drm/connector: hdmi: Evaluate limited range after computing format (bsc#1012628). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1012628). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1012628). - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (bsc#1012628). - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (bsc#1012628). - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (bsc#1012628). - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (bsc#1012628). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1012628). - netconsole: Only register console drivers when targets are configured (bsc#1012628). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1012628). - net, bpf: Fix RCU usage in task_cls_state() for BPF programs (bsc#1012628). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1012628). - bpf: handle jset (if a & b ...) as a jump in CFG computation (bsc#1012628). - selftests/bpf: Fix unintentional switch case fall through (bsc#1012628). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1012628). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1012628). - slub: Fix a documentation build error for krealloc() (bsc#1012628). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1012628). - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine() (bsc#1012628). - net: mana: Fix potential deadlocks in mana napi ops (bsc#1012628). - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (bsc#1012628). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1012628). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1012628). - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (bsc#1012628). - wifi: ath12k: update channel list in worker when wait flag is set (bsc#1012628). - wifi: ath12k: Fix double budget decrement while reaping monitor ring (bsc#1012628). - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1012628). - caif: reduce stack size, again (bsc#1012628). - net: annotate races around sk->sk_uid (bsc#1012628). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1012628). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1012628). - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (bsc#1012628). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1012628). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1012628). - drm/xe/uapi: Correct sync type definition in comments (bsc#1012628). - team: replace team lock with rtnl lock (bsc#1012628). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1012628). - wifi: ath12k: Clear auth flag only for actual association in security mode (bsc#1012628). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1012628). - net/mlx5: Check device memory pointer before usage (bsc#1012628). - net: dst: annotate data-races around dst->input (bsc#1012628). - net: dst: annotate data-races around dst->output (bsc#1012628). - net: dst: add four helpers to annotate data-races around dst->dev (bsc#1012628). - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (bsc#1012628). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1012628). - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (bsc#1012628). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1012628). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1012628). - m68k: Don't unregister boot console needlessly (bsc#1012628). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1012628). - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (bsc#1012628). - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (bsc#1012628). - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (bsc#1012628). - drm/amdkfd: Move the process suspend and resume out of full access (bsc#1012628). - drm/amdgpu: rework queue reset scheduler interaction (bsc#1012628). - drm/amdgpu: move force completion into ring resets (bsc#1012628). - drm/amdgpu/gfx10: fix KGQ reset sequence (bsc#1012628). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1012628). - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini" (bsc#1012628). - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (bsc#1012628). - wifi: ath12k: Block radio bring-up in FTM mode (bsc#1012628). - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (bsc#1012628). - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1012628). - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when there are multi display output on rk3588/rk3568 (bsc#1012628). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1012628). - fbcon: Fix outdated registered_fb reference in comment (bsc#1012628). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1012628). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1012628). - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (bsc#1012628). - wifi: ath12k: update unsupported bandwidth flags in reg rules (bsc#1012628). - wifi: ath12k: pack HTT pdev rate stats structs (bsc#1012628). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1012628). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1012628). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1012628). - spi: spi-nxp-fspi: Check return value of devm_mutex_init() (bsc#1012628). - leds: lp8860: Check return value of devm_mutex_init() (bsc#1012628). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1012628). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1012628). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1012628). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1012628). - sched/deadline: Reset extra_bw to max_bw when clearing root domains (bsc#1012628). - iommu/vt-d: Do not wipe out the page table NID when devices detach (bsc#1012628). - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (bsc#1012628). - iommu/arm-smmu: disable PRR on SM8250 (bsc#1012628). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1012628). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1012628). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1012628). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1012628). - mwl8k: Add missing check after DMA map (bsc#1012628). - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (bsc#1012628). - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (bsc#1012628). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1012628). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1012628). - selftests/bpf: fix implementation of smp_mb() (bsc#1012628). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1012628). - rcu: Fix delayed execution of hurry callbacks (bsc#1012628). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1012628). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1012628). - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1012628). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1012628). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1012628). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1012628). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1012628). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1012628). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1012628). - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (bsc#1012628). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1012628). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1012628). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1012628). - kcsan: test: Initialize dummy variable (bsc#1012628). - memcg_slabinfo: Fix use of PG_slab (bsc#1012628). - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (bsc#1012628). - wifi: mac80211: fix WARN_ON for monitor mode on some devices (bsc#1012628). - arm64/gcs: task_gcs_el0_enable() should use passed task (bsc#1012628). - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (bsc#1012628). - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (bsc#1012628). - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (bsc#1012628). - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (bsc#1012628). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1012628). - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (bsc#1012628). - Bluetooth: btintel: Define a macro for Intel Reset vendor command (bsc#1012628). - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (bsc#1012628). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1012628). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1012628). - bpf: Reject narrower access to pointer ctx fields (bsc#1012628). - tools/rv: Do not skip idle in trace (bsc#1012628). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1012628). - selftests: drv-net: tso: enable test cases based on hw_features (bsc#1012628). - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type (bsc#1012628). - selftests: drv-net: tso: fix non-tunneled tso6 test case name (bsc#1012628). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1012628). - can: tscan1: Kconfig: add COMPILE_TEST (bsc#1012628). - can: tscan1: CAN_TSCAN1 can depend on PC104 (bsc#1012628). - can: kvaser_pciefd: Store device channel index (bsc#1012628). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1012628). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1012628). - selftests: netfilter: Ignore tainted kernels in interface stress test (bsc#1012628). - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface tunl0 (bsc#1012628). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1012628). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1012628). - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (bsc#1012628). - macsec: set IFF_UNICAST_FLT priv flag (bsc#1012628). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1012628). - neighbour: Fix null-ptr-deref in neigh_flush_dev() (bsc#1012628). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1012628). - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (bsc#1012628). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1012628). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1012628). - ipv6: add a retry logic in net6_rt_notify() (bsc#1012628). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1012628). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1012628). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1012628). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1012628). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1012628). - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (bsc#1012628). - rv: Remove trailing whitespace from tracepoint string (bsc#1012628). - rv: Use strings in da monitors tracepoints (bsc#1012628). - rv: Adjust monitor dependencies (bsc#1012628). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1012628). - fortify: Fix incorrect reporting of read buffer size (bsc#1012628). - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings() (bsc#1012628). - remoteproc: qcom: pas: Conclude the rename from adsp (bsc#1012628). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1012628). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1012628). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1012628). - crypto: qat - use unmanaged allocation for dc_data (bsc#1012628). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1012628). - crypto: s390/hmac - Fix counter in export state (bsc#1012628). - crypto: s390/sha3 - Use cpu byte-order when exporting (bsc#1012628). - padata: Fix pd UAF once and for all (bsc#1012628). - crypto: ccp - Fix dereferencing uninitialized error pointer (bsc#1012628). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1012628). - crypto: qat - fix state restore for banks with exceptions (bsc#1012628). - mtd: fix possible integer overflow in erase_xfer() (bsc#1012628). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1012628). - media: imx-jpeg: Account for data_offset when getting image address (bsc#1012628). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1012628). - perf parse-events: Set default GH modifier properly (bsc#1012628). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1012628). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1012628). - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC (bsc#1012628). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1012628). - power: supply: qcom_pmi8998_charger: fix wakeirq (bsc#1012628). - power: supply: max1720x correct capacity computation (bsc#1012628). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1012628). - crypto: ahash - Add support for drivers with no fallback (bsc#1012628). - crypto: ahash - Stop legacy tfms from using the set_virt fallback path (bsc#1012628). - crypto: qat - restore ASYM service support for GEN6 devices (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1012628). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1012628). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1012628). - pinctrl: canaan: k230: add NULL check in DT parse (bsc#1012628). - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (bsc#1012628). - PCI: Adjust the position of reading the Link Control 2 register (bsc#1012628). - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (bsc#1012628). - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - soundwire: Correct some property names (bsc#1012628). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1012628). - soundwire: debugfs: move debug statement outside of error handling (bsc#1012628). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1012628). - fanotify: sanitize handle_type values when reporting fid (bsc#1012628). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1012628). - RDMA/ipoib: Use parent rdma device net namespace (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (bsc#1012628). - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (bsc#1012628). - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (bsc#1012628). - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (bsc#1012628). - Fix dma_unmap_sg() nents value (bsc#1012628). - leds: pca955x: Avoid potential overflow when filling default_label (take 2) (bsc#1012628). - gitignore: allow .pylintrc to be tracked (bsc#1012628). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1012628). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1012628). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1012628). - perf sched: Make sure it frees the usage string (bsc#1012628). - perf sched: Free thread->priv using priv_destructor (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1012628). - perf sched: Fix thread leaks in 'perf sched timehist' (bsc#1012628). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1012628). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1012628). - clk: spacemit: mark K1 pll1_d8 as critical (bsc#1012628). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1012628). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1012628). - crypto: ccp - Fix locking on alloc failure handling (bsc#1012628). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1012628). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1012628). - RDMA/hns: Get message length of ack_req from FW (bsc#1012628). - RDMA/hns: Fix accessing uninitialized resources (bsc#1012628). - RDMA/hns: Drop GFP_NOWARN (bsc#1012628). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1012628). - tracing: Use queue_rcu_work() to free filters (bsc#1012628). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1012628). - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (bsc#1012628). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1012628). - cxl/core: Introduce a new helper cxl_resource_contains_addr() (bsc#1012628). - cxl/edac: Fix wrong dpa checking for PPR operation (bsc#1012628). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1012628). - perf tests bp_account: Fix leaked file descriptor (bsc#1012628). - perf hwmon_pmu: Avoid shortening hwmon PMU name (bsc#1012628). - perf python: Fix thread check in pyrf_evsel__read (bsc#1012628). - perf python: Correct pyrf_evsel__read for tool PMUs (bsc#1012628). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1012628). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1012628). - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (bsc#1012628). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1012628). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: core: Fix kernel doc for scsi_track_queue_full() (bsc#1012628). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1012628). - PCI: Fix driver_managed_dma check (bsc#1012628). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1012628). - selftests/cgroup: fix cpu.max tests (bsc#1012628). - ext4: fix inode use after free in ext4_end_io_rsv_work() (bsc#1012628). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1012628). - clk: at91: sam9x7: update pll clk ranges (bsc#1012628). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1012628). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1012628). - crypto: qat - fix virtual channel configuration for GEN6 devices (bsc#1012628). - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (bsc#1012628). - cgroup: Add compatibility option for content of /proc/cgroups (bsc#1012628). - soundwire: stream: restore params when prepare ports fail (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1012628). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1012628). - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence (bsc#1012628). - remoteproc: xlnx: Disable unsupported features (bsc#1012628). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1012628). - clk: thead: th1520-ap: Describe mux clocks with clk_mux (bsc#1012628). - tools subcmd: Tighten the filename size in check_if_command_finished (bsc#1012628). - perf pmu: Switch FILENAME_MAX to NAME_MAX (bsc#1012628). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1012628). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1012628). - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string (bsc#1012628). - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers (bsc#1012628). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1012628). - ASoC: fsl_xcvr: get channel status data with firmware exists (bsc#1012628). - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (bsc#1012628). - sh: Do not use hyphen in exported variable name (bsc#1012628). - perf tools: Remove libtraceevent in .gitignore (bsc#1012628). - clk: clocking-wizard: Fix the round rate handling for versal (bsc#1012628). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1012628). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1012628). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1012628). - smb: client: allow parsing zero-length AV pairs (bsc#1012628). - drm/xe/configfs: Fix pci_dev reference leak (bsc#1012628). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1012628). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1012628). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1012628). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1012628). - drm/xe/vf: Disable CSC support on VF (bsc#1012628). - selftests: ALSA: fix memory leak in utimer test (bsc#1012628). - ALSA: usb: scarlett2: Fix missing NULL check (bsc#1012628). - perf record: Cache build-ID of hit DSOs only (bsc#1012628). - bpf: Add cookie object to bpf maps (bsc#1012628). - bpf: Move bpf map owner out of common struct (bsc#1012628). - bpf: Move cgroup iterator helpers to bpf.h (bsc#1012628). - bpf: Fix oob access in cgroup local storage (bsc#1012628). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1012628). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1012628). - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (bsc#1012628). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1012628). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1012628). - vhost: Reintroduce kthread API and add mode selection (bsc#1012628). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1012628). - bpf: Check netfilter ctx accesses are aligned (bsc#1012628). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1012628). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1012628). - dm-flakey: Fix corrupt_bio_byte setup checks (bsc#1012628). - uprobes: revert ref_ctr_offset in uprobe_unregister error path (bsc#1012628). - scripts: gdb: move MNT_* constants to gdb-parsed (bsc#1012628). - squashfs: use folios in squashfs_bio_read_cached() (bsc#1012628). - squashfs: fix incorrect argument to sizeof in kmalloc_array call (bsc#1012628). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1012628). - i3c: fix module_i3c_i2c_driver() with I3C=n (bsc#1012628). - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk (bsc#1012628). - module: Restore the moduleparam prefix length check (bsc#1012628). - ucount: fix atomic_long_inc_below() argument type (bsc#1012628). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1012628). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1012628). - f2fs: fix bio memleak when committing super block (bsc#1012628). - f2fs: fix to avoid invalid wait context issue (bsc#1012628). - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (bsc#1012628). - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (bsc#1012628). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1012628). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1012628). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1012628). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1012628). - f2fs: doc: fix wrong quota mount option description (bsc#1012628). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1012628). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1012628). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1012628). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1012628). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1012628). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1012628). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1012628). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1012628). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1012628). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1012628). - vfio: Prevent open_count decrement to negative (bsc#1012628). - vfio/pds: Fix missing detach_ioas op (bsc#1012628). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1012628). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1012628). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1012628). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1012628). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1012628). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1012628). - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD (bsc#1012628). - sched/psi: Fix psi_seq initialization (bsc#1012628). - padata: Remove comment for reorder_work (bsc#1012628). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1012628). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1012628). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1012628). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1012628). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1012628). - tools/power turbostat: regression fix: --show C1E% (bsc#1012628). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1012628). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1012628). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1012628). - NFSv4.2: another fix for listxattr (bsc#1012628). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1012628). - ARM: s3c/gpio: complete the conversion to new GPIO value setters (bsc#1012628). - md/md-cluster: handle REMOVE message earlier (bsc#1012628). - kcm: Fix splice support (bsc#1012628). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1012628). - phy: mscc: Fix parsing of unicast frames (bsc#1012628). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1012628). - net: mdio_bus: Use devm for getting reset GPIO (bsc#1012628). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1012628). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1012628). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1012628). - s390/mm: Set high_memory at the end of the identity mapping (bsc#1012628). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1012628). - block: Fix default IO priority if there is no IO context (bsc#1012628). - block: ensure discard_granularity is zero when discard is not supported (bsc#1012628). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1012628). - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show() (bsc#1012628). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1012628). - selftests: avoid using ifconfig (bsc#1012628). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1012628). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1012628). - net: drop UFO packets in udp_rcv_segment() (bsc#1012628). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1012628). - md: make rdev_addable usable for rcu mode (bsc#1012628). - sunrpc: fix client side handling of tls alerts (bsc#1012628). - drm/xe/pf: Disable PF restart worker on device removal (bsc#1012628). - x86/irq: Plug vector setup race (bsc#1012628). - eth: fbnic: unlink NAPIs from queues on error to open (bsc#1012628). - ipa: fix compile-testing with qcom-mdt=m (bsc#1012628). - net: devmem: fix DMA direction on unmapping (bsc#1012628). - net: airoha: npu: Add missing MODULE_FIRMWARE macros (bsc#1012628). - benet: fix BUG when creating VFs (bsc#1012628). - Revert "net: mdio_bus: Use devm for getting reset GPIO" (bsc#1012628). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1012628). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1012628). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1012628). - eth: fbnic: Fix tx_dropped reporting (bsc#1012628). - eth: fbnic: Lock the tx_dropped update (bsc#1012628). - NFS/localio: nfs_close_local_fh() fix check for file closed (bsc#1012628). - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh() (bsc#1012628). - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file (bsc#1012628). - net: ti: icssg-prueth: Fix skb handling for XDP_PASS (bsc#1012628). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1012628). - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies (bsc#1012628). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1012628). - s390/boot: Fix startup debugging log (bsc#1012628). - smb: server: remove separate empty_recvmsg_queue (bsc#1012628). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1012628). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - smb: client: remove separate empty_packet_queue (bsc#1012628). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1012628). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - nvmet: exit debugfs after discovery subsystem exits (bsc#1012628). - pptp: fix pptp_xmit() error path (bsc#1012628). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1012628). - tools/power turbostat: Fix bogus SysWatt for forked program (bsc#1012628). - tools/power turbostat: Fix DMR support (bsc#1012628). - nfsd: don't set the ctime on delegated atime updates (bsc#1012628). - nfsd: avoid ref leak in nfsd_open_local_fh() (bsc#1012628). - sunrpc: fix handling of server side tls alerts (bsc#1012628). - perf/core: Preserve AUX buffer allocation failure result (bsc#1012628). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1012628). - perf/core: Exit early on perf_mmap() fail (bsc#1012628). - perf/core: Handle buffer mapping fail correctly in perf_mmap() (bsc#1012628). - perf/core: Prevent VMA split of buffer mappings (bsc#1012628). - selftests/perf_events: Add a mmap() correctness test (bsc#1012628). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1012628). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1012628). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1012628). - ksmbd: fix Preauh_HashValue race condition (bsc#1012628). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1012628). - smb: client: fix netns refcount leak after net_passive changes (bsc#1012628). - smb: client: set symlink type as native for POSIX mounts (bsc#1012628). - smb: client: default to nonativesocket under POSIX mounts (bsc#1012628). - ksmbd: limit repeated connections from clients with the same IP (bsc#1012628). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1012628). - USB: serial: option: add Foxconn T99W709 (bsc#1012628). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1012628). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1012628). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1012628). - x86/sev: Evict cache lines during SNP memory validation (bsc#1012628). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1012628). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1012628). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1012628). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1012628). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1012628). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1012628). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1012628). - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (bsc#1012628). - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (bsc#1012628). - zloop: fix KASAN use-after-free of tag set (bsc#1012628). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1012628). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1012628). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1012628). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1012628). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1012628). - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap() to swap_range_alloc() (bsc#1012628). - mm: shmem: fix the shmem large folio allocation for the i915 driver (bsc#1012628). - usb: gadget: uvc: Initialize frame-based format color matching descriptor (bsc#1012628). - perf/arm-ni: Set initial IRQ affinity (bsc#1012628). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1012628). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1012628). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1012628). - HID: core: Harden s32ton() against conversion to 0 bits (bsc#1012628). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1012628). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1012628). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1012628). - wifi: ath12k: install pairwise key first (bsc#1012628). - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.1-522-spi-cs42l43-Property-entry-should-be-a-null-te.patch. - commit 2e1765c - Update config files. Enable FIPS (bsc#1247998) CRYPTO_MANAGER_DISABLE_TESTS (we had "is not set") became CRYPTO_SELFTESTS (we still have "is not set"), but the logic was inverted: CRYPTO_MANAGER_DISABLE_TESTS <=> !CRYPTO_SELFTESTS. Set CRYPTO_SELFTESTS=y and restore the otehr values to pre-6.16-rc1. - commit fd401db ++++ kernel-obs-qa: - Linux 6.16.1 (bsc#1012628). - audit,module: restore audit logging in load failure case (bsc#1012628). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1012628). - fs_context: fix parameter name in infofc() macro (bsc#1012628). - selftests/landlock: Fix readlink check (bsc#1012628). - selftests/landlock: Fix build of audit_test (bsc#1012628). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1012628). - landlock: Fix warning from KUnit tests (bsc#1012628). - ublk: use vmalloc for ublk_device's __queues (bsc#1012628). - hfsplus: make splice write available again (bsc#1012628). - hfs: make splice write available again (bsc#1012628). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1012628). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1012628). - block: mtip32xx: Fix usage of dma_map_sg() (bsc#1012628). - gfs2: Minor do_xmote cancelation fix (bsc#1012628). - nbd: fix lockdep deadlock warning (bsc#1012628). - md: allow removing faulty rdev during resync (bsc#1012628). - kunit/fortify: Add back "volatile" for sizeof() constants (bsc#1012628). - ublk: speed up ublk server exit handling (bsc#1012628). - ublk: validate ublk server pid (bsc#1012628). - md/raid10: fix set but not used variable in sync_request_write() (bsc#1012628). - gfs2: No more self recovery (bsc#1012628). - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (bsc#1012628). - block: sanitize chunk_sectors for atomic write limits (bsc#1012628). - io_uring: fix breakage in EXPERT menu (bsc#1012628). - btrfs: remove partial support for lowest level from btrfs_search_forward() (bsc#1012628). - eventpoll: Fix semi-unbounded recursion (bsc#1012628). - eventpoll: fix sphinx documentation build warning (bsc#1012628). - block: restore two stage elevator switch while running nr_hw_queue update (bsc#1012628). - sched/task_stack: Add missing const qualifier to end_of_stack() (bsc#1012628). - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (bsc#1012628). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1012628). - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (bsc#1012628). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1012628). - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration (bsc#1012628). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1012628). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (bsc#1012628). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1012628). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1012628). - soc: qcom: QMI encoding/decoding for big endian (bsc#1012628). - soc: qcom: fix endianness for QMI header (bsc#1012628). - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (bsc#1012628). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: qcs615: disable the CTI device of the camera block (bsc#1012628). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1012628). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1012628). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1012628). - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (bsc#1012628). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1012628). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1012628). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1012628). - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (bsc#1012628). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI (bsc#1012628). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1012628). - ARM: dts: microchip: sama7d65: Add clock name property (bsc#1012628). - ARM: dts: microchip: sam9x7: Add clock name property (bsc#1012628). - cpufreq: armada-8k: make both cpu masks static (bsc#1012628). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1012628). - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (bsc#1012628). - x86/bugs: Simplify the retbleed=stuff checks (bsc#1012628). - x86/bugs: Introduce cdt_possible() (bsc#1012628). - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (bsc#1012628). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1012628). - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (bsc#1012628). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1012628). - mei: vsc: Event notifier fixes (bsc#1012628). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1012628). - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (bsc#1012628). - mei: vsc: Run event callback from a workqueue (bsc#1012628). - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (bsc#1012628). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1012628). - drivers: misc: sram: fix up some const issues with recent attribute changes (bsc#1012628). - rust: devres: require T: Send for Devres (bsc#1012628). - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855 (bsc#1012628). - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C (bsc#1012628). - ASoC: SDCA: Add missing default in switch in entity_pde_event() (bsc#1012628). - staging: gpib: fix unset padding field copy back to userspace (bsc#1012628). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1012628). - rust: miscdevice: clarify invariant for `MiscDeviceRegistration` (bsc#1012628). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1012628). - pps: fix poll support (bsc#1012628). - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio (bsc#1012628). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1012628). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1012628). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up (bsc#1012628). - selftests/nolibc: correctly report errors from printf() and friends (bsc#1012628). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1012628). - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through waitpid() (bsc#1012628). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1012628). - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install target (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction (bsc#1012628). - staging: gpib: Fix error code in board_type_ioctl() (bsc#1012628). - staging: gpib: Fix error handling paths in cb_gpib_probe() (bsc#1012628). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1012628). - arm64: dts: rockchip: fix PHY handling for ROCK 4D (bsc#1012628). - arm64: dts: st: fix timer used for ticks (bsc#1012628). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1012628). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio (bsc#1012628). - arm64: dts: rockchip: Fix pinctrl node names for RK3528 (bsc#1012628). - PM / devfreq: Check governor before using governor->name (bsc#1012628). - PM / devfreq: Fix a index typo in trans_stat (bsc#1012628). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1012628). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1012628). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1012628). - arm64: dts: rockchip: Fix UART DMA support for RK3528 (bsc#1012628). - kexec_core: Fix error code path in the KEXEC_JUMP flow (bsc#1012628). - ASoC: SDCA: Update memory allocations to zero initialise (bsc#1012628). - ASoC: SDCA: Allow read-only controls to be deferrable (bsc#1012628). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1012628). - driver core: auxiliary bus: fix OF node leak (bsc#1012628). - samples: mei: Fix building on musl libc (bsc#1012628). - soc: qcom: pmic_glink: fix OF node leak (bsc#1012628). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1012628). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1012628). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1012628). - drm/xe: Correct the rev value for the DVSEC entries (bsc#1012628). - drm/xe: Correct BMG VSEC header sizing (bsc#1012628). - platform/x86: oxpec: Fix turbo register for G1 AMD (bsc#1012628). - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property (bsc#1012628). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1012628). - selftests/tracing: Fix false failure of subsystem event test (bsc#1012628). - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the remaining chips (bsc#1012628). - Revert "udmabuf: fix vmap_udmabuf error page set" (bsc#1012628). - udmabuf: fix vmap missed offset page (bsc#1012628). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1012628). - drm/sitronix: Remove broken backwards-compatibility layer (bsc#1012628). - drm/connector: hdmi: Evaluate limited range after computing format (bsc#1012628). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1012628). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1012628). - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (bsc#1012628). - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (bsc#1012628). - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (bsc#1012628). - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (bsc#1012628). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1012628). - netconsole: Only register console drivers when targets are configured (bsc#1012628). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1012628). - net, bpf: Fix RCU usage in task_cls_state() for BPF programs (bsc#1012628). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1012628). - bpf: handle jset (if a & b ...) as a jump in CFG computation (bsc#1012628). - selftests/bpf: Fix unintentional switch case fall through (bsc#1012628). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1012628). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1012628). - slub: Fix a documentation build error for krealloc() (bsc#1012628). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1012628). - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine() (bsc#1012628). - net: mana: Fix potential deadlocks in mana napi ops (bsc#1012628). - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (bsc#1012628). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1012628). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1012628). - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (bsc#1012628). - wifi: ath12k: update channel list in worker when wait flag is set (bsc#1012628). - wifi: ath12k: Fix double budget decrement while reaping monitor ring (bsc#1012628). - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1012628). - caif: reduce stack size, again (bsc#1012628). - net: annotate races around sk->sk_uid (bsc#1012628). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1012628). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1012628). - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (bsc#1012628). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1012628). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1012628). - drm/xe/uapi: Correct sync type definition in comments (bsc#1012628). - team: replace team lock with rtnl lock (bsc#1012628). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1012628). - wifi: ath12k: Clear auth flag only for actual association in security mode (bsc#1012628). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1012628). - net/mlx5: Check device memory pointer before usage (bsc#1012628). - net: dst: annotate data-races around dst->input (bsc#1012628). - net: dst: annotate data-races around dst->output (bsc#1012628). - net: dst: add four helpers to annotate data-races around dst->dev (bsc#1012628). - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (bsc#1012628). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1012628). - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (bsc#1012628). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1012628). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1012628). - m68k: Don't unregister boot console needlessly (bsc#1012628). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1012628). - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (bsc#1012628). - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (bsc#1012628). - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (bsc#1012628). - drm/amdkfd: Move the process suspend and resume out of full access (bsc#1012628). - drm/amdgpu: rework queue reset scheduler interaction (bsc#1012628). - drm/amdgpu: move force completion into ring resets (bsc#1012628). - drm/amdgpu/gfx10: fix KGQ reset sequence (bsc#1012628). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1012628). - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini" (bsc#1012628). - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (bsc#1012628). - wifi: ath12k: Block radio bring-up in FTM mode (bsc#1012628). - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (bsc#1012628). - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1012628). - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when there are multi display output on rk3588/rk3568 (bsc#1012628). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1012628). - fbcon: Fix outdated registered_fb reference in comment (bsc#1012628). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1012628). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1012628). - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (bsc#1012628). - wifi: ath12k: update unsupported bandwidth flags in reg rules (bsc#1012628). - wifi: ath12k: pack HTT pdev rate stats structs (bsc#1012628). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1012628). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1012628). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1012628). - spi: spi-nxp-fspi: Check return value of devm_mutex_init() (bsc#1012628). - leds: lp8860: Check return value of devm_mutex_init() (bsc#1012628). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1012628). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1012628). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1012628). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1012628). - sched/deadline: Reset extra_bw to max_bw when clearing root domains (bsc#1012628). - iommu/vt-d: Do not wipe out the page table NID when devices detach (bsc#1012628). - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (bsc#1012628). - iommu/arm-smmu: disable PRR on SM8250 (bsc#1012628). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1012628). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1012628). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1012628). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1012628). - mwl8k: Add missing check after DMA map (bsc#1012628). - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (bsc#1012628). - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (bsc#1012628). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1012628). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1012628). - selftests/bpf: fix implementation of smp_mb() (bsc#1012628). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1012628). - rcu: Fix delayed execution of hurry callbacks (bsc#1012628). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1012628). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1012628). - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1012628). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1012628). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1012628). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1012628). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1012628). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1012628). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1012628). - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (bsc#1012628). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1012628). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1012628). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1012628). - kcsan: test: Initialize dummy variable (bsc#1012628). - memcg_slabinfo: Fix use of PG_slab (bsc#1012628). - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (bsc#1012628). - wifi: mac80211: fix WARN_ON for monitor mode on some devices (bsc#1012628). - arm64/gcs: task_gcs_el0_enable() should use passed task (bsc#1012628). - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (bsc#1012628). - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (bsc#1012628). - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (bsc#1012628). - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (bsc#1012628). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1012628). - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (bsc#1012628). - Bluetooth: btintel: Define a macro for Intel Reset vendor command (bsc#1012628). - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (bsc#1012628). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1012628). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1012628). - bpf: Reject narrower access to pointer ctx fields (bsc#1012628). - tools/rv: Do not skip idle in trace (bsc#1012628). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1012628). - selftests: drv-net: tso: enable test cases based on hw_features (bsc#1012628). - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type (bsc#1012628). - selftests: drv-net: tso: fix non-tunneled tso6 test case name (bsc#1012628). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1012628). - can: tscan1: Kconfig: add COMPILE_TEST (bsc#1012628). - can: tscan1: CAN_TSCAN1 can depend on PC104 (bsc#1012628). - can: kvaser_pciefd: Store device channel index (bsc#1012628). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1012628). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1012628). - selftests: netfilter: Ignore tainted kernels in interface stress test (bsc#1012628). - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface tunl0 (bsc#1012628). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1012628). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1012628). - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (bsc#1012628). - macsec: set IFF_UNICAST_FLT priv flag (bsc#1012628). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1012628). - neighbour: Fix null-ptr-deref in neigh_flush_dev() (bsc#1012628). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1012628). - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (bsc#1012628). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1012628). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1012628). - ipv6: add a retry logic in net6_rt_notify() (bsc#1012628). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1012628). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1012628). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1012628). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1012628). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1012628). - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (bsc#1012628). - rv: Remove trailing whitespace from tracepoint string (bsc#1012628). - rv: Use strings in da monitors tracepoints (bsc#1012628). - rv: Adjust monitor dependencies (bsc#1012628). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1012628). - fortify: Fix incorrect reporting of read buffer size (bsc#1012628). - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings() (bsc#1012628). - remoteproc: qcom: pas: Conclude the rename from adsp (bsc#1012628). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1012628). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1012628). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1012628). - crypto: qat - use unmanaged allocation for dc_data (bsc#1012628). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1012628). - crypto: s390/hmac - Fix counter in export state (bsc#1012628). - crypto: s390/sha3 - Use cpu byte-order when exporting (bsc#1012628). - padata: Fix pd UAF once and for all (bsc#1012628). - crypto: ccp - Fix dereferencing uninitialized error pointer (bsc#1012628). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1012628). - crypto: qat - fix state restore for banks with exceptions (bsc#1012628). - mtd: fix possible integer overflow in erase_xfer() (bsc#1012628). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1012628). - media: imx-jpeg: Account for data_offset when getting image address (bsc#1012628). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1012628). - perf parse-events: Set default GH modifier properly (bsc#1012628). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1012628). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1012628). - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC (bsc#1012628). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1012628). - power: supply: qcom_pmi8998_charger: fix wakeirq (bsc#1012628). - power: supply: max1720x correct capacity computation (bsc#1012628). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1012628). - crypto: ahash - Add support for drivers with no fallback (bsc#1012628). - crypto: ahash - Stop legacy tfms from using the set_virt fallback path (bsc#1012628). - crypto: qat - restore ASYM service support for GEN6 devices (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1012628). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1012628). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1012628). - pinctrl: canaan: k230: add NULL check in DT parse (bsc#1012628). - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (bsc#1012628). - PCI: Adjust the position of reading the Link Control 2 register (bsc#1012628). - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (bsc#1012628). - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - soundwire: Correct some property names (bsc#1012628). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1012628). - soundwire: debugfs: move debug statement outside of error handling (bsc#1012628). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1012628). - fanotify: sanitize handle_type values when reporting fid (bsc#1012628). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1012628). - RDMA/ipoib: Use parent rdma device net namespace (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (bsc#1012628). - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (bsc#1012628). - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (bsc#1012628). - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (bsc#1012628). - Fix dma_unmap_sg() nents value (bsc#1012628). - leds: pca955x: Avoid potential overflow when filling default_label (take 2) (bsc#1012628). - gitignore: allow .pylintrc to be tracked (bsc#1012628). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1012628). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1012628). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1012628). - perf sched: Make sure it frees the usage string (bsc#1012628). - perf sched: Free thread->priv using priv_destructor (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1012628). - perf sched: Fix thread leaks in 'perf sched timehist' (bsc#1012628). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1012628). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1012628). - clk: spacemit: mark K1 pll1_d8 as critical (bsc#1012628). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1012628). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1012628). - crypto: ccp - Fix locking on alloc failure handling (bsc#1012628). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1012628). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1012628). - RDMA/hns: Get message length of ack_req from FW (bsc#1012628). - RDMA/hns: Fix accessing uninitialized resources (bsc#1012628). - RDMA/hns: Drop GFP_NOWARN (bsc#1012628). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1012628). - tracing: Use queue_rcu_work() to free filters (bsc#1012628). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1012628). - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (bsc#1012628). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1012628). - cxl/core: Introduce a new helper cxl_resource_contains_addr() (bsc#1012628). - cxl/edac: Fix wrong dpa checking for PPR operation (bsc#1012628). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1012628). - perf tests bp_account: Fix leaked file descriptor (bsc#1012628). - perf hwmon_pmu: Avoid shortening hwmon PMU name (bsc#1012628). - perf python: Fix thread check in pyrf_evsel__read (bsc#1012628). - perf python: Correct pyrf_evsel__read for tool PMUs (bsc#1012628). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1012628). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1012628). - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (bsc#1012628). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1012628). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: core: Fix kernel doc for scsi_track_queue_full() (bsc#1012628). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1012628). - PCI: Fix driver_managed_dma check (bsc#1012628). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1012628). - selftests/cgroup: fix cpu.max tests (bsc#1012628). - ext4: fix inode use after free in ext4_end_io_rsv_work() (bsc#1012628). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1012628). - clk: at91: sam9x7: update pll clk ranges (bsc#1012628). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1012628). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1012628). - crypto: qat - fix virtual channel configuration for GEN6 devices (bsc#1012628). - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (bsc#1012628). - cgroup: Add compatibility option for content of /proc/cgroups (bsc#1012628). - soundwire: stream: restore params when prepare ports fail (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1012628). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1012628). - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence (bsc#1012628). - remoteproc: xlnx: Disable unsupported features (bsc#1012628). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1012628). - clk: thead: th1520-ap: Describe mux clocks with clk_mux (bsc#1012628). - tools subcmd: Tighten the filename size in check_if_command_finished (bsc#1012628). - perf pmu: Switch FILENAME_MAX to NAME_MAX (bsc#1012628). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1012628). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1012628). - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string (bsc#1012628). - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers (bsc#1012628). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1012628). - ASoC: fsl_xcvr: get channel status data with firmware exists (bsc#1012628). - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (bsc#1012628). - sh: Do not use hyphen in exported variable name (bsc#1012628). - perf tools: Remove libtraceevent in .gitignore (bsc#1012628). - clk: clocking-wizard: Fix the round rate handling for versal (bsc#1012628). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1012628). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1012628). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1012628). - smb: client: allow parsing zero-length AV pairs (bsc#1012628). - drm/xe/configfs: Fix pci_dev reference leak (bsc#1012628). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1012628). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1012628). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1012628). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1012628). - drm/xe/vf: Disable CSC support on VF (bsc#1012628). - selftests: ALSA: fix memory leak in utimer test (bsc#1012628). - ALSA: usb: scarlett2: Fix missing NULL check (bsc#1012628). - perf record: Cache build-ID of hit DSOs only (bsc#1012628). - bpf: Add cookie object to bpf maps (bsc#1012628). - bpf: Move bpf map owner out of common struct (bsc#1012628). - bpf: Move cgroup iterator helpers to bpf.h (bsc#1012628). - bpf: Fix oob access in cgroup local storage (bsc#1012628). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1012628). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1012628). - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (bsc#1012628). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1012628). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1012628). - vhost: Reintroduce kthread API and add mode selection (bsc#1012628). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1012628). - bpf: Check netfilter ctx accesses are aligned (bsc#1012628). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1012628). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1012628). - dm-flakey: Fix corrupt_bio_byte setup checks (bsc#1012628). - uprobes: revert ref_ctr_offset in uprobe_unregister error path (bsc#1012628). - scripts: gdb: move MNT_* constants to gdb-parsed (bsc#1012628). - squashfs: use folios in squashfs_bio_read_cached() (bsc#1012628). - squashfs: fix incorrect argument to sizeof in kmalloc_array call (bsc#1012628). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1012628). - i3c: fix module_i3c_i2c_driver() with I3C=n (bsc#1012628). - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk (bsc#1012628). - module: Restore the moduleparam prefix length check (bsc#1012628). - ucount: fix atomic_long_inc_below() argument type (bsc#1012628). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1012628). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1012628). - f2fs: fix bio memleak when committing super block (bsc#1012628). - f2fs: fix to avoid invalid wait context issue (bsc#1012628). - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (bsc#1012628). - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (bsc#1012628). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1012628). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1012628). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1012628). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1012628). - f2fs: doc: fix wrong quota mount option description (bsc#1012628). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1012628). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1012628). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1012628). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1012628). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1012628). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1012628). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1012628). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1012628). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1012628). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1012628). - vfio: Prevent open_count decrement to negative (bsc#1012628). - vfio/pds: Fix missing detach_ioas op (bsc#1012628). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1012628). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1012628). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1012628). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1012628). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1012628). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1012628). - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD (bsc#1012628). - sched/psi: Fix psi_seq initialization (bsc#1012628). - padata: Remove comment for reorder_work (bsc#1012628). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1012628). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1012628). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1012628). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1012628). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1012628). - tools/power turbostat: regression fix: --show C1E% (bsc#1012628). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1012628). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1012628). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1012628). - NFSv4.2: another fix for listxattr (bsc#1012628). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1012628). - ARM: s3c/gpio: complete the conversion to new GPIO value setters (bsc#1012628). - md/md-cluster: handle REMOVE message earlier (bsc#1012628). - kcm: Fix splice support (bsc#1012628). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1012628). - phy: mscc: Fix parsing of unicast frames (bsc#1012628). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1012628). - net: mdio_bus: Use devm for getting reset GPIO (bsc#1012628). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1012628). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1012628). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1012628). - s390/mm: Set high_memory at the end of the identity mapping (bsc#1012628). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1012628). - block: Fix default IO priority if there is no IO context (bsc#1012628). - block: ensure discard_granularity is zero when discard is not supported (bsc#1012628). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1012628). - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show() (bsc#1012628). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1012628). - selftests: avoid using ifconfig (bsc#1012628). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1012628). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1012628). - net: drop UFO packets in udp_rcv_segment() (bsc#1012628). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1012628). - md: make rdev_addable usable for rcu mode (bsc#1012628). - sunrpc: fix client side handling of tls alerts (bsc#1012628). - drm/xe/pf: Disable PF restart worker on device removal (bsc#1012628). - x86/irq: Plug vector setup race (bsc#1012628). - eth: fbnic: unlink NAPIs from queues on error to open (bsc#1012628). - ipa: fix compile-testing with qcom-mdt=m (bsc#1012628). - net: devmem: fix DMA direction on unmapping (bsc#1012628). - net: airoha: npu: Add missing MODULE_FIRMWARE macros (bsc#1012628). - benet: fix BUG when creating VFs (bsc#1012628). - Revert "net: mdio_bus: Use devm for getting reset GPIO" (bsc#1012628). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1012628). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1012628). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1012628). - eth: fbnic: Fix tx_dropped reporting (bsc#1012628). - eth: fbnic: Lock the tx_dropped update (bsc#1012628). - NFS/localio: nfs_close_local_fh() fix check for file closed (bsc#1012628). - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh() (bsc#1012628). - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file (bsc#1012628). - net: ti: icssg-prueth: Fix skb handling for XDP_PASS (bsc#1012628). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1012628). - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies (bsc#1012628). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1012628). - s390/boot: Fix startup debugging log (bsc#1012628). - smb: server: remove separate empty_recvmsg_queue (bsc#1012628). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1012628). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - smb: client: remove separate empty_packet_queue (bsc#1012628). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1012628). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - nvmet: exit debugfs after discovery subsystem exits (bsc#1012628). - pptp: fix pptp_xmit() error path (bsc#1012628). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1012628). - tools/power turbostat: Fix bogus SysWatt for forked program (bsc#1012628). - tools/power turbostat: Fix DMR support (bsc#1012628). - nfsd: don't set the ctime on delegated atime updates (bsc#1012628). - nfsd: avoid ref leak in nfsd_open_local_fh() (bsc#1012628). - sunrpc: fix handling of server side tls alerts (bsc#1012628). - perf/core: Preserve AUX buffer allocation failure result (bsc#1012628). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1012628). - perf/core: Exit early on perf_mmap() fail (bsc#1012628). - perf/core: Handle buffer mapping fail correctly in perf_mmap() (bsc#1012628). - perf/core: Prevent VMA split of buffer mappings (bsc#1012628). - selftests/perf_events: Add a mmap() correctness test (bsc#1012628). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1012628). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1012628). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1012628). - ksmbd: fix Preauh_HashValue race condition (bsc#1012628). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1012628). - smb: client: fix netns refcount leak after net_passive changes (bsc#1012628). - smb: client: set symlink type as native for POSIX mounts (bsc#1012628). - smb: client: default to nonativesocket under POSIX mounts (bsc#1012628). - ksmbd: limit repeated connections from clients with the same IP (bsc#1012628). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1012628). - USB: serial: option: add Foxconn T99W709 (bsc#1012628). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1012628). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1012628). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1012628). - x86/sev: Evict cache lines during SNP memory validation (bsc#1012628). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1012628). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1012628). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1012628). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1012628). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1012628). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1012628). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1012628). - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (bsc#1012628). - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (bsc#1012628). - zloop: fix KASAN use-after-free of tag set (bsc#1012628). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1012628). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1012628). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1012628). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1012628). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1012628). - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap() to swap_range_alloc() (bsc#1012628). - mm: shmem: fix the shmem large folio allocation for the i915 driver (bsc#1012628). - usb: gadget: uvc: Initialize frame-based format color matching descriptor (bsc#1012628). - perf/arm-ni: Set initial IRQ affinity (bsc#1012628). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1012628). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1012628). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1012628). - HID: core: Harden s32ton() against conversion to 0 bits (bsc#1012628). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1012628). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1012628). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1012628). - wifi: ath12k: install pairwise key first (bsc#1012628). - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.1-522-spi-cs42l43-Property-entry-should-be-a-null-te.patch. - commit 2e1765c - Update config files. Enable FIPS (bsc#1247998) CRYPTO_MANAGER_DISABLE_TESTS (we had "is not set") became CRYPTO_SELFTESTS (we still have "is not set"), but the logic was inverted: CRYPTO_MANAGER_DISABLE_TESTS <=> !CRYPTO_SELFTESTS. Set CRYPTO_SELFTESTS=y and restore the otehr values to pre-6.16-rc1. - commit fd401db ++++ kernel-syms: - Linux 6.16.1 (bsc#1012628). - audit,module: restore audit logging in load failure case (bsc#1012628). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1012628). - fs_context: fix parameter name in infofc() macro (bsc#1012628). - selftests/landlock: Fix readlink check (bsc#1012628). - selftests/landlock: Fix build of audit_test (bsc#1012628). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1012628). - landlock: Fix warning from KUnit tests (bsc#1012628). - ublk: use vmalloc for ublk_device's __queues (bsc#1012628). - hfsplus: make splice write available again (bsc#1012628). - hfs: make splice write available again (bsc#1012628). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1012628). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1012628). - block: mtip32xx: Fix usage of dma_map_sg() (bsc#1012628). - gfs2: Minor do_xmote cancelation fix (bsc#1012628). - nbd: fix lockdep deadlock warning (bsc#1012628). - md: allow removing faulty rdev during resync (bsc#1012628). - kunit/fortify: Add back "volatile" for sizeof() constants (bsc#1012628). - ublk: speed up ublk server exit handling (bsc#1012628). - ublk: validate ublk server pid (bsc#1012628). - md/raid10: fix set but not used variable in sync_request_write() (bsc#1012628). - gfs2: No more self recovery (bsc#1012628). - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (bsc#1012628). - block: sanitize chunk_sectors for atomic write limits (bsc#1012628). - io_uring: fix breakage in EXPERT menu (bsc#1012628). - btrfs: remove partial support for lowest level from btrfs_search_forward() (bsc#1012628). - eventpoll: Fix semi-unbounded recursion (bsc#1012628). - eventpoll: fix sphinx documentation build warning (bsc#1012628). - block: restore two stage elevator switch while running nr_hw_queue update (bsc#1012628). - sched/task_stack: Add missing const qualifier to end_of_stack() (bsc#1012628). - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (bsc#1012628). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1012628). - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (bsc#1012628). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1012628). - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration (bsc#1012628). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1012628). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (bsc#1012628). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1012628). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1012628). - soc: qcom: QMI encoding/decoding for big endian (bsc#1012628). - soc: qcom: fix endianness for QMI header (bsc#1012628). - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (bsc#1012628). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: qcs615: disable the CTI device of the camera block (bsc#1012628). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1012628). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1012628). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1012628). - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (bsc#1012628). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1012628). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1012628). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1012628). - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (bsc#1012628). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI (bsc#1012628). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1012628). - ARM: dts: microchip: sama7d65: Add clock name property (bsc#1012628). - ARM: dts: microchip: sam9x7: Add clock name property (bsc#1012628). - cpufreq: armada-8k: make both cpu masks static (bsc#1012628). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1012628). - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (bsc#1012628). - x86/bugs: Simplify the retbleed=stuff checks (bsc#1012628). - x86/bugs: Introduce cdt_possible() (bsc#1012628). - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (bsc#1012628). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1012628). - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (bsc#1012628). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1012628). - mei: vsc: Event notifier fixes (bsc#1012628). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1012628). - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (bsc#1012628). - mei: vsc: Run event callback from a workqueue (bsc#1012628). - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (bsc#1012628). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1012628). - drivers: misc: sram: fix up some const issues with recent attribute changes (bsc#1012628). - rust: devres: require T: Send for Devres (bsc#1012628). - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855 (bsc#1012628). - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C (bsc#1012628). - ASoC: SDCA: Add missing default in switch in entity_pde_event() (bsc#1012628). - staging: gpib: fix unset padding field copy back to userspace (bsc#1012628). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1012628). - rust: miscdevice: clarify invariant for `MiscDeviceRegistration` (bsc#1012628). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1012628). - pps: fix poll support (bsc#1012628). - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio (bsc#1012628). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1012628). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1012628). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up (bsc#1012628). - selftests/nolibc: correctly report errors from printf() and friends (bsc#1012628). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1012628). - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through waitpid() (bsc#1012628). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1012628). - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install target (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction (bsc#1012628). - staging: gpib: Fix error code in board_type_ioctl() (bsc#1012628). - staging: gpib: Fix error handling paths in cb_gpib_probe() (bsc#1012628). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1012628). - arm64: dts: rockchip: fix PHY handling for ROCK 4D (bsc#1012628). - arm64: dts: st: fix timer used for ticks (bsc#1012628). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1012628). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio (bsc#1012628). - arm64: dts: rockchip: Fix pinctrl node names for RK3528 (bsc#1012628). - PM / devfreq: Check governor before using governor->name (bsc#1012628). - PM / devfreq: Fix a index typo in trans_stat (bsc#1012628). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1012628). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1012628). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1012628). - arm64: dts: rockchip: Fix UART DMA support for RK3528 (bsc#1012628). - kexec_core: Fix error code path in the KEXEC_JUMP flow (bsc#1012628). - ASoC: SDCA: Update memory allocations to zero initialise (bsc#1012628). - ASoC: SDCA: Allow read-only controls to be deferrable (bsc#1012628). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1012628). - driver core: auxiliary bus: fix OF node leak (bsc#1012628). - samples: mei: Fix building on musl libc (bsc#1012628). - soc: qcom: pmic_glink: fix OF node leak (bsc#1012628). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1012628). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1012628). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1012628). - drm/xe: Correct the rev value for the DVSEC entries (bsc#1012628). - drm/xe: Correct BMG VSEC header sizing (bsc#1012628). - platform/x86: oxpec: Fix turbo register for G1 AMD (bsc#1012628). - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property (bsc#1012628). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1012628). - selftests/tracing: Fix false failure of subsystem event test (bsc#1012628). - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the remaining chips (bsc#1012628). - Revert "udmabuf: fix vmap_udmabuf error page set" (bsc#1012628). - udmabuf: fix vmap missed offset page (bsc#1012628). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1012628). - drm/sitronix: Remove broken backwards-compatibility layer (bsc#1012628). - drm/connector: hdmi: Evaluate limited range after computing format (bsc#1012628). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1012628). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1012628). - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (bsc#1012628). - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (bsc#1012628). - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (bsc#1012628). - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (bsc#1012628). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1012628). - netconsole: Only register console drivers when targets are configured (bsc#1012628). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1012628). - net, bpf: Fix RCU usage in task_cls_state() for BPF programs (bsc#1012628). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1012628). - bpf: handle jset (if a & b ...) as a jump in CFG computation (bsc#1012628). - selftests/bpf: Fix unintentional switch case fall through (bsc#1012628). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1012628). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1012628). - slub: Fix a documentation build error for krealloc() (bsc#1012628). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1012628). - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine() (bsc#1012628). - net: mana: Fix potential deadlocks in mana napi ops (bsc#1012628). - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (bsc#1012628). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1012628). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1012628). - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (bsc#1012628). - wifi: ath12k: update channel list in worker when wait flag is set (bsc#1012628). - wifi: ath12k: Fix double budget decrement while reaping monitor ring (bsc#1012628). - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1012628). - caif: reduce stack size, again (bsc#1012628). - net: annotate races around sk->sk_uid (bsc#1012628). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1012628). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1012628). - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (bsc#1012628). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1012628). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1012628). - drm/xe/uapi: Correct sync type definition in comments (bsc#1012628). - team: replace team lock with rtnl lock (bsc#1012628). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1012628). - wifi: ath12k: Clear auth flag only for actual association in security mode (bsc#1012628). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1012628). - net/mlx5: Check device memory pointer before usage (bsc#1012628). - net: dst: annotate data-races around dst->input (bsc#1012628). - net: dst: annotate data-races around dst->output (bsc#1012628). - net: dst: add four helpers to annotate data-races around dst->dev (bsc#1012628). - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (bsc#1012628). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1012628). - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (bsc#1012628). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1012628). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1012628). - m68k: Don't unregister boot console needlessly (bsc#1012628). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1012628). - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (bsc#1012628). - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (bsc#1012628). - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (bsc#1012628). - drm/amdkfd: Move the process suspend and resume out of full access (bsc#1012628). - drm/amdgpu: rework queue reset scheduler interaction (bsc#1012628). - drm/amdgpu: move force completion into ring resets (bsc#1012628). - drm/amdgpu/gfx10: fix KGQ reset sequence (bsc#1012628). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1012628). - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini" (bsc#1012628). - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (bsc#1012628). - wifi: ath12k: Block radio bring-up in FTM mode (bsc#1012628). - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (bsc#1012628). - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1012628). - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when there are multi display output on rk3588/rk3568 (bsc#1012628). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1012628). - fbcon: Fix outdated registered_fb reference in comment (bsc#1012628). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1012628). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1012628). - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (bsc#1012628). - wifi: ath12k: update unsupported bandwidth flags in reg rules (bsc#1012628). - wifi: ath12k: pack HTT pdev rate stats structs (bsc#1012628). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1012628). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1012628). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1012628). - spi: spi-nxp-fspi: Check return value of devm_mutex_init() (bsc#1012628). - leds: lp8860: Check return value of devm_mutex_init() (bsc#1012628). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1012628). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1012628). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1012628). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1012628). - sched/deadline: Reset extra_bw to max_bw when clearing root domains (bsc#1012628). - iommu/vt-d: Do not wipe out the page table NID when devices detach (bsc#1012628). - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (bsc#1012628). - iommu/arm-smmu: disable PRR on SM8250 (bsc#1012628). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1012628). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1012628). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1012628). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1012628). - mwl8k: Add missing check after DMA map (bsc#1012628). - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (bsc#1012628). - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (bsc#1012628). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1012628). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1012628). - selftests/bpf: fix implementation of smp_mb() (bsc#1012628). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1012628). - rcu: Fix delayed execution of hurry callbacks (bsc#1012628). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1012628). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1012628). - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1012628). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1012628). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1012628). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1012628). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1012628). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1012628). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1012628). - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (bsc#1012628). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1012628). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1012628). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1012628). - kcsan: test: Initialize dummy variable (bsc#1012628). - memcg_slabinfo: Fix use of PG_slab (bsc#1012628). - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (bsc#1012628). - wifi: mac80211: fix WARN_ON for monitor mode on some devices (bsc#1012628). - arm64/gcs: task_gcs_el0_enable() should use passed task (bsc#1012628). - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (bsc#1012628). - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (bsc#1012628). - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (bsc#1012628). - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (bsc#1012628). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1012628). - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (bsc#1012628). - Bluetooth: btintel: Define a macro for Intel Reset vendor command (bsc#1012628). - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (bsc#1012628). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1012628). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1012628). - bpf: Reject narrower access to pointer ctx fields (bsc#1012628). - tools/rv: Do not skip idle in trace (bsc#1012628). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1012628). - selftests: drv-net: tso: enable test cases based on hw_features (bsc#1012628). - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type (bsc#1012628). - selftests: drv-net: tso: fix non-tunneled tso6 test case name (bsc#1012628). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1012628). - can: tscan1: Kconfig: add COMPILE_TEST (bsc#1012628). - can: tscan1: CAN_TSCAN1 can depend on PC104 (bsc#1012628). - can: kvaser_pciefd: Store device channel index (bsc#1012628). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1012628). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1012628). - selftests: netfilter: Ignore tainted kernels in interface stress test (bsc#1012628). - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface tunl0 (bsc#1012628). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1012628). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1012628). - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (bsc#1012628). - macsec: set IFF_UNICAST_FLT priv flag (bsc#1012628). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1012628). - neighbour: Fix null-ptr-deref in neigh_flush_dev() (bsc#1012628). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1012628). - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (bsc#1012628). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1012628). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1012628). - ipv6: add a retry logic in net6_rt_notify() (bsc#1012628). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1012628). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1012628). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1012628). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1012628). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1012628). - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (bsc#1012628). - rv: Remove trailing whitespace from tracepoint string (bsc#1012628). - rv: Use strings in da monitors tracepoints (bsc#1012628). - rv: Adjust monitor dependencies (bsc#1012628). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1012628). - fortify: Fix incorrect reporting of read buffer size (bsc#1012628). - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings() (bsc#1012628). - remoteproc: qcom: pas: Conclude the rename from adsp (bsc#1012628). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1012628). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1012628). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1012628). - crypto: qat - use unmanaged allocation for dc_data (bsc#1012628). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1012628). - crypto: s390/hmac - Fix counter in export state (bsc#1012628). - crypto: s390/sha3 - Use cpu byte-order when exporting (bsc#1012628). - padata: Fix pd UAF once and for all (bsc#1012628). - crypto: ccp - Fix dereferencing uninitialized error pointer (bsc#1012628). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1012628). - crypto: qat - fix state restore for banks with exceptions (bsc#1012628). - mtd: fix possible integer overflow in erase_xfer() (bsc#1012628). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1012628). - media: imx-jpeg: Account for data_offset when getting image address (bsc#1012628). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1012628). - perf parse-events: Set default GH modifier properly (bsc#1012628). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1012628). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1012628). - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC (bsc#1012628). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1012628). - power: supply: qcom_pmi8998_charger: fix wakeirq (bsc#1012628). - power: supply: max1720x correct capacity computation (bsc#1012628). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1012628). - crypto: ahash - Add support for drivers with no fallback (bsc#1012628). - crypto: ahash - Stop legacy tfms from using the set_virt fallback path (bsc#1012628). - crypto: qat - restore ASYM service support for GEN6 devices (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1012628). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1012628). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1012628). - pinctrl: canaan: k230: add NULL check in DT parse (bsc#1012628). - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (bsc#1012628). - PCI: Adjust the position of reading the Link Control 2 register (bsc#1012628). - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (bsc#1012628). - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - soundwire: Correct some property names (bsc#1012628). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1012628). - soundwire: debugfs: move debug statement outside of error handling (bsc#1012628). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1012628). - fanotify: sanitize handle_type values when reporting fid (bsc#1012628). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1012628). - RDMA/ipoib: Use parent rdma device net namespace (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (bsc#1012628). - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (bsc#1012628). - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (bsc#1012628). - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (bsc#1012628). - Fix dma_unmap_sg() nents value (bsc#1012628). - leds: pca955x: Avoid potential overflow when filling default_label (take 2) (bsc#1012628). - gitignore: allow .pylintrc to be tracked (bsc#1012628). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1012628). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1012628). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1012628). - perf sched: Make sure it frees the usage string (bsc#1012628). - perf sched: Free thread->priv using priv_destructor (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1012628). - perf sched: Fix thread leaks in 'perf sched timehist' (bsc#1012628). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1012628). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1012628). - clk: spacemit: mark K1 pll1_d8 as critical (bsc#1012628). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1012628). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1012628). - crypto: ccp - Fix locking on alloc failure handling (bsc#1012628). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1012628). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1012628). - RDMA/hns: Get message length of ack_req from FW (bsc#1012628). - RDMA/hns: Fix accessing uninitialized resources (bsc#1012628). - RDMA/hns: Drop GFP_NOWARN (bsc#1012628). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1012628). - tracing: Use queue_rcu_work() to free filters (bsc#1012628). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1012628). - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (bsc#1012628). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1012628). - cxl/core: Introduce a new helper cxl_resource_contains_addr() (bsc#1012628). - cxl/edac: Fix wrong dpa checking for PPR operation (bsc#1012628). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1012628). - perf tests bp_account: Fix leaked file descriptor (bsc#1012628). - perf hwmon_pmu: Avoid shortening hwmon PMU name (bsc#1012628). - perf python: Fix thread check in pyrf_evsel__read (bsc#1012628). - perf python: Correct pyrf_evsel__read for tool PMUs (bsc#1012628). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1012628). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1012628). - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (bsc#1012628). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1012628). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: core: Fix kernel doc for scsi_track_queue_full() (bsc#1012628). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1012628). - PCI: Fix driver_managed_dma check (bsc#1012628). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1012628). - selftests/cgroup: fix cpu.max tests (bsc#1012628). - ext4: fix inode use after free in ext4_end_io_rsv_work() (bsc#1012628). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1012628). - clk: at91: sam9x7: update pll clk ranges (bsc#1012628). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1012628). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1012628). - crypto: qat - fix virtual channel configuration for GEN6 devices (bsc#1012628). - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (bsc#1012628). - cgroup: Add compatibility option for content of /proc/cgroups (bsc#1012628). - soundwire: stream: restore params when prepare ports fail (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1012628). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1012628). - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence (bsc#1012628). - remoteproc: xlnx: Disable unsupported features (bsc#1012628). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1012628). - clk: thead: th1520-ap: Describe mux clocks with clk_mux (bsc#1012628). - tools subcmd: Tighten the filename size in check_if_command_finished (bsc#1012628). - perf pmu: Switch FILENAME_MAX to NAME_MAX (bsc#1012628). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1012628). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1012628). - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string (bsc#1012628). - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers (bsc#1012628). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1012628). - ASoC: fsl_xcvr: get channel status data with firmware exists (bsc#1012628). - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (bsc#1012628). - sh: Do not use hyphen in exported variable name (bsc#1012628). - perf tools: Remove libtraceevent in .gitignore (bsc#1012628). - clk: clocking-wizard: Fix the round rate handling for versal (bsc#1012628). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1012628). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1012628). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1012628). - smb: client: allow parsing zero-length AV pairs (bsc#1012628). - drm/xe/configfs: Fix pci_dev reference leak (bsc#1012628). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1012628). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1012628). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1012628). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1012628). - drm/xe/vf: Disable CSC support on VF (bsc#1012628). - selftests: ALSA: fix memory leak in utimer test (bsc#1012628). - ALSA: usb: scarlett2: Fix missing NULL check (bsc#1012628). - perf record: Cache build-ID of hit DSOs only (bsc#1012628). - bpf: Add cookie object to bpf maps (bsc#1012628). - bpf: Move bpf map owner out of common struct (bsc#1012628). - bpf: Move cgroup iterator helpers to bpf.h (bsc#1012628). - bpf: Fix oob access in cgroup local storage (bsc#1012628). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1012628). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1012628). - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (bsc#1012628). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1012628). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1012628). - vhost: Reintroduce kthread API and add mode selection (bsc#1012628). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1012628). - bpf: Check netfilter ctx accesses are aligned (bsc#1012628). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1012628). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1012628). - dm-flakey: Fix corrupt_bio_byte setup checks (bsc#1012628). - uprobes: revert ref_ctr_offset in uprobe_unregister error path (bsc#1012628). - scripts: gdb: move MNT_* constants to gdb-parsed (bsc#1012628). - squashfs: use folios in squashfs_bio_read_cached() (bsc#1012628). - squashfs: fix incorrect argument to sizeof in kmalloc_array call (bsc#1012628). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1012628). - i3c: fix module_i3c_i2c_driver() with I3C=n (bsc#1012628). - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk (bsc#1012628). - module: Restore the moduleparam prefix length check (bsc#1012628). - ucount: fix atomic_long_inc_below() argument type (bsc#1012628). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1012628). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1012628). - f2fs: fix bio memleak when committing super block (bsc#1012628). - f2fs: fix to avoid invalid wait context issue (bsc#1012628). - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (bsc#1012628). - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (bsc#1012628). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1012628). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1012628). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1012628). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1012628). - f2fs: doc: fix wrong quota mount option description (bsc#1012628). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1012628). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1012628). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1012628). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1012628). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1012628). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1012628). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1012628). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1012628). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1012628). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1012628). - vfio: Prevent open_count decrement to negative (bsc#1012628). - vfio/pds: Fix missing detach_ioas op (bsc#1012628). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1012628). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1012628). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1012628). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1012628). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1012628). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1012628). - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD (bsc#1012628). - sched/psi: Fix psi_seq initialization (bsc#1012628). - padata: Remove comment for reorder_work (bsc#1012628). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1012628). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1012628). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1012628). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1012628). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1012628). - tools/power turbostat: regression fix: --show C1E% (bsc#1012628). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1012628). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1012628). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1012628). - NFSv4.2: another fix for listxattr (bsc#1012628). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1012628). - ARM: s3c/gpio: complete the conversion to new GPIO value setters (bsc#1012628). - md/md-cluster: handle REMOVE message earlier (bsc#1012628). - kcm: Fix splice support (bsc#1012628). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1012628). - phy: mscc: Fix parsing of unicast frames (bsc#1012628). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1012628). - net: mdio_bus: Use devm for getting reset GPIO (bsc#1012628). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1012628). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1012628). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1012628). - s390/mm: Set high_memory at the end of the identity mapping (bsc#1012628). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1012628). - block: Fix default IO priority if there is no IO context (bsc#1012628). - block: ensure discard_granularity is zero when discard is not supported (bsc#1012628). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1012628). - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show() (bsc#1012628). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1012628). - selftests: avoid using ifconfig (bsc#1012628). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1012628). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1012628). - net: drop UFO packets in udp_rcv_segment() (bsc#1012628). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1012628). - md: make rdev_addable usable for rcu mode (bsc#1012628). - sunrpc: fix client side handling of tls alerts (bsc#1012628). - drm/xe/pf: Disable PF restart worker on device removal (bsc#1012628). - x86/irq: Plug vector setup race (bsc#1012628). - eth: fbnic: unlink NAPIs from queues on error to open (bsc#1012628). - ipa: fix compile-testing with qcom-mdt=m (bsc#1012628). - net: devmem: fix DMA direction on unmapping (bsc#1012628). - net: airoha: npu: Add missing MODULE_FIRMWARE macros (bsc#1012628). - benet: fix BUG when creating VFs (bsc#1012628). - Revert "net: mdio_bus: Use devm for getting reset GPIO" (bsc#1012628). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1012628). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1012628). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1012628). - eth: fbnic: Fix tx_dropped reporting (bsc#1012628). - eth: fbnic: Lock the tx_dropped update (bsc#1012628). - NFS/localio: nfs_close_local_fh() fix check for file closed (bsc#1012628). - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh() (bsc#1012628). - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file (bsc#1012628). - net: ti: icssg-prueth: Fix skb handling for XDP_PASS (bsc#1012628). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1012628). - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies (bsc#1012628). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1012628). - s390/boot: Fix startup debugging log (bsc#1012628). - smb: server: remove separate empty_recvmsg_queue (bsc#1012628). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1012628). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - smb: client: remove separate empty_packet_queue (bsc#1012628). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1012628). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - nvmet: exit debugfs after discovery subsystem exits (bsc#1012628). - pptp: fix pptp_xmit() error path (bsc#1012628). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1012628). - tools/power turbostat: Fix bogus SysWatt for forked program (bsc#1012628). - tools/power turbostat: Fix DMR support (bsc#1012628). - nfsd: don't set the ctime on delegated atime updates (bsc#1012628). - nfsd: avoid ref leak in nfsd_open_local_fh() (bsc#1012628). - sunrpc: fix handling of server side tls alerts (bsc#1012628). - perf/core: Preserve AUX buffer allocation failure result (bsc#1012628). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1012628). - perf/core: Exit early on perf_mmap() fail (bsc#1012628). - perf/core: Handle buffer mapping fail correctly in perf_mmap() (bsc#1012628). - perf/core: Prevent VMA split of buffer mappings (bsc#1012628). - selftests/perf_events: Add a mmap() correctness test (bsc#1012628). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1012628). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1012628). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1012628). - ksmbd: fix Preauh_HashValue race condition (bsc#1012628). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1012628). - smb: client: fix netns refcount leak after net_passive changes (bsc#1012628). - smb: client: set symlink type as native for POSIX mounts (bsc#1012628). - smb: client: default to nonativesocket under POSIX mounts (bsc#1012628). - ksmbd: limit repeated connections from clients with the same IP (bsc#1012628). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1012628). - USB: serial: option: add Foxconn T99W709 (bsc#1012628). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1012628). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1012628). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1012628). - x86/sev: Evict cache lines during SNP memory validation (bsc#1012628). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1012628). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1012628). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1012628). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1012628). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1012628). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1012628). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1012628). - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (bsc#1012628). - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (bsc#1012628). - zloop: fix KASAN use-after-free of tag set (bsc#1012628). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1012628). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1012628). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1012628). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1012628). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1012628). - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap() to swap_range_alloc() (bsc#1012628). - mm: shmem: fix the shmem large folio allocation for the i915 driver (bsc#1012628). - usb: gadget: uvc: Initialize frame-based format color matching descriptor (bsc#1012628). - perf/arm-ni: Set initial IRQ affinity (bsc#1012628). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1012628). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1012628). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1012628). - HID: core: Harden s32ton() against conversion to 0 bits (bsc#1012628). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1012628). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1012628). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1012628). - wifi: ath12k: install pairwise key first (bsc#1012628). - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.1-522-spi-cs42l43-Property-entry-should-be-a-null-te.patch. - commit 2e1765c - Update config files. Enable FIPS (bsc#1247998) CRYPTO_MANAGER_DISABLE_TESTS (we had "is not set") became CRYPTO_SELFTESTS (we still have "is not set"), but the logic was inverted: CRYPTO_MANAGER_DISABLE_TESTS <=> !CRYPTO_SELFTESTS. Set CRYPTO_SELFTESTS=y and restore the otehr values to pre-6.16-rc1. - commit fd401db ++++ kernel-syms-longterm: - Update config files for 6.12.42. Adding CONFIG_VHOST_ENABLE_FORK_OWNER_CONTROL=y for aarch64 and x86_64. - commit 13330df - Linux 6.12.42 (bsc#1234429). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1234429). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1234429). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1234429). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1234429). - perf/arm-ni: Set initial IRQ affinity (bsc#1234429). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1234429). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1234429). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1234429). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1234429). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1234429). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1234429). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1234429). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1234429). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1234429). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1234429). - x86/sev: Evict cache lines during SNP memory validation (bsc#1234429). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1234429). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1234429). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1234429). - PCI/ASPM: Fix L1SS saving (bsc#1234429). - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state() (bsc#1234429). - USB: serial: option: add Foxconn T99W709 (bsc#1234429). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1234429). - ksmbd: limit repeated connections from clients with the same IP (bsc#1234429). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1234429). - ksmbd: fix Preauh_HashValue race condition (bsc#1234429). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1234429). - drm/i915/ddi: only call shutdown hooks for valid encoders (bsc#1234429). - drm/i915/display: add intel_encoder_is_hdmi() (bsc#1234429). - drm/i915/ddi: gracefully handle errors from intel_ddi_init_hdmi_connector() (bsc#1234429). - drm/i915/hdmi: add error handling in g4x_hdmi_init() (bsc#1234429). - drm/i915/hdmi: propagate errors from intel_hdmi_init_connector() (bsc#1234429). - drm/i915/ddi: change intel_ddi_init_{dp, hdmi}_connector() return type (bsc#1234429). - selftests/bpf: Fix build error with llvm 19 (bsc#1234429). - selftests/bpf: Add a test for arena range tree algorithm (bsc#1234429). - ice/ptp: fix crosstimestamp reporting (bsc#1234429). - Revert "bcache: remove heap-related macros and switch to generic min_heap" (bsc#1234429). - accel/ivpu: Fix reset_engine debugfs file logic (bsc#1234429). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1234429). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1234429). - selftests/perf_events: Add a mmap() correctness test (bsc#1234429). - perf/core: Prevent VMA split of buffer mappings (bsc#1234429). - perf/core: Exit early on perf_mmap() fail (bsc#1234429). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1234429). - sunrpc: fix handling of server side tls alerts (bsc#1234429). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1234429). - pptp: fix pptp_xmit() error path (bsc#1234429). - nvmet: exit debugfs after discovery subsystem exits (bsc#1234429). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1234429). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1234429). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1234429). - smb: client: remove separate empty_packet_queue (bsc#1234429). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1234429). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1234429). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1234429). - smb: server: remove separate empty_recvmsg_queue (bsc#1234429). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1234429). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1234429). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1234429). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1234429). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1234429). - benet: fix BUG when creating VFs (bsc#1234429). - x86/irq: Plug vector setup race (bsc#1234429). - sunrpc: fix client side handling of tls alerts (bsc#1234429). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1234429). - net: drop UFO packets in udp_rcv_segment() (bsc#1234429). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1234429). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1234429). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1234429). - spi: cs42l43: Property entry should be a null-terminated array (bsc#1234429). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1234429). - block: ensure discard_granularity is zero when discard is not supported (bsc#1234429). - block: Fix default IO priority if there is no IO context (bsc#1234429). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1234429). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1234429). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1234429). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1234429). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1234429). - phy: mscc: Fix parsing of unicast frames (bsc#1234429). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1234429). - md/md-cluster: handle REMOVE message earlier (bsc#1234429). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1234429). - NFSv4.2: another fix for listxattr (bsc#1234429). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1234429). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1234429). - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (bsc#1234429). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1234429). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1234429). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1234429). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1234429). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1234429). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1234429). - sched/psi: Fix psi_seq initialization (bsc#1234429). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1234429). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1234429). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1234429). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1234429). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1234429). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1234429). - vfio/pds: Fix missing detach_ioas op (bsc#1234429). - vfio: Prevent open_count decrement to negative (bsc#1234429). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1234429). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1234429). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1234429). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1234429). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1234429). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1234429). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1234429). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1234429). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1234429). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1234429). - f2fs: doc: fix wrong quota mount option description (bsc#1234429). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1234429). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1234429). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1234429). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1234429). - f2fs: fix bio memleak when committing super block (bsc#1234429). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1234429). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1234429). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1234429). - ucount: fix atomic_long_inc_below() argument type (bsc#1234429). - module: Restore the moduleparam prefix length check (bsc#1234429). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1234429). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1234429). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1234429). - bpf: Check netfilter ctx accesses are aligned (bsc#1234429). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1234429). - vhost: Reintroduce kthread API and add mode selection (bsc#1234429). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1234429). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1234429). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1234429). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1234429). - perf record: Cache build-ID of hit DSOs only (bsc#1234429). - selftests: ALSA: fix memory leak in utimer test (bsc#1234429). - drm/xe/vf: Disable CSC support on VF (bsc#1234429). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1234429). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1234429). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1234429). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1234429). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1234429). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1234429). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1234429). - perf tools: Remove libtraceevent in .gitignore (bsc#1234429). - sh: Do not use hyphen in exported variable name (bsc#1234429). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1234429). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1234429). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1234429). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1234429). - remoteproc: xlnx: Disable unsupported features (bsc#1234429). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1234429). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1234429). - soundwire: stream: restore params when prepare ports fail (bsc#1234429). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1234429). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1234429). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1234429). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1234429). - clk: at91: sam9x7: update pll clk ranges (bsc#1234429). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1234429). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1234429). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1234429). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1234429). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1234429). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1234429). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1234429). - perf tests bp_account: Fix leaked file descriptor (bsc#1234429). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1234429). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1234429). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1234429). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1234429). - RDMA/hns: Drop GFP_NOWARN (bsc#1234429). - RDMA/hns: Fix accessing uninitialized resources (bsc#1234429). - RDMA/hns: Get message length of ack_req from FW (bsc#1234429). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1234429). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1234429). - crypto: ccp - Fix locking on alloc failure handling (bsc#1234429). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1234429). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1234429). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1234429). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1234429). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1234429). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1234429). - perf sched: Free thread->priv using priv_destructor (bsc#1234429). - perf sched: Make sure it frees the usage string (bsc#1234429). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1234429). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1234429). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1234429). - Fix dma_unmap_sg() nents value (bsc#1234429). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1234429). - fanotify: sanitize handle_type values when reporting fid (bsc#1234429). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1234429). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1234429). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1234429). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1234429). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1234429). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1234429). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1234429). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1234429). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1234429). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1234429). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1234429). - mtd: fix possible integer overflow in erase_xfer() (bsc#1234429). - crypto: qat - fix state restore for banks with exceptions (bsc#1234429). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1234429). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1234429). - crypto: qat - use unmanaged allocation for dc_data (bsc#1234429). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1234429). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1234429). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1234429). - fortify: Fix incorrect reporting of read buffer size (bsc#1234429). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1234429). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1234429). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1234429). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1234429). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1234429). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1234429). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1234429). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1234429). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1234429). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1234429). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1234429). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1234429). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1234429). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1234429). - can: kvaser_pciefd: Store device channel index (bsc#1234429). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1234429). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1234429). - tools/rv: Do not skip idle in trace (bsc#1234429). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1234429). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1234429). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1234429). - memcg_slabinfo: Fix use of PG_slab (bsc#1234429). - kcsan: test: Initialize dummy variable (bsc#1234429). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1234429). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1234429). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1234429). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1234429). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1234429). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1234429). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1234429). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1234429). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1234429). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1234429). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1234429). - rcu: Fix delayed execution of hurry callbacks (bsc#1234429). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1234429). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1234429). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1234429). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1234429). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1234429). - mwl8k: Add missing check after DMA map (bsc#1234429). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1234429). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1234429). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1234429). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1234429). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1234429). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1234429). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1234429). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1234429). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1234429). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1234429). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1234429). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1234429). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1234429). - fbcon: Fix outdated registered_fb reference in comment (bsc#1234429). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1234429). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1234429). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1234429). - m68k: Don't unregister boot console needlessly (bsc#1234429). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1234429). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1234429). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1234429). - net: dst: annotate data-races around dst->output (bsc#1234429). - net: dst: annotate data-races around dst->input (bsc#1234429). - net/mlx5: Check device memory pointer before usage (bsc#1234429). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1234429). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1234429). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1234429). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1234429). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1234429). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1234429). - caif: reduce stack size, again (bsc#1234429). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1234429). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1234429). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1234429). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1234429). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1234429). - selftests/bpf: Fix unintentional switch case fall through (bsc#1234429). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1234429). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1234429). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1234429). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1234429). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1234429). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1234429). - selftests/tracing: Fix false failure of subsystem event test (bsc#1234429). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1234429). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1234429). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1234429). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1234429). - soc: qcom: pmic_glink: fix OF node leak (bsc#1234429). - samples: mei: Fix building on musl libc (bsc#1234429). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1234429). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1234429). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1234429). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1234429). - PM / devfreq: Fix a index typo in trans_stat (bsc#1234429). - PM / devfreq: Check governor before using governor->name (bsc#1234429). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1234429). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1234429). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1234429). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1234429). - arm64: dts: st: fix timer used for ticks (bsc#1234429). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1234429). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1234429). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1234429). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1234429). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1234429). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1234429). - pps: fix poll support (bsc#1234429). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1234429). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1234429). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1234429). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1234429). - mei: vsc: Event notifier fixes (bsc#1234429). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1234429). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1234429). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1234429). - cpufreq: armada-8k: make both cpu masks static (bsc#1234429). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1234429). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1234429). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1234429). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1234429). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1234429). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1234429). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1234429). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1234429). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1234429). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1234429). - soc: qcom: QMI encoding/decoding for big endian (bsc#1234429). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1234429). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1234429). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1234429). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1234429). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1234429). - io_uring: fix breakage in EXPERT menu (bsc#1234429). - gfs2: No more self recovery (bsc#1234429). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1234429). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1234429). - hfs: make splice write available again (bsc#1234429). - hfsplus: make splice write available again (bsc#1234429). - ublk: use vmalloc for ublk_device's __queues (bsc#1234429). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1234429). - fs_context: fix parameter name in infofc() macro (bsc#1234429). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1234429). - audit,module: restore audit logging in load failure case (bsc#1234429). - ASoC: amd: yc: add DMI quirk for ASUS M6501RM (bsc#1234429). - ASoC: Intel: fix SND_SOC_SOF dependencies (bsc#1234429). - ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX (bsc#1234429). - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx (bsc#1234429). - ethernet: intel: fix building with large NR_CPUS (bsc#1234429). - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx (bsc#1234429). - commit 28b079c ++++ kernel-vanilla: - Linux 6.16.1 (bsc#1012628). - audit,module: restore audit logging in load failure case (bsc#1012628). - parse_longname(): strrchr() expects NUL-terminated string (bsc#1012628). - fs_context: fix parameter name in infofc() macro (bsc#1012628). - selftests/landlock: Fix readlink check (bsc#1012628). - selftests/landlock: Fix build of audit_test (bsc#1012628). - fs/ntfs3: cancle set bad inode after removing name fails (bsc#1012628). - landlock: Fix warning from KUnit tests (bsc#1012628). - ublk: use vmalloc for ublk_device's __queues (bsc#1012628). - hfsplus: make splice write available again (bsc#1012628). - hfs: make splice write available again (bsc#1012628). - hfsplus: remove mutex_lock check in hfsplus_free_extents (bsc#1012628). - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (bsc#1012628). - block: mtip32xx: Fix usage of dma_map_sg() (bsc#1012628). - gfs2: Minor do_xmote cancelation fix (bsc#1012628). - nbd: fix lockdep deadlock warning (bsc#1012628). - md: allow removing faulty rdev during resync (bsc#1012628). - kunit/fortify: Add back "volatile" for sizeof() constants (bsc#1012628). - ublk: speed up ublk server exit handling (bsc#1012628). - ublk: validate ublk server pid (bsc#1012628). - md/raid10: fix set but not used variable in sync_request_write() (bsc#1012628). - gfs2: No more self recovery (bsc#1012628). - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (bsc#1012628). - block: sanitize chunk_sectors for atomic write limits (bsc#1012628). - io_uring: fix breakage in EXPERT menu (bsc#1012628). - btrfs: remove partial support for lowest level from btrfs_search_forward() (bsc#1012628). - eventpoll: Fix semi-unbounded recursion (bsc#1012628). - eventpoll: fix sphinx documentation build warning (bsc#1012628). - block: restore two stage elevator switch while running nr_hw_queue update (bsc#1012628). - sched/task_stack: Add missing const qualifier to end_of_stack() (bsc#1012628). - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop (bsc#1012628). - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (bsc#1012628). - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (bsc#1012628). - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (bsc#1012628). - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration (bsc#1012628). - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (bsc#1012628). - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses (bsc#1012628). - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (bsc#1012628). - selftests: Fix errno checking in syscall_user_dispatch test (bsc#1012628). - soc: qcom: QMI encoding/decoding for big endian (bsc#1012628). - soc: qcom: fix endianness for QMI header (bsc#1012628). - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight (bsc#1012628). - arm64: dts: qcom: sdm845: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: sc7180: Expand IMEM region (bsc#1012628). - arm64: dts: qcom: qcs615: disable the CTI device of the camera block (bsc#1012628). - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (bsc#1012628). - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (bsc#1012628). - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (bsc#1012628). - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor (bsc#1012628). - ARM: dts: vfxxx: Correctly use two tuples for timer address (bsc#1012628). - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (bsc#1012628). - usb: misc: apple-mfi-fastcharge: Make power supply names unique (bsc#1012628). - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (bsc#1012628). - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI (bsc#1012628). - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (bsc#1012628). - ARM: dts: microchip: sama7d65: Add clock name property (bsc#1012628). - ARM: dts: microchip: sam9x7: Add clock name property (bsc#1012628). - cpufreq: armada-8k: make both cpu masks static (bsc#1012628). - firmware: arm_scmi: Fix up turbo frequencies selection (bsc#1012628). - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (bsc#1012628). - x86/bugs: Simplify the retbleed=stuff checks (bsc#1012628). - x86/bugs: Introduce cdt_possible() (bsc#1012628). - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (bsc#1012628). - usb: typec: ucsi: yoga-c630: fix error and remove paths (bsc#1012628). - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop (bsc#1012628). - mei: vsc: Destroy mutex after freeing the IRQ (bsc#1012628). - mei: vsc: Event notifier fixes (bsc#1012628). - mei: vsc: Unset the event callback on remove and probe errors (bsc#1012628). - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq() (bsc#1012628). - mei: vsc: Run event callback from a workqueue (bsc#1012628). - mei: vsc: Fix "BUG: Invalid wait context" lockdep error (bsc#1012628). - spi: stm32: Check for cfg availability in stm32_spi_probe (bsc#1012628). - drivers: misc: sram: fix up some const issues with recent attribute changes (bsc#1012628). - rust: devres: require T: Send for Devres (bsc#1012628). - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855 (bsc#1012628). - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C (bsc#1012628). - ASoC: SDCA: Add missing default in switch in entity_pde_event() (bsc#1012628). - staging: gpib: fix unset padding field copy back to userspace (bsc#1012628). - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (bsc#1012628). - rust: miscdevice: clarify invariant for `MiscDeviceRegistration` (bsc#1012628). - vmci: Prevent the dispatching of uninitialized payloads (bsc#1012628). - pps: fix poll support (bsc#1012628). - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio (bsc#1012628). - selftests: vDSO: chacha: Correctly skip test if necessary (bsc#1012628). - Revert "vmci: Prevent the dispatching of uninitialized payloads" (bsc#1012628). - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up (bsc#1012628). - selftests/nolibc: correctly report errors from printf() and friends (bsc#1012628). - usb: early: xhci-dbc: Fix early_ioremap leak (bsc#1012628). - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through waitpid() (bsc#1012628). - arm: dts: ti: omap: Fixup pinheader typo (bsc#1012628). - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install target (bsc#1012628). - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction (bsc#1012628). - staging: gpib: Fix error code in board_type_ioctl() (bsc#1012628). - staging: gpib: Fix error handling paths in cb_gpib_probe() (bsc#1012628). - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (bsc#1012628). - arm64: dts: rockchip: fix PHY handling for ROCK 4D (bsc#1012628). - arm64: dts: st: fix timer used for ticks (bsc#1012628). - selftests: breakpoints: use suspend_stats to reliably check suspend success (bsc#1012628). - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (bsc#1012628). - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio (bsc#1012628). - arm64: dts: rockchip: Fix pinctrl node names for RK3528 (bsc#1012628). - PM / devfreq: Check governor before using governor->name (bsc#1012628). - PM / devfreq: Fix a index typo in trans_stat (bsc#1012628). - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (bsc#1012628). - cpufreq: Initialize cpufreq-based frequency-invariance later (bsc#1012628). - cpufreq: Init policy->rwsem before it may be possibly used (bsc#1012628). - arm64: dts: rockchip: Fix UART DMA support for RK3528 (bsc#1012628). - kexec_core: Fix error code path in the KEXEC_JUMP flow (bsc#1012628). - ASoC: SDCA: Update memory allocations to zero initialise (bsc#1012628). - ASoC: SDCA: Allow read-only controls to be deferrable (bsc#1012628). - staging: greybus: gbphy: fix up const issue with the match callback (bsc#1012628). - driver core: auxiliary bus: fix OF node leak (bsc#1012628). - samples: mei: Fix building on musl libc (bsc#1012628). - soc: qcom: pmic_glink: fix OF node leak (bsc#1012628). - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (bsc#1012628). - interconnect: qcom: sc8180x: specify num_nodes (bsc#1012628). - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (bsc#1012628). - drm/xe: Correct the rev value for the DVSEC entries (bsc#1012628). - drm/xe: Correct BMG VSEC header sizing (bsc#1012628). - platform/x86: oxpec: Fix turbo register for G1 AMD (bsc#1012628). - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property (bsc#1012628). - staging: nvec: Fix incorrect null termination of battery manufacturer (bsc#1012628). - selftests/tracing: Fix false failure of subsystem event test (bsc#1012628). - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the remaining chips (bsc#1012628). - Revert "udmabuf: fix vmap_udmabuf error page set" (bsc#1012628). - udmabuf: fix vmap missed offset page (bsc#1012628). - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (bsc#1012628). - drm/sitronix: Remove broken backwards-compatibility layer (bsc#1012628). - drm/connector: hdmi: Evaluate limited range after computing format (bsc#1012628). - drm/panfrost: Fix panfrost device variable name in devfreq (bsc#1012628). - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (bsc#1012628). - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (bsc#1012628). - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (bsc#1012628). - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (bsc#1012628). - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (bsc#1012628). - bpf, sockmap: Fix psock incorrectly pointing to sk (bsc#1012628). - netconsole: Only register console drivers when targets are configured (bsc#1012628). - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1012628). - net, bpf: Fix RCU usage in task_cls_state() for BPF programs (bsc#1012628). - selftests/bpf: fix signedness bug in redir_partial() (bsc#1012628). - bpf: handle jset (if a & b ...) as a jump in CFG computation (bsc#1012628). - selftests/bpf: Fix unintentional switch case fall through (bsc#1012628). - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (bsc#1012628). - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (bsc#1012628). - slub: Fix a documentation build error for krealloc() (bsc#1012628). - drm/amdgpu: Remove nbiov7.9 replay count reporting (bsc#1012628). - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine() (bsc#1012628). - net: mana: Fix potential deadlocks in mana napi ops (bsc#1012628). - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (bsc#1012628). - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (bsc#1012628). - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (bsc#1012628). - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (bsc#1012628). - wifi: ath12k: update channel list in worker when wait flag is set (bsc#1012628). - wifi: ath12k: Fix double budget decrement while reaping monitor ring (bsc#1012628). - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1012628). - caif: reduce stack size, again (bsc#1012628). - net: annotate races around sk->sk_uid (bsc#1012628). - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (bsc#1012628). - wifi: rtl818x: Kill URBs before clearing tx status queue (bsc#1012628). - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c (bsc#1012628). - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (bsc#1012628). - iwlwifi: Add missing check for alloc_ordered_workqueue (bsc#1012628). - drm/xe/uapi: Correct sync type definition in comments (bsc#1012628). - team: replace team lock with rtnl lock (bsc#1012628). - wifi: ath11k: clear initialized flag for deinit-ed srng lists (bsc#1012628). - wifi: ath12k: Clear auth flag only for actual association in security mode (bsc#1012628). - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (bsc#1012628). - net/mlx5: Check device memory pointer before usage (bsc#1012628). - net: dst: annotate data-races around dst->input (bsc#1012628). - net: dst: annotate data-races around dst->output (bsc#1012628). - net: dst: add four helpers to annotate data-races around dst->dev (bsc#1012628). - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (bsc#1012628). - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (bsc#1012628). - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (bsc#1012628). - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (bsc#1012628). - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (bsc#1012628). - m68k: Don't unregister boot console needlessly (bsc#1012628). - refscale: Check that nreaders and loops multiplication doesn't overflow (bsc#1012628). - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (bsc#1012628). - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (bsc#1012628). - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (bsc#1012628). - drm/amdkfd: Move the process suspend and resume out of full access (bsc#1012628). - drm/amdgpu: rework queue reset scheduler interaction (bsc#1012628). - drm/amdgpu: move force completion into ring resets (bsc#1012628). - drm/amdgpu/gfx10: fix KGQ reset sequence (bsc#1012628). - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (bsc#1012628). - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini" (bsc#1012628). - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0 (bsc#1012628). - wifi: ath12k: Block radio bring-up in FTM mode (bsc#1012628). - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y (bsc#1012628). - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1012628). - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when there are multi display output on rk3588/rk3568 (bsc#1012628). - sched/psi: Optimize psi_group_change() cpu_clock() usage (bsc#1012628). - fbcon: Fix outdated registered_fb reference in comment (bsc#1012628). - netfilter: nf_tables: Drop dead code from fill_*_info routines (bsc#1012628). - netfilter: nf_tables: adjust lockdep assertions handling (bsc#1012628). - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code (bsc#1012628). - wifi: ath12k: update unsupported bandwidth flags in reg rules (bsc#1012628). - wifi: ath12k: pack HTT pdev rate stats structs (bsc#1012628). - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (bsc#1012628). - um: rtc: Avoid shadowing err in uml_rtc_start() (bsc#1012628). - iommu/amd: Enable PASID and ATS capabilities in the correct order (bsc#1012628). - spi: spi-nxp-fspi: Check return value of devm_mutex_init() (bsc#1012628). - leds: lp8860: Check return value of devm_mutex_init() (bsc#1012628). - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1012628). - net_sched: act_ctinfo: use atomic64_t for three counters (bsc#1012628). - RDMA/mlx5: Fix UMR modifying of mkey page size (bsc#1012628). - xen: fix UAF in dmabuf_exp_from_pages() (bsc#1012628). - sched/deadline: Reset extra_bw to max_bw when clearing root domains (bsc#1012628). - iommu/vt-d: Do not wipe out the page table NID when devices detach (bsc#1012628). - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (bsc#1012628). - iommu/arm-smmu: disable PRR on SM8250 (bsc#1012628). - xen/gntdev: remove struct gntdev_copy_batch from stack (bsc#1012628). - tcp: call tcp_measure_rcv_mss() for ooo packets (bsc#1012628). - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (bsc#1012628). - wifi: rtw88: Fix macid assigned to TDLS station (bsc#1012628). - mwl8k: Add missing check after DMA map (bsc#1012628). - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (bsc#1012628). - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (bsc#1012628). - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (bsc#1012628). - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (bsc#1012628). - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (bsc#1012628). - selftests/bpf: fix implementation of smp_mb() (bsc#1012628). - iommu/amd: Fix geometry.aperture_end for V2 tables (bsc#1012628). - rcu: Fix delayed execution of hurry callbacks (bsc#1012628). - wifi: mac80211: reject TDLS operations when station is not associated (bsc#1012628). - wifi: plfxlc: Fix error handling in usb driver probe (bsc#1012628). - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1012628). - wifi: mac80211: Do not schedule stopped TXQs (bsc#1012628). - wifi: mac80211: Don't call fq_flow_idx() for management frames (bsc#1012628). - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (bsc#1012628). - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (bsc#1012628). - wifi: ath12k: fix endianness handling while accessing wmi service bit (bsc#1012628). - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (bsc#1012628). - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (bsc#1012628). - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (bsc#1012628). - wifi: nl80211: Set num_sub_specs before looping through sub_specs (bsc#1012628). - ring-buffer: Remove ring_buffer_read_prepare_sync() (bsc#1012628). - kcsan: test: Initialize dummy variable (bsc#1012628). - memcg_slabinfo: Fix use of PG_slab (bsc#1012628). - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (bsc#1012628). - wifi: mac80211: fix WARN_ON for monitor mode on some devices (bsc#1012628). - arm64/gcs: task_gcs_el0_enable() should use passed task (bsc#1012628). - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (bsc#1012628). - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (bsc#1012628). - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (bsc#1012628). - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure (bsc#1012628). - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (bsc#1012628). - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv (bsc#1012628). - Bluetooth: btintel: Define a macro for Intel Reset vendor command (bsc#1012628). - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (bsc#1012628). - Bluetooth: hci_event: Mask data status from LE ext adv reports (bsc#1012628). - bpf: Disable migration in nf_hook_run_bpf() (bsc#1012628). - bpf: Reject narrower access to pointer ctx fields (bsc#1012628). - tools/rv: Do not skip idle in trace (bsc#1012628). - selftests: drv-net: Fix remote command checking in require_cmd() (bsc#1012628). - selftests: drv-net: tso: enable test cases based on hw_features (bsc#1012628). - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type (bsc#1012628). - selftests: drv-net: tso: fix non-tunneled tso6 test case name (bsc#1012628). - can: peak_usb: fix USB FD devices potential malfunction (bsc#1012628). - can: tscan1: Kconfig: add COMPILE_TEST (bsc#1012628). - can: tscan1: CAN_TSCAN1 can depend on PC104 (bsc#1012628). - can: kvaser_pciefd: Store device channel index (bsc#1012628). - can: kvaser_usb: Assign netdev.dev_port based on device channel index (bsc#1012628). - netfilter: xt_nfacct: don't assume acct name is null-terminated (bsc#1012628). - selftests: netfilter: Ignore tainted kernels in interface stress test (bsc#1012628). - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface tunl0 (bsc#1012628). - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (bsc#1012628). - net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1012628). - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (bsc#1012628). - macsec: set IFF_UNICAST_FLT priv flag (bsc#1012628). - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (bsc#1012628). - neighbour: Fix null-ptr-deref in neigh_flush_dev() (bsc#1012628). - stmmac: xsk: fix negative overflow of budget in zerocopy mode (bsc#1012628). - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (bsc#1012628). - selftests: rtnetlink.sh: remove esp4_offload after test (bsc#1012628). - vrf: Drop existing dst reference in vrf_ip6_input_dst (bsc#1012628). - ipv6: add a retry logic in net6_rt_notify() (bsc#1012628). - ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1012628). - ipv6: fix possible infinite loop in fib6_info_uses_dev() (bsc#1012628). - ipv6: annotate data-races around rt->fib6_nsiblings (bsc#1012628). - bpf/preload: Don't select USERMODE_DRIVER (bsc#1012628). - bpf, arm64: Fix fp initialization for exception boundary (bsc#1012628). - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (bsc#1012628). - rv: Remove trailing whitespace from tracepoint string (bsc#1012628). - rv: Use strings in da monitors tracepoints (bsc#1012628). - rv: Adjust monitor dependencies (bsc#1012628). - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1012628). - fortify: Fix incorrect reporting of read buffer size (bsc#1012628). - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings() (bsc#1012628). - remoteproc: qcom: pas: Conclude the rename from adsp (bsc#1012628). - PCI: rockchip-host: Fix "Unexpected Completion" log message (bsc#1012628). - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (bsc#1012628). - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (bsc#1012628). - crypto: qat - use unmanaged allocation for dc_data (bsc#1012628). - crypto: marvell/cesa - Fix engine load inaccuracy (bsc#1012628). - crypto: s390/hmac - Fix counter in export state (bsc#1012628). - crypto: s390/sha3 - Use cpu byte-order when exporting (bsc#1012628). - padata: Fix pd UAF once and for all (bsc#1012628). - crypto: ccp - Fix dereferencing uninitialized error pointer (bsc#1012628). - crypto: qat - allow enabling VFs in the absence of IOMMU (bsc#1012628). - crypto: qat - fix state restore for banks with exceptions (bsc#1012628). - mtd: fix possible integer overflow in erase_xfer() (bsc#1012628). - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (bsc#1012628). - media: imx-jpeg: Account for data_offset when getting image address (bsc#1012628). - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (bsc#1012628). - perf parse-events: Set default GH modifier properly (bsc#1012628). - clk: xilinx: vcu: unregister pll_post only if registered correctly (bsc#1012628). - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (bsc#1012628). - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC (bsc#1012628). - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (bsc#1012628). - power: supply: qcom_pmi8998_charger: fix wakeirq (bsc#1012628). - power: supply: max1720x correct capacity computation (bsc#1012628). - crypto: arm/aes-neonbs - work around gcc-15 warning (bsc#1012628). - crypto: ahash - Add support for drivers with no fallback (bsc#1012628). - crypto: ahash - Stop legacy tfms from using the set_virt fallback path (bsc#1012628). - crypto: qat - restore ASYM service support for GEN6 devices (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (bsc#1012628). - pinctrl: sunxi: Fix memory leak on krealloc failure (bsc#1012628). - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (bsc#1012628). - pinctrl: canaan: k230: add NULL check in DT parse (bsc#1012628). - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register (bsc#1012628). - PCI: Adjust the position of reading the Link Control 2 register (bsc#1012628). - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (bsc#1012628). - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ (bsc#1012628). - soundwire: Correct some property names (bsc#1012628). - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (bsc#1012628). - soundwire: debugfs: move debug statement outside of error handling (bsc#1012628). - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (bsc#1012628). - fanotify: sanitize handle_type values when reporting fid (bsc#1012628). - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (bsc#1012628). - RDMA/ipoib: Use parent rdma device net namespace (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (bsc#1012628). - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (bsc#1012628). - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency (bsc#1012628). - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (bsc#1012628). - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (bsc#1012628). - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (bsc#1012628). - Fix dma_unmap_sg() nents value (bsc#1012628). - leds: pca955x: Avoid potential overflow when filling default_label (take 2) (bsc#1012628). - gitignore: allow .pylintrc to be tracked (bsc#1012628). - perf tools: Fix use-after-free in help_unknown_cmd() (bsc#1012628). - perf dso: Add missed dso__put to dso__load_kcore (bsc#1012628). - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (bsc#1012628). - perf sched: Make sure it frees the usage string (bsc#1012628). - perf sched: Free thread->priv using priv_destructor (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched map' (bsc#1012628). - perf sched: Fix thread leaks in 'perf sched timehist' (bsc#1012628). - perf sched: Fix memory leaks for evsel->priv in timehist (bsc#1012628). - perf sched: Use RC_CHK_EQUAL() to compare pointers (bsc#1012628). - perf sched: Fix memory leaks in 'perf sched latency' (bsc#1012628). - clk: spacemit: mark K1 pll1_d8 as critical (bsc#1012628). - RDMA/hns: Fix double destruction of rsv_qp (bsc#1012628). - RDMA/hns: Fix HW configurations not cleared in error flow (bsc#1012628). - crypto: ccp - Fix locking on alloc failure handling (bsc#1012628). - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (bsc#1012628). - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (bsc#1012628). - RDMA/hns: Get message length of ack_req from FW (bsc#1012628). - RDMA/hns: Fix accessing uninitialized resources (bsc#1012628). - RDMA/hns: Drop GFP_NOWARN (bsc#1012628). - RDMA/hns: Fix -Wframe-larger-than issue (bsc#1012628). - tracing: Use queue_rcu_work() to free filters (bsc#1012628). - kernel: trace: preemptirq_delay_test: use offstack cpu mask (bsc#1012628). - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (bsc#1012628). - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1012628). - cxl/core: Introduce a new helper cxl_resource_contains_addr() (bsc#1012628). - cxl/edac: Fix wrong dpa checking for PPR operation (bsc#1012628). - pinmux: fix race causing mux_owner NULL with active mux_usecount (bsc#1012628). - perf tests bp_account: Fix leaked file descriptor (bsc#1012628). - perf hwmon_pmu: Avoid shortening hwmon PMU name (bsc#1012628). - perf python: Fix thread check in pyrf_evsel__read (bsc#1012628). - perf python: Correct pyrf_evsel__read for tool PMUs (bsc#1012628). - RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1012628). - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (bsc#1012628). - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (bsc#1012628). - clk: sunxi-ng: v3s: Fix de clock definition (bsc#1012628). - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: core: Fix kernel doc for scsi_track_queue_full() (bsc#1012628). - scsi: elx: efct: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: mvsas: Fix dma_unmap_sg() nents value (bsc#1012628). - scsi: isci: Fix dma_unmap_sg() nents value (bsc#1012628). - PCI: Fix driver_managed_dma check (bsc#1012628). - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (bsc#1012628). - selftests/cgroup: fix cpu.max tests (bsc#1012628). - ext4: fix inode use after free in ext4_end_io_rsv_work() (bsc#1012628). - ext4: Make sure BH_New bit is cleared in ->write_end handler (bsc#1012628). - clk: at91: sam9x7: update pll clk ranges (bsc#1012628). - hwrng: mtk - handle devm_pm_runtime_enable errors (bsc#1012628). - crypto: keembay - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: img-hash - Fix dma_unmap_sg() nents value (bsc#1012628). - crypto: qat - disable ZUC-256 capability for QAT GEN5 (bsc#1012628). - crypto: qat - fix virtual channel configuration for GEN6 devices (bsc#1012628). - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (bsc#1012628). - cgroup: Add compatibility option for content of /proc/cgroups (bsc#1012628). - soundwire: stream: restore params when prepare ports fail (bsc#1012628). - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (bsc#1012628). - clk: imx95-blk-ctl: Fix synchronous abort (bsc#1012628). - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence (bsc#1012628). - remoteproc: xlnx: Disable unsupported features (bsc#1012628). - fs/orangefs: Allow 2 more characters in do_c_string() (bsc#1012628). - clk: thead: th1520-ap: Describe mux clocks with clk_mux (bsc#1012628). - tools subcmd: Tighten the filename size in check_if_command_finished (bsc#1012628). - perf pmu: Switch FILENAME_MAX to NAME_MAX (bsc#1012628). - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (bsc#1012628). - dmaengine: nbpfaxi: Add missing check after DMA map (bsc#1012628). - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string (bsc#1012628). - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers (bsc#1012628). - ASoC: fsl_xcvr: get channel status data when PHY is not exists (bsc#1012628). - ASoC: fsl_xcvr: get channel status data with firmware exists (bsc#1012628). - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (bsc#1012628). - sh: Do not use hyphen in exported variable name (bsc#1012628). - perf tools: Remove libtraceevent in .gitignore (bsc#1012628). - clk: clocking-wizard: Fix the round rate handling for versal (bsc#1012628). - crypto: qat - fix DMA direction for compression on GEN2 devices (bsc#1012628). - crypto: qat - fix seq_file position update in adf_ring_next() (bsc#1012628). - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (bsc#1012628). - smb: client: allow parsing zero-length AV pairs (bsc#1012628). - drm/xe/configfs: Fix pci_dev reference leak (bsc#1012628). - jfs: fix metapage reference count leak in dbAllocCtl (bsc#1012628). - mtd: rawnand: atmel: Fix dma_mapping_error() address (bsc#1012628). - mtd: rawnand: rockchip: Add missing check after DMA map (bsc#1012628). - mtd: rawnand: atmel: set pmecc data setup time (bsc#1012628). - drm/xe/vf: Disable CSC support on VF (bsc#1012628). - selftests: ALSA: fix memory leak in utimer test (bsc#1012628). - ALSA: usb: scarlett2: Fix missing NULL check (bsc#1012628). - perf record: Cache build-ID of hit DSOs only (bsc#1012628). - bpf: Add cookie object to bpf maps (bsc#1012628). - bpf: Move bpf map owner out of common struct (bsc#1012628). - bpf: Move cgroup iterator helpers to bpf.h (bsc#1012628). - bpf: Fix oob access in cgroup local storage (bsc#1012628). - vdpa/mlx5: Fix needs_teardown flag calculation (bsc#1012628). - vhost-scsi: Fix log flooding with target does not exist errors (bsc#1012628). - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (bsc#1012628). - vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1012628). - vdpa: Fix IDR memory leak in VDUSE module exit (bsc#1012628). - vhost: Reintroduce kthread API and add mode selection (bsc#1012628). - bpf: Check flow_dissector ctx accesses are aligned (bsc#1012628). - bpf: Check netfilter ctx accesses are aligned (bsc#1012628). - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (bsc#1012628). - apparmor: fix loop detection used in conflicting attachment resolution (bsc#1012628). - dm-flakey: Fix corrupt_bio_byte setup checks (bsc#1012628). - uprobes: revert ref_ctr_offset in uprobe_unregister error path (bsc#1012628). - scripts: gdb: move MNT_* constants to gdb-parsed (bsc#1012628). - squashfs: use folios in squashfs_bio_read_cached() (bsc#1012628). - squashfs: fix incorrect argument to sizeof in kmalloc_array call (bsc#1012628). - apparmor: Fix unaligned memory accesses in KUnit test (bsc#1012628). - i3c: fix module_i3c_i2c_driver() with I3C=n (bsc#1012628). - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk (bsc#1012628). - module: Restore the moduleparam prefix length check (bsc#1012628). - ucount: fix atomic_long_inc_below() argument type (bsc#1012628). - rtc: ds1307: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: hym8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: nct3018y: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf85063: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: pcf8563: fix incorrect maximum clock rate handling (bsc#1012628). - rtc: rv3028: fix incorrect maximum clock rate handling (bsc#1012628). - f2fs: turn off one_time when forcibly set to foreground GC (bsc#1012628). - f2fs: fix bio memleak when committing super block (bsc#1012628). - f2fs: fix to avoid invalid wait context issue (bsc#1012628). - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (bsc#1012628). - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (bsc#1012628). - f2fs: fix KMSAN uninit-value in extent_info usage (bsc#1012628). - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (bsc#1012628). - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (bsc#1012628). - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (bsc#1012628). - f2fs: doc: fix wrong quota mount option description (bsc#1012628). - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (bsc#1012628). - f2fs: fix to avoid panic in f2fs_evict_inode (bsc#1012628). - f2fs: fix to avoid out-of-boundary access in devs.path (bsc#1012628). - f2fs: vm_unmap_ram() may be called from an invalid context (bsc#1012628). - f2fs: fix to update upper_p in __get_secs_required() correctly (bsc#1012628). - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (bsc#1012628). - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (bsc#1012628). - exfat: fdatasync flag should be same like generic_write_sync() (bsc#1012628). - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (bsc#1012628). - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (bsc#1012628). - vfio: Prevent open_count decrement to negative (bsc#1012628). - vfio/pds: Fix missing detach_ioas op (bsc#1012628). - vfio/pci: Separate SR-IOV VF dev_set (bsc#1012628). - scsi: mpt3sas: Fix a fw_event memory leak (bsc#1012628). - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (bsc#1012628). - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (bsc#1012628). - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (bsc#1012628). - kconfig: qconf: fix ConfigList::updateListAllforAll() (bsc#1012628). - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD (bsc#1012628). - sched/psi: Fix psi_seq initialization (bsc#1012628). - padata: Remove comment for reorder_work (bsc#1012628). - PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1012628). - PCI: pnv_php: Work around switches with broken presence detection (bsc#1012628). - powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1012628). - powerpc/eeh: Make EEH driver device hotplug safe (bsc#1012628). - PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1012628). - tools/power turbostat: regression fix: --show C1E% (bsc#1012628). - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (bsc#1012628). - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (bsc#1012628). - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (bsc#1012628). - NFSv4.2: another fix for listxattr (bsc#1012628). - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (bsc#1012628). - ARM: s3c/gpio: complete the conversion to new GPIO value setters (bsc#1012628). - md/md-cluster: handle REMOVE message earlier (bsc#1012628). - kcm: Fix splice support (bsc#1012628). - netpoll: prevent hanging NAPI when netcons gets enabled (bsc#1012628). - phy: mscc: Fix parsing of unicast frames (bsc#1012628). - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (bsc#1012628). - net: mdio_bus: Use devm for getting reset GPIO (bsc#1012628). - pptp: ensure minimal skb length in pptp_xmit() (bsc#1012628). - nvmet: initialize discovery subsys after debugfs is initialized (bsc#1012628). - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (bsc#1012628). - s390/mm: Set high_memory at the end of the identity mapping (bsc#1012628). - netlink: specs: ethtool: fix module EEPROM input/output arguments (bsc#1012628). - block: Fix default IO priority if there is no IO context (bsc#1012628). - block: ensure discard_granularity is zero when discard is not supported (bsc#1012628). - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (bsc#1012628). - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show() (bsc#1012628). - net/mlx5: Correctly set gso_segs when LRO is used (bsc#1012628). - selftests: avoid using ifconfig (bsc#1012628). - ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1012628). - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (bsc#1012628). - net: drop UFO packets in udp_rcv_segment() (bsc#1012628). - net/sched: taprio: enforce minimum value for picos_per_byte (bsc#1012628). - md: make rdev_addable usable for rcu mode (bsc#1012628). - sunrpc: fix client side handling of tls alerts (bsc#1012628). - drm/xe/pf: Disable PF restart worker on device removal (bsc#1012628). - x86/irq: Plug vector setup race (bsc#1012628). - eth: fbnic: unlink NAPIs from queues on error to open (bsc#1012628). - ipa: fix compile-testing with qcom-mdt=m (bsc#1012628). - net: devmem: fix DMA direction on unmapping (bsc#1012628). - net: airoha: npu: Add missing MODULE_FIRMWARE macros (bsc#1012628). - benet: fix BUG when creating VFs (bsc#1012628). - Revert "net: mdio_bus: Use devm for getting reset GPIO" (bsc#1012628). - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (bsc#1012628). - s390/mm: Allocate page table with PAGE_SIZE granularity (bsc#1012628). - eth: fbnic: remove the debugging trick of super high page bias (bsc#1012628). - eth: fbnic: Fix tx_dropped reporting (bsc#1012628). - eth: fbnic: Lock the tx_dropped update (bsc#1012628). - NFS/localio: nfs_close_local_fh() fix check for file closed (bsc#1012628). - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh() (bsc#1012628). - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file (bsc#1012628). - net: ti: icssg-prueth: Fix skb handling for XDP_PASS (bsc#1012628). - irqchip: Build IMX_MU_MSI only on ARM (bsc#1012628). - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies (bsc#1012628). - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (bsc#1012628). - s390/boot: Fix startup debugging log (bsc#1012628). - smb: server: remove separate empty_recvmsg_queue (bsc#1012628). - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (bsc#1012628). - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - smb: client: remove separate empty_packet_queue (bsc#1012628). - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (bsc#1012628). - smb: client: let recv_done() cleanup before notifying the callers (bsc#1012628). - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (bsc#1012628). - nvmet: exit debugfs after discovery subsystem exits (bsc#1012628). - pptp: fix pptp_xmit() error path (bsc#1012628). - smb: client: return an error if rdma_connect does not return within 5 seconds (bsc#1012628). - tools/power turbostat: Fix bogus SysWatt for forked program (bsc#1012628). - tools/power turbostat: Fix DMR support (bsc#1012628). - nfsd: don't set the ctime on delegated atime updates (bsc#1012628). - nfsd: avoid ref leak in nfsd_open_local_fh() (bsc#1012628). - sunrpc: fix handling of server side tls alerts (bsc#1012628). - perf/core: Preserve AUX buffer allocation failure result (bsc#1012628). - perf/core: Don't leak AUX buffer refcount on allocation failure (bsc#1012628). - perf/core: Exit early on perf_mmap() fail (bsc#1012628). - perf/core: Handle buffer mapping fail correctly in perf_mmap() (bsc#1012628). - perf/core: Prevent VMA split of buffer mappings (bsc#1012628). - selftests/perf_events: Add a mmap() correctness test (bsc#1012628). - net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1012628). - vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1012628). - ksmbd: fix null pointer dereference error in generate_encryptionkey (bsc#1012628). - ksmbd: fix Preauh_HashValue race condition (bsc#1012628). - ksmbd: fix corrupted mtime and ctime in smb2_open (bsc#1012628). - smb: client: fix netns refcount leak after net_passive changes (bsc#1012628). - smb: client: set symlink type as native for POSIX mounts (bsc#1012628). - smb: client: default to nonativesocket under POSIX mounts (bsc#1012628). - ksmbd: limit repeated connections from clients with the same IP (bsc#1012628). - smb: server: Fix extension string in ksmbd_extract_shortname() (bsc#1012628). - USB: serial: option: add Foxconn T99W709 (bsc#1012628). - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (bsc#1012628). - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (bsc#1012628). - net: usbnet: Fix the wrong netif_carrier_on() call (bsc#1012628). - x86/sev: Evict cache lines during SNP memory validation (bsc#1012628). - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (bsc#1012628). - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (bsc#1012628). - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (bsc#1012628). - platform/x86/intel/pmt: fix a crashlog NULL pointer access (bsc#1012628). - x86/fpu: Delay instruction pointer fixup until after warning (bsc#1012628). - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (bsc#1012628). - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (bsc#1012628). - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (bsc#1012628). - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (bsc#1012628). - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (bsc#1012628). - zloop: fix KASAN use-after-free of tag set (bsc#1012628). - s390/mm: Remove possible false-positive warning in pte_free_defer() (bsc#1012628). - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (bsc#1012628). - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (bsc#1012628). - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (bsc#1012628). - mm: swap: fix potential buffer overflow in setup_clusters() (bsc#1012628). - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap() to swap_range_alloc() (bsc#1012628). - mm: shmem: fix the shmem large folio allocation for the i915 driver (bsc#1012628). - usb: gadget: uvc: Initialize frame-based format color matching descriptor (bsc#1012628). - perf/arm-ni: Set initial IRQ affinity (bsc#1012628). - media: ti: j721e-csi2rx: fix list_del corruption (bsc#1012628). - HID: apple: validate feature-report field count to prevent NULL pointer dereference (bsc#1012628). - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (bsc#1012628). - HID: core: Harden s32ton() against conversion to 0 bits (bsc#1012628). - HID: magicmouse: avoid setting up battery timer when not needed (bsc#1012628). - HID: apple: avoid setting up battery timer for devices without battery (bsc#1012628). - usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1012628). - wifi: ath12k: install pairwise key first (bsc#1012628). - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1012628). - Update config files. - Rename to patches.kernel.org/6.16.1-522-spi-cs42l43-Property-entry-should-be-a-null-te.patch. - commit 2e1765c - Update config files. Enable FIPS (bsc#1247998) CRYPTO_MANAGER_DISABLE_TESTS (we had "is not set") became CRYPTO_SELFTESTS (we still have "is not set"), but the logic was inverted: CRYPTO_MANAGER_DISABLE_TESTS <=> !CRYPTO_SELFTESTS. Set CRYPTO_SELFTESTS=y and restore the otehr values to pre-6.16-rc1. - commit fd401db ++++ ksh: - Switch over to libalternatives for etags to provide a ksh variant [bsc#1245908] ++++ inih: - Update to version 61 * Add ini_parse_string_length() that avoids internal strlen(). * Fix bug where name only options are not processed after an error has occurred. ++++ lttoolbox: - Update to release 3.8.2 * Reuse sequence vectors in State * Treat weighted epsilons as non-epsilons ++++ pythia: - Update to version 8.315: * Fix bug in the Lund symmetric fragmentation function (LSFF). It concerns the case where diquarks or strange quarks are assumed to be produced at a later average time than the up and down quarks. * Some changes in the Hidden Valley machinery. Several automatic rescalings of (safety) parameters and constants to allow a broader range of HV mass scales, including ones below the QCD one. * The prefix for custom weights can now be specified with the setting Weights:prefix which is by default empty. * The logic behind the construction of parton-shower histories in CKKW-L merging has been improved. * Fixed two bugs in PartonLevel.cc: - When checking if beams are point-like (to determine if ISR and beam remnants), a lepton check was not performed for the second beam (B). - An incorrect check was made when calculating maximum weights for FSR decays with W/Z. * Fixed a rare bug in StringFragmentation::setHadronVertices that caused a segmentation fault when the string endpoints are c or b quarks, and a quark mass offset correction is introduced. * Fixed typos in the documentation for Hadronization Variations that do not effect that results of Pythia. * Reverted beam particles back to raw pointers for technical reasons. * An incorrect type declaration in 8.314 invalidated the new option to derive the a and b parameters from the average and RMS width of the Lund FF, causing this option to fail for any choice of input parameters, corrected now. * Fixed a typo in the MPI initialization when using saved grid which caused an out-of-access memory read. - Minor re-base of reproducible.patch for update. ++++ python313-core: - Update to 3.13.7: - gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object (such as ssl.SSLSocket.send) was subsequently called in another thread. - gh-137044: Return large limit values as positive integers instead of negative integers in resource.getrlimit(). Accept large values and reject negative values (except RLIM_INFINITY) for limits in resource.setrlimit(). - gh-136914: Fix retrieval of doctest.DocTest.lineno for objects decorated with functools.cache() or functools.cached_property. - gh-131788: Make ResourceTracker.send from multiprocessing re-entrant safe - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - Remove upstreamed patch: - gh137583-only-lock-SSL-context.patch ++++ python313-nogil-nogil-core: - Update to 3.13.7: - gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object (such as ssl.SSLSocket.send) was subsequently called in another thread. - gh-137044: Return large limit values as positive integers instead of negative integers in resource.getrlimit(). Accept large values and reject negative values (except RLIM_INFINITY) for limits in resource.setrlimit(). - gh-136914: Fix retrieval of doctest.DocTest.lineno for objects decorated with functools.cache() or functools.cached_property. - gh-131788: Make ResourceTracker.send from multiprocessing re-entrant safe - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - Remove upstreamed patch: - gh137583-only-lock-SSL-context.patch ++++ python314-core: - Update to 3.14.0~rc2: - Library - gh-137426: Remove the code deprecation of importlib.abc.ResourceLoader. It is documented as deprecated, but left for backwards compatibility with other classes in importlib.abc. - gh-137282: Fix tab completion and dir() on concurrent.futures. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-137226: Fix behavior of annotationlib.ForwardRef.evaluate() when the type_params parameter is passed and the name of a type param is also present in an enclosing scope. - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-137059: Fix handling of file URLs with a Windows drive letter in the URL authority by urllib.request.url2pathname(). This fixes a regression in earlier pre-releases of Python 3.14. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-135228: When dataclasses replaces a class with a slotted dataclass, the original class can now be garbage collected again. Earlier changes in Python 3.14 caused this class to always remain in existence together with the replacement class synthesized by dataclasses. - Documentation - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - Core and Builtins - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-137308: A standalone docstring in a node body is optimized as a pass statement to ensure that the node’s body is never empty. There was a ValueError in compile() otherwise. - gh-137288: Fix bug where some bytecode instructions of a boolean expression are not associated with the correct exception handler. - gh-134291: Remove some newer macOS API usage from the JIT compiler in order to restore compatibility with older OSX 10.15 deployment targets. - gh-131338: Disable computed stack limit checks on non-glibc linux platforms to fix crashes on deep recursion. - gh-136870: Fix data races while de-instrumenting bytecode of code objects running concurrently in threads. - C API - gh-137573: Mark _PyOptimizer_Optimize as Py_NO_INLINE to prevent stack overflow crashes on macOS. - Build - gh-132339: Add support for OpenSSL 3.5. - Replaces upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch ++++ python314-nogil-nogil-core: - Update to 3.14.0~rc2: - Library - gh-137426: Remove the code deprecation of importlib.abc.ResourceLoader. It is documented as deprecated, but left for backwards compatibility with other classes in importlib.abc. - gh-137282: Fix tab completion and dir() on concurrent.futures. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-137226: Fix behavior of annotationlib.ForwardRef.evaluate() when the type_params parameter is passed and the name of a type param is also present in an enclosing scope. - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-137059: Fix handling of file URLs with a Windows drive letter in the URL authority by urllib.request.url2pathname(). This fixes a regression in earlier pre-releases of Python 3.14. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-135228: When dataclasses replaces a class with a slotted dataclass, the original class can now be garbage collected again. Earlier changes in Python 3.14 caused this class to always remain in existence together with the replacement class synthesized by dataclasses. - Documentation - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - Core and Builtins - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-137308: A standalone docstring in a node body is optimized as a pass statement to ensure that the node’s body is never empty. There was a ValueError in compile() otherwise. - gh-137288: Fix bug where some bytecode instructions of a boolean expression are not associated with the correct exception handler. - gh-134291: Remove some newer macOS API usage from the JIT compiler in order to restore compatibility with older OSX 10.15 deployment targets. - gh-131338: Disable computed stack limit checks on non-glibc linux platforms to fix crashes on deep recursion. - gh-136870: Fix data races while de-instrumenting bytecode of code objects running concurrently in threads. - C API - gh-137573: Mark _PyOptimizer_Optimize as Py_NO_INLINE to prevent stack overflow crashes on macOS. - Build - gh-132339: Add support for OpenSSL 3.5. - Replaces upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch ++++ rav1e: - Update to version 0.8.1: - Fix bit overflows when writing headers b0bd2ad thanks to @sdroege - Update dependencies ++++ spdlog: - Add spdlog-catch-3_9-tests-compatibility.patch: Run tests in the order they are declared in the source file for compatiblity with Catch2 >= 3.9.0 (gh#gabime/spdlog#3451). ++++ micropython: - Version 1.26.0 * Added machine.I2CTarget for creating I2C target devices on multiple ports. * New MCU support: STM32N6xx (800 MHz, ML accel) & ESP32-C2 (WiFi + BLE). * Major float accuracy boost (~28% → ~98%), constant folding in compiler. * Optimized native/Viper emitters; reduced heap use for slices. * Time functions standardized (1970–2099); new boards across ESP32, SAMD, STM32, Zephyr. * ESP32: ESP-IDF 5.4.2, flash auto-detect, PCNT class, LAN8670 PHY. * RP2: compressed errors, better lightsleep, hard IRQ timers. * Zephyr v4.0.0: PWM, SoftI2C/SPI, BLE runtime services, boot.py/main.py support. * mpremote adds fs tree, improved df, portable config paths. * Updated lwIP, LittleFS, libhydrogen, stm32lib; expanded hardware/CI tests. - Removed micropython-gcc15-string-initialization.patch as included upstream ++++ micropython-lib: - Update to 1.26.0 * aiorepl: Handle stream shutdown. * aiohttp: Fix partial reads by using readexactly. * abc: Add ABC base class. * aioble-l2cap: Raise correct error if l2cap disconnects during send. * logging: Allow logging.exception helper to handle tracebacks. * errno: Add ENOTCONN constant. * aiorepl: Use blocking reads for raw REPL and raw paste. * urllib.urequest: Add support for headers to urequest.urlopen. * tools/verifygitlog.py: Sync with changes from the main repo. * utop: Print IDF heap details. * utop: Print MicroPython memory info. * utop: Add initial implementation for ESP32. * all: Apply Ruff 0.11.6 reformatting changes. * top: Bump the Ruff version to 0.11.6. * lora: Fix SNR value in SX126x received packets. ++++ openQA: - Update to version 5.1755247660.ecd6aa3e: * Fix return code of worker in error case * Prevent worker from getting stuck on fatal error during upload * Describe job_settings/jobs in UsersGuide * Describe job_settings/jobs in UsersGuide * Add perlpod for job_settings/jobs * Fix generation of PDF documentation * Remove outdated comment in worker error handling * tests: Extend ktap parser tests to cover TODO directive * parser: ktap: Polish the ktap parser * parser: ktap: Add handling of the TODO directive * parser: ktap: Refactor to use internal state ++++ python-Pebble: - Update to 5.1.3: * issue #152: fix crash when scheduling non copy-able functions * issue #101: allow `atexit.register` callbacks on pool shutdown * Fix deadlock with `waitforthreads` function * Fix bug causing threads to crash when using `waitforthreads` function ++++ python-fawltydeps: - migrate to libalternatives ++++ python-hishel: - Update to 0.1.3 * Remove `types-redis` from dev dependencies (#336) * Bump redis to 6.0.0 and address async `.close()` deprecation warning (#336) * Avoid race condition when unlinking files in `FileStorage`. (#334) * Allow prodiving a `path_prefix` in `S3Storage` and `AsyncS3Storage`. (#342) - Update BuildRequires and Suggests from pyproject.toml ++++ python-minio: - Update to 7.2.16 * Add account_info Admin API by @mhkarimi1383 in #1463 * fix mypy error by @balamurugana in #1483 * put_object: add append object support by @balamurugana in #1493 * Add append_object() API by @balamurugana in #1494 * fix: type wrong in commonconfig by @hlf20010508 in #1489 * fix pip install for ubuntu 24.04 by @balamurugana in #1502 ++++ python-progress: - Update to 1.6.1 * Add flag to override tty check * Implement `write` using \r instead of \b * Allow usage as a context manager. * Fold the mixins in __init__.py * Remove SigIntMixin * Include tests in PyPI tarball * Add Pypi link and instuctions to ReadMe * Use time.monotonic if available * Update avg/eta/eta_td less frequently ++++ python-pydantic: - Add patch support-pydantic-core-2.39.0.patch: * Support pydantic-core 2.39.0. ++++ python-pyproj: - Update to 3.7.2 * Bump pypa/cibuildwheel from 2.22 to 2.23 by @dependabot[bot] in #1479 * TST: Only import time.perf_counter by @snowman2 in #1480 * DEP: Minimum PROJ version 9.4 by @snowman2 in #1481 * DEP: Python 3.11+ by @snowman2 in #1483 * Bump scientific-python/upload-nightly-action from 0.6.1 to 0.6.2 by @dependabot[bot] in #1488 * DOC: update doc geometry_area_perimeter by @myl-dvl in #1489 * DOC: Remove 'noqa: E501' from docstrings by @adamjstewart in #1492 * pyproj.crs: add imports to all by @adamjstewart in #1494 * MNT: replace black and isort with ruff format and lint by @mwtoews in #1496 * BUILD/CI: Add win_arm64 wheel build by @khmyznikov in #1503 * Bump pypa/cibuildwheel from 2.23 to 3.0 by @dependabot[bot] in #1502 * Bump pypa/cibuildwheel from 3.0.0 to 3.0.1 by @dependabot[bot] in #1505 * BLD: Enable free-threading compatibility by @djhoese in #1512 * CI: Add 3.13 free-threading wheels by @djhoese in #1514 * Bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #1520 * TST: Remove irrelevant test with modern PROJ versions by @djhoese in #1519 * Bump actions/checkout from 4 to 5 by @dependabot[bot] in #1521 ++++ python-ruff: - update to 0.12.9: * \[`airflow`\] Add check for `airflow.secrets.cache.SecretCache` (`AIR301`) * \[`ruff`\] Offer a safe fix for multi-digit zeros (`RUF064`) * \[`flake8-blind-except`\] Fix `BLE001` false-positive on `raise ... from None` * \[`flake8-comprehensions`\] Fix false positive for `C420` with attribute, subscript, or slice assignment targets * \[`flake8-simplify`\] Fix handling of U+001C..U+001F whitespace (`SIM905`) * \[`pylint`\] Use lowercase hex characters to match the formatter (`PLE2513`) ++++ python-uv: - update to 0.8.11 * Enhancements * Add extra-build-dependencies hint for any missing module on build failure * Make 'v' prefix cyan in overlap warnings * Bug fixes * Fix missing uv version in extended Docker image tags * Persist cache info when re-installing cached wheels * Rust API * Allow passing custom reqwest clients to RegistryClient ++++ virtualbox: - Update to release 7.2.0 * GUI: Moved global and VM tools from hamburger menus to global tools taskbar (vertically on the left) and the VM tools tabs (horizontally above the right hand panel) to make them easier to reach. * ARM host: Virtualization of Windows 11/ARM VMs. * Linux host: Video decoding acceleration when 3D is enabled. * Storage: The NVMe storage controller emulation is now part of the open source base package. ++++ python313: - Update to 3.13.7: - gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object (such as ssl.SSLSocket.send) was subsequently called in another thread. - gh-137044: Return large limit values as positive integers instead of negative integers in resource.getrlimit(). Accept large values and reject negative values (except RLIM_INFINITY) for limits in resource.setrlimit(). - gh-136914: Fix retrieval of doctest.DocTest.lineno for objects decorated with functools.cache() or functools.cached_property. - gh-131788: Make ResourceTracker.send from multiprocessing re-entrant safe - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - Remove upstreamed patch: - gh137583-only-lock-SSL-context.patch ++++ python313-documentation: - Update to 3.13.7: - gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object (such as ssl.SSLSocket.send) was subsequently called in another thread. - gh-137044: Return large limit values as positive integers instead of negative integers in resource.getrlimit(). Accept large values and reject negative values (except RLIM_INFINITY) for limits in resource.setrlimit(). - gh-136914: Fix retrieval of doctest.DocTest.lineno for objects decorated with functools.cache() or functools.cached_property. - gh-131788: Make ResourceTracker.send from multiprocessing re-entrant safe - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - Remove upstreamed patch: - gh137583-only-lock-SSL-context.patch ++++ python313-nogil: - Update to 3.13.7: - gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object (such as ssl.SSLSocket.send) was subsequently called in another thread. - gh-137044: Return large limit values as positive integers instead of negative integers in resource.getrlimit(). Accept large values and reject negative values (except RLIM_INFINITY) for limits in resource.setrlimit(). - gh-136914: Fix retrieval of doctest.DocTest.lineno for objects decorated with functools.cache() or functools.cached_property. - gh-131788: Make ResourceTracker.send from multiprocessing re-entrant safe - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - Remove upstreamed patch: - gh137583-only-lock-SSL-context.patch ++++ python314: - Update to 3.14.0~rc2: - Library - gh-137426: Remove the code deprecation of importlib.abc.ResourceLoader. It is documented as deprecated, but left for backwards compatibility with other classes in importlib.abc. - gh-137282: Fix tab completion and dir() on concurrent.futures. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-137226: Fix behavior of annotationlib.ForwardRef.evaluate() when the type_params parameter is passed and the name of a type param is also present in an enclosing scope. - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-137059: Fix handling of file URLs with a Windows drive letter in the URL authority by urllib.request.url2pathname(). This fixes a regression in earlier pre-releases of Python 3.14. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-135228: When dataclasses replaces a class with a slotted dataclass, the original class can now be garbage collected again. Earlier changes in Python 3.14 caused this class to always remain in existence together with the replacement class synthesized by dataclasses. - Documentation - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - Core and Builtins - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-137308: A standalone docstring in a node body is optimized as a pass statement to ensure that the node’s body is never empty. There was a ValueError in compile() otherwise. - gh-137288: Fix bug where some bytecode instructions of a boolean expression are not associated with the correct exception handler. - gh-134291: Remove some newer macOS API usage from the JIT compiler in order to restore compatibility with older OSX 10.15 deployment targets. - gh-131338: Disable computed stack limit checks on non-glibc linux platforms to fix crashes on deep recursion. - gh-136870: Fix data races while de-instrumenting bytecode of code objects running concurrently in threads. - C API - gh-137573: Mark _PyOptimizer_Optimize as Py_NO_INLINE to prevent stack overflow crashes on macOS. - Build - gh-132339: Add support for OpenSSL 3.5. - Replaces upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch ++++ python314-documentation: - Update to 3.14.0~rc2: - Library - gh-137426: Remove the code deprecation of importlib.abc.ResourceLoader. It is documented as deprecated, but left for backwards compatibility with other classes in importlib.abc. - gh-137282: Fix tab completion and dir() on concurrent.futures. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-137226: Fix behavior of annotationlib.ForwardRef.evaluate() when the type_params parameter is passed and the name of a type param is also present in an enclosing scope. - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-137059: Fix handling of file URLs with a Windows drive letter in the URL authority by urllib.request.url2pathname(). This fixes a regression in earlier pre-releases of Python 3.14. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-135228: When dataclasses replaces a class with a slotted dataclass, the original class can now be garbage collected again. Earlier changes in Python 3.14 caused this class to always remain in existence together with the replacement class synthesized by dataclasses. - Documentation - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - Core and Builtins - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-137308: A standalone docstring in a node body is optimized as a pass statement to ensure that the node’s body is never empty. There was a ValueError in compile() otherwise. - gh-137288: Fix bug where some bytecode instructions of a boolean expression are not associated with the correct exception handler. - gh-134291: Remove some newer macOS API usage from the JIT compiler in order to restore compatibility with older OSX 10.15 deployment targets. - gh-131338: Disable computed stack limit checks on non-glibc linux platforms to fix crashes on deep recursion. - gh-136870: Fix data races while de-instrumenting bytecode of code objects running concurrently in threads. - C API - gh-137573: Mark _PyOptimizer_Optimize as Py_NO_INLINE to prevent stack overflow crashes on macOS. - Build - gh-132339: Add support for OpenSSL 3.5. - Replaces upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch ++++ python314-nogil: - Update to 3.14.0~rc2: - Library - gh-137426: Remove the code deprecation of importlib.abc.ResourceLoader. It is documented as deprecated, but left for backwards compatibility with other classes in importlib.abc. - gh-137282: Fix tab completion and dir() on concurrent.futures. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-137226: Fix behavior of annotationlib.ForwardRef.evaluate() when the type_params parameter is passed and the name of a type param is also present in an enclosing scope. - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-137059: Fix handling of file URLs with a Windows drive letter in the URL authority by urllib.request.url2pathname(). This fixes a regression in earlier pre-releases of Python 3.14. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-135228: When dataclasses replaces a class with a slotted dataclass, the original class can now be garbage collected again. Earlier changes in Python 3.14 caused this class to always remain in existence together with the replacement class synthesized by dataclasses. - Documentation - gh-136155: We are now checking for fatal errors in EPUB builds in CI. - Core and Builtins - gh-137400: Fix a crash in the free threading build when disabling profiling or tracing across all threads with PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads() or their Python equivalents threading.settrace_all_threads() and threading.setprofile_all_threads(). - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-137308: A standalone docstring in a node body is optimized as a pass statement to ensure that the node’s body is never empty. There was a ValueError in compile() otherwise. - gh-137288: Fix bug where some bytecode instructions of a boolean expression are not associated with the correct exception handler. - gh-134291: Remove some newer macOS API usage from the JIT compiler in order to restore compatibility with older OSX 10.15 deployment targets. - gh-131338: Disable computed stack limit checks on non-glibc linux platforms to fix crashes on deep recursion. - gh-136870: Fix data races while de-instrumenting bytecode of code objects running concurrently in threads. - C API - gh-137573: Mark _PyOptimizer_Optimize as Py_NO_INLINE to prevent stack overflow crashes on macOS. - Build - gh-132339: Add support for OpenSSL 3.5. - Replaces upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch ++++ qgis: - Update to 3.44.2 * Fixes 2d => 3d sync (commits de157ab..946132f) * qgis-server will now read PATCH data in addition to PUT and POST (commit 8f254e3) * Fixes various other bugs or warnings ++++ rubygem-gem2rpm: - cleanup the spec file: drop all ruby versions we no longer care about remaining are: 2.1, 2.5, 3.2, 3.3, 3.4, 3.5 - enable 3.5 building - instead of using %{ruby} for the buildrequires, lets expand it in the spec file so we do not have to use rb_build_ruby_abis/rb_build_version ++++ taradino: - Update to release 20250815 * Add support for RottEX map files to rt_ted.c * Fix left shift key not showing up as a bind * Prevent moving walls from hijacking sound channel 0 * Fix a read past memory region allocated for a door * Automatically detect level packs from other ROTT installations * Show the DOS text mode splash when exiting the game ++++ trivy: - Update to version 0.65.0: * release: v0.65.0 [main] (#9108) * fix(cli): ensure correct command is picked by telemetry (#9260) * feat(flag): add schema validation for `--server` flag (#9270) * chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#9274) * ci: skip undefined labels in discussion triage action (#9175) * feat(repo): add git repository metadata to reports (#9252) * fix(license): handle WITH operator for `LaxSplitLicenses` (#9232) * chore: add modernize tool integration for code modernization (#9251) * fix(secret): add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253) * chore: implement process-safe temp file cleanup (#9241) * fix: prevent graceful shutdown message on normal exit (#9244) * fix(misconf): correctly parse empty port ranges in google_compute_firewall (#9237) * feat: add graceful shutdown with signal handling (#9242) * chore: update template URL for brew formula (#9221) * test: add end-to-end testing framework with image scan and proxy tests (#9231) * refactor(db): use `Getter` interface with `GetParams` for trivy-db sources (#9239) * ci: specify repository for `gh cache delete` in canary worklfow (#9240) * ci: remove invalid `--confirm` flag from `gh cache delete` command in canary builds (#9236) * fix(misconf): fix log bucket in schema (#9235) * chore(deps): bump the common group across 1 directory with 24 updates (#9228) * ci: move runner.os context from job-level env to step-level in canary workflow (#9233) * chore(deps): bump up Trivy-kubernetes to v0.9.1 (#9214) * feat(misconf): added logging and versioning to the gcp storage bucket (#9226) * fix(server): add HTTP transport setup to server mode (#9217) * chore: update the rpm download Update (#9202) * feat(alma): add AlmaLinux 10 support (#9207) * fix(nodejs): don't use prerelease logic for compare npm constraints (#9208) * fix(rootio): fix severity selection (#9181) * fix(sbom): merge in-graph and out-of-graph OS packages in scan results (#9194) * fix(cli): panic: attempt to get os.Args[1] when len(os.Args) < 2 (#9206) * fix(misconf): correctly adapt azure storage account (#9138) * feat(misconf): add private ip google access attribute to subnetwork (#9199) * feat(report): add CVSS vectors in sarif report (#9157) * fix(terraform): `for_each` on a map returns a resource for every key (#9156) * fix: supporting .egg-info/METADATA in python.Packaging analyzer (#9151) * chore: migrate protoc setup from Docker to buf CLI (#9184) * ci: delete cache after artifacts upload in canary workflow (#9177) * refactor: remove aws flag helper message (#9080) * ci: use gh pr view to get PR number for forked repositories in auto-ready workflow (#9183) * ci: add auto-ready-for-review workflow (#9179) * feat(image): add Docker context resolution (#9166) * ci: optimize golangci-lint performance with cache-based strategy (#9173) * feat: add HTTP request/response tracing support (#9125) * fix(aws): update amazon linux 2 EOL date (#9176) * chore: Update release workflow to trigger version updates (#9162) * chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 (#9164) * fix: also check `filepath` when removing duplicate packages (#9142) * chore: add debug log to show image source location (#9163) * docs: add section on customizing default check data (#9114) * chore(deps): bump the common group across 1 directory with 9 updates (#9153) * docs: partners page content updates (#9149) * chore(license): add missed spdx exceptions: (#9147) * docs: trivy partners page updates (#9133) * fix: migrate from `*.list` to `*.md5sums` files for `dpkg` (#9131) * ci(helm): bump Trivy version to 0.64.1 for Trivy Helm Chart 0.16.1 (#9135) * feat(sbom): add SHA-512 hash support for CycloneDX SBOM (#9126) * fix(misconf): skip rewriting expr if attr is nil (#9113) * fix(license): add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping (#9116) * fix(cli): Add more non-sensitive flags to telemetry (#9110) * fix(alma): parse epochs from rpmqa file (#9101) * fix(rootio): check full version to detect `root.io` packages (#9117) * chore: drop FreeBSD 32-bit support (#9102) * fix(sbom): use correct field for licenses in CycloneDX reports (#9057) * fix(secret): fix line numbers for multiple-line secrets (#9104) * feat(license): observe pkg types option in license scanner (#9091) * ci(helm): bump Trivy version to 0.64.0 for Trivy Helm Chart 0.16.0 (#9107) - drop CVE-2025-53547.patch (merged upstream) ++++ virtualbox-kmp: - Update to release 7.2.0 * GUI: Moved global and VM tools from hamburger menus to global tools taskbar (vertically on the left) and the VM tools tabs (horizontally above the right hand panel) to make them easier to reach. * ARM host: Virtualization of Windows 11/ARM VMs. * Linux host: Video decoding acceleration when 3D is enabled. * Storage: The NVMe storage controller emulation is now part of the open source base package. ++++ webcamoid: - Use ffmpeg 7 on Leap 15.6 ++++ wine: - fix build if .debug are not present ++++ wine-staging: - fix build if .debug are not present ++++ wine-staging-wow64: - fix build if .debug are not present ++++ wine-wow64: - fix build if .debug are not present ++++ xfdesktop: - Fix the monitor name pickup on Wayland, which resulted in broken background picture setup (bsc#1247542): xfdesktop-wayland-get-proper-monitor-name.patch - Fix missing backslash for building in non-git mode ------------------------------------------------------------------ ------------------ 2025-8-14 - Aug 14 2025 ------------------- ------------------------------------------------------------------ ++++ AppStream: - Update to 1.0.6 Features: * compose: Accept .ttc font files * compose: Give font icons a background shape * compose: Render more elaborate font sample cards Bugfixes: * compose: Insert screenshot tags for auto-generated font screenshots * compose: Trim substring when truncating font sample text * meson: don't override appstreamcli when cross-building * compose: Prefer rendering font icon with "Regular" style * compose: Sanitize font text samples before using them as icon * Follow directory symlinks when looking for Flatpak data * compose: Drop bad private-header include in public header * compose: Drop unneeded const declaration for GKeyFile * Fix typo that prevented video metadata from being composed properly ++++ AppStream-qt5: - Update to 1.0.6 Features: * compose: Accept .ttc font files * compose: Give font icons a background shape * compose: Render more elaborate font sample cards Bugfixes: * compose: Insert screenshot tags for auto-generated font screenshots * compose: Trim substring when truncating font sample text * meson: don't override appstreamcli when cross-building * compose: Prefer rendering font icon with "Regular" style * compose: Sanitize font text samples before using them as icon * Follow directory symlinks when looking for Flatpak data * compose: Drop bad private-header include in public header * compose: Drop unneeded const declaration for GKeyFile * Fix typo that prevented video metadata from being composed properly ++++ aws-lc: - update to version 1.58.1: * Add support for EVP_PKEY_param_check * Move check-linkage.sh to util ++++ nextcloud-desktop: - Update to version 3.17.0: * Too many changes to list, see . - Install systemd user unit file; add BuildRequires: systemd-rpm-macros and necessary pre(un)/post(un) scriptlets. - Drop doc package: documentation building is not supported any more. ++++ calc: - Update to 2.15.1.2: * Removed use of HAVE_MEMMOVE as well have_memmv.c. * Removed the building and including of have_memmv.h. * Removed the memmove() function in blkcpy.c, used when HAVE_MEMMOVE was NOT defined. * The libc memmove(3) function as defined by is now required to compile calc because the replacement code in blkcpy.c q was problematic, especially when regions overlap. * The HAVE_MEMMOVE make symbol was removed from Makefile.config. ++++ cockpit: - Update to 344 * Changes since 340 - 344 * Bug fixes and translation updates - 343 * login: Improve error message for unsupported shells * cockpit: Handle file access issues with files in machines.d * Translation updates - 342 * systemd: ensure update() is called at least once for tuned-dialog * Translation updates - 341 * services: show link to podman page for quadlets * Bug fixes and translation updates - Remove kdump-nfs-fixes.patch as this was upstreamed - Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446 ++++ cpupower: - Package cpupower systemd service that appeared with kernel 6.16 (commit 9c70b77). ++++ crmsh: - Update to version 5.0.0+20250814.d6d8099f: * Dev: behave: Add new case for adding diskless sbd via stage * Dev: unittests: Adjust unit test for previous commit * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection - Update to version 5.0.0+20250814.ae1e11bf: * Fix: log: missing LF after a progress bar (#1886) ++++ dovecot24: - Enable build for all arches again. The build failure on 32bit has been addressed upstream. ++++ emacs: - Update to GNU Emacs version 30.2 * Mainly a bug fix version - Port patches * 0012-Add-inhibit-native-compilation.patch * 0013-Rename-to-inhibit-automatic-native-compilation.patch * emacs-24.4-ps-bdf.patch * emacs-29.1.dif * emacs-30.1-pdumper.patch - Remove patch emacs-parallel-compilation-53a5dada.patch now upstream ++++ fastfetch: - Update to 2.50.1: Bugfixes: * Fixes percentage bar not displaying correctly in certain cases * Fixes linglong package detection on Debian 13 (gh#fastfetch-cli/fastfetch#1899) - Update to 2.50.0: Changes: * Keys in JSON configuration files are now case-sensitive, as stated in v2.49.0. - This is a breaking change, but it should not affect most users as long as your config file passes JSON schema validation. * All module config flags have been removed, as stated in v2.49.0. - To configure modules via the command line * The percent bar config display.bar.* options have been replaced with a more organized, nested object structure. - `display.bar.charElapsed` has been renamed to `display.bar.char.elapsed`. - `display.bar.charTotal` has been renamed to `display.bar.char.total`. - `display.bar.borderLeft` has been renamed to `display.bar.border.left`. - `display.bar.borderRight` has been renamed to `display.bar.border.right`. * The undocumented flag `--load-config` has been removed. - Use `--config` or `-c` instead. * Flashfetch, a simplified fastfetch variant that used a hardcoded module list with direct function calls to reduce startup overhead, has been changed to a version that aims to match neofetch's behavior as closely as possible, for demonstration purposes. - Flashfetch is intended to be built from source (like st). We do not provide prebuilt binaries in distributions. Features: * Added support for reading JSON config from stdin using `--config -` or `-c -`. * Added `display.bar.border.{leftElapsed,rightElapsed}` for using the border as part of the bar content. (gh#fastfetch-cli/fastfetch#1875) - `display.bar.border: null` has been added as a shorthand to disable bar borders. * Added display.bar.color.{elapsed,total,border} to customize the color of the elapsed, total, and border sections of the percent bar. - `display.bar.color: null` has been added as a shorthand to disable bar colors. * Improved Bedrock Linux detection (gh#fastfetch-cli/fastfetch#1881) * Added the command flag `--gen-config-full`, which generates a JSON config file containing all optional module options. * Improved the default IP address display when `localip.showAllIPs` is not set (LocalIP) - For IPv4, the preferred source address (if detected) is shown. - For IPv6, the first GUA or ULA that is not deprecated or temporary is shown. * Added detection support for Xlibre (gh#fastfetch-cli/fastfetch#1888) Bugfixes: * Fixed custom object inheriting a key from the previous custom object if the key is blank (gh#fastfetch-cli/fastfetch#1477) * Fixed a possible segfault when parsing color strings in the JSON config (gh#fastfetch-cli/fastfetch#1878) * Fixed lliurex detection (gh#fastfetch-cli/fastfetch#1882) * Fixed compatibility with -ffast-math (gh#fastfetch-cli/fastfetch#1894) Logos: * Added ObsidianOS (gh#fastfetch-cli/fastfetch#1890) ++++ framework_tool: - regenerate vendor tarball to update slab to 0.4.11 to fix CVE-2025-55159 (bsc#1248046) ++++ gap-crisp: - Update to release 1.4.8 * Metadata updates only ++++ gnome-shell: - Add gnome-shell-can-not-load-calendars.patch: Avoid error log when can't load calendars (bsc#1247037). ++++ go1.22: - Packaging improvements: * Remove conditional gccgo bootstrap sections and gcc-go.patch. gccgo cannot be used in any version newer than go1.21. Removal simplifies go1.x package code. * go1.21 can optionally be bootstrapped with gccgo and serve as the inital version of go1.x. * go1.21 will be the initial version of Go in the bootstrap chain until gcc gccgo is updated to support a language level newer than go1.18. * Drop gcc-go.patch * Refs boo#1247816 bootstrap go1.21 with gccgo * Refs boo#1248082 drop unused gccgo bootstrap code in go1.22+ ++++ go1.23: - Packaging improvements: * Remove conditional gccgo bootstrap sections and gcc-go.patch. gccgo cannot be used in any version newer than go1.21. Removal simplifies go1.x package code. * go1.21 can optionally be bootstrapped with gccgo and serve as the inital version of go1.x. * go1.21 will be the initial version of Go in the bootstrap chain until gcc gccgo is updated to support a language level newer than go1.18. * Drop gcc-go.patch * Refs boo#1247816 bootstrap go1.21 with gccgo * Refs boo#1248082 drop unused gccgo bootstrap code in go1.22+ ++++ go1.25: - Packaging improvements: * Remove conditional gccgo bootstrap sections and gcc-go.patch. gccgo cannot be used in any version newer than go1.21. Removal simplifies go1.x package code. * go1.21 can optionally be bootstrapped with gccgo and serve as the inital version of go1.x. * go1.21 will be the initial version of Go in the bootstrap chain until gcc gccgo is updated to support a language level newer than go1.18. * Drop gcc-go.patch * Refs boo#1247816 bootstrap go1.21 with gccgo * Refs boo#1248082 drop unused gccgo bootstrap code in go1.22+ ++++ golangci-lint: - Update to version 2.4.0: * chore: prepare release * build(deps): bump github.com/GaijinEntertainment/go-exhaustruct from v3.3.1 to 4.0.0 (#5984) * feat: go1.25 support (#5872) * dev: minor doc style changes (#5999) * docs: dedicated donation page (#5998) * docs: add a note about formatters and run command (#5997) * dev: fix website search for items with quotes (#5994) * dev: add website aliases (#5991) * dev: improve documentation search index (#5989) * dev: better website footer (#5992) * docs: fix filter bar items (#5990) * dev: new way to fill the documentation (#5986) * build(deps): bump golang.org/x/tools from 0.35.0 to 0.36.0 (#5988) * docs: fix documentation deployment * docs: fix JSONSchema deployment * docs: add missing CNAME file * docs: new website (#5965) * godox: trim filepath from report messages (#5977) * dev: improve HTTP download error handling for `wget` and `curl` (#5962) * staticcheck: allow empty options (#5983) * build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 (#5980) * build(deps): bump golang.org/x/mod from 0.26.0 to 0.27.0 (#5982) * build(deps): bump github.com/alecthomas/chroma/v2 from 2.19.0 to 2.20.0 (#5981) * build(deps): bump github.com/4meepo/tagalign from 1.4.2 to 1.4.3 (#5971) * build(deps): bump github.com/shirou/gopsutil/v4 from 4.25.6 to 4.25.7 (#5970) * docs: update GitHub Action assets (#5967) ++++ govulncheck-vulndb: - Update to version 0.0.20250814T182633 2025-08-14T18:26:33Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3765 CVE-2024-44906 GHSA-h4h6-vccr-44h2 * GO-2025-3829 CVE-2025-54410 GHSA-4vq8-7jfc-9cvp ++++ gstreamer-devtools: - Update to version 1.26.5: + No changes, stable bump only. - Update vendored dependencies (boo#1248053, CVE-2025-55159). ++++ gstreamer-plugins-rs: - Update to version 1.26.5+git11.949807a4 (boo#1248053, CVE-2025-55159): + rtprecv: fix race condition on first buffer + threadshare: intersink: return from blocking tasks when stopping + threadshare: inter: store upstream latency in InterContext + threadshare: add a blocking adapter element + transcriberbin: Fix settings/state lock order violation in set_property() + transcriberbin: Don't keep state locked while querying upstream latency + threadshare: audiotestsrc: fix setting samples-per-buffer... + rtpgccbwe: avoid clamp() panic when min_bitrate > max_bitrate + fallbacksrc: Don't restart source if the element is just being shut down + aws: Ensure task stopping on paused-to-ready state change + fallbacksrc: Don't panic during retries if the element was shut down in parallel + Update Cargo.lock. ++++ vim: - update to 9.1.1629: * patch 9.1.1629: Vim9: Not able to use more than 10 type arguments in a generic function * runtime(python): highlight "self" and "cls" in syntax script * runtime(vimgoto): make gf extract packadd/colo name more flexible * patch 9.1.1628: fuzzy.c has a few issues * runtime(doc): Adapt fuzzy doc to reflect 'fzy' algorithm * patch 9.1.1627: fuzzy matching can be improved * patch 9.1.1626: cindent: does not handle compound literals * patch 9.1.1625: Autocompletion slow with include- and tag-completion * runetime(vim): gf maybe hang and fail * runtime(vim): cannot jump to :colorscheme files * patch 9.1.1624: Cscope not enabled on MacOS * runtime(doc): allow more C99 features * runtime(python): Also sync syntax at 'async def' * runtime(doc): update :call with a range and remove space * runtime(doc): Fix 2 minor issues after 32d6bd6df * runtime(python): Highlight f-string replacement fields in Python * runtime(python): Highlight classes as structures * runtime(doc): remove dead links * patch 9.1.1623: Buffer menu does not handle unicode names correctly * patch 9.1.1622: Patch v9.1.1432 causes performance regressions * patch 9.1.1621: flicker in popup menu during cmdline autocompletion * patch 9.1.1620: filetype: composer.lock and symfony.lock files not recognized * patch 9.1.1619: Incorrect E535 error message * runtime(doc): Fix style and typos in builtin.txt and usr_41.txt * patch 9.1.1618: completion: incorrect selected index returned from complete_info() * patch 9.1.1617: Vim9: some error messages can be improved * runtime(doc): Tweak documentation style * patch 9.1.1616: xxd: possible buffer overflow with bitwise output * patch 9.1.1615: diff format erroneously detected * patch 9.1.1614: Vim9: possible variable type change * patch 9.1.1613: tests: test_search leaves a few swapfiles behind * patch 9.1.1612: Ctrl-G/Ctrl-T do not ignore the end search delimiter * patch 9.1.1611: possible undefined behaviour in mb_decompose() * runtime(vim): Update ftplugin, fix option variable 'keywordprg' matching * runtime(racket): update Racket runtime files * translation: Generate year for MS Windows differently * patch 9.1.1610: completion: hang or E684 when 'tagfunc' calls complete() * runtime(doc): Update CONTRIBUTING and clarify use of Vim9 script * patch 9.1.1609: complete: Heap-buffer overflow with complete function * runtime(c): set omnifunc only for Vim, since it is Vim9 Script * runtime(vim): add simple vimscript complete function * runtime(script): Update Last Change Header * patch 9.1.1608: No command-line completion for :unsilent {command} * patch 9.1.1607: :apple command detected as :append * patch 9.1.1606: filetype: a few more files are not recognized * patch 9.1.1605: cannot specify scope for chdir() * runtime(doc): Improve doc for cmdline-autocomplete * runtime(doc): update develop assumptions * patch 9.1.1604: completion: incsearch highlight might be lost * runtime(optwin): Fix E94 when searching for the option-window * patch 9.1.1603: completion: cannot use autoloaded funcs in 'complete' F{func} * runtime(java): Manage byte limits for variable-width lookbehind assertions * runtime(help): Unset `'comments'` and `'cms'` options * runtime(netrw): netrw#BrowseX() needs to distinguish local and remote file * runtime(typescript): Add syntax support for defer and arbitrary module identifiers * translation: Auto-generate headers for the vim.pot file * patch 9.1.1602: filetype: requirements-*.txt files are not recognized * patch 9.1.1601: Patch v8.1.0425 was wrong * runtime(netrw): Use correct "=~#" for the netrw_sizestyle='H' option * runtime(openscad): add a filetype plugin * patch 9.1.1600: using diff anchors with hidden buffers fails silently * runtime(javascript): add "as" as a reserved keyword to syntax script * patch 9.1.1599: :bnext doesn't go to unlisted help buffers * runtime(doc): Update ft-vim-syntax documentation * patch 9.1.1598: filetype: waybar config file is not recognized * patch 9.1.1597: CI reports leaks in libgtk3 library * patch 9.1.1596: tests: Test_search_wildmenu_iminsert() depends on help file * runtime(doc): remove mentioning of netrwSettings.vim * runtime(doc): fix typo at :h cmdline-autocompletion * patch 9.1.1595: Wayland: non-portable use of select() * patch 9.1.1594: completion: search completion throws errors * runtime(doc): tweak option name notation further * runtime(doc): add back bars for the '' mark * runtime(vim): add gf support for import and packadd in ftplugin * runtime(helptoc): add s keymap to split and jump to selected entry * runtime(syntax-tests): Break up non-ASCII over-75-byte-long lines * runtime(doc): fix mismatch between 'backspace' and |i_backspacing| * runtime(doc): Use correct option-name tags * runtime(doc): Tweak documentation style * translation(uk): Fix wrong Ukrainian message translation * check.vim: Further improve po message checks * translation(it): Update Italian translation * patch 9.1.1593: Confusing error when compiling incomplete try block * runtime(misc): removing saccarosium from maintainer list * patch 9.1.1592: Vim9: crash with classes and garbage collection * runtime(vim): Update base syntax, match Neovim builtin functions * runtime(vim): Update base syntax, fix :map termination in :command RHS * CI: Manage multibyte characters in syntax tests * CI: Remove the file filters for syntax tests * CI(screendump): Support iterative filtering for screendump comparison * CI(screendump): Move an early-return test out of the loop * CI: Include provenance in names of collected artifacts * runtime(vim): Cleanup syntax tests * patch 9.1.1591: VMS support can be improved * patch 9.1.1590: cannot perform autocompletion * runtime(ccomplete): return partial results on complete_check() * patch 9.1.1589: Cannot disable cscope interface using configure * patch 9.1.1588: Vim9: cannot split dict inside command block * runtime(netrw): upstream snapshot v184 * runtime(vim): fix various indentation issues * runtime(doc): use correct possessive form * patch 9.1.1587: Wayland: timeout not updated before select() * patch 9.1.1586: Vim9: can define an enum/interface in a function * runtime(vim): Update base syntax, match enum constructor type args * runtime(vim): Update base syntax, match generic functions * runtime(ccomplete): use complete_check() in ccomplete plugin * runtime(editorconfig): drop mkzip.sh * patch 9.1.1585: Wayland: gvim still needs GVIM_ENABLE_WAYLAND * runtime(misc): use :hor :term to ensure new term window is split horizontally * patch 9.1.1584: using ints as boolean type * check.vim: Improve po message checks * translation(it): Update Italian translation * runtime(doc): Tweak documentation style in usr_90.txt * patch 9.1.1583: gvim window lost its icons * patch 9.1.1582: style issue in vim9type.c and vim9generics.c * runtime(doc): remove mention of ftp.vim.org * runtime(doc): Tweak documentation style * runtime(doc): Fix typo in :help help-summary * patch 9.1.1581: possible memory leak in vim9generics.c * patch 9.1.1580: possible memory leak in vim9type.c * patch 9.1.1579: Coverity complains about unchecked return value * patch 9.1.1578: configure: comment still mentions autoconf 2.71 * patch 9.1.1577: Vim9: no generic support yet * patch 9.1.1576: cannot easily trigger wildcard expansion * runtime(doc): clarify C99 constraints and portability assumptions * patch 9.1.1575: tabpanel not drawn correctly with wrapped lines * patch 9.1.1574: Dead code in mbyte.c * runtime(doc): mention the "pipefail" shell option * patch 9.1.1573: Memory leak when pressing Ctrl-D in cmdline mode * translation: mark vim.pot as binary * translation: do not add message location as comments into vim.pot * patch 9.1.1572: expanding $var does not escape whitespace for 'path' * patch 9.1.1571: CmdlineChanged triggered to often * runtime(rust): improve loading time * runtime(doc): Update help syntax, match :autocmd options * patch 9.1.1570: Copilot suggested some improvements in cmdexpand.c * translation(de): Update German translations * translation(it): Update Italian translations * patch 9.1.1569: tests: Vim9 tests can be improved * runtime(doc): Tweak documentation about tab pages * runtime(uc): include uc filetype plugin * translation: comment out deletion of *.pot file in Makefiles * patch 9.1.1568: need a few more default highlight groups * patch 9.1.1567: crash when using inline diff mode * patch 9.1.1566: self-referenced enum may not get freed * patch 9.1.1565: configure: does not consider tiny version for wayland * runtime(lf): update syntax to support lf version r36 * runtime(sh): properly delete shell commands in syntax file * Update editorconfig and the documented C-style for sign.c/sound.c * runtime(vim): Update base syntax and generator, improve command/function distinction * patch 9.1.1564: crash when opening popup to closing buffer * translation: mark vim.pot as linguist-generated, ignore msg locations in vim.pot * patch 9.1.1563: completion: ruler may disappear * patch 9.1.1562: close button always visible in the 'tabline' * runtime(python): Highlight f-strings in Python * runtime(vim): Update base syntax, match "any" type distinctly * patch 9.1.1561: configure: wayland test can be improved * patch 9.1.1560: configure: uses $PKG_CONFIG before it is defined * patch 9.1.1559: tests: Test_popup_complete_info_01() fails when run alone * runtime(doc): fix claim that 'CTRL-W CTRL-C' and 'CTRL-W c' are the same * runtime(doc): handle newlines in base64 string encode example * runtime(vim): Update base syntax, fix incorrect function error * runtime(compiler): Add PHPStan compiler * translation: regenerate vim.pot, ignore version.c changes * patch 9.1.1558: str2blob() treats NULL string and empty string differently * patch 9.1.1557: not possible to anchor specific lines in difff mode * patch 9.1.1556: string handling in cmdexpand.c can be improved * patch 9.1.1555: completion: repeated insertion of leader * patch 9.1.1554: crash when omni-completion opens command-line window * patch 9.1.1553: Vim9: crash when accessing a variable in if condition * runtime(tar): update minimum Vim version required for tar.vim * patch 9.1.1552: [security]: path traversal issue in tar.vim * patch 9.1.1551: [security]: path traversal issue in zip.vim * patch 9.1.1550: defaults: 'showcmd' is not enabled in non-compatible mode on Unix * patch 9.1.1549: filetype: pkl files are not recognized * patch 9.1.1548: filetype: OpenFGA files are not recognized * runtime(swig): add 'comments', 'commentstring' in filetype plugin * runtime(twig): include twig filetype plugin * patch 9.1.1547: Wayland: missing ifdef * translation: ignore vim.pot creation date, regenerate it, rm allfiles * patch 9.1.1546: Vim9: error with has() and short circuit evaluation * runtime(python2): Highlight b-strings in Python 2.7 * runtime(doc): Tweak documentation * patch 9.1.1545: typo in os_unix.c * runtime(python): highlight bytes in python * runtime(python2): highlight unicode strings in python2 * patch 9.1.1544: :retab cannot be limited to indentation only * runtime(erlang): Add support for triple-quoted strings and docstrings * patch 9.1.1543: Wayland: clipboard appears to not be working * patch 9.1.1542: Coverity complains about uninitialized variable * patch 9.1.1541: Vim9: error when last enum value ends with a comma * runtime(vim): Update help syntax file, improve highlighting of included Vim examples * patch 9.1.1540: completion: menu state wrong on interruption * patch 9.1.1539: completion: messages don't respect 'shm' setting * runtime(vim): Update base syntax, improve :match highlighting * translation(it): update Italian message translations * translation: include vim.pot in the repository * runtime(python): update rendering of Unicode named literals in syntax script * translation(ru): Update messages translation * tests: string options in gen_opt_test.vim not fully sorted * check.vim: detect trailing whitespace * runtime(help_ru): Update help_ru syntax script * runtime(vim): Update base syntax, improve function call highlighting * patch 9.1.1537: helptoc: still some issues when markdown code blocks * patch 9.1.1536: tests: test_plugin_comment uses wrong :Check command * patch 9.1.1535: the maximum search count uses hard-coded value 99 * patch 9.1.1534: unnecessary code in tabpanel.c * patch 9.1.1533: helptoc: does not handle code sections in markdown well * runtime(doc): clarify how ex ranges are adjusted when acting on folds * translation(ru): update vim-ru according to patch 9.1.1485 * translation(ru): update vimtutor-ru man according to commit 5bbdd0b * translation(ru): Update main readme.ru.txt according to commit 2bfd1ee * runtime(filetype): fix incorrect pattern and break early * Revert "runtime(haskell): Add single quote to `iskeyword` in ftplugin (#8191)" * patch 9.1.1532: termdebug: not enough ways to configure breakpoints * patch 9.1.1531: confusing error with nested legacy function * patch 9.1.1530: Missing version change in v9.1.1529 * patch 9.1.1529: Win32: the toolbar in the GUI is old and dated * patch 9.1.1528: completion: crash with getcompletion() * patch 9.1.1527: Vim9: Crash with string compound assignment * runtime(filetype): improve asm heuristics and move into FTasmsyntax() * patch 9.1.1526: completion: search completion match may differ in case * runtime(netrw): restore blank line cleanup after file listing * patch 9.1.1525: tests: testdir/ is a bit messy * patch 9.1.1524: tests: too many imports in the test suite * patch 9.1.1523: tests: test_clipmethod fails in non X11 environment * patch 9.1.1522: tests: still some ANSI escape sequences in test output * patch 9.1.1521: completion: pum does not reset scroll pos on reopen with 'noselect' * patch 9.1.1520: completion: search completion doesn't handle 'smartcase' well * patch 9.1.1519: tests: Test_termdebug_decimal_breakpoints() may fail * runtime(doc): Add documentation style * patch 9.1.1518: getcompletiontype() may crash * runtime(optwin): add missing values for tabpanel option * translation(tr): Update Turkish translations * runtime(doc): fix a few typos introduced in 0ae9e19540dda5d * runtime(autopkgtest): add ftplugin file for autopkgtest * runtime(autopkgtest): add syntax file for autopkgtest * runtime(debcontrol): move kernel/architecture definitions to shared/debarchitectures.vim * patch 9.1.1517: filetype: autopkgtest files are not recognized * patch 9.1.1516: tests: no test that 'incsearch' is updated after search completion * patch 9.1.1515: Coverity complains about potential unterminated strings * patch 9.1.1514: Coverity complains about the use of tmpfile() * patch 9.1.1513: resizing Vim window causes unexpected internal window width * runtime(doc): add a section for options influencing search * tests: fix typo in comment (after v9.1.1511) * runtime(vim): Update base-syntax, match :filetype in functions * patch 9.1.1512: completion: can only complete from keyword characters * patch 9.1.1511: tests: two edit tests change v:testing from 1 to 0 * patch 9.1.1510: Search completion may use invalid memory * patch 9.1.1509: patch 9.1.1505 was not good * runtime(vim): Update base-syntax, match escape sequences in :command blocks * runtime(go): fix `b:undo_ftplugin` ++++ harfbuzz: - Update to version 11.4.1: + Fix clang compiler warnings. - Changes from version 11.4.0: + General shaping and subsetting speedups. + Fix in Graphite shaping backend when glyph advances became negative. + Subsetting improvements, pruning empty mark-attachment lookups. + Don't use the macro name _S, which is reserved by system liberaries. + Build fixes and speedup. + Add a kbts shaping backend that calls into the kb_text_shape single-header shaping library. This is purely for testing and performance evaluation and we do NOT recommend using it for any other purposes. ++++ highway: - Update to release 1.3.0 * Add AVX10_2 and Loongson LASX/LSX targets * Add AVX3_SPR F16, WASM_EMU256 F64 types * Add Complex number operations, F16/BF16 assignment operators * Add emulated bf16/f16 Load/StoreInterleaved - Add avx10_2.patch ++++ hplip: - Disable hp-scan-utils on Leap 16.0 Leap does not want to ship scikit-image -> python-pandas ++++ kernel-default: - bcachefs: print message at mount time regarding imminent removal (boo#1248109). - commit 65e74d4 - Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108). - commit e707e41 ++++ kernel-source: - bcachefs: print message at mount time regarding imminent removal (boo#1248109). - commit 65e74d4 - Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108). - commit e707e41 ++++ kernel-docs: - bcachefs: print message at mount time regarding imminent removal (boo#1248109). - commit 65e74d4 - Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108). - commit e707e41 ++++ kernel-firmware-mediatek: - Update to version 20250813 (git commit acb26167a103): * mediatek: Add MT8189 SCP firmware ++++ kernel-kvmsmall: - bcachefs: print message at mount time regarding imminent removal (boo#1248109). - commit 65e74d4 - Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108). - commit e707e41 ++++ kernel-obs-build: - bcachefs: print message at mount time regarding imminent removal (boo#1248109). - commit 65e74d4 - Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108). - commit e707e41 ++++ kernel-obs-qa: - bcachefs: print message at mount time regarding imminent removal (boo#1248109). - commit 65e74d4 - Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108). - commit e707e41 ++++ kernel-syms: - bcachefs: print message at mount time regarding imminent removal (boo#1248109). - commit 65e74d4 - Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108). - commit e707e41 ++++ kernel-vanilla: - bcachefs: print message at mount time regarding imminent removal (boo#1248109). - commit 65e74d4 - Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108). - commit e707e41 ++++ kubernetes: - Bump meta package versions: * kubernetes (version) - 1.33.4 * kubernetes (versionminus1) - 1.32.8 * kubernetes (versionminus2) - 1.31.12 ++++ kubernetes1.31: - Update to version 1.31.12: * do not allow the node to update it's owner reference * remove failing test that depends on expired credential, remove credential, add TODOs * Bump images, dependencies and versions to go 1.23.11 and distroless iptables * fix(kubelet): acquire imageRecordsLock when removing image - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.23.11` * ref: https://github.com/kubernetes/kubernetes/blob/v1.31.12/build/dependencies.yaml#L117-L139 ++++ kubernetes1.32: - Update to version 1.32.8: * do not allow the node to update it's owner reference * remove failing test that depends on expired credential, remove credential, add TODOs * Bump images, dependencies and versions to go 1.23.11 and distroless iptables - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.23.11` * ref: https://github.com/kubernetes/kubernetes/blob/v1.32.8/build/dependencies.yaml#L117-L119 ++++ kubernetes1.33: - Update to version 1.33.4: * do not allow the node to update it's owner reference * fixes scheduler nil panic due to empty init container request&limit * remove failing test that depends on expired credential, remove credential, add TODOs * Bump dependencies, images and versions used to Go 1.24.5 and distroless iptables - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.24.5` * ref: https://github.com/kubernetes/kubernetes/blob/v1.33.4/build/dependencies.yaml#L117-L119 ++++ libressl: - Update to release 4.1.0 * New: libtls has a new tls_peer_cert_common_name() API call to retrieve the peer's common name without having to inspect the PEM. * Bugfix: Again allow the magic values -1, -2 and -3 for the salt length of an RSA-PSS key in the EVP_PKEY_CTX_ctrl_str() interface. ++++ postgresql17: - Update to 17.6 * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/ * https://www.postgresql.org/docs/release/17.6/ Security Issues * CVE-2025-8713: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table (boo#1248120) * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client (boo#1248122) * CVE-2025-8715: PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server (boo#1248119) ++++ openjph: - Update to 0.21.5: * This fixes a build failure on GCC 9.3.1, and a warning #192 ++++ librealsense: - Update to 2.56.5 * see release notes here: https://github.com/IntelRealSense/librealsense/releases/tag/v2.56.5 ++++ libxfce4ui: - Update to version 4.20.2 * clipboard-manager: Use GtkClipboard iff image-only format is available * I18n: Update po/LINGUAS list * clipboard-manager: Fix potential leak on targets * clipboard-manager: Use separate struct for each call to set_with_data() * clipboard-manager: Use GtkTargetList instead of manual allocation * Translation Updates ++++ xfce4-panel: - Update to version 4.20.5 * wayland: panel: Ensure panel window is shown at least once * panel: Don't show panel window too early * panel: Restrict X-XFCE-Unique=SCREEN to X11 * Fix string comparison when searching for plugin dirs * wayland: Support multiple workspace groups where it makes sense * tasklist: Deactivate context menu when its button is destroyed * x11: Let GtkSocket expand if possible * libxfce4panel: Restore possibility to oversize icons * wayland: autohide: Try to trigger size_allocate() more reliably * panel: Show window when new output is connected * Translation Updates ++++ libxfce4windowing: - Update to version 4.20.4 * XfwMonitorWayland: Delay monitor finalization until gdk data are set * XfwSeatWayland: Store global name for matching when seat is removed * XfwMonitorWayland: Fix release order in _global_removed() * XfwMonitorManagerWayland: Use g_hash_table_iter_remove when iterating * XfwMonitorWayland: Store global name for matching when output is removed * XfwScreenWayland: Rename id to name in registry_global(_remove)? * XfwMonitorWayland: Don't make XfwScreen emit signal with null monitor * XfwWorkspaceGroupWayland: Connect to XfwScreen::monitor-(added|removed) * Add mnemonics for workspace names in workspace menu * Revert "Update README after switchover to meson" * Update README after switchover to meson * Destroy wl_output & xdg_output together when wl_output global removed * XfwWorkspaceWayland: Fix typo * XfwWorkspace: Fix id property management * Defer binding to the workspace manager until after we have the outputs * I18n: Update po/LINGUAS list * meson-build: Add Vala language bindings option * Translation Updates ++++ lighttpd: - update to 1.4.80: * detect and issue error trace for HTTP/2 MadeYouReset CVE-2025-8671 (boo#1243888) * stricter HTTP request/response header, trailer, and chunked validation/parsing * support HTTP response trailers * support HTTP request trailers merge to headers (if not streaming request body) * extend TLS error log messages to include client addr if error caused by client * extend TLS error log messages for HTTP/2 attack detection * reject path info on static files by default (static-file.disable-pathinfo) ++++ lua-interpreter: - Simplify Suggests:, rely on the project configured %{lua_pref}, if there’s any. ++++ mdadm: - Fix systemd unit file handling in spec file (boo#1207266) * make all units known to systemd * restart only timers and mdmonitor.service ++++ mingw32-filesystem: - Update to version 20250814 - Fix egrep: warning: egrep is obsolescent; using grep -E when creating debug info package ++++ mingw64-filesystem: - Update to version 20250814 - Fix egrep: warning: egrep is obsolescent; using grep -E when creating debug info package ++++ mpd: - Updated to 0.24.5 * Changed mpd-conf.patch * https://raw.githubusercontent.com/MusicPlayerDaemon/MPD/v0.24.5/NEWS * database: fixed disappearing playlist files * decoder * ffmpeg: handled "*.aif" files * mpg123 * added option "full_scan" * added support seeking on remote files * fixed work around libmpg123 ID3 corruption bug * sidplay: addad support for PSID files * output: pipewire: fixed resuming playback after it was paused by "single" mode ++++ nextcloud: - Update to 31.0.8 * server - Refactor(files): remove custom page title handling (server#53601) - Fix(settings): translate pronounce account property (server#53709) - Fix TimedJob execution time to allow job execution exactly when scheduled (server#53790) - Fix(profile): add max width for the user actions (server#53796) - Fix: Correctly show free space if lower than quota in Files navigation (server#53813) - Feat(settings): simplify OPcache checks (server#53817) - Fix(files_trashbin): Expire trashbin items when space is needed (server#53837) - Fix(imip): set charset for imip attachment (server#53838) - Fix(settings): change Mastodon only URI to webfinger (server#53843) - Fix(files_reminders): Don't load if disabled for user (server#53854) - Fix(federatedfilesharing): Fix external share being deleted when accepting share (server#53858) - Fix(files): ensure proper headers lifecycle (server#53880) - Fix(systemtags): case-insensitive search & prevent duplicates (server#53888) - Fix: Fix theming for disabled accounts (server#53902) - Fix: force lowercase emails (server#53907) - Fix(Krb): switch away from deprecated and broken KerberosApacheAuth() (server#53912) - Fix: hide rename action in trashbin (server#53916) - Fix(theming): Correctly generate CSS for font themes (server#53921) - Chore(deps): update `@nextcloud/vue` to v8.28.0 (server#53939) - Fix(federation): respect sharing.federation.allowSelfSignedCertificat… (server#53973) - Fix: Fix clearing unified search when modal is closed (server#53990) - Fix(files_sharing): ensure share folder exists in the settings (server#53999) - Feat(appconfig): add searchKeys() (server#54018) - Fix(update): Correctly trigger update for auto-disabled local apps (server#54022) - Update groupware code owners (server#54023) - Fix(settings): verify source of app-discover media (server#54030) - Feat(federated-share): forward notification only on remote reshare (server#54032) - Fix(files): new folder icon color (server#54039) - Fix(appconfig): mark searchKeys() as internal until 32 (server#54042) - Fix(TaskProcessingApiController): Improve error handling (server#54046) - Fix: group imip log messages by removing principal and uri (server#54053) - Fix(files): sort favorites navigation alphabetically (server#54061) - Fix(files_sharing): restore state when updating share failed (server#54066) - Fix(ConnectionFactory): Apply Oracle connection fix to primary and replica params as well (server#54105) - Fix(session): log when ephemeral sessions are closed (server#54106) - Fix(cron): Fix infinite loop on ParallelAware blocked jobs (server#54108) - Fix(provisioning_api): catch failed user creation (server#54110) - Fix(caldav): don't return cancelled events for upcoming events API (server#54113) - Fix(files_sharing): fallback self.crypto.getRandomValues (server#54122) - Fix: Use default share folder of the user on share accept (server#54130) - Fix: Do not show password dialog when user can not validate password (server#54147) - Show nice label when searching in root (server#54148) - Feat(files_sharing): Toggle display for trusted server shares (server#54149) - Feat(dav): add occ commands to get and set absences (server#54169) - Fix: hide guests group from overall principals (server#54174) - Chore: remove `nextcloud-vue-collections` and use `@nextcloud/vue` instead (server#54175) - Fix: spelling mistake (server#54185) - Fix: add missing color select to tags usage query (server#54190) - Fix(AppMenu): ensure that aria attributes are set when needed (server#54199) - Fix: don't update cached mountpoints if the request doesn't have filesystem access (server#54204) - Fix(files_sharing): ensure password or date is enabled by default to be enforced (server#54244) - Fix: fix oci string length with empty strings (server#54252) - Fix(logging): Fix query logging with DateTimeImmutable parameters (server#54254) - Fix(caldav): get UID value (server#54259) - Fix(encryption): Ignore shared files in encrypt-all command (server#54262) - Cache IdentityProof keys (server#54265) - Fix(core): ensure unique vcategory (server#54270) - Fix(files_sharing): only show "shared with me" information if shared (server#54273) - Fix: handle smb timeouts as storage not available (server#54295) - Fix: validate written size for s3 multipart uploads (server#54297) - Fix: Fix button alignment for email templates in Outlook (server#54302) - Fix(dav): calculate permissions based on addressbook principal (server#54308) - Fix: use correct return value for `has-preview` dav property (server#54315) - Feat: allow admins to configure additional sensitive config values (server#54322) * app_api - Fix: streaming (app_api#611) - Feat(new-route): added endpoint to call NC getAbsoluteURL (app_api#613) - Fix(ocs-route): get absolute URL from overwrite.cli.url (app_api#617) - Fix: for transfer encoding causing problems (app_api#622) * circles - Fix(Command): Stop re-rendering tables for each row (circles#2062) - Chore(dev-deps): Bump nextcloud/ocp package (circles#2065) - Fix: translate name of dashboard widget (circles#2075) * files_downloadlimit - Fix(public): use correct color for header text (files_downloadlimit#495) * nextcloud_announcements - Fix: ensure that Crawler does not run if no internet connection is disabled (nextcloud_announcements#508) * notifications - Fix: no notifications icon in header when using locale en (notifications#2459) * photos - Fix: close sidebar on navigation change (photos#3114) - Chore(workflows): add update-stable-titles (photos#3115) * survey_client - Fix(report): Make the last_report lazy so we don't load it on each request (survey_client#372) * suspicious_login - Fix(deps): bump amphp/parallel to v1.4.4. for PHP8.4 compatibility (suspicious_login#1015) * text - Fix(files): workspace implementation (text#7421) - Fix(workspace): fix race condition when loading (text#7449) - Fix(richworkspace): load after mounted. (text#7451) - Several link bubble/preview fixes (text#7476) - Chore(deps): update form-data to 4.0.4 (text#7480) - Fix(keymap): Fix browser keybinding ctrl+del to delete word ahead (text#7492) - Fix(mermaid): Use dark theme if appropriate (text#7498) - Fix(workspace): toggle right away and only render if needed (text#7506) - Fix(share): use relative path in share as davPath for attachments (text#7508) - Fixes for TextDirection extension (text#7512) - Further TextDirection improvements (text#7515) - Fix(TextDirection): Ignore inputRule or collaboration transactions (text#7520) * twofactor_totp - Chore(CI): update workflows (twofactor_totp#1609) * viewer - Fix: file list update (viewer#2907) - Fix(image-editor): open newly created image when closing the image editor (viewer#2909) - Fix: image editor dependencies (viewer#2911) - Fix(workflows): ignore auto title for renovate PRs (viewer#2921) ++++ nginx: - Updated to 1.29.1 * https://nginx.org/en/CHANGES * Fixed processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail_smtp_module might cause worker process memory disclosure to the authentication server (CVE-2025-53859). * Changed TLSv1.3 certificate compression is disabled by default. * Added the "ssl_certificate_compression" directive. * Added support for 0-RTT in QUIC when using OpenSSL 3.5.1 or newer. * Fixed the 103 response might be buffered when using HTTP/2 and the "early_hints" directive. * Fixed in handling "Host" and ":authority" header lines with equal values when using HTTP/2; the bug had appeared in 1.17.9. * Fixed in handling "Host" header lines with a port when using HTTP/3. * Fixed in the "none" parameter of the "smtp_auth" directive. ++++ nvidia-open-driver-G06-signed-cuda: - make sure Requires to nvidia packages are not added for SLE16 ++++ nvidia-open-driver-G06-signed: - make sure Requires to nvidia packages are not added for SLE16 ++++ openCryptoki: - Applied a patch (bsc#1248002) * ocki-3.25-PKCSSLOTD-Remove-the-use-of-MD5.patch ++++ os-autoinst: - Update to version 5.1755088400.98b9a6c: * VMWare: Use grep -F to handle fixed-strings in variables * VMWare: Use POSIX shell on ESXi host that uses Busybox * Add wrappers for testapi variables * backend: Turn off direct-io for multi-fd migration * backend: Use tpm-tis-device for TPM as default ++++ pdns: - Update to version 4.9.8 https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.5 https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.7 https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.8 - enable luajit support where possible ++++ pdns-recursor: - update to 5.2.5 (CVE-2025-30192 boo#246841) https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-04.html https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.4 https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.6 https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.7 https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.0 https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.1 https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.2 https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.3 https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.4 https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.5 - reenable snmp support ( we had the BR but not the configure flag) - add missing BR for fstrm and libcurl - enable NOD support (new BR libboost_filesystem-devel) - enable luajit where possible ++++ postgresql13: - Upgrade to 13.22: * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/ * https://www.postgresql.org/docs/release/13.22/ Security Issues * CVE-2025-8713: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table (boo#1248120) * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client (boo#1248122) * CVE-2025-8715: PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server (boo#1248119) ++++ postgresql14: - Upgrade to 14.19: * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/ * https://www.postgresql.org/docs/release/14.19/ Security Issues * CVE-2025-8713: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table (boo#1248120) * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client (boo#1248122) * CVE-2025-8715: PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server (boo#1248119) ++++ postgresql15: - Upgrade to 15.14: * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/ * https://www.postgresql.org/docs/release/15.14/ Security Issues * CVE-2025-8713: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table (boo#1248120) * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client (boo#1248122) * CVE-2025-8715: PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server (boo#1248119) ++++ postgresql16: - Upgrade to 16.10: * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/ * https://www.postgresql.org/docs/release/16.10/ Security Issues * CVE-2025-8713: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table (boo#1248120) * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client (boo#1248122) * CVE-2025-8715: PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server (boo#1248119) ++++ postgresql17-mini: - Update to 17.6 * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/ * https://www.postgresql.org/docs/release/17.6/ Security Issues * CVE-2025-8713: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table (boo#1248120) * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client (boo#1248122) * CVE-2025-8715: PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server (boo#1248119) ++++ python-Whoosh: - Silence reporting unavoidable duplicates. ++++ python-rdflib-doc: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-CacheControl: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-Cython0: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-Fabric: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-abimap: - Update to 0.4.0 * Fixed Makefile clean targets to properly handle both files and directories * Updated build system to use modern ``python -m build`` instead of deprecated ``python setup.py`` commands * Fixed linting target to use ``python -m flake8`` for better reliability * Added flake8 to development dependencies and requirements-test.txt * Fixed documentation build by adding Sphinx dependencies and using ``python -m sphinx`` * Made Makefile portable by using dynamic make command detection with ``$(shell command -v make)`` * Updated development dependencies to include build tools (build, sphinx, sphinx-rtd-theme, watchdog) * Made documentation linkcheck non-fatal to handle broken external links gracefully * Improved development workflow with proper dependency management - Use Python 3.11 on SLE-15 by default ++++ python-awesomeversion: - Initial release of 25.8.0. ++++ python-coverage: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-dateparser: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-email-validator: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-ephemeral-port-reserve: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-fawltydeps: - Add missing runtime requirements ++++ python-gTTS-token: - Switch building to use of PEP517 backend. ++++ python-nilearn: - Update to 0.12.0: * Use figure_to_svg_base64 instead of figure_to_png_base64 * Fix two-sided image thresholding * convert labels to string in labels in dataset fetchers * Convert Schaeffer atlas labels to list of strings * improve compliance with sklearn checks * adapt surf_mesh fixture * Introduce clean_args for nifti maskers to replace paramaters passed via kwargs * fix issues regarding using two_sided and negative plotting threshold during plotting * ensure datasets do not contain * Do not set score=0 if all decoder.coef_ ==0 * update thresolding in paired / unpaired t-test example * Specify output dtype of SurfaceLabelsMasker.transform * ensure all nifti maskers throw warning when dealing with non finite mask * return design matrices of FIAC as dataframes * Update parameters to comply with run time checks * Assign most frequent value in the neighborhood for atlases via vol_to_surf with method='nearest_most_frequent' * set xlim for plot events * ensure maskers can be refitted * reduce number of warning during searchligh * throw warning when meshes are unequal but have compatible number of vertices * fix filenames when saving GLM to BIDS * plot_mask_large_fmri.py oversubscribing threads * use legacy=False to parse FLM filenames inputs as bids files * fetch full history to append new results to older results * use property region_names_ in surface label examples * rely in __sklearn_tags__ for sklearn > 1.5.2 and on _more_tags otherwise * Fixes extra resampling when plotting with transparency * add stacklevel to warnings in plotting * hide set_output from doc and raise not implemeted error if called * ensure that multi maskers can clean with confounds and high variance confounds * avoid masking out vertices with zero-valued timepoints * ensure consistent output dimension for inverse_transform of NiftiMapsMasker and NiftiLabelsMasker * incorrect dtype.itemsize check in _ensure_float * labels do not need to be numeric for searlight * prevent negative threshold for surface plots * turn _sanitize_cleaning_parameters into a private method * warn when some attributes passed at first level model init will be ignored at fit time * fix input connectivity matrices * nilearn.plotting.surface function params - Drop patch sklearn-1.16.1.patch, included upstream. ++++ python-promise: - Skip a test that breaks with pytest 8.4.1. ++++ python-pydantic-core: - Update to 2.39.0: * build: bump pytest to 8.4 * Add exclude_computed_fields serialization option * Switch to PEP 639 license information * Simplify ValidationError.from_exception_data() docstring * feat: make TzInfo instantiable without any arguments * Implement val_temporal_unit for deciding how datetimes and dates timestamps get validated. * Add missing entries in missing-sentinel core schema * Add MISSING sentinel * Implement ser_json_temporal config option * Properly coerce fractions as int * Add exclude_if logic at the field level ++++ python-pyipp: - Add missing BuildRequires on pytest-asyncio. - Add missing Requires. ++++ python-pylibfdt: - update to version 1.7.2.post1: no upstream changelog ++++ python-pypdf: - Update to 6.0.0 (bsc#1248089, CVE-2025-55197) * security: Limit decompressed size for FlateDecode filter * Stop testing on Python 3.8 and start testing on Python 3.14 * Allow writing/updating all properties of an embedded file * Modernize license specifiers * Performance optimization for LZW decoding * Add PDF/A XMP metadata support * Add basic support for JBIG2 by using jbig2dec ++++ python-python-dotenv: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-python-gnupg: - Update to 0.5.5 * Fix #249: Handle fetching GPG version when not the first item in the configuration. * Fix #250: Capture uid info in a uid_map attribute of ScanKeys/ListKeys. * Fix #255: Improve handling of exceptions raised in background threads. ++++ python-pythran: - Add upstream np-fromstring.patch and np-frombuffer.patch to fix tests with NumPy 2.3, skip one additional failing test ++++ python-rdflib: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-uv: - update to 0.8.10 * Enhancements * Allow Python requests with missing segments, e.g., just aarch64 * Preview * Move warnings for conflicting modules into preview ++++ rqlite: - Update to version 8.43.3: * CDC Service improvements * Add support for JSON-based CDC configuration. - includes changes from 8.43.2: * Add Home and End key support to CLI * CDC FIFO improvements ++++ rubygem-actioncable-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-actionmailbox-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-actionmailer-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-actionpack-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-actiontext-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-actionview-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-activejob-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-activemodel-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-activerecord-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-activestorage-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-activesupport-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-rails-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-railties-8.0: - Update to version 8.0.2.1: https://rubyonrails.org/2025/8/13/Rails-Versions-8-0-2-1-7-2-2-2-and-7-1-5-2-have-been-released ++++ rubygem-solid_queue: - 1.2.1: [#]# What's Changed * Don’t lock `thor` version to 1.3.x — remove unnecessary constraint by @rafaelfranca in pull request #600 * Fix the devcontainer configuration — update to improve development environment by @rafaelfranca in #599 * Set `successfully_enqueued` in `Job.enqueue` — track job enqueue status by @rosa in #603 * Make concurrency tests less flaky — improve test reliability by @rosa in #605 * Suppress expected warning in test suite — reduce noise during testing by @p-schlickmann in #604 * Replace deprecated `retries` option with `timeout` in Rails 8+ — align with modern Rails APIs by @p-schlickmann in #607 [#]# New Contributors * @rafaelfranca made their first contribution in https://github.com/rails/solid_queue/pull/600 * @p-schlickmann made their first contribution in https://github.com/rails/solid_queue/pull/604 * *Full Changelog**: https://github.com/rails/solid_queue/compare/v1.1.3...v1.2.1 ++++ scx: - add 0001-scxtop-use-PT_REGS_IP-macro.patch: * Upstream fix for building on aarch64 * https://github.com/sched-ext/scx/pull/2602 - add 0001-vmlinux.h-refresh-with-the-updated-script.patch: * Upstream fix for building on aarch64 * https://github.com/sched-ext/scx/pull/2586 - Update to version 1.0.15: * scxtop: Add power info * scxtop: Add network TUI view * scxtop: Add perf top mode * scx_lavd: Continue to use a CPU that has tasks on its per-CPU DSQ. * scx_lavd: Add per-cpu dsq support * scxtop: Add memory stats * scxctl: Add restart command * scxctl: some Rust formatting changes to satisfy the CI * scxtop: add scrolling + state to process view * scxtop: add process filtering * scx_lavd: Add 'slice_used' for '--monitor-sched-samples' * scxtop: make process columns extensible * load_balance: Refactor create_domain_hierarchy * scx_layered: Add debugging for layer matching * scx_p2dq: Make extern symbols weak for old kernel support * scx_p2dq: Add idle CPU priority tracking * scx_p2dq: Add kprobe for sched_set_itmt_core_prio * scx_p2dq: Add CPU priority * scxtop: add pause capability * scxtop: add fields to process view * scx_tickless: Add support for preferred cores * scx_p2dq: Allow configuring queued wakeup * scheds: Introduce scx_cosmos * scx_loader: set scx_flash as default scheduler * scxtop: use new freq data in app * scxtop: add cpu_frequency tracking * scx_p2dq: Set CPU on promise during enqueue * /etc/default/scx: set scx_flash as default scheduler ++++ sdbootutil: - Update to version 1+git20250814.85181f6: * Add issue templates for bugs and feature requests * Use command line of target snapshot * Add --no-measure-pcr to opt-out PCR15 * Remove README images ++++ selinux-policy-targeted-gaming: - Enable selinuxuser_execstack=1 for new installations as well (bsc#1247992) ++++ skkdic: - Update skkdic.spec: Change package "Licence" macro to Unicode-DFS-2016, based on SLFO legal review results. (bsc#1246569) ++++ suse-xsl-stylesheets: - Update to 2.95.17 Re-created from 2.95.16, no changes - Update to 2.95.16 - Add Dublin Core metadata for dates in #726 - Hide languuage switcher #728 ++++ syncthing: - Update to 2.0.1 * Fixes allow upgrade without config dir (fixes #10240) by @calmh in #10241 fix various typos by @rasa in #10242 correct incantation to launch browser in Linux desktop file by @calmh in #10246 handle path names that include URL special chars (fixes #10245) by @calmh in #10247 increase default delete retention to 15 months by @calmh in #10252 * Other update (most) dependencies by @calmh in #10243 ++++ trufflehog: - Update to version 3.90.4: * added User to proto (#4378) * updated the fibery detector regexes (#4385) * Fixed gitlab detector (#4371) * Fix error-wrapping for callback in RecoverWithHandler (#4380) * Fixed and improved Clickhelp detector (#4384) * Improved and fixed couchbase detector (#4383) * Add option to skip binary files during filesystem source scanning (#4376) * Refactored caflou detector (#4372) * fixed minor grammatical and punctuation issues (#4369) * Add private key id to GCP metadata (#4361) * fix(deps): update module github.com/charmbracelet/glamour to v0.10.0 (#4345) * Oss 133 new detector vault approle auth for hashicorp (#4362) * [SCAN-81] Report ChunkUnit Panics (#4367) * Improve Bitfinex Detector - Implemented API-Based Secret Validation (#4368) * Fixed syslog source panic on invalid or chunked input (#4366) * Expanded test coverage for binary content (#4332) * Disabled besnappy detector (#4363) ++++ xfce4-session: - Reduce the timeout for auto-start on Wayland (bsc#1247542); xfce4-session-reduce-wayland-autostart-timeout.patch This is a temporary workaround for the too slow start-up on Wayland desktop. Currently the error is ignored in anyway. - Use '?' for SUSE macro expansion, so that quilt setup works. - Update to version 4.20.3: * wayland: startxfce4: Remove definition of SDL_VIDEODRIVER variable * Add xapp for Settings in xfce-portals.conf * startxfce4: Add check for /etc/vconsole.conf * labwc: Add some default config values * xfce-portals.conf: Add wlr for ScreenCast * startxfce4: Improve keyboard layout detection on wayland * wayland: start a D-Bus session only if there isn't one already * Use syntax compatible with most sh shells. * labwc: Add window snapping range ++++ xfce4-settings: - Update to version 4.20.2: * display: Add/improve some debug logs * wayland: displays: Don't wl_display_roundtrip() on new output * settings-editor: Fix -Wcomma warning * common: Fix memory leak * common: Be more secure when parsing pnp.ids file * x11: display: Properly take XRRModeFlags into account * xfsettingsd: Use 2 decimals in warning about unknown mode * build: Fix resource not found at runtime * build: Automate copyright year management * build: Replace xdt-csource with glib-compile-resources * build: Define xfce4 min version >= 4.18 * display-settings: Add missing update of /ActiveProfile * Translation Updates ------------------------------------------------------------------ ------------------ 2025-8-13 - Aug 13 2025 ------------------- ------------------------------------------------------------------ ++++ agama: - Allow to specify "bootloader" and "files" section in agama profile without specified product (bsc#1247248) ++++ agama-web-ui: - Fix messages about automatic storage sizes (gh#agama-project/agama#2657). ++++ ast-grep: - Update to 0.39.3: * add some tests for hcl 756499e * add tree-sitter-hcl to ast-grep-language package deps 26b638a * fix(deps): update rust crate clap to v4.5.42 4d047eb ++++ aws-c-event-stream: - Update to version 0.5.6 * Change stale issue and discussion handling to run once a week by @DmitriyMusatkin in (#130) * Refactor client connection for thread safety by @bretambrose in (#131) ++++ chromium: - Chromium 139.0.7258.127 (boo#1247981): * CVE-2025-8879: Heap buffer overflow in libaom * CVE-2025-8880: Race in V8 * CVE-2025-8901: Out of bounds write in ANGLE * CVE-2025-8881: Inappropriate implementation in File Picker * CVE-2025-8882: Use after free in Aura * Various fixes from internal audits, fuzzing and other initiatives ++++ conan: - Update to version 2.19.1: * Fix: Remove the definition of CMAKE_TRY_COMPILE_CONFIGURATION in CMakeToolchain to avoid issues with check_function_exists() legacy code in MSVC (gh#conan-io/conan#18707). ++++ criu: - Update to version 4.1.1: This release of CRIU (4.1.1) addresses a critical compatibility issue introduced in the Linux kernel and back-ported to all stable releases. The kernel commit (12f147ddd6de "do_change_type(): refuse to operate on unmounted/not ours mounts") addressed the security issue introduced almost 20 years ago. Unfortunately, this change inadvertently broke the restore functionality of mount namespaces within CRIU. Users attempting to restore a container on updated kernels would encounter the error: "mnt-v2: Failed to make mount 476 slave: Invalid argument." This release contains the necessary adjustments to CRIU, allowing it to work seamlessly with kernels incorporating this security change. ++++ crmsh: - Update to version 5.0.0+20250813.70bae071: * Dev: unittests: Adjust unit test for previous commit * Dev: sbd: Add with_sbd parameter for the case when sbd is not active * Dev: sbd: Restart cluster after configured sbd and adjusted properties * Fix: sbd: Ensure stonith-watchdog-timeout is >= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415) * Dev: unittests: Adjust unit test for previous commit * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks ++++ gap-utils: - Update to release 0.91 * now using DeclareGlobalName and BindGlobal * removed all SubdirectProductWithEmbeddings code ++++ gwenhywfar: - Fix build with gettext-runtime >= 0.24.1 ++++ gwenhywfar-qt6: - Fix build with gettext-runtime >= 0.24.1 ++++ haproxy: - Update to version 3.2.4+git0.98813a13e: * [RELEASE] Released version 3.2.4 * BUG/MEDIUM: http-client: Test HTX_FL_EOM flag before commiting the HTX buffer * BUG/MEDIUM: mux-quic: adjust wakeup behavior * DOC: config: recommend single quoting passwords * DOC: management: fix typo in commit f4f93c56 * BUG/MINOR: init: Initialize random seed earlier in the init process * BUG/MEDIUM: ssl: fix build with AWS-LC * BUG/MEDIUM: ssl: Fix 0rtt to the server * MINOR: sock: update broken accept4 detection for older hardwares. * BUG/MINOR: stick-table: cap sticky counter idx with tune.nb_stk_ctr instead of MAX_SESS_STKCTR * BUILD: compat: always set _POSIX_VERSION to ease comparisons * BUILD: compat: provide relaxed versions of the MIN/MAX macros * DOC: list missing global QUIC settings * CLEANUP: http-client: Remove useless indentation when sending request body * BUG/MINOR: mux-quic: ensure close-spread-time is properly applied * BUG/MINOR mux-quic: apply correctly timeout on output pending data * BUG/MINOR: hq-interop: fix FIN transmission * BUG/MINOR: logs: fix log-steps extra log origins selection * BUG/MEDIUM: threads: Disable the workaround to load libgcc_s on macOS * BUG/MINOR: halog: exit with error when some output filters are set simultaneosly * BUG/MINOR: applet: Don't trigger BUG_ON if the tid is not on appctx init * MINOR: h3: remove unused outbuf in h3_resp_headers_send() * BUG/MINOR: quic: Wrong source address use on FreeBSD * BUG/MEDIUM: h3: handle interim response properly on FE side * MINOR: qmux: change API for snd_buf FIN transmission * BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side) * BUG/MINOR: h3: properly realloc buffer after interim response encoding * BUG/MEDIUM: h3: do not overwrite interim with final response * BUG/MINOR: h1-htx: Don't forget to init flags in h1_format_htx_msg function * BUG/MINOR: mux-h1: Use configured error files if possible for early H1 errors * MINOR: h1-htx: Add function to format an HTX message in its H1 representation * BUG/MEDIUM: http-client: Notify applet has more data to deliver until the EOM * BUG/MEDIUM: http-client: Drain the request if an early response is received * BUG/MINOR: http-client: Reject any 101-switching-protocols response * BUG/MINOR: http-client: Ignore 1XX interim responses in non-HTX mode * BUG/MEDIUM: http-client: Ask for more room when request data cannot be xferred * BUG/MEDIUM: http-client: Properly inc input data when HTX blocks are xferred * BUG/MEDIUM: http-client: Don't wake http-client applet if nothing was xferred * BUG/MEDIUM: quic: Crash after QUIC server callbacks restoration (OpenSSL 3.5) * MINOR: quic: Prevent QUIC build with OpenSSL 3.5 new QUIC API version < 3.5.1 * BUG/MINOR: listener: really assign distinct IDs to shards * MEDIUM: ssl/cli: relax crt insertion in crt-list of type directory * DOC: management: clarify usage of -V with -c * MEDIUM: acme: use lowercase for challenge names in configuration * BUG/MINOR: acme: possible integer underflow in acme_txt_record() * MINOR: acme: update the log for DNS-01 * MEDIUM: acme: allow to wait and restart the task for DNS-01 * MINOR: acme: emit the DNS-01 challenge details on the dpapi sink * MINOR: acme: emit a log for DNS-01 challenge response * BUG/MEDIUM: hlua_fcn: ensure systematic watcher cleanup for server list iterator * BUILD: acme: avoid declaring TRACE_SOURCE in acme-t.h * CLEANUP: ssl: Rename ssl_trace-t.h to ssl_trace.h * BUG/MEDIUM: mux-quic: ensure Early-data header is set * BUG/MINOR: hlua: take default-path into account with lua-load-per-thread * BUG/MEDIUM: logs: fix sess_build_logline_orig() recursion with options * BUG/MEDIUM: dns: Reset reconnect tempo when connection is finally established * BUG/MEDIUM: hlua: Report to SC when output data are blocked on a lua socket * BUG/MEDIUM: hlua: Report to SC when data were consumed on a lua socket * BUG/MINOR: hlua: Skip headers when a receive is performed on an HTTP applet * MINOR: acme: implement traces * MINOR: acme: add ACME to the haproxy -vv feature list * CLEANUP: acme: fix wrong spelling of "resources" * BUG/MINOR: acme: allow "processing" in challenge requests * MINOR: acme: remove acme_req_auth() and use acme_post_as_get() instead * BUG/MEDIUM: acme: use POST-as-GET instead of GET for resources * BUG/MEDIUM: ssl/clienthello: ECDSA with ssl-max-ver TLSv1.2 and no ECDSA ciphers * DOC: deviceatlas build clarifications ++++ kernel-default: - Update config files (bsc#1247996) CONFIG_CRYPTO_BENCHMARK=m - commit a339b63 - Refresh patches.suse/spi-cs42l43-Property-entry-should-be-a-null-terminat.patch. Update upstream status and move to sorted section. - commit 4b2d952 ++++ kernel-source: - Update config files (bsc#1247996) CONFIG_CRYPTO_BENCHMARK=m - commit a339b63 - Refresh patches.suse/spi-cs42l43-Property-entry-should-be-a-null-terminat.patch. Update upstream status and move to sorted section. - commit 4b2d952 ++++ kernel-docs: - Update config files (bsc#1247996) CONFIG_CRYPTO_BENCHMARK=m - commit a339b63 - Refresh patches.suse/spi-cs42l43-Property-entry-should-be-a-null-terminat.patch. Update upstream status and move to sorted section. - commit 4b2d952 ++++ kernel-kvmsmall: - Update config files (bsc#1247996) CONFIG_CRYPTO_BENCHMARK=m - commit a339b63 - Refresh patches.suse/spi-cs42l43-Property-entry-should-be-a-null-terminat.patch. Update upstream status and move to sorted section. - commit 4b2d952 ++++ kernel-obs-build: - Update config files (bsc#1247996) CONFIG_CRYPTO_BENCHMARK=m - commit a339b63 - Refresh patches.suse/spi-cs42l43-Property-entry-should-be-a-null-terminat.patch. Update upstream status and move to sorted section. - commit 4b2d952 ++++ kernel-obs-qa: - Update config files (bsc#1247996) CONFIG_CRYPTO_BENCHMARK=m - commit a339b63 - Refresh patches.suse/spi-cs42l43-Property-entry-should-be-a-null-terminat.patch. Update upstream status and move to sorted section. - commit 4b2d952 ++++ kernel-syms: - Update config files (bsc#1247996) CONFIG_CRYPTO_BENCHMARK=m - commit a339b63 - Refresh patches.suse/spi-cs42l43-Property-entry-should-be-a-null-terminat.patch. Update upstream status and move to sorted section. - commit 4b2d952 ++++ kernel-vanilla: - Update config files (bsc#1247996) CONFIG_CRYPTO_BENCHMARK=m - commit a339b63 - Refresh patches.suse/spi-cs42l43-Property-entry-should-be-a-null-terminat.patch. Update upstream status and move to sorted section. - commit 4b2d952 ++++ libQuotient-qt6: - Update to 0.9.4 * Support room version 12 * A few tweaks and fixes that previously landed in dev are now backported to 0.9 * Add a signal when a new thread is created * Fix building with Qt 6.10 and newer * Unify and fix Qt Keychain jobs handling internally * Use a smaller number for syncs without timeouts to stop confusing internal API * Fix a crash in the readmarker code * Use a standardised .part extension for in-progress downloads * Improved performance in E2EE code, especially for accounts with many devices * Fix downloading to a temporary file * Fix caching rooms with / in ids ++++ libdisplay-info: - Update to release 0.3.0 * This new release adds support for the following new blocks: * CTA Vendor Specific Video Block * CTA HDR10+ Vendor Specific Video Block * CTA Dolby Vision Vendor Specific Video Block * CTA HDMI Vendor Specific Data Block * CTA HDMI Forum vendor-specific data block * CTA HDMI Forum Sink Capability Data Block * Basic DisplayID version 2 structure * Low-level API has had some function name/signature changes ++++ openjph: - Update to 0.21.4: * Adds proper decoding of placeholder passes #191 * Fixes a bug in avx512 encoder #188 ++++ libsemigroups: - Update to release 3.1.3 * Add a `to_human_readable_repr` function for the `Action` class. * Update the `to_human_readable_repr` of the `Congruence` class to be more consistent with the `KnuthBendix` and `ToddCoxeter` classes. * Mark `IsBipartition`, `IsPBR`, `IsPresentation`, `IsInversePresentation` and `IsWordGraph` as deprecated. ++++ subrandr: - Update vendored packages to fix CVE related to slab dependency (bsc#1248042) ++++ makedumpfile: - Move makedumpfile-R.pl to doc. The script is no longer needed, but may serve as a useful reference implementation of reading the flattened file format. - Update bundled eppic to 72da440362e20291d5ecbb04b6eb7c7b492f233c (boo#1247577). ++++ mhvtl: - Update to version 1.72_release+13.928fc784016a: * vtltape: Add ability to define LBP RSCRC byte order * mhvtl.ko: Update module version 0.18.36 will work with kernel 6.10+ * kernel config: handle del_timer_sync() kABI rename * Fix external declarations of crc32c() * kernel config: put braces around debug stmnt * kernel config: replace fgrep with grep -F This removed these patches, as they are now upstream: * 0001-kernel-config-replace-fgrep-with-grep-F.patch * 0002-kernel-config-put-braces-around-debug-stmnt.patch * 0003-Fix-external-declarations-of-crc32c.patch * 0004-kernel-config-handle-del_timer_sync-kABI-rename.patch Also added and submitted upstream, to handle breakage in factory with newer kernel: * mhvtl-kernel-module-handle-rename-of-from_timer.patch ++++ nodejs-electron: - Fix build on Leap 16 ++++ openQA: - Update to version 5.1755087548.49d62b92: * Add instructions for running a openQA/tools dev environment ++++ ovmf: - Update firmware descriptors to remove tab whitespace (bsc#1247847) - Replace tab whitespace with spaces in 50-ovmf-x86_64-sev.json - Replace tab whitespace with spaces in 50-ovmf-x86_64-sev-snp.json ++++ patterns-media: - Do not require kernel-firmware-all, but rather expand the list, which allows to drop some larger, less commonly used candiates like mellanox. ++++ perl-Text-CSV_XS: - updated to 1.610.0 (1.61) see /usr/share/doc/packages/perl-Text-CSV_XS/ChangeLog ++++ python-Whoosh: - Switch to fork under development and update to 2.7.5 * test_bigfacet.py: print() is a function in Python 3 * remove duplicate_plugin WhitespacePlugin * [RFC] Give SegmentWriter a cachable Searcher * Add support for wildcard regex tokenization * Fixed several errors and added support for the Sweep AI and Codecov bots * Update Python version in setup.py classifiers & fix indent * Improved documentation deployment and added additional locations where it can be found as backup - Drop merged patches: * pytest4.patch * py2encoding.patch * docs-Update-intersphinx_mapping.patch ++++ python-Cython: - Update to 3.1.3 * Some method calls with 0 or 1 argument failed to use PyObject_VectorCallMethod(). * Walrus assignments of literal Python integers could generate invalid C code. * cython.pythread_type_lock (also used as fallback for cython.pymutex) could stall on heavily contended locks. * C string arrays (not pointers) always coerced to the Python default string type, even on explicit casts to other string types. * Unterminated \N{} character escapes in strings could unrail the parser. * An internal C function was not marked as static and leaked a linker symbol. * Some Unicode letters were not recognised as lexically valid name parts. * Compatibility with PyPy3.8 was lost by accident. * The Linux binary wheels of 3.1.2 used SSSE3 CPU instructions which are not available on some CPUs. - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-anyio: - Skip flaky test_keyboardinterrupt_during_test, the timeout increase doesn't always help. - Fix build for Leap ++++ python-fsspec: - Add missing BuildRequires on pytest-asyncio. ++++ python-grpc-interceptor: - Add missing BuildRequires on pytest-asyncio. - Ship README and license in the binary packages. ++++ python-numpy: - Update to 2.3.2 * This release supports Python versions 3.11-3.14 [#] 2.3.0 * Interactive examples in the NumPy documentation. * Building NumPy with OpenMP Parallelization. * Improved support for free threaded Python. * Improved annotations. * New function numpy.strings.slice [#]# Deprecations * The numpy.typing.mypy_plugin has been deprecated in favor of platform- agnostic static type inference. * The numpy.typing.NBitBase type has been deprecated and will be removed in a future version. [#]# Expired deprecations * Removed the np.compat package source code * Remove numpy/npy_1_7_deprecated_api.h and C macros like NPY_OWNDATA in favor of NPY_ARRAY_OWNDATA. * Remove alias generate_divbyzero_error to npy_set_floatstatus_divbyzero and generate_overflow_error to npy_set_floatstatus_overflow. * Remove np.tostring * Raise on np.conjugate of non-numeric types * Raise when using np.bincount(...minlength=None), use 0 instead * Passing shape=None to functions with a non-optional shape argument errors, use () instead * Inexact matches for mode and searchside raise * Setting __array_finalize__ = None errors * np.fromfile and np.fromstring error on bad data, previously they would guess * datetime64 and timedelta64 construction with a tuple no longer accepts an event value, either use a two-tuple of (unit, num) or a 4-tuple of (unit, num, den, 1) * Parsing an integer via a float string is no longer supported. To avoid this error you can make sure the original data is stored as integers, use the converters=float keyword argument or use np.loadtxt(...).astype(np.int64) * The use of a length 1 tuple for the ufunc signature errors. Use dtype or fill the tuple with None [#]# New Features * NumPy now registers its pkg-config paths with the pkgconf PyPI package * Allow out=... in ufuncs to ensure array result [#] 2.3.1 * Fix bug in matmul for non-contiguous out kwarg parameter * Fix for Accelerate runtime warnings on M4 hardware * Improved support of cpu features for FreeBSD and OpenBSD [#] 2.3.2 * Wheels for Python 3.14.0rc1 * PyPy updated to the latest stable release * OpenBLAS updated to 0.3.30 ++++ python-path: - Update to 17.1.1 * Fixed TempDir constructor arguments. (#236) ++++ python-phonenumbers: - Update to 9.0.11 * Merge upstream 9.0.11 phonenumber updates ++++ python-pip: - update to 25.2 [#] 25.1 * Drop support for Python 3.8. * On python 3.14+, the pkg_resources metadata backend cannot be used anymore. * Hide --no-python-version-warning from CLI help and documentation as it's useless since Python 2 support was removed. * A warning is emitted when the deprecated pkg_resources library is used to inspect and discover installed packages. * Deprecate the legacy setup.py bdist_wheel mechanism. To silence the warning, and future-proof their setup, users should enable - -use-pep517 or add a pyproject.toml file to the projects they control. * Using --debug also enables verbose logging. * Display a transient progress bar during package installation. * Add a --group option which allows installation from PEP 735 Dependency Groups. * Use PEP 753 "Well-known Project URLs in Metadata" normalization rules when identifying an equivalent project URL to replace a missing Home-Page field in pip show. * Add a new, experimental, pip lock command, implementing PEP 751. * Resolvelib 1.1.0 fixes a known issue where pip would report a ResolutionImpossible error even though there is a valid solution. However, some very complex dependency resolutions that previously resolved may resolve slower or fail with an ResolutionTooDeep error. [#] 25.2 * Declare support for Python 3.14 * Automatic download resumption and retrying is enabled by default. * Requires-Python error message displays version clauses in numerical order. * Show time taken instead of eta 0:00:00 at download completion. * Remove warning when cloning from a Git reference that does not look like a commit hash. * pip's own licensing metadata now follows PEP 639. In addition, the licenses of pip's vendored dependencies are now included in the License-File metadata field and in the wheel. - Drop no-longer-applicable distutils-reproducible-compile.patch * distlib was trimmed https://github.com/pypa/pip/pull/13342 - Add upstream flit-core.patch to fix build ++++ python-py-cpuinfo: - Convert to libalternatives on SLE-16-based and newer systems only ++++ python-pyhanko-certvalidator: - Add missing BuildRequires on pytest-asyncio. ++++ python-scipy: - Update to 1.16.1 * add support for Python 3.14.0rc1 ++++ riff: - Update to 3.4.1: * moor is the new name for what used to be moar ++++ shotcut: - Update to 25.07.26: See https://www.shotcut.org/blog/new-release-250726/ ++++ texstudio: - Update to 4.8.8 * improve handling tblr env for table manipulation * small bug fixes * implement macro function editor.getLineTokens, see gh#texstudio-org/texstudio#4111 ++++ virt-manager: - Adjust how we detect sles16 as the media layout changes. (bsc#1244685) virtinst-add-sle16-detection-support.patch ++++ wl-mirror: - Update to 0.18.3: * Bugfixes: - Fixed --title custom titles only applying after window creation instead of during initial configure (boo#72). - Fixed CMake directory variables sometimes containing trailing or double slashes (harmless but corrected) (boo#71). * Other changes: - Allow spaces in output identifiers when using output labels from - -region. - Use wl-mirror’s built-in output detection for ask-output-or-region in wl-present instead of manual parsing. - Document slurp -f syntax for the format supported by --region. ++++ xmpp-dns: - Update to 0.5.0: Added: * Add support for punycode domains. Changed: * Support ALPN for BOSH and websocket connections. * BOSH + websocket: Check certificate validity for target domain not service domain. * Update link relations to version of 2025-03-27. ++++ yast2-bootloader: - "update nvram" option added in grub2-bls and systemd-boot. (bsc#1228595, bsc#1247952) - 5.0.25 ++++ zenity: - Update to version 4.1.99 (Release candidate): + filesel: fixes for opening provided directory + Updated translations. ------------------------------------------------------------------ ------------------ 2025-8-12 - Aug 12 2025 ------------------- ------------------------------------------------------------------ ++++ agama-web-ui: - Split progress details into two lines for better readability (gh#agama-project/agama#2647). ++++ ansible-sap-operations: - Remove unsupported Ansible Roles - Add updated README.md ++++ aws-c-s3: - Update to version 0.8.7 * Change stale issue and discussion handling to run once a week by @DmitriyMusatkin in (#541) * [fix] Retry with checksum result in failure by @TingDaoK in (#543) ++++ aws-crt-cpp: - Update to version 0.33.5 * Update eventstream to v0.5.6 by @bretambrose in (#765) - from version 0.33.4 * Update web identity context to use connection options instead of context by @sbiscigl in (#763) ++++ aws-lc: - update to version 1.58.0: * Add EVP_PKEY_check and EVP_PKEY_public_check * Rewrite 4-fold batched SHAKE to be amenable to batched Keccak-F1600 assembly * Fix Win64 unwind info alignment * Migrate MSVC tests to CodeBuild * Add optimized + verified hybrid AArch64 assembly for batched SHA3/SHAKE * target.h: more clearly check for ppc64 endianness * Impl SSL_client_hello_get1_extensions_present and friends * Implement SSL_set_verify_result * ML-DSA constant-time hardening for caddq, poly_chknorm, decompose ++++ cpp-httplib: - updated version to 0.25.0 * ErrorLogger Support * Changed 32-bit Windows support from #error to #warning * Unified _WIN64 macros to _WIN32 for better compatibility * Improved Windows environment support * CMake Pointer Size Check #2197 * Winndows Version Requirements #2191, #2192 * Better build-time compatibility detection * Fixed Chocolatey OpenSSL compatibility issues * Improved SSL functionality stability on Windows * Resolved Windows version check problems * Enhanced platform detection ++++ filezilla: - Update to 3.69.3 * New features: - For files and directories that are symbolic links, a small overlay symbol is now shown on icons in local file list and directory tree * Bugfixes and minor changes: - Fixed an issue showing attributes of symbolic links in local file list - Changes from 3.69.2 * Fixed vulnerabilities: - Official binaries are now linked against GnuTLS 3.8.10 * Bugfixes and minor changes: - FTP: Retry from a different source port if establishing a data connection in passive mode fails with EADDRINUSE ++++ gamescope: - Update to version 3.16.15: * gamescope-control: add interface to query performance stats for an appid * Re-add force_repaint fix * added color blindless luts * layer: fix a couple of harmless typos * steamcompmgr: render dropdowns with negative coordinates, provided they are partially visible * steamcompmgr: track FSR state with preemptive upscaling * rendervulkan: account for ycbcr descriptor count when creating descriptor pool * wlserver: Remove redundant code from set_look * wlserver: Fix using wrong FD in set_look * looks: Add updated looks - Use %fdupes for new looks files ++++ llamacpp: - Update to version 6139: * opencl: allow mixed f16/f32 `add` (#15140) * mtmd : Fix MinicpmV model converter and clip to avoid using hardcode. (#14750) * chat : hotfix gpt-oss jinja raising an exception (#15243) * server : allow specifying reasoning_format in HTTP request (#15238) * kv-cache : fix seq_rm with seq_id == -1 (#15226) * kv-cache : log (debug) all streams in find_slot (#15176) * convert : improve Mistral models integration (#14737) * kleidiai: fix unsigned overflow bug (#15150) - Add LLAMA_BUILD_NUMBER and LLAMA_VERSION to the build ++++ go1.25: - go1.25 (released 2025-08-12) is a major release of Go. go1.25.x minor releases will be provided through August 2026. https://github.com/golang/go/wiki/Go-Release-Cycle go1.25 arrives six months after Go 1.24. Most of its changes are in the implementation of the toolchain, runtime, and libraries. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. Refs boo#1244485 go1.25 release tracking * Language changes: There are no languages changes that affect Go programs in Go 1.25. However, in the language specification the notion of core types has been removed in favor of dedicated prose. See the respective blog post for more information. * go command: The go build -asan option now defaults to doing leak detection at program exit. This will report an error if memory allocated by C is not freed and is not referenced by any other memory allocated by either C or Go. These new error reports may be disabled by setting ASAN_OPTIONS=detect_leaks=0 in the environment when running the program. * go command: The Go distribution will include fewer prebuilt tool binaries. Core toolchain binaries such as the compiler and linker will still be included, but tools not invoked by build or test operations will be built and run by go tool as needed. * go command: The new go.mod ignore directive can be used to specify directories the go command should ignore. Files in these directories and their subdirectories will be ignored by the go command when matching package patterns, such as all or ./..., but will still be included in module zip files. * go command: The new go doc -http option will start a documentation server showing documentation for the requested object, and open the documentation in a browser window. * go command: The new go version -m -json option will print the JSON encodings of the runtime/debug.BuildInfo structures embedded in the given Go binary files. * go command: The go command now supports using a subdirectory of a repository as the path for a module root, when resolving a module path using the syntax to indicate that the root-path corresponds to the subdir of the repo-url with version control system vcs. * go command: The new work package pattern matches all packages in the work (formerly called main) modules: either the single work module in module mode or the set of workspace modules in workspace mode. * go command: When the go command updates the go line in a go.mod or go.work file, it no longer adds a toolchain line specifying the command’s current version. * go vet: The go vet command includes new analyzers: * go vet: waitgroup reports misplaced calls to sync.WaitGroup.Add; * go vet: hostport reports uses of fmt.Sprintf("%s:%d", host, port) to construct addresses for net.Dial, as these will not work with IPv6; instead it suggests using net.JoinHostPort. * Runtime: Container-aware GOMAXPROCS. The default behavior of the GOMAXPROCS has changed. In prior versions of Go, GOMAXPROCS defaults to the number of logical CPUs available at startup (runtime.NumCPU). Go 1.25 introduces two changes: On Linux, the runtime considers the CPU bandwidth limit of the cgroup containing the process, if any. If the CPU bandwidth limit is lower than the number of logical CPUs available, GOMAXPROCS will default to the lower limit. In container runtime systems like Kubernetes, cgroup CPU bandwidth limits generally correspond to the “CPU limit” option. The Go runtime does not consider the “CPU requests” option. On all OSes, the runtime periodically updates GOMAXPROCS if the number of logical CPUs available or the cgroup CPU bandwidth limit change. Both of these behaviors are automatically disabled if GOMAXPROCS is set manually via the GOMAXPROCS environment variable or a call to runtime.GOMAXPROCS. They can also be disabled explicitly with the GODEBUG settings containermaxprocs=0 and updatemaxprocs=0, respectively. In order to support reading updated cgroup limits, the runtime will keep cached file descriptors for the cgroup files for the duration of the process lifetime. * Runtime: garbage collector: A new garbage collector is now available as an experiment. This garbage collector’s design improves the performance of marking and scanning small objects through better locality and CPU scalability. Benchmark result vary, but we expect somewhere between a 10—40% reduction in garbage collection overhead in real-world programs that heavily use the garbage collector. The new garbage collector may be enabled by setting GOEXPERIMENT=greenteagc at build time. We expect the design to continue to evolve and improve. To that end, we encourage Go developers to try it out and report back their experiences. See the GitHub issue for more details on the design and instructions for sharing feedback. * Runtime: trace flight recorder: Runtime execution traces have long provided a powerful, but expensive way to understand and debug the low-level behavior of an application. Unfortunately, because of their size and the cost of continuously writing an execution trace, they were generally impractical for debugging rare events. The new runtime/trace.FlightRecorder API provides a lightweight way to capture a runtime execution trace by continuously recording the trace into an in-memory ring buffer. When a significant event occurs, a program can call FlightRecorder.WriteTo to snapshot the last few seconds of the trace to a file. This approach produces a much smaller trace by enabling applications to capture only the traces that matter. The length of time and amount of data captured by a FlightRecorder may be configured within the FlightRecorderConfig. * Runtime: Change to unhandled panic output: The message printed when a program exits due to an unhandled panic that was recovered and repanicked no longer repeats the text of the panic value. * Runtime: VMA names on Linux: On Linux systems with kernel support for anonymous virtual memory area (VMA) names (CONFIG_ANON_VMA_NAME), the Go runtime will annotate anonymous memory mappings with context about their purpose. e.g., [anon: Go: heap] for heap memory. This can be disabled with the GODEBUG setting decoratemappings=0. * Compiler: nil pointer bug: This release fixes a compiler bug, introduced in Go 1.21, that could incorrectly delay nil pointer checks. * Compiler: DWARF5 support: The compiler and linker in Go 1.25 now generate debug information using DWARF version 5. The newer DWARF version reduces the space required for debugging information in Go binaries, and reduces the time for linking, especially for large Go binaries. DWARF 5 generation can be disabled by setting the environment variable GOEXPERIMENT=nodwarf5 at build time (this fallback may be removed in a future Go release). * Compiler: Faster slices: The compiler can now allocate the backing store for slices on the stack in more situations, which improves performance. This change has the potential to amplify the effects of incorrect unsafe.Pointer usage, see for example issue 73199. In order to track down these problems, the bisect tool can be used to find the allocation causing trouble using the -compile=variablemake flag. All such new stack allocations can also be turned off using - gcflags=all=-d=variablemakehash=n. * Linker: The linker now accepts a -funcalign=N command line option, which specifies the alignment of function entries. The default value is platform-dependent, and is unchanged in this release. * Standard library: testing/synctest: The new testing/synctest package provides support for testing concurrent code. This package was first available in Go 1.24 under GOEXPERIMENT=synctest, with a slightly different API. The experiment has now graduated to general availability. The old API is still present if GOEXPERIMENT=synctest is set, but will be removed in Go 1.26. * Standard library: testing/synctest: The Test function runs a test function in an isolated “bubble”. Within the bubble, time is virtualized: time package functions operate on a fake clock and the clock moves forward instantaneously if all goroutines in the bubble are blocked. * Standard library: testing/synctest: The Wait function waits for all goroutines in the current bubble to block. * Standard library: encoding/json/v2: Go 1.25 includes a new, experimental JSON implementation, which can be enabled by setting the environment variable GOEXPERIMENT=jsonv2 at build time. When enabled, two new packages are available: The encoding/json/v2 package is a major revision of the encoding/json package. The encoding/json/jsontext package provides lower-level processing of JSON syntax. In addition, when the “jsonv2” GOEXPERIMENT is enabled: The encoding/json package uses the new JSON implementation. Marshaling and unmarshaling behavior is unaffected, but the text of errors returned by package function may change. The encoding/json package contains a number of new options which may be used to configure the marshaler and unmarshaler. The new implementation performs substantially better than the existing one under many scenarios. In general, encoding performance is at parity between the implementations and decoding is substantially faster in the new one. See the github.com/go-json-experiment/jsonbench repository for more detailed analysis. We encourage users of encoding/json to test their programs with GOEXPERIMENT=jsonv2 enabled to help detect any compatibility issues with the new implementation. We expect the design of encoding/json/v2 to continue to evolve. We encourage developers to try out the new API and provide feedback on the proposal issue. * archive/tar: The Writer.AddFS implementation now supports symbolic links for filesystems that implement io/fs.ReadLinkFS. * encoding/asn1: Unmarshal and UnmarshalWithParams now parse the ASN.1 types T61String and BMPString more consistently. This may result in some previously accepted malformed encodings now being rejected. * crypto: MessageSigner is a new signing interface that can be implemented by signers that wish to hash the message to be signed themselves. A new function is also introduced, SignMessage, which attempts to upgrade a Signer interface to MessageSigner, using the MessageSigner.SignMessage method if successful, and Signer.Sign if not. This can be used when code wishes to support both Signer and MessageSigner. * crypto: Changing the fips140 GODEBUG setting after the program has started is now a no-op. Previously, it was documented as not allowed, and could cause a panic if changed. * crypto: SHA-1, SHA-256, and SHA-512 are now slower on amd64 when AVX2 instructions are not available. All server processors (and most others) produced since 2015 support AVX2. * crypto/ecdsa: The new ParseRawPrivateKey, ParseUncompressedPublicKey, PrivateKey.Bytes, and PublicKey.Bytes functions and methods implement low-level encodings, replacing the need to use crypto/elliptic or math/big functions and methods. * crypto/ecdsa: When FIPS 140-3 mode is enabled, signing is now four times faster, matching the performance of non-FIPS mode. * crypto/ed25519: When FIPS 140-3 mode is enabled, signing is now four times faster, matching the performance of non-FIPS mode. * crypto/elliptic: The hidden and undocumented Inverse and CombinedMult methods on some Curve implementations have been removed. * crypto/rsa: PublicKey no longer claims that the modulus value is treated as secret. VerifyPKCS1v15 and VerifyPSS already warned that all inputs are public and could be leaked, and there are mathematical attacks that can recover the modulus from other public values. * crypto/rsa: Key generation is now three times faster. * crypto/sha1: Hashing is now two times faster on amd64 when SHA-NI instructions are available. * crypto/sha3: The new SHA3.Clone method implements hash.Cloner. * crypto/sha3: Hashing is now two times faster on Apple M processors. * crypto/tls: The new ConnectionState.CurveID field exposes the key exchange mechanism used to establish the connection. * crypto/tls: The new Config.GetEncryptedClientHelloKeys callback can be used to set the EncryptedClientHelloKeys for a server to use when a client sends an Encrypted Client Hello extension. * crypto/tls: SHA-1 signature algorithms are now disallowed in TLS 1.2 handshakes, per RFC 9155. They can be re-enabled with the GODEBUG setting tlssha1=1. * crypto/tls: When FIPS 140-3 mode is enabled, Extended Master Secret is now required in TLS 1.2, and Ed25519 and X25519MLKEM768 are now allowed. * crypto/tls: TLS servers now prefer the highest supported protocol version, even if it isn’t the client’s most preferred protocol version. * crypto/tls: Both TLS clients and servers are now stricter in following the specifications and in rejecting off-spec behavior. Connections with compliant peers should be unaffected. * crypto/x509: CreateCertificate, CreateCertificateRequest, and CreateRevocationList can now accept a crypto.MessageSigner signing interface as well as crypto.Signer. This allows these functions to use signers which implement “one-shot” signing interfaces, where hashing is done as part of the signing operation, instead of by the caller. * crypto/x509: CreateCertificate now uses truncated SHA-256 to populate the SubjectKeyId if it is missing. The GODEBUG setting x509sha256skid=0 reverts to SHA-1. * crypto/x509: ParseCertificate now rejects certificates which contain a BasicConstraints extension that contains a negative pathLenConstraint. * crypto/x509: ParseCertificate now handles strings encoded with the ASN.1 T61String and BMPString types more consistently. This may result in some previously accepted malformed encodings now being rejected. * debug/elf: The debug/elf package adds two new constants: PT_RISCV_ATTRIBUTES and SHT_RISCV_ATTRIBUTES for RISC-V ELF parsing. * go/ast: The FilterPackage, PackageExports, and MergePackageFiles functions, and the MergeMode type and its constants, are all deprecated, as they are for use only with the long-deprecated Object and Package machinery. * go/ast: The new PreorderStack function, like Inspect, traverses a syntax tree and provides control over descent into subtrees, but as a convenience it also provides the stack of enclosing nodes at each point. * go/parser: The ParseDir function is deprecated. * go/token: The new FileSet.AddExistingFiles method enables existing Files to be added to a FileSet, or a FileSet to be constructed for an arbitrary set of Files, alleviating the problems associated with a single global FileSet in long-lived applications. * go/types: Var now has a Var.Kind method that classifies the variable as one of: package-level, receiver, parameter, result, local variable, or a struct field. * go/types: The new LookupSelection function looks up the field or method of a given name and receiver type, like the existing LookupFieldOrMethod function, but returns the result in the form of a Selection. * hash: The new XOF interface can be implemented by “extendable output functions”, which are hash functions with arbitrary or unlimited output length such as SHAKE. * hash: Hashes implementing the new Cloner interface can return a copy of their state. All standard library Hash implementations now implement Cloner. * hash/maphash: The new Hash.Clone method implements hash.Cloner. * io/fs: A new ReadLinkFS interface provides the ability to read symbolic links in a filesystem. * log/slog: GroupAttrs creates a group Attr from a slice of Attr values. * log/slog: Record now has a Source method, returning its source location or nil if unavailable. * mime/multipart: The new helper function FileContentDisposition builds multipart Content-Disposition header fields. * net: LookupMX and Resolver.LookupMX now return DNS names that look like valid IP address, as well as valid domain names. Previously if a name server returned an IP address as a DNS name, LookupMX would discard it, as required by the RFCs. However, name servers in practice do sometimes return IP addresses. * net: On Windows, ListenMulticastUDP now supports IPv6 addresses. * net: On Windows, it is now possible to convert between an os.File and a network connection. Specifcally, the FileConn, FilePacketConn, and FileListener functions are now implemented, and return a network connection or listener corresponding to an open file. Similarly, the File methods of TCPConn, UDPConn, UnixConn, IPConn, TCPListener, and UnixListener are now implemented, and return the underlying os.File of a network connection. * net/http: The new CrossOriginProtection implements protections against Cross-Site Request Forgery (CSRF) by rejecting non-safe cross-origin browser requests. It uses modern browser Fetch metadata, doesn’t require tokens or cookies, and supports origin-based and pattern-based bypasses. * os: On Windows, NewFile now supports handles opened for asynchronous I/O (that is, syscall.FILE_FLAG_OVERLAPPED is specified in the syscall.CreateFile call). These handles are associated with the Go runtime’s I/O completion port, which provides the following benefits for the resulting File: I/O methods (File.Read, File.Write, File.ReadAt, and File.WriteAt) do not block an OS thread. Deadline methods (File.SetDeadline, File.SetReadDeadline, and File.SetWriteDeadline) are supported. This enhancement is especially beneficial for applications that communicate via named pipes on Windows. Note that a handle can only be associated with one completion port at a time. If the handle provided to NewFile is already associated with a completion port, the returned File is downgraded to synchronous I/O mode. In this case, I/O methods will block an OS thread, and the deadline methods have no effect. * os: The filesystems returned by DirFS and Root.FS implement the new io/fs.ReadLinkFS interface. CopyFS supports symlinks when copying filesystems that implement io/fs.ReadLinkFS. The Root type supports the following additional methods: Root.Chmod, Root.Chown, Root.Chtimes, Root.Lchown, Root.Link, Root.MkdirAll, Root.ReadFile, Root.Readlink, Root.RemoveAll, Root.Rename, Root.Symlink, and Root.WriteFile. * reflect: The new TypeAssert function permits converting a Value directly to a Go value of the given type. This is like using a type assertion on the result of Value.Interface, but avoids unnecessary memory allocations. * regexp/syntax: The \p{name} and \P{name} character class syntaxes now accept the names Any, ASCII, Assigned, Cn, and LC, as well as Unicode category aliases like \p{Letter} for \pL. Following Unicode TR18, they also now use case-insensitive name lookups, ignoring spaces, underscores, and hyphens. * runtime: Cleanup functions scheduled by AddCleanup are now executed concurrently and in parallel, making cleanups more viable for heavy use like the unique package. Note that individual cleanups should still shunt their work to a new goroutine if they must execute or block for a long time to avoid blocking the cleanup queue. * runtime: A new GODEBUG=checkfinalizers=1 setting helps find common issues with finalizers and cleanups, such as those described in the GC guide. In this mode, the runtime runs diagnostics on each garbage collection cycle, and will also regularly report the finalizer and cleanup queue lengths to stderr to help identify issues with long-running finalizers and/or cleanups. See the GODEBUG documentation for more details. * runtime: The new SetDefaultGOMAXPROCS function sets GOMAXPROCS to the runtime default value, as if the GOMAXPROCS environment variable is not set. This is useful for enabling the new GOMAXPROCS default if it has been disabled by the GOMAXPROCS environment variable or a prior call to GOMAXPROCS. * runtime/pprof: The mutex profile for contention on runtime-internal locks now correctly points to the end of the critical section that caused the delay. This matches the profile’s behavior for contention on sync.Mutex values. The runtimecontentionstacks setting for GODEBUG, which allowed opting in to the unusual behavior of Go 1.22 through 1.24 for this part of the profile, is now gone. * sync: The new WaitGroup.Go method makes the common pattern of creating and counting goroutines more convenient. * testing: The new methods T.Attr, B.Attr, and F.Attr emit an attribute to the test log. An attribute is an arbitrary key and value associated with a test. * testing: With the -json flag, attributes appear as a new “attr” action. * testing: The new Output method of T, B and F provides an io.Writer that writes to the same test output stream as TB.Log. Like TB.Log, the output is indented, but it does not include the file and line number. * testing: The AllocsPerRun function now panics if parallel tests are running. The result of AllocsPerRun is inherently flaky if other tests are running. The new panicking behavior helps catch such bugs. * testing/fstest: MapFS implements the new io/fs.ReadLinkFS interface. TestFS will verify the functionality of the io/fs.ReadLinkFS interface if implemented. TestFS will no longer follow symlinks to avoid unbounded recursion. * unicode: The new CategoryAliases map provides access to category alias names, such as “Letter” for “L”. * unicode: The new categories Cn and LC define unassigned codepoints and cased letters, respectively. These have always been defined by Unicode but were inadvertently omitted in earlier versions of Go. The C category now includes Cn, meaning it has added all unassigned code points. * unique: The unique package now reclaims interned values more eagerly, more efficiently, and in parallel. As a consequence, applications using Make are now less likely to experience memory blow-up when lots of truly unique values are interned. * unique: Values passed to Make containing Handles previously required multiple garbage collection cycles to collect, proportional to the depth of the chain of Handle values. Now, once unused, they are collected promptly in a single cycle. * Darwin port: As announced in the Go 1.24 release notes, Go 1.25 requires macOS 12 Monterey or later. Support for previous versions has been discontinued. * Windows port: Go 1.25 is the last release that contains the broken 32-bit windows/arm port (GOOS=windows GOARCH=arm). It will be removed in Go 1.26. * Loong64 port: The linux/loong64 port now supports the race detector, gathering traceback information from C code using runtime.SetCgoTraceback, and linking cgo programs with the internal link mode. * RISC-V port: The linux/riscv64 port now supports the plugin build mode. * RISC-V port: The GORISCV64 environment variable now accepts a new value rva23u64, which selects the RVA23U64 user-mode application profile. ++++ gstreamer: - Update to version 1.26.5: + Highlighted bugfixes: - audioconvert: Fix caps negotiation regression when using a mix matrix - cea608overlay, cea708overlay: Accept GPU memory buffers if downstream supports the overlay composition meta - d3d12screencapture source element and device provider fixes - decodebin3: Don't error on an incoming ONVIF metadata stream - uridecodebin3: Fix potential crash when adding URIs to messages, e.g. if no decoder is available - v4l2: Fix memory leak for dynamic resolution change - VA encoder fixes - videorate, imagefreeze: Add support for JPEG XS - Vulkan integration fixes - wasapi2 audio device monitor improvements - threadshare: Many improvements and fixes to the generic threadshare and RTP threadshare elements - rtpbin2 improvements and fixes - gst-device-monitor-1.0 command line tool improvements - Various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements + gstreamer: - aggregator: add sub_latency_min to pad queue size - build: Disable C5287 warning on MSVC ++++ gstreamer-plugins-bad: - Update to version 1.26.5: + av1parse: Don't error out on "currently" undefined seq-level indices + av1parse: fails to parse AV1 bitstreams generated by FFmpeg using the av1_nvenc hardware encoder + d3d12screencapturedevice: Avoid false device removal on monitor reconfiguration + d3d12screencapturesrc: Fix OS handle leaks/random crash in WGC mode + meson: d3d12: Add support for MinGW DirectXMath package + va: Re-negotiate after FLUSH + vaXXXenc: calculate latency with corrected framerate + vaXXXenc: fix potential race condition + vkphysicaldevice: enable sampler ycbcr conversion, synchronization2 and timeline semaphore features + vulkan: ycbcr conversion extension got promoted in 1.1.0 + wasapi2: Port to IMMDevice based device selection ++++ gstreamer-plugins-base: - Update to version 1.26.5: + audioconvert: mix-matrix causes caps negotiation failure + decodebin3: Don't error on an incoming ONVIF metadata stream + gloverlay: Recompute geometry when caps change, and load texture after stopping and starting again + uridecodebin3: Add missing locking and NULL checks when adding URIs to messages + uridecodebin3: segfault in update_message_with_uri() if no decoder available + videorate, imagefreeze: add support for JPEG XS + gst-device-monitor-1.0: Add shell quoting for launch lines + gst-device-monitor-1.0: Fix criticals, and also accept utf8 in launch lines + gst-device-monitor-1.0: Use gst_print instead of g_print ++++ gstreamer-plugins-good: - Update to version 1.26.5: + 4l2: fix memory leak for dynamic resolution change + videorate, imagefreeze: add support for JPEG XS ++++ gstreamer-plugins-rs: - Update to version 1.26.5: + awstranscriber2, awstranslate: Handle multiple stream-start event + ceaX08overlay: support ANY caps features, allowing e.g. memory:GLMemory if downstream supports the overlay composition meta + hlsmultivariantsink: Fix master playlist version + rtprecv: Drop state lock before chaining RTCP packets from the RTP chain function + Add rtpbin2 examples + rtpmp4apay2: fix payload size prefix + rtp: threadshare: fix some property ranges + mpegtslivesrc: Remove leftover debug message + ts-audiotestsrc fixes + threadshare: fix flush for ts-queue ts-proxy & ts-intersrc + threadshare: fix regression in ts-proxysrc + threadshare: improvements to some elements + threadshare: Enable windows Win32_Networking feature + threadshare: queue & proxy: fix race condition stopping + threadshare: Also enable windows Win32_Networking_WinSock feature + tracers: pipeline-snapshot: reduce WebSocket connection log level + tracers: queue-levels: add support for threadshare DataQueue related elements + tracers: Update to etherparse 0.19 + transcriberbin: Fix handling of upstream latency query + webrtcsink: Move videorate before videoconvert and videoscale to avoid processing frames that would be dropped + Fix various new clippy 1.89 warnings ++++ gxml: - update fix-formatting.patch ++++ ibus-table: - Rename 1.17.14.tar.gz to ibus-table-1.17.14.tar.gz: Rename source package to conform to openSUSE community practices. ++++ kernel-default: - Remove patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 6fd6203 - Remove patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 71d99aa ++++ kernel-source: - Remove patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 6fd6203 - Remove patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 71d99aa ++++ kernel-docs: - Remove patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 6fd6203 - Remove patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 71d99aa ++++ kernel-firmware-amdgpu: - Update to version 20250811 (git commit 08ee93ff8ffa): * amdgpu: DMCUB updates for various ASICs ++++ kernel-firmware-platform: - Update to version 20250811 (git commit 08ee93ff8ffa): * panthor: Add firmware for more Mali GPUs ++++ kernel-kvmsmall: - Remove patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 6fd6203 - Remove patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 71d99aa ++++ kernel-obs-build: - Remove patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 6fd6203 - Remove patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 71d99aa ++++ kernel-obs-qa: - Remove patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 6fd6203 - Remove patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 71d99aa ++++ kernel-syms: - Remove patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 6fd6203 - Remove patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 71d99aa ++++ kernel-vanilla: - Remove patches.suse/Add-parameter-to-disable-simple-framebuffer-devices.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 6fd6203 - Remove patches.suse/drivers-firmware-skip-simpledrm-if-nvidia-drm.modese.patch (bsc#1206264) The proprietary Nvidia driver now supports simpledrm in all provided packages, G04 and later. Remove the workarounds from our kernel. - commit 71d99aa ++++ keylime: - Switch to pyproject macros ++++ lhasa: - Update to release 0.5.0 * The output from the list subcommands has been tweaked to be more consistent. * A workaround was added for a bug with the Amiga port of lha that causes some versions to generate malformed archives where directories are stored using the -lh0- compression type. * Support was added for the 64-bit file sizes header, allowing huge files (>=4GiB) generated by the MorphOS port of lha to be extracted correctly. * The compression ratio shown in list output now always rounds up to the next 0.1%. * The manual page now includes more detailed information about the different list subcommands. * The liblhasa headers are now installed into a directory with a name that accurately reflects the project's version number. * The liblhasa .so version numbers now have meaningful numbers. * Some error messages were changed to print filenames safely. * Extraction of DECLHA self-extracting archives was fixed. * Undefined behavior in the BitStreamReader code was fixed. ++++ cjose: - Update to 0.6.2.4: * fix memory leak in ECDH-ES JWE encryption/decryption in jwe.c * fix rsa_q = NULL initialization in _RSA_private_fields in jwk.c * fix memory allocation check (typo) in jwk.c * fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes * re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 ++++ pantheon-code: - update to version 8.1.0: * Fix build with GCC14 * Clone remote repository * CloneRepositoryDialog: fix warning attaching null widget * MainWindow: Fix missing gettext * Remove trash item from project menu * Markdown: Fix hang when extending list on last line * No tooltip and not selectable if dummy row * Symbol Pane - indicate when loading * SymbolPane: Fix filter for C symbols * Fix crash from highlight selection plugin - update to version 8.0.0: * A new gutter is added for adding/removing edit marks * Remote branches may now be opened from the "Branch" menu * Options to overwrite or cancel are given when switching branch * The branch names in the "Branch" submenus are now sorted alphabetically * The extension list now has switches instead of checkboxes in order to provide a larger target * terminal pane now implements smart copy-paste * Vala symbol pane now gives more information * Launcher actions now have icons * Opening and immediately closing a new document no longer prevents further documents being opened * The Vala symbol pane may only block the UI for a limited time if there are a large number of symbols * The search term now persists until editing or closing the search bar * No longer allow the parent or child of an open project to be itself opened * The active project dropdown now keeps in sync * Numbered lists are now handled correctly by Markdown plugin * The highlighting plugin now works with selections of more than one word * The "Open in …" menu is now sorted and includes a "Terminal Pane" entry * Folders containing may items now expand faster without blocking the UI * Symbol Pane now always scrolls document to selected symbol * Updated translations ++++ libfilezilla: - Update to 0.51.1 * New features: - Added fz::get_final_link_target * Bugfixes and minor changes: - *nix: Fixed reporting the type of file if following symlinks in fz::local_filesys::get_file_info - Changes from 0.51.0 * New features: - Added nocreate flag to fz::file::open::creation_flags, if set only files that already exist can be opened - Added sha1 and sha512 to fz::hash_accumulator - Added update_uint32_be and update_with_length to fz::hash_accumulator - *nix: fz::socket can now be used to connect to Unix Domain Sockets - Added flag to fz::uri to assume an authority when parsing schemless URIs - fz::get_file_info and fz::local_filesys::set_modification_time now return fz::result * Bugfixes and minor changes: - Improvements to timer handling if using event loops with the threadless flag ++++ nut: - Update to 2.8.4: https://github.com/networkupstools/nut/releases/tag/v2.8.4 For more see NEWS.adoc and UPGRADING.adoc in /usr/share/doc/packages/nut - Add new manpage files - Remove patches included in upstream release * fix-upsd-buffer-overflow.patch * fix-usbhid-ups-commands.patch - Bump libnutscan3 suffix with new SONAME, now libnutscan4 ++++ libnvidia-egl-wayland: - update to version 1.1.20 (needed by 580.76.05 driver, boo#1247907) * Add support for tegradisp-drm ++++ libnvidia-egl-x11: - updated to v1.0.2 tarball/version 1.0.3 with patches below (needed by 580.76.05 driver, boo#1247907) - added 0001-Increment-the-version-number-to-1.0.3.patch - added 0002-egl-x11-Add-support-for-tegradisp-drm.patch - supersedes the following patches * 0001-Increment-version-number-to-1.0.2.patch * 0002-Don-t-close-the-syncfd-in-WaitImplicitFence.patch * 0003-Fix-the-error-reporting-in-WaitTimelinePoint.patch ++++ libplacebo: - Add 12509c0f.patch: Fix build on python 3.13.6. ++++ libplacebo5: - Add 12509c0f.patch: Fix build on python 3.13.6. ++++ python313-core: - Add gh137583-only-lock-SSL-context.patch fixing the regression in 3.13.6 by breaking non-blocking TLS connections (gh#python/cpython#137583). ++++ python313-nogil-nogil-core: - Add gh137583-only-lock-SSL-context.patch fixing the regression in 3.13.6 by breaking non-blocking TLS connections (gh#python/cpython#137583). ++++ re2: - update to 2025-08-05: * use C++17 * use std::optional instead of absl::optiona; * python: fix re2.search(compiled, text) ++++ matrix-synapse: - Update to 1.136.0 (boo#1247970) Please check the relevant section in the upgrade notes as this release contains changes to MAS support, metrics labels and the module API which may require your attention when upgrading. This is the Synapse portion of the Matrix coordinated security release. This release includes support for room version 12 which fixes a number of security vulnerabilities, including CVE-2025-49090. The default room version is not changed. Not all clients will support room version 12 immediately, and not all users will be using the latest version of their clients. Large, public rooms are advised to wait a few weeks before upgrading to room version 12 to allow users throughout the Matrix ecosystem to update their clients. https://github.com/element-hq/synapse/blob/develop/docs/upgrade.md#upgrading-to-v11360 - Features - Add configurable rate limiting for the creation of rooms. (#18514) - Add support for MSC4293 - Redact on Kick/Ban. (#18540) - When admins enable themselves to see soft-failed events, they will also see if the cause is due to the policy server flagging them as spam via unsigned. (#18585) - Add ability to configure forward/outbound proxy via homeserver config instead of environment variables. See http_proxy, https_proxy, no_proxy_hosts. (#18686) - Advertise experimental support for MSC4306 (Thread Subscriptions) through /_matrix/clients/versions if enabled. (#18722) - Stabilise support for delegating authentication to Matrix Authentication Service. (#18759) - Implement the push rules for experimental MSC4306: Thread Subscriptions. (#18762) - Bugfixes - Fix bug introduced in 1.135.2 and 1.136.0rc2 where the Make Room Admin API would not treat a room v12's creator power level as the highest in room. (#18805) - Update MSC4293 redaction logic for room v12. (#80) - Allow return code 403 (allowed by C2S Spec since v1.2) when fetching profiles via federation. (#18696) - Register the MSC4306 (Thread Subscriptions) endpoints in the CS API when the experimental feature is enabled. (#18726) - Fix a long-standing bug where suspended users could not have server notices sent to them (a 403 was returned to the admin). (#18750) - Fix an issue that could cause logcontexts to be lost on rate-limited requests. Found by @realtyem. (#18763) - Fix invalidation of storage cache that was broken in 1.135.0. (#18786) - Improved Documentation - Minor improvements to README. (#18700) - Document that there can be multiple workers handling the receipts stream. (#18760) - Improve worker documentation for some device paths. (#18761) - Deprecations and Removals - Deprecate run_as_background_process exported as part of the module API interface in favor of ModuleApi.run_as_background_process. See the relevant section in the upgrade notes for more information. (#18737) - Internal Changes - Add a parameter to upgrade_rooms(..) to allow auto join local users. (#82) - Add debug logging for HMAC digest verification failures when using the admin API to register users. (#18474) - Speed up upgrading a room with large numbers of banned users. (#18574) - Fix config documentation generation script on Windows by enforcing UTF-8. (#18580) - Refactor cache, background process, Counter, LaterGauge, GaugeBucketCollector, Histogram, and Gauge metrics to be homeserver-scoped. (#18656, #18714, #18715, #18724, #18753, [#18725], #18670, #18748, #18751) - Reduce database usage in Sliding Sync by not querying for background update completion after the update is known to be complete. (#18718) - Improve order of validation and ratelimiting in room creation. (#18723) - Bump minimum version bound on Twisted to 21.2.0. (#18727, [#18729]) - Use twisted.internet.testing module in tests instead of deprecated twisted.test.proto_helpers. (#18728) - Remove obsolete /send_event replication endpoint. (#18730) - Update metrics linting to be able to handle custom metrics. (#18733) - Work around twisted.protocols.amp.TooLong error by reducing logging in some tests. (#18736) - Prevent "Move labelled issues to correct projects" GitHub Actions workflow from failing when an issue is already on the project board. (#18755) - Bump minimum supported Rust version (MSRV) to 1.82.0. Missed in #18553 (released in Synapse 1.134.0). (#18757) - Make Clock.sleep(...) return a coroutine, so that mypy can catch places where we don't await on it. (#18772) - Update implementation of MSC4306: Thread Subscriptions to include automatic subscription conflict prevention as introduced in later drafts. (#18756) - Updates to locked dependencies - Bump gitpython from 3.1.44 to 3.1.45. (#18743) - Bump mypy-zope from 1.0.12 to 1.0.13. (#18744) - Bump phonenumbers from 9.0.9 to 9.0.10. (#18741) - Bump ruff from 0.12.4 to 0.12.5. (#18742) - Bump sentry-sdk from 2.32.0 to 2.33.2. (#18745) - Bump tokio from 1.46.1 to 1.47.0. (#18740) - Bump types-jsonschema from 4.24.0.20250708 to 4.25.0.20250720. (#18703) - Bump types-psycopg2 from 2.9.21.20250516 to 2.9.21.20250718. (#18706) ++++ openQA: - Update to version 5.1754970590.1f9110da: * build(deps-dev): bump eslint from 9.32.0 to 9.33.0 ++++ ovmf: - Update firmware descriptors for SEV-SNP and TDX (bsc#1247847) - Add 50-ovmf-x86_64-sev-snp.json to support the 'amd-sev-snp' feature. - Remove the sev-snp feature from 50-ovmf-x86_64-sev.json. - Update the device in 60-ovmf-x86_64-tdx.json from 'pflash' to 'memory'. ++++ pantheon-shortcut-overlay: - update to version 8.1.0: * ShortcutsView update multitasking view shortcut * ShortcutsView: use listboxes * MainWindow: center and keep above with Pantheon protocol ++++ postgresql15-timescaledb: - Update to version 2.21.3 https://github.com/timescale/timescaledb/releases/tag/2.21.3 ++++ postgresql16-timescaledb: - Update to version 2.21.3 https://github.com/timescale/timescaledb/releases/tag/2.21.3 ++++ postgresql17-timescaledb: - Update to version 2.21.3 https://github.com/timescale/timescaledb/releases/tag/2.21.3 ++++ python-Twisted: - Make the libalternatives transition conditional ++++ python-coconut: - Update to 3.1.2 * See Coconut's documentation for more information on all of the features listed below. * #851, #852: Fixed comments inside of parentheses in the Jupyter kernel. * #846: reduce, takewhile, and dropwhile now support keyword arguments. * #848: Class and data patterns now support keyword argument name elision. * #847: New pattern-matching syntax for matching anonymous named tuples. * #843: Added compiler warnings for (some cases of) undefined variables. ++++ python-Django: - Update to 5.2.5 * Fixed a regression in Django 5.2.1 that prevented the usage of UNNEST PostgreSQL strategy of QuerySet.bulk_create() with foreign keys * Fixed a crash in Django 5.2 when filtering against a composite primary key using a tuple containing expressions * Fixed a crash in Django 5.2 when validating a model that uses GeneratedField or constraints composed of Q and Case lookups * Added compatibility for docutils 0.22 * Fixed a crash in Django 5.2 when using a ManyToManyField on a model with a composite primary key, by extending the fields.E347 system check - Convert to libalternatives on SLE-16-based and newer systems ++++ python-Markdown: - Add fix-py314.patch to fix failing tests on 3.14.* or 3.13.6+ (gh#Python-Markdown/markdown#1547). ++++ python-PyKCS11: - update to version 1.5.18: * add CKM_EXTRACT_KEY_FROM_KEY mechanism * add CKM_EDDSA and CK_EDDSA_PARAMS support * C_Initialize(): allow OS locking * PyKCS11.load() & .unload(): make the methods tread-safe * bugfix: store CKM_CONCATENATE_BASE_AND_KEY parameter in mechanism context * IsNum(): CKA_HW_FEATURE_TYPE is also a numeric value * improve support for multi-part encryption/decryption * fix some Python typing issues * Fix issue with vendor defined (CKM_VENDOR_DEFINED) mechanisms * fix/ignore all pylint warnings * use pytest for running tests * minor improvements ++++ python-acme: - Update to 4.2.0 * Catches and ignores errors during the directory fetch for ARI checking so that these errors do not hinder the actual certificate issuance. * Removed the dependency on pytz. * Deprecated acme.crypto_util.probe_sni * Support for Python 3.9 was deprecated and will be removed in our next planned release. ++++ python-anyio: - Update to 4.10.0: + Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer + Added various class methods to wrap existing sockets as listeners or socket streams + Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects + Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups + Added the ability to specify the thread name in start_blocking _portal() + Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. + Incorporated several documentation improvements from the EuroPython 2025 sprint + Added a documentation page explaining why one might want to use AnyIO's APIs instead of asyncio's + Updated the to_interpreters module to use the public concurrent.interpreters API on Python 3.14 or later + Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7 + Fixed return annotation of __aexit__ on async context managers. + Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size + Migrated testing and documentation dependencies from extras to dependency groups + Fixed compatibility of anyio.to_interpreter with Python 3.14.0 + Fixed SyntaxWarning on Python 3.14 about return in finally + Fixed RunVar name conflicts. RunVar instances with the same name should not share storage + Renamed the BrokenWorkerIntepreter exception to BrokenWorkerInterpreter. The old name is available as a deprecated alias. + Fixed an edge case in CapacityLimiter on asyncio where a task, waiting to acquire a limiter gets cancelled and is subsequently granted a token from the limiter, but before the cancellation is delivered, and then fails to notify the next waiting task ++++ python-cbor2: - Make the libalternatives transition conditional ++++ python-cchardet: - Make the libalternatives transition conditional ++++ python-certbot: - Update to 4.2.0 * Added --eab-hmac-alg parameter to support custom HMAC algorithm for External Account Binding. * Catches and ignores errors during the directory fetch for ARI checking so that these errors do not hinder the actual certificate issuance. * Removed the dependency on pytz * Support for Python 3.9 was deprecated and will be removed in our next planned release. * The Certbot snap no longer sets the environment variable PYTHONPATH stopping it from picking up Python files in the current directory and polluting the environment for Certbot hooks written in Python. * Previously, we claimed to set FAILED_DOMAINS and RENEWED_DOMAINS env variables for use by post-hooks when certificate renewals fail, but we were not actually setting them. Now, we are. * Certbot now always uses the server value from the renewal configuration file for ARI checks instead of the server value from the current invocation of Certbot. This helps prevent ARI requests from going to the wrong server if the user changes CAs. - Make the libalternatives transition conditional ++++ python-certbot-apache: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-cloudflare: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-digitalocean: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-dnsimple: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-dnsmadeeasy: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-google: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-linode: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-luadns: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-nsone: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-ovh: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-rfc2136: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-dns-route53: - update to version 4.2.0 * sync with the main certbot package ++++ python-certbot-nginx: - update to version 4.2.0 * sync with the main certbot package ++++ python-circuitbreaker: - Pass asyncio-mode to pytest. ++++ python-coloredlogs: - Convert to libalternatives on SLE-16-based and newer systems ++++ python-convertdate: - Make the libalternatives transition conditional ++++ python-identify: - migrate to libalternatives - Update to 2.6.13 * Added C++ 'ipp' and 'tpp' file extensions ++++ python-kombu: - Convert to pip-based build - Update to 5.5.4 * chore: add Codecov test analytics by @thomasrockhu-codecov in #2290 * Added DeepWiki to README by @Nusnus in #2295 * redis.connection.ConnectionPool API change: get_connection does not accept arguments by @woutdenolf in #2294 * Update mongodb.txt to match celery version by @auvipy in #2297 * Update ubuntu version as per blacksmiths update by @auvipy in #2301 * Resolve logger warnings by @emmanuel-ferdman in #2302 * Fixed lint error from kombu/transport/native_delayed_delivery.py by @Nusnus in #2308 * Prepare for release: v5.5.4 by @Nusnus in #2309 ++++ python-mypy: - Fix the libalternatives condition ++++ python-pillow-heif: - updated to version 1.1.0: * add Python 3.14 support - remove patch include-new-header.patch, fixed upstream ++++ python-pyproject-parser: - Make the libalternatives transition conditional ++++ python-pytest-snapshot: - Initial release of 0.9.0. ++++ python-python-socketio: - Add missing BuildRequires on pytest-asyncio. ++++ python-python-utils: - Update to 3.9.1: * Made tests far more reliable and fixed python_requires ++++ python-pyusb: - build with python3.11 on Leap 15 - fix changelog formatting ++++ python-uv: - update to 0.8.9 * Enhancements * Add --reinstall flag to uv python upgrade * Bug fixes * Include build settings in cache key for registry source distribution lookups * Avoid creating bin links on uv python upgrade if they don't already exist * Respect system proxies on macOS and Windows * Documentation * Add the 3.14 classifier ++++ python313: - Add gh137583-only-lock-SSL-context.patch fixing the regression in 3.13.6 by breaking non-blocking TLS connections (gh#python/cpython#137583). ++++ python313-documentation: - Add gh137583-only-lock-SSL-context.patch fixing the regression in 3.13.6 by breaking non-blocking TLS connections (gh#python/cpython#137583). ++++ python313-nogil: - Add gh137583-only-lock-SSL-context.patch fixing the regression in 3.13.6 by breaking non-blocking TLS connections (gh#python/cpython#137583). ++++ qemu: - Fix build issues due to Python version: * mkvenv: Support pip 25.2 (bsc#1247972) - Bug and CVE fixes: * tests: Avoid dependency on padding on signal messages (boo#1246830) * pcie_sriov: Fix configuration and state synchronization (bsc#1246992 CVE-2025-54566 CVE-2025-54567) * [openSUSE][RPM] linux-user: restart systemd-binfmt upon changes (bsc#1247443) ++++ qemu-linux-user: - Fix build issues due to Python version: * mkvenv: Support pip 25.2 (bsc#1247972) - Bug and CVE fixes: * tests: Avoid dependency on padding on signal messages (boo#1246830) * pcie_sriov: Fix configuration and state synchronization (bsc#1246992 CVE-2025-54566 CVE-2025-54567) * [openSUSE][RPM] linux-user: restart systemd-binfmt upon changes (bsc#1247443) ++++ sdbootutil: - Update to version 1+git20250812.13f4562: * Ignore UPDATE_NVRAM (bsc#1247952) ++++ selinux-policy: - Update to version 20250812 (bsc#1247772): * Fix selinux-autorelabel-generator label after upstream changes * Revert "Remove the mysql module sources" * Revert "Allow rasdaemon write access to sysfs (bsc#1229587)" * Reset postfix.fc to upstream, add alias instead * Allow systemd-networkd to create leases directory * Apply generator template to selinux-autorelabel generator * Support virtqemud handle hotplug hostdev devices * Allow virtstoraged create qemu /var/run files * Allow unconfined_domain_type cap2_userns capabilities * Label /usr/libexec/postfix/tlsproxy with postfix_smtp_exec_t * Remove the mysql module sources * dist/targeted/modules.conf: Enable kmscon module (bsc#1238137) * Update kmscon policy module to kmscon version 9 (bsc#1238137) * Allow login to getattr pidfs * Allow systemd to map files under /sys * systemd: drop duplicate init_nnp_daemon_domain lines * Fix typo * Allow logwatch stream connect to opensmtpd * Allow geoclue read NetworkManager pid files * Allow unconfined user a file transition for creating sudo log directory * Allow virtqemud read/write inherited dri devices * Allow xdm_t create user namespaces * Update policy for login_userdomain * Add ppd_base_profile to file transition to get tuned_rw_etc_t type * Update policy for bootupd * Allow logwatch work with opensmtpd * Update dovecot policy for dovecot 2.4.1 * Allow ras-mc-ctl write to sysfs files ++++ strawberry: - Update to version 1.2.12 + Fixed scrobbling for radio streams. + Fixed CDDA memory leaks. + Fixed device view CDDA loading (#1676). + Fixed collection directory editing (#1767). + Fixed devices sometimes being duplicated in the database. + Fixed alternating playlist row colors with Windows 11 style. + Fixed broken file filter for GME formats. + Fixed collection scanning for GME formats. + Fixed Chartlyrics. + Fixed network cache file descriptor leak on lyrics search with workaround for QTBUG-135641. + Fixed parsing Tidal urls with certain stream URL replies. + Fixed pixelated window icon on Wayland (#1753). + Fixed saving collection grouping with special characters in the name (#1758). + Fixed Spotify token not automatically updated on renewal when playing (#1769). + Implemented edit tag dialog reset for year, track, disc and rating. + Added ALAC to supported filetypes for iPods. + Added CD-TEXT support. + Added back Genius lyrics. + Added support for reporting more info to ListenBrainz. + Added support for BPM, mood and initial key tags. + Added support for sort tags to collection, playlists and smart playlists. ++++ suse-xsl-stylesheets: - Update to 2.95.15 Parametrize URLs of SUSE header in #724 - Update to 2.95.14 - JSON-LD: Select the nearest revision date in #718 - Fix #721: Integrate SUSE header in #722 ++++ syncthing: - Update to 2.0.0 This is the first release of the new 2.0 series. Expect some rough edges and keep a sense of adventure! Major changes: * Database backend switched from LevelDB to SQLite. There is a migration on first launch which can be lengthy for larger setups. The new database is easier to understand and maintain and, hopefully, less buggy. * The logging format has changed to use structured log entries (a message plus several key-value pairs). Additionally, we can now control the log level per package, and a new log level WARNING has been inserted between INFO and ERROR (which was previously known as WARNING...). The INFO level has become more verbose, indicating the sync actions taken by Syncthing. A new command line flag --log-level sets the default log level for all packages, and the STTRACE environment variable and GUI has been updated to set log levels per package. The --verbose and --logflags command line options have been removed and will be ignored if given. * Deleted items are no longer kept forever in the database, instead they are forgotten after six months. If your use case require deletes to take effect after more than a six month delay, set the - -db-delete-retention-interval command line option or corresponding environment variable to zero, or a longer time interval of your choosing. * Modernised command line options parsing. Old single-dash long options are no longer supported, e.g. -home must be given as --home. Some options have been renamed, others have become subcommands. All serve options are now also accepted as environment variables. See syncthing --help and syncthing serve --help for details. * Rolling hash detection of shifted data is no longer supported as this effectively never helped. Instead, scanning and syncing is faster and more efficient without it. * A "default folder" is no longer created on first startup. * Multiple connections are now used by default between v2 devices. The new default value is to use three connections: one for index metadata and two for data exchange. * The handling of conflict resolution involving deleted files has changed. A delete can now be the winning outcome of conflict resolution, resulting in the deleted file being moved to a conflict copy. ++++ systemd-repart-branding-Aeon: - Revert file-based systemd-repart config (Was not ready for Factory) ++++ tuba: - add a minimum version to clapper BR ++++ virt-manager: - bsc#1247865 - sles 16.0 rc3 KVM virt-manager detects windows 2025 as 2022 virtinst-windows-server-detection.patch ++++ xdg-desktop-portal-pantheon: - update to version 8.0.4: * XdgDesktopPortalPantheon: Do not access to xdg-desktop-portal before its fully initialized - update to version 8.0.3: * Screencast/SelectionRow: Use app name, style * ScreenCast: respect cursor-mode option - update to version 8.0.2: * Screenshot: include frame ++++ xlockmore: - Update to 5.84: * New automata mode paterson added from same article as spirolateral. Initial investigation by Paterson, Conway, and Beeler. - 5.83: * spirolateral mode added thanks to Martin Gardner's book "Knotted Donuts" chapter on "Worm Paths". This generates simple and complex spirolaterals. * Fixing -delay issue on VMS for x86-64. * Removed a warning in snprintf for Windows. - 5.82: * cage, moebius, morph3d updated by original author. Found a few long standing bugs and updated for larger resolution screens. Thanks to marcelofvianna AT gmail.com. ++++ yast2-bootloader: - Do not register random recovery pin during FDE intallation. (bsc#1247941) - 5.0.24 ++++ yast2-installation: - Drop dependency and usage of initviocons (bsc#1247578) - 5.0.17 ------------------------------------------------------------------ ------------------ 2025-8-11 - Aug 11 2025 ------------------- ------------------------------------------------------------------ ++++ Komikku: - update to version 1.85.0: * [Library] Added F9 shortcut to open Categories pane * [Servers] Added Invincible ComicsVF (FR) * [Servers] ComicHubFree (EN): Update * [Servers] Desu (RU): Update * [Servers] Perf Scan (FR): Update * [Servers] MangaCrab (ES): Update * [L10n] Updated Arabic, French and Russian translations - update to version 1.84.0: * [Reader] Added ability to apply filters to pages * [Reader] RTL/LTR/Vertical pager: Added keyboard zoom * [Reader] Webtoon pager: Fixed weird jumps during backward scrolling * [Servers] MangaWorld (IT): Update * [L10n] Updated Arabic and French translations ++++ MirrorCache: - Update to version 1.098: * Respect http(s) protocol in folder mirrorlist (#610) ++++ NetworkManager-openvpn: - Update to version 1.12.2: + Fix bug that caused that challenge was incorrectly reused if invalid or expired. + Add support for "data-ciphers-fallback" option. + Add GUI support for "data-ciphers" option. + Fix export for password connection type that was not exporting some fields. + Fix mnemonics in editor's Identity - Advanced view + Auth-dialog ported to GTK4 + Import certificates into the XDG_DATA_HOME directory. + Updated translations. - Drop nm-openvpn-fix-crash.patch: Fixed upstream (in a slightly different way). - Rebase fix-for-missing-whirlpool-hmac-authentication.patch with quilt. ++++ ServiceReport: - Update to version 2.2.4+git11.8bf0f05: * Remove PrivateDevices=true * remove type=oneshot * add new plugin Spyre card configuration ++++ ansible-linux-system-roles: - Add keylime_server role ++++ aws-lc: - update to version 1.57.1: * Resolve issue with conflicting pkg-config variables - update to version 1.57.0: * Preparation for Adopting SONAME and ABI Versioning * Offer P521 for signature_algorithms in client Hello * ML-KEM: Import AArch64 backend from mlkem-native * Add back X509_STORE_get_verify_cb and X509_STORE_set_lookup_crls_cb * Explicitly test that input length is as expected for ed25519ph * Fix Libwebsocket Build * Return NULL when a NULL or empty string is passed to NETSCAPE_SPKI_b64_decode * Reimplement SSL_clear_num_renegotiations * ABI monitoring GitHub workflow improvements * Migrate Openssl-tool parameter parsing * Add HMAC SHA3 benchmarks * Re-import s2n-bignum after merge of ML-KEM/Keccak functionality * Integrate formally verified AArch64 Keccak-x1 assembly * Add a couple more no-ops for legacy builds - remove soname.patch, as upstream formally introduced a soname - adjust the lib names - add the crypto lib as a requires to the devel package ++++ blueman: - Fix build on Leap 16.0 that has no nemo-extensions package (bsc#1247915) ++++ busybox: - Add patch to fix adduser inside containers on an SELinux host (boo#1247779): * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch - Don't throw debug info away during build, let RPM separate it afterwards ++++ cairo: - Add b5752618.patch: Backport from William Bader's request 621, Fix NULL access in active_edges_to_traps(). https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618 (CVE-2025-50422, bsc#1247589) ++++ cdogs-sdl: - Update to version 2.3.1 * Fix crash after mission end ++++ cliquer: - Update to release 1.23 * Add a pkg-config file ++++ dealers-choice: - dealers-choice 0.0.8: * Fix: Server does not send turn ids if player 0 disconnects during game + Display ping times in lobby + After winner declared, replace action timer with "end of game" timer + Allow specifying the client/server port via config or cli + Allow setting min, med, and max bets via server.conf ++++ deno: - Update to version 2.4.3: * 2.4.3 (#30251) * fix(tsconfig): don't use tsc-compatible defaults for deno.json compiler options (#30242) * perf(buffer): optimize Buffer.subarray and Buffer.prototype.utf8Slice (#30213) * fix(ext/node): use primordials in `ext/node/polyfills/internal_binding/pipe_wrap.ts` (#30241) * fix: reduce change of corrupt lockfile error when updating dependencies in the config file (#30239) * chore: regression where excluded path stopped being excluded (#30238) * fix(http): catch more tunnel close errors (#30236) * refactor: remove more allocations querying for permissions (#30237) * fix: ensure coverage dir is stored absolute to prevent issues when cwd changes (#30225) * fix: use 'deno_signals' crate for signal handling (#30204) * fix: don't invoke `Proxy` getter trap on `console.log` (#30230) * refactor: use Cow more in permissions (#30227) * fix(publish): improve diagnostic when importing from another package using a relative import (#30203) * refactor: remove usages of to_string_lossy().to_string() (#30224) * chore: remove redundant operations from README.md (#30228) * refactor: remove some allocations in op_require_x ops (#30212) * fix(ext/node): validate `fd` is integer on `fsync` and `fdatasync` (#30215) * fix(ext/node): use Zlib base for brotli handles (#30112) * refactor(node): remove some duplicate code and unnecessary allocations in node_resolver (#30209) * refactor: update to deno_path_util 0.5.2 (#30211) * fix: update setTimeout and setInterval callback type to support strin… (#30183) * fix(lib/node): change ERR_INVALID_PACKAGE_TARGET to ERR_PACKAGE_PATH_NOT_EXPORTED when no package.json#exports condition matches (#29841) * chore(bench): add missing commas in Extension struct literal (#30206) * fix(regression): do not error when specifying `--config` flag with `../` component (#30208) * fix(ext/node): fix segmentation fault when spkac is empty (#30207) * fix(bundle): don't force managed npm resolution (#30200) * fix: support package.json imports in a Deno workspace (#30198) * docs: Fix broken Getting Started link in CONTRIBUTING.md (#30194) * test: avoid race condition on node compat test runner (#30201) * Revert "fix(unstable): always require --allow-read permissions for raw imports (#30184)" (#30196) * fix(compile): do not include managed npm deps when graph does not have any npm pkgs (#30189) * fix(compile): do not error including npm packages that don't match current system (#30188) * fix: tunnels in processes that don't listen (#30178) * chore: mark some node compat tests as flaky (#30190) * fix(unstable): always require --allow-read permissions for raw imports (#30184) * fix(check): ensure module not found errors are surfaced (#30181) * fix(ext/node): implement tls.checkServerIdentitiy (#30148) * fix(ext/node): implement TLSSocket.getPeerCertificate (#30146) * fix: do not panic deserializing config with invalid number value (#30171) * refactor: upgrade to deno_core 0.353.0 (#30164) * fix(ext/node): `fs.read` and `fs.write` promisify compatibility (#30152) * chore: fix flaky dynamic_npm_resolution_failure (#30165) * fix(task): improve parsing of quotes in command substitution (#30162) * feat(unstable): add useful metadata to tunnel (#30161) * test: add ability to mark Node compat tests as flaky (#30158) * test: de-flake 'wasm_unreachable' test (#30157) * fix(lsp): improve renaming a file with bytes or text imports (#30142) * fix(ext/node): use primordials in `ext/node/polyfills/internal_binding/_listen.ts` (#30100) * chore: update deno_tunnel (#30154) * fix(ext/node): add process._rawDebug (#30141) * fix(lsp): do not error for bytes or text import of json module (#30137) * fix(task): show package name of task when --recursive (#30136) * fix(task): `--recursive` - order tasks by package dependencies (#30129) * refactor(lsp): move workspace_resolver to LspResolver (#30127) ++++ dracut: - Update to version 059+suse.749.g280c842e: * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819) ++++ python-kiwi: - Bump version: 10.2.31 → 10.2.32 - fix: resize for raid device, ensure vars like kiwi_RaidDev are loaded before setting disk variable ++++ element-desktop: - Add fix-oxc-resolver.patch to avoid network interaction during build - Version 1.11.109 This release supports the upcoming v12 ("hydra") Matrix room version and is necessary to view and participate in these rooms. [#]# ✨ Features * https://github.com/element-hq/element-web/pull/30529). Contributed by @RiotRobot. * https://github.com/element-hq/element-web/pull/30526). Contributed by @RiotRobot. * New room list: change icon and label of menu item for to start a DM (https://github.com/element-hq/element-web/pull/30470). Contributed by @florianduros. * Implement the member list with virtuoso (https://github.com/element-hq/element-web/pull/29869). Contributed by @langleyd. * Add labs option for history sharing on invite (https://github.com/element-hq/element-web/pull/30313). Contributed by @richvdh. * Bump wysiwyg to 2.39.0 adding support for pasting rich text content in the Rich Text Edtior (https://github.com/element-hq/element-web/pull/30421). Contributed by @langleyd. * Support `EventShieldReason.MISMATCHED_SENDER` (https://github.com/element-hq/element-web/pull/30403). Contributed by @richvdh. * Change unencrypted and public pills to blue (https://github.com/element-hq/element-web/pull/30399). Contributed by @florianduros. * Change color of public room icon (https://github.com/element-hq/element-web/pull/30390). Contributed by @florianduros. * Script for updating storybook screenshots (https://github.com/element-hq/element-web/pull/30340). Contributed by @dbkr. * Add toggle to hide empty state in devtools (https://github.com/element-hq/element-web/pull/30352). Contributed by @toger5. [#]# 🐛 Bug Fixes * https://github.com/element-hq/element-web/pull/30537). Contributed by @RiotRobot. * https://github.com/element-hq/element-web/pull/30536). Contributed by @RiotRobot. * Update for compatibility with v12 rooms (https://github.com/element-hq/element-web/pull/30452). Contributed by @dbkr. * New room list: fix tooltip on presence (https://github.com/element-hq/element-web/pull/30474). Contributed by @florianduros. * New room list: add tooltip for presence and room status (https://github.com/element-hq/element-web/pull/30472). Contributed by @florianduros. * Fix: Clicking on an item in the member list causes it to scroll to the top rather than show the profile view (https://github.com/element-hq/element-web/pull/30455). Contributed by @langleyd. * Put the 'decrypting' tooltip back (https://github.com/element-hq/element-web/pull/30446). Contributed by @dbkr. * Use server name explicitly for via. (https://github.com/element-hq/element-web/pull/30362). Contributed by @Half-Shot. * fix: replace hardcoded string in poll history dialog (https://github.com/element-hq/element-web/pull/30402). Contributed by @florianduros. * fix: replace hardcoded string on qr code back button (https://github.com/element-hq/element-web/pull/30401). Contributed by @florianduros. * Fix color of icon button with outline (https://github.com/element-hq/element-web/pull/30361). Contributed by @florianduros. ++++ element-web: - Version 1.11.109 This release supports the upcoming v12 ("hydra") Matrix room version and is necessary to view and participate in these rooms. [#]# ✨ Features * https://github.com/element-hq/element-web/pull/30529). Contributed by @RiotRobot. * https://github.com/element-hq/element-web/pull/30526). Contributed by @RiotRobot. * New room list: change icon and label of menu item for to start a DM (https://github.com/element-hq/element-web/pull/30470). Contributed by @florianduros. * Implement the member list with virtuoso (https://github.com/element-hq/element-web/pull/29869). Contributed by @langleyd. * Add labs option for history sharing on invite (https://github.com/element-hq/element-web/pull/30313). Contributed by @richvdh. * Bump wysiwyg to 2.39.0 adding support for pasting rich text content in the Rich Text Edtior (https://github.com/element-hq/element-web/pull/30421). Contributed by @langleyd. * Support `EventShieldReason.MISMATCHED_SENDER` (https://github.com/element-hq/element-web/pull/30403). Contributed by @richvdh. * Change unencrypted and public pills to blue (https://github.com/element-hq/element-web/pull/30399). Contributed by @florianduros. * Change color of public room icon (https://github.com/element-hq/element-web/pull/30390). Contributed by @florianduros. * Script for updating storybook screenshots (https://github.com/element-hq/element-web/pull/30340). Contributed by @dbkr. * Add toggle to hide empty state in devtools (https://github.com/element-hq/element-web/pull/30352). Contributed by @toger5. [#]# 🐛 Bug Fixes * https://github.com/element-hq/element-web/pull/30537). Contributed by @RiotRobot. * https://github.com/element-hq/element-web/pull/30536). Contributed by @RiotRobot. * Update for compatibility with v12 rooms (https://github.com/element-hq/element-web/pull/30452). Contributed by @dbkr. * New room list: fix tooltip on presence (https://github.com/element-hq/element-web/pull/30474). Contributed by @florianduros. * New room list: add tooltip for presence and room status (https://github.com/element-hq/element-web/pull/30472). Contributed by @florianduros. * Fix: Clicking on an item in the member list causes it to scroll to the top rather than show the profile view (https://github.com/element-hq/element-web/pull/30455). Contributed by @langleyd. * Put the 'decrypting' tooltip back (https://github.com/element-hq/element-web/pull/30446). Contributed by @dbkr. * Use server name explicitly for via. (https://github.com/element-hq/element-web/pull/30362). Contributed by @Half-Shot. * fix: replace hardcoded string in poll history dialog (https://github.com/element-hq/element-web/pull/30402). Contributed by @florianduros. * fix: replace hardcoded string on qr code back button (https://github.com/element-hq/element-web/pull/30401). Contributed by @florianduros. * Fix color of icon button with outline (https://github.com/element-hq/element-web/pull/30361). Contributed by @florianduros. ++++ emptyepsilon: - Fix GLM build errors (https://github.com/daid/EmptyEpsilon/issues/2111) ++++ epy: - Update to version 2025.5.27+git.1753549454.05f4e66: * Update Makefile to use new setuptools setup * feat: add a simple CSS processing * Report currently tagged version for --version ++++ forgejo-runner: - update to version 9.0.3: * feat: --health-* options are allowed in job..services..options * fix: log the URL of the action when it fails schema validation * fix: lingering services/volumes/networks after jobs if cleanup takes >1min - update to version 9.0.2: * PR: feat: use cache-{from,to}: type=gha in the docker/build-push-action example * PR: feat: add an LXC based example of docker/build-push-action usage * PR: fix: vars context is allowed in default values of action inputs ++++ fractal: - Update to version 12 (CVE-2025-55159, boo#1248050): + Requesting invites to rooms (aka knocking) is now possible, as is enabling such requests for room admins. + The upcoming room version 12 is supported, with the special power level of room creators. + A room can be marked as unread via the context menu in the sidebar. + You can now see if a section in the sidebar has any notifications or activity when it is collapsed. + Clicking on the name of the sender of a message adds a mention to them in the composer. + The safety setting to hide media previews in rooms is now synced between Matrix clients and we added another safety setting (which is also synced) to hide avatars in invites. + Updated translations. ++++ framework-inputmodule-control: - Update vendor tarball to fix CVE-2023-53156 (bsc#1247082) and CVE-2024-58266 (bsc#1247198) - Add update-toolchain.patch to update rust edition to 2024 to enable updates of vendored crates ++++ ghc-network: - Update network to version 3.2.8.0. [#] CHANGELOG for network [#]# Version 3.2.8.0 * sockopt: add IP_DONTFRAG/IP_MTU_DISCOVER option. [#603](https://github.com/haskell/network/pull/603) * Add new SocketOption KeepInit. [#600](https://github.com/haskell/network/pull/600) * Remove withSocketsDo from examples. [#596](https://github.com/haskell/network/pull/596) ++++ gnome-tour: - Update to latest version in https://github.com/openSUSE/gnome-tour: * Revert "Remove from autostart if exists in /etc/xdg", we want this to be handled solely - Add gnome-tour-fix-vi-translation.patch: Fix translation to be usable in XML file. - Do not install autostart logic; we want this to be handled solely by openSUSE-welcome-launcher. ++++ google-guest-agent: - Update to version 20250718.00 * Update adapt script to run on startup/shutdown both (#561) * Update agent_uninstall.ps1 (#558) * Stop core plugin before removing agent package (#554) * Startup scripts should start after agent manager instead (#553) * Update presets and install dependencies on systemd units (#552) * Ensure agent service is disabled (#551) * Disable legacy agent to enable core plugin (#550) * Final fix for RHEL packaging for routes setup (#549) * Fix RHEL packaging for routes scripts (#548) * Packaging changes to include routes script installation (#542) * Update CLI name in packaging (#543) * systemd should manage only the main process (#544) ++++ google-guest-configs: - Update to version 20250807.00 * Merge pull request #96 from rjschwei:noDupMetaData * Avoid duplicate entries for the metadata server in /etc/hosts - Drop ggc-no-dup-metasrv-entry.patch, merged upstream ++++ google-osconfig-agent: - Update to version 20250806.00 * Fixed JSON identifier for the universe domain (#855) - from version 20250729.00 * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828) - from version 20250725.02 * Update utils.go (#854) * Upgrade golang.org/x/oauth2 package to the latest. (#853) * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839) - from version 20250725.01 * Bump golang.org/x/oauth2 (#848) * Port fix for debian 11 to goo package manager. (#852) - from version 20250725.00 * Update Golang version in common.sh and skip backports repo for debian 11 (#850) - from version 20250723.01 * Add workflows to build package for el10 (#849) - from version 20250721.00 * Make OS Config agent TPC aware (#846) - from version 20250718.00 * Create workflows for new Debian 13. (#847) - Drop CVE-2025-22868.patch, merged upstream ++++ govulncheck-vulndb: - Update to version 0.0.20250811T192933 2025-08-11T19:29:33Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3822 CVE-2025-53942 GHSA-9g4j-v8w5-7x42 * GO-2025-3829 CVE-2025-54410 GHSA-4vq8-7jfc-9cvp * GO-2025-3830 CVE-2025-54388 GHSA-x4rx-4gw3-53p4 * GO-2025-3831 CVE-2025-50738 GHSA-hfcf-79gh-f3jc * GO-2025-3832 CVE-2021-21411 GHSA-652x-m2gr-hppm * GO-2025-3833 CVE-2025-54576 GHSA-7rh7-c77v-6434 * GO-2025-3834 CVE-2025-54424 GHSA-8j63-96wh-wh3j * GO-2025-3835 CVE-2025-54386 GHSA-q6gg-9f92-r9wg * GO-2025-3836 CVE-2025-6037 GHSA-6c5r-4wfc-3mcx * GO-2025-3837 CVE-2025-5999 GHSA-6h4p-m86h-hhgh * GO-2025-3838 CVE-2025-6000 GHSA-mr4h-qf9j-f665 * GO-2025-3839 CVE-2025-6011 GHSA-mwgr-84fv-3jh9 * GO-2025-3840 CVE-2025-6004 GHSA-qgj7-fmq2-6cc4 * GO-2025-3841 CVE-2025-6014 GHSA-qv3p-fmv3-9hww * GO-2025-3842 CVE-2025-6015 GHSA-v6r4-35f9-9rpw * GO-2025-3843 CVE-2025-8341 GHSA-3c93-92r7-j934 * GO-2025-3844 CVE-2025-53534 GHSA-fm3m-jrgm-5ppg * GO-2025-3845 CVE-2025-54801 GHSA-qx2q-88mx-vhg7 * GO-2025-3847 CVE-2025-54799 GHSA-q82r-2j7m-9rv4 * GO-2025-3848 CVE-2025-6013 GHSA-7rx2-769v-hrwf * GO-2025-3851 CVE-2025-44779 GHSA-93jv-pvg8-hf3v * GO-2025-3852 CVE-2025-7195 GHSA-856v-8qm2-9wjv * GO-2025-3853 CVE-2025-55000 GHSA-f7c3-mhj2-9pvg * GO-2025-3854 CVE-2025-54999 GHSA-hh28-h22f-8357 * GO-2025-3855 CVE-2025-54998 GHSA-j3xv-7fxp-gfhx * GO-2025-3856 CVE-2025-55003 GHSA-rxp7-9q75-vj3p * GO-2025-3857 CVE-2025-54996 GHSA-vf84-mxrq-crqc * GO-2025-3858 CVE-2025-54997 GHSA-xp75-r577-cvhp * GO-2025-3859 CVE-2025-55001 GHSA-2q8q-8fgw-9p6p ++++ gphoto: - updated to 2.5.32 release * --get-exif , --get-all-exif added * --reverse modifier option added for fileoperations commands * kill -USR2 can now stop --capture-movie * translations: updated polish, ukrainian, romanian, icelandic, romanian, russian, serbian, french, esperanto, hungarian, indonesian, islandic, romanian, svedish ++++ grub2: - UEFI NX support and NX Linux loader using shim loader protocol (bsc#1205588) (jsc#PED-13361) * 0001-modules-Make-.module_license-read-only.patch * 0002-modules-Strip-.llvm_addrsig-sections-and-similar.patch * 0003-modules-Don-t-allocate-space-for-non-allocable-secti.patch * 0004-modules-Load-module-sections-at-page-aligned-address.patch * 0005-nx-Add-memory-attribute-get-set-API.patch * 0006-nx-Set-page-permissions-for-loaded-modules.patch * 0007-nx-Set-the-NX-compatible-flag-for-the-GRUB-EFI-image.patch * 0008-efi-Provide-wrappers-for-load_image-start_image-and-.patch * 0009-efi-sb-Add-support-for-the-shim-loader-protocol.patch * 0010-efi-sb-Add-API-for-retrieving-shim-loader-image-hand.patch * 0011-loader-efi-chainloader-Use-shim-loader-image-handle-.patch * 0012-loader-efi-linux-Use-shim-loader-image-handle-where-.patch * 0013-nx-Rename-GRUB_DL_ALIGN-to-DL_ALIGN.patch - Fallback for legacy shim lock protocol while secure boot is enabled * 0001-linux-fallback-to-EFI-handover-on-x86_64.patch * 0002-linux-fallback-to-direct-PE-entry-boot-on-arm64.patch * 0003-efi-chainloader-fallback-to-direct-image-execution.patch * 0004-efi-chainloader-fix-missing-file_path-in-loaded_imag.patch - Removed patch * 0001-xen_boot-add-missing-grub_arch_efi_linux_load_image_.patch ++++ gsettings-desktop-schemas: - Add gsettings-desktop-schemas-meson-1.9.patch: Fix build against meson 1.9.0rc2 (glgo#gsettings-desktop-schemas!113) ++++ iproute2: - Update to release 6.16 https://lore.kernel.org/netdev/20250803143154.2d700ad4@hermes.local/ * bond: fix stack smash in xstats * tc: Parse FQ band weights correctly ++++ kernel-default: - Revert "usb: hub: Don't try to recover devices lost during warm reset." (bsc#1247895). - commit ce3fbe8 ++++ kernel-source: - Revert "usb: hub: Don't try to recover devices lost during warm reset." (bsc#1247895). - commit ce3fbe8 ++++ kernel-docs: - Revert "usb: hub: Don't try to recover devices lost during warm reset." (bsc#1247895). - commit ce3fbe8 ++++ kernel-kvmsmall: - Revert "usb: hub: Don't try to recover devices lost during warm reset." (bsc#1247895). - commit ce3fbe8 ++++ kernel-obs-build: - Revert "usb: hub: Don't try to recover devices lost during warm reset." (bsc#1247895). - commit ce3fbe8 ++++ kernel-obs-qa: - Revert "usb: hub: Don't try to recover devices lost during warm reset." (bsc#1247895). - commit ce3fbe8 ++++ kernel-syms: - Revert "usb: hub: Don't try to recover devices lost during warm reset." (bsc#1247895). - commit ce3fbe8 ++++ kernel-vanilla: - Revert "usb: hub: Don't try to recover devices lost during warm reset." (bsc#1247895). - commit ce3fbe8 ++++ sqlite3: - Update to version 3.50.4: * Fix two long-standings cases of the use of uninitialized variables in obscure circumstances. ++++ libhomfly: - Update to release 1.03 * Add pkg-config file ++++ ncurses: - Add ncurses patch 20250809 + add configure check for Win32 named pipes feature, using that to make nc_mingw.h obsolete in favor of nc_win32.h + amend limit used in alloc_pair, by applying an adjustment for default colors only when the maximum number of color pairs is greater than the maximum number of colors (report by "Ingvix"). ++++ sirocco: - Update to release 2.1.1 * Add a pkg-config file ++++ unbound: - simplify python handling. python2 support is dropped and python3 is built by default. Conditionals for the latter are removed. - enable EDNS subnet handling ++++ upower: - Update to version 1.90.9.28+git.903a827: * linux: integration-test: the settings discovery for charge threshold * linux: up-device-supply-battery: Discover the settings of charge threshold * up-device-battery: set up charge-threshold-settings-supported property * dbus: org.freedesktop.UPower.Device: the ChargeThresholdSettingsSupported property * linux: integration-test: Switch between Long_Life, Fast, Standard, and Adaptive * linux: up-device-supply-battery: Set charge_types to enable/disable the charge threshold * linux: up-device-supply-battery: Using charge_types Long_Life and Standard to manage charging threshold * linux: up-device-supply-battery: Set charge_types through an enum * linux: integration-test: reduce the test failure for the slow system * linux: integration-test: fix random test failure for test_bluetooth_hidpp_mouse * linux: integration-test: Switch the charge_types between Custom and Fast with charging threshold status * linux: up-device-supply-battery: Set charge_types to "Custom" when enabling charging threshold * up-history: reverse preset progression * openbsd: add support to fetch battery status from qcpas * tools: Reorder upower(1) command-line options to match manual page * docs: Document all upower(1) command-line options * tools: Handle invalid command-line arguments * daemon: Fix memory leak when reporting usage error * linux: integration-test: Two mice were paired with a unifying receiver * linux: up-enumerator-udev: Prevent reading the sysfs path from a non-GUdevDevice object * linux: up-device-supply: Only update model name when the device is under the same parent * linux: integration-test: Test exporting sysfs attributes * lib: up-device: Expose CapacityLevel, VoltageMinDesign, and VoltageMaxDesign * linux: up-device-supply-battery: read values of capacity_level and voltage_min/max * up-device-battery: Define capacity-level, voltage-min-design and voltage-max-design properties * dbus: Define CapacityLevel, VoltageMinDesign and VoltageMaxDesign properties * linux: integration_test: Wait 5 seconds for bluez to set up the device information * src: meson: extend the timeout for test_battery_state_guessing * Release 1.90.9 * linux: up-device-supply-battery: Don't mark fully charged batteries as discharging * linux: integration-test: Update test case for "state_all_discharging" support * up-daemon: introduce state_all_discharging member to allow critical action dispatch on external power * Revert "up-daemon: Handle the AC is online but the battery is discharging" * Release 1.90.8 * up-device: Fix mem leak when get device id * linux: up-device-supply-battery: Fix mem leak when refreshing battery info * rules: 95-upower-hid.hwdb: update hwdb for HID devices * linux: integration-test: Handle connecting the low-power charger * linux: up-device-supply-battery: reset the status to discharging when current_now is negative * up-daemon: Handle the AC is online but the battery is discharging       * linux: rules: fix warnings from `udevadm verify` ++++ libzypp: - Make ld.so ignore the subarch packages during install (bsc#1246912) - version 17.37.17 (35) ++++ matrix-synapse: - Update to 1.135.2 This is the Synapse portion of the Matrix coordinated security release. This release includes support for room version 12 which fixes a number of security vulnerabilities, including CVE-2025-49090. The default room version is not changed. Not all clients will support room version 12 immediately, and not all users will be using the latest version of their clients. Large, public rooms are advised to wait a few weeks before upgrading to room version 12 to allow users throughout the Matrix ecosystem to update their clients. - Bugfixes - Fix invalidation of storage cache that was broken in 1.135.0. (#18786) - Internal Changes - Add a parameter to upgrade_rooms(..) to allow auto join local users. (#82) - Speed up upgrading a room with large numbers of banned users. (#18574) ++++ maven-archiver: - Upgrade to maven-archiver 3.6.4 * New features and improvements + improve Reproducible Builds javadoc + Fall back on SOURCE_DATE_EPOCH if it exists * Bug Fixes + Treat empty Automatic-Module-Name as no Automatic-Module-Name at all * Maintenance + Enable GitHub Issues * Dependency updates + Bump org.apache.maven.shared:maven-shared-components from 43 to 45 + Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28 + Bump org.assertj:assertj-core from 3.26.0 to 3.27.3 - Removed patches: * automatic-module-name.patch * reproducible-from-environment.patch + integrated in this version ++++ meli: - Remove 0001-Revert-accounts-cancel-any-previous-mailbox-fetches.patch - Update to version 0.8.11: * contacts: add notmuch address book support in PR #551 "contacts: add notmuch address book support" * melib/imap: add ConnectionMutex struct * melib/imap: add conn pool to ConnectionMutex * melib/error: hardcode native-tls error check * widgets: don't add padding by skipping cols in FormWidget * melib/error: add TLSConnectionFailed kind variant in PR #578 "Misc fixes" * notifications: add DisplayMessageBox::arm() * conf: add notifications.ui_notifications setting * notifications: add DisplayMessageBox::deactivate() * notifications: add DisplayMessageBox::show_{prev,next}() * notifications: make update_xbiff() a method in PR #581 "Add notifications.ui_notifications setting to hide UI notifications or show them as system notifications" * melib/imap: add FIXME comment about imap-codec * melib/jmap: add serde(default) to Identity::id * melib/jmap: s/Id::new_uuid_v4()/Id::new_random() * melib/jmap: add serde(default) to Identity::may_delete * melib/jmap: Add State::new_random() method * melib/notmuch: add FFI config types bindings * melib/notmuch: add notmuch_database_reopen() * melib/notmuch: add Message::msg_id_str() method * melib/notmuch: add Message::find_message_by_path() * melib/notmuch: impl From for Error * melib/imap: add use_connection_pool conf option * melib/jmap: add session object to backend metadata * melib: convert MailBackend::watch into a stream * melib/maildir: switch backend.rs and mod.rs * melib/maildir: enhance filesystem/IO error metadata * melib/maildir: add ErrorKind::NotImplemented to unimplemented errors * melib/maildir: s/MaildirPathTrait/MaildirFilePathExt/ * melib/maildir: Add MaildirMailboxPathExt::validate_fs_subdirs() * melib/smtp: add ReplyCode::value() method * listing: don't forward events to self.component twice * listing/offline: don't accumulate repeated messages * melib/error: add ErrorKind::is_disconnected() * melib/imap: add support for LITERAL- extension in PR #604 "melib/imap: add support for LITERAL- extension" * composer: add custom_compose_hooks only once * show error summary if not empty in PR #586 "show error summary" * themes: impl BitOr for ThemeAttribute * Break metadata json lines in account status * melib/logging: manually redact http auth info in PR #570 "melib/logging: manually redact http auth info" * mail/listing: restore selection when refreshing same mailbox in PR #571 "mail/listing: restore selection when refreshing same mailbox" * Makefile: fix some minor logic/UX issues in PR #559 "Add some doc comments in meli crate" * pager: fix one-by-off error when drawing scrollbar * melib/imap: fix ImapLineIterator splitting literals * melib/mbox: require MboxFormat for parsing * tools: fix mboxparse binary compilation * melib/email: fix base36 conversion * melib: fixup TryFrom<&[EnvelopeHash]> for EnvelopeHashBatch impl * melib/jmap: Fix SetResponse struct definition * melib/maildir: split create_mailbox_sync() * melib/datetime: parse RFC2822 date without seconds in PR #599 "melib/email/parser: elaborate Address parsing errors" * melib/tests/jmap: fix errata from RFC in PR #602 "misc-fixes" * melib/nntp: fix error message typos * Fix clippy::sliced_string_as_bytes * melib: fix encoded-word encode and add tests in PR #612 "melib: fix encoded-word encode and add tests" * melib/mailto: fix parsing header values with '?' in PR #613 "melib/mailto: fix parsing header values with '?'" * melib/tests: feature gate test_maildir_config * melib/imap: add FETCH items variants in RequiredResponses in PR #580 "IMAP fixes" * melib/imap: only process parsed untagged responses * melib/jmap: don't abort refresh if Mailbox has no email_query_state * accounts: don't return after exec refresh_command in PR #597 "conf/tests: flush config file to disk" * terminal: disable wraparound mode in PR #616 "terminal: disable wraparound mode" * compose: s/attachments/attachment when # is 1 * compose: s/Option/AccountHash in EditAttachments * utilities: respect scroll_{left,right} shortcuts in Form/Button widgets * melib/imap: retry IDLE with exponential backoff * compose: don't pad EditAttachments area * terminal/screen: Screen::resize*() optimization in PR #568 "mail/status.rs: restore AccountStatus scrolling" * melib/imap: impl Default for ImapProtocol * melib/mbox: update totals when fetching in PR #591 "melib/mbox: update totals when fetching" * melib/mbox: check for CRLF when parsing * melib/gpgme: allow unused_unsafe on std::env stuff * melib/jmap: derive Clone for MailboxObject * melib/notmuch: split symbol name in call!() macro * melib/imap: make keepalive at least 30 minutes in PR #592 "misc-fixes" * melib: impl From for BackendEvent * melib: impl TryFrom for BackendEvent * melib/maildir: validate fs path in list_mail_in_maildir_fs() * melib/maildir: split MaildirPathTrait * melib/maildir: log error instead of debug_assert! * melib/maildir: use async channel in watch() * melib/maildir: return path in save_to_mailbox() * melib/maildir: calc MailboxHash from cache in watch() * melib/jmap: impl Deserialize for Filter, Query * melib/jmap: impl Serialize for EmailObject * melib/email/parser: elaborate Address parsing errors * melib/nntp: increase tcp keepalive to 30 mins * melib/nntp: set appropriate ErrorKind to errors * melib/nntp: convert block comments to line * melib/nntp: retry fetch if disconnected * melib/nntp: try connect first before attempting operations * composer: allow empty default header values * melib/nntp: run rustfmt * composer: use rfc5536 format for User-Agent value * composer: replying to self should reply to previous recipients * conf: impl DotAddressable for ComposingSettings in PR #605 "Misc composer stuff" * melib/imap: BEGIN IMMEDIATE transactions * melib/imap: support server subscriptions override * contacts/editor: use AccountHash instead of index * view/envelope: use Context's cmd_buf in PR #615 "misc" * melib/text: allow empty generated unicode tables * melib/jmap: ser/de SetError manually in PR #594 "JMAP fixups" * melib/jmap: fix Get ser/de * melib/maildir: remove stream module * Fix clippy::manual_ok_err * accounts: check if online on watch errors * compose: rewrite to draw attachments after headers * melib/backends: remove obsolete ReadOnlyOp * melib/contacts: fix formatting of a log::warn line * melib/email/headers: add #[inline] to small methods * melib/backend: remove BackendOp * melib/imap/connection.rs: remove unnecessary let * compose: rename Cursor to Focus * melib/email: move imap stuff to melib::imap module * main.rs: use unbounded channel for thread events in PR #565 "Misc" * mail/status.rs: restore AccountStatus scrolling * melib/imap: fix mailbox update logic on expunge in PR #567 "melib/imap: fix mailbox update logic on expunge" * mail/listing: don't move cursor to top when refreshing in PR #572 "mail/listing: don't move cursor to top when refreshing" * Fix new clippy complexity lint warning * mail/listing.rs: forward unhandled events * mail/listing.rs: fix y offset calc in menu cursor with collapsed * Rename ForkType to ForkedProcess * types: replace ForkedProcess::Finished with UIEvent * state.rs: rewrite State::try_wait_on_child() * state.rs: refactor kill_child() into method * state.rs: refactor try_wait_on_child() into method * state.rs: use ForkedProcess::{kill, try_wait} on State::drop * main.rs: try wait on all forked process on SIGCHLD in PR #579 "Refactor handling of forked processes" * melib/imap: remove unnecessary RequiredResponses consts * melib/imap: rename {EXAMINE,SELECT}_REQUIRED * melib/imap: rename NO_REQUIRED to NO * tools: fix lints and compilation in PR #587 "melib/mbox: check for CRLF when parsing" * melib/imap: allow lint on init_cache() arg * melib: move base36 to utils mod * melib/jmap: s/IdentityObject/Identity * melib/notmuch: remove Clone derive from Message * melib/jmap: process destroyed ids in Email/changes in PR #595 "JMAP fixups" * melib/maildir: Remove root_mailbox from MaildirWatch * melib/maildir: fix save_to_mailbox() error msg * melib/notmuch: rewrite watching logic * compose: remove extra dot from dialog message * melib/email/parser: change ParsingError display * composer: remove extra_identity_addresses from To: * compose.rs: fix compilation error without gpgme * Fix clippy::len_zero * Fix clippy::literal_string_with_formatting_args * Fix clippy::double_ended_iterator_last * Fix clippy::needless_option_take in PR #611 "compose.rs: fix compilation error without gpgme and clippy lint fixes" * melib/contacts: remove Contacts::{created,last_edited} * accounts.rs: Remove std module imports * mail/compose.rs: remove duplicate field init * listing: move cmd_buf logic to Context * state: make Context children field take ForkedProcess * scripts/rfc_to_rs_mdoc.py: reformat * version_migrations: use array in const asserts in PR #614 "Misc" * melib/accounts: add #[inline] attribute to methods * melib/collections: add #[inline] to small methods * docs: add more doc comments to version_migrations mod * docs: add more doc comments to conf mod * docs: add more doc comments to utilities::widgets mod * docs: fix example in custom_compose_hooks in PR #561 "docs: fix example in custom_compose_hooks" * docs/meli.conf.5: describe what "notifications" entail * docs/meli.conf.5: add missing "Optional" quantifier * docs/meli.1: add manage-jobs command * docs/meli.1: add manage-mailboxes command * DEVELOPMENT.md: explain how to run CI checks locally * DEVELOPMENT.md: document DCO requirement in PR #583 "Minor doc additions" * README.md: update install instructions * README.md: minor touch-ups in PR #590 "README.md: update install instructions" * README.md: mention matrix channel in PR #603 "misc-fixes-minor" * melib/email/headers: add documentation(s) * notifications: add missing DisplayMessageBox docs * notifications: add missing NotificationCommand docs * melib/notmuch: add doc comments to Message methods * melib/smtp: add some rustdoc comments * tests/test_cli_subcommands: purge subprocess envs in PR #574 "tests/test_cli_subcommands: purge subprocess envs" * melib: add test_imap_watch() * melib: add test_jmap_refresh() * melib: add test_maildir_watch() * melib: add test_notmuch_watch() * melib: add test_notmuch_refresh() in PR #582 "Convert Backend::watch function to return Stream" * melib/smtp: add an SMTP transaction test * conf/tests: speedup test_conf_theme_key_values() in PR #589 "conf/tests: speedup test_conf_theme_key_values()" * conf.rs: do not run migrations in unit tests * conf/tests: flush config file to disk * tools: run cargo-update * Revert "accounts: cancel any previous mailbox fetches" ++++ meli-with-debug-tracing: - Remove 0001-Revert-accounts-cancel-any-previous-mailbox-fetches.patch - Update to version 0.8.11: * contacts: add notmuch address book support in PR #551 "contacts: add notmuch address book support" * melib/imap: add ConnectionMutex struct * melib/imap: add conn pool to ConnectionMutex * melib/error: hardcode native-tls error check * widgets: don't add padding by skipping cols in FormWidget * melib/error: add TLSConnectionFailed kind variant in PR #578 "Misc fixes" * notifications: add DisplayMessageBox::arm() * conf: add notifications.ui_notifications setting * notifications: add DisplayMessageBox::deactivate() * notifications: add DisplayMessageBox::show_{prev,next}() * notifications: make update_xbiff() a method in PR #581 "Add notifications.ui_notifications setting to hide UI notifications or show them as system notifications" * melib/imap: add FIXME comment about imap-codec * melib/jmap: add serde(default) to Identity::id * melib/jmap: s/Id::new_uuid_v4()/Id::new_random() * melib/jmap: add serde(default) to Identity::may_delete * melib/jmap: Add State::new_random() method * melib/notmuch: add FFI config types bindings * melib/notmuch: add notmuch_database_reopen() * melib/notmuch: add Message::msg_id_str() method * melib/notmuch: add Message::find_message_by_path() * melib/notmuch: impl From for Error * melib/imap: add use_connection_pool conf option * melib/jmap: add session object to backend metadata * melib: convert MailBackend::watch into a stream * melib/maildir: switch backend.rs and mod.rs * melib/maildir: enhance filesystem/IO error metadata * melib/maildir: add ErrorKind::NotImplemented to unimplemented errors * melib/maildir: s/MaildirPathTrait/MaildirFilePathExt/ * melib/maildir: Add MaildirMailboxPathExt::validate_fs_subdirs() * melib/smtp: add ReplyCode::value() method * listing: don't forward events to self.component twice * listing/offline: don't accumulate repeated messages * melib/error: add ErrorKind::is_disconnected() * melib/imap: add support for LITERAL- extension in PR #604 "melib/imap: add support for LITERAL- extension" * composer: add custom_compose_hooks only once * show error summary if not empty in PR #586 "show error summary" * themes: impl BitOr for ThemeAttribute * Break metadata json lines in account status * melib/logging: manually redact http auth info in PR #570 "melib/logging: manually redact http auth info" * mail/listing: restore selection when refreshing same mailbox in PR #571 "mail/listing: restore selection when refreshing same mailbox" * Makefile: fix some minor logic/UX issues in PR #559 "Add some doc comments in meli crate" * pager: fix one-by-off error when drawing scrollbar * melib/imap: fix ImapLineIterator splitting literals * melib/mbox: require MboxFormat for parsing * tools: fix mboxparse binary compilation * melib/email: fix base36 conversion * melib: fixup TryFrom<&[EnvelopeHash]> for EnvelopeHashBatch impl * melib/jmap: Fix SetResponse struct definition * melib/maildir: split create_mailbox_sync() * melib/datetime: parse RFC2822 date without seconds in PR #599 "melib/email/parser: elaborate Address parsing errors" * melib/tests/jmap: fix errata from RFC in PR #602 "misc-fixes" * melib/nntp: fix error message typos * Fix clippy::sliced_string_as_bytes * melib: fix encoded-word encode and add tests in PR #612 "melib: fix encoded-word encode and add tests" * melib/mailto: fix parsing header values with '?' in PR #613 "melib/mailto: fix parsing header values with '?'" * melib/tests: feature gate test_maildir_config * melib/imap: add FETCH items variants in RequiredResponses in PR #580 "IMAP fixes" * melib/imap: only process parsed untagged responses * melib/jmap: don't abort refresh if Mailbox has no email_query_state * accounts: don't return after exec refresh_command in PR #597 "conf/tests: flush config file to disk" * terminal: disable wraparound mode in PR #616 "terminal: disable wraparound mode" * compose: s/attachments/attachment when # is 1 * compose: s/Option/AccountHash in EditAttachments * utilities: respect scroll_{left,right} shortcuts in Form/Button widgets * melib/imap: retry IDLE with exponential backoff * compose: don't pad EditAttachments area * terminal/screen: Screen::resize*() optimization in PR #568 "mail/status.rs: restore AccountStatus scrolling" * melib/imap: impl Default for ImapProtocol * melib/mbox: update totals when fetching in PR #591 "melib/mbox: update totals when fetching" * melib/mbox: check for CRLF when parsing * melib/gpgme: allow unused_unsafe on std::env stuff * melib/jmap: derive Clone for MailboxObject * melib/notmuch: split symbol name in call!() macro * melib/imap: make keepalive at least 30 minutes in PR #592 "misc-fixes" * melib: impl From for BackendEvent * melib: impl TryFrom for BackendEvent * melib/maildir: validate fs path in list_mail_in_maildir_fs() * melib/maildir: split MaildirPathTrait * melib/maildir: log error instead of debug_assert! * melib/maildir: use async channel in watch() * melib/maildir: return path in save_to_mailbox() * melib/maildir: calc MailboxHash from cache in watch() * melib/jmap: impl Deserialize for Filter, Query * melib/jmap: impl Serialize for EmailObject * melib/email/parser: elaborate Address parsing errors * melib/nntp: increase tcp keepalive to 30 mins * melib/nntp: set appropriate ErrorKind to errors * melib/nntp: convert block comments to line * melib/nntp: retry fetch if disconnected * melib/nntp: try connect first before attempting operations * composer: allow empty default header values * melib/nntp: run rustfmt * composer: use rfc5536 format for User-Agent value * composer: replying to self should reply to previous recipients * conf: impl DotAddressable for ComposingSettings in PR #605 "Misc composer stuff" * melib/imap: BEGIN IMMEDIATE transactions * melib/imap: support server subscriptions override * contacts/editor: use AccountHash instead of index * view/envelope: use Context's cmd_buf in PR #615 "misc" * melib/text: allow empty generated unicode tables * melib/jmap: ser/de SetError manually in PR #594 "JMAP fixups" * melib/jmap: fix Get ser/de * melib/maildir: remove stream module * Fix clippy::manual_ok_err * accounts: check if online on watch errors * compose: rewrite to draw attachments after headers * melib/backends: remove obsolete ReadOnlyOp * melib/contacts: fix formatting of a log::warn line * melib/email/headers: add #[inline] to small methods * melib/backend: remove BackendOp * melib/imap/connection.rs: remove unnecessary let * compose: rename Cursor to Focus * melib/email: move imap stuff to melib::imap module * main.rs: use unbounded channel for thread events in PR #565 "Misc" * mail/status.rs: restore AccountStatus scrolling * melib/imap: fix mailbox update logic on expunge in PR #567 "melib/imap: fix mailbox update logic on expunge" * mail/listing: don't move cursor to top when refreshing in PR #572 "mail/listing: don't move cursor to top when refreshing" * Fix new clippy complexity lint warning * mail/listing.rs: forward unhandled events * mail/listing.rs: fix y offset calc in menu cursor with collapsed * Rename ForkType to ForkedProcess * types: replace ForkedProcess::Finished with UIEvent * state.rs: rewrite State::try_wait_on_child() * state.rs: refactor kill_child() into method * state.rs: refactor try_wait_on_child() into method * state.rs: use ForkedProcess::{kill, try_wait} on State::drop * main.rs: try wait on all forked process on SIGCHLD in PR #579 "Refactor handling of forked processes" * melib/imap: remove unnecessary RequiredResponses consts * melib/imap: rename {EXAMINE,SELECT}_REQUIRED * melib/imap: rename NO_REQUIRED to NO * tools: fix lints and compilation in PR #587 "melib/mbox: check for CRLF when parsing" * melib/imap: allow lint on init_cache() arg * melib: move base36 to utils mod * melib/jmap: s/IdentityObject/Identity * melib/notmuch: remove Clone derive from Message * melib/jmap: process destroyed ids in Email/changes in PR #595 "JMAP fixups" * melib/maildir: Remove root_mailbox from MaildirWatch * melib/maildir: fix save_to_mailbox() error msg * melib/notmuch: rewrite watching logic * compose: remove extra dot from dialog message * melib/email/parser: change ParsingError display * composer: remove extra_identity_addresses from To: * compose.rs: fix compilation error without gpgme * Fix clippy::len_zero * Fix clippy::literal_string_with_formatting_args * Fix clippy::double_ended_iterator_last * Fix clippy::needless_option_take in PR #611 "compose.rs: fix compilation error without gpgme and clippy lint fixes" * melib/contacts: remove Contacts::{created,last_edited} * accounts.rs: Remove std module imports * mail/compose.rs: remove duplicate field init * listing: move cmd_buf logic to Context * state: make Context children field take ForkedProcess * scripts/rfc_to_rs_mdoc.py: reformat * version_migrations: use array in const asserts in PR #614 "Misc" * melib/accounts: add #[inline] attribute to methods * melib/collections: add #[inline] to small methods * docs: add more doc comments to version_migrations mod * docs: add more doc comments to conf mod * docs: add more doc comments to utilities::widgets mod * docs: fix example in custom_compose_hooks in PR #561 "docs: fix example in custom_compose_hooks" * docs/meli.conf.5: describe what "notifications" entail * docs/meli.conf.5: add missing "Optional" quantifier * docs/meli.1: add manage-jobs command * docs/meli.1: add manage-mailboxes command * DEVELOPMENT.md: explain how to run CI checks locally * DEVELOPMENT.md: document DCO requirement in PR #583 "Minor doc additions" * README.md: update install instructions * README.md: minor touch-ups in PR #590 "README.md: update install instructions" * README.md: mention matrix channel in PR #603 "misc-fixes-minor" * melib/email/headers: add documentation(s) * notifications: add missing DisplayMessageBox docs * notifications: add missing NotificationCommand docs * melib/notmuch: add doc comments to Message methods * melib/smtp: add some rustdoc comments * tests/test_cli_subcommands: purge subprocess envs in PR #574 "tests/test_cli_subcommands: purge subprocess envs" * melib: add test_imap_watch() * melib: add test_jmap_refresh() * melib: add test_maildir_watch() * melib: add test_notmuch_watch() * melib: add test_notmuch_refresh() in PR #582 "Convert Backend::watch function to return Stream" * melib/smtp: add an SMTP transaction test * conf/tests: speedup test_conf_theme_key_values() in PR #589 "conf/tests: speedup test_conf_theme_key_values()" * conf.rs: do not run migrations in unit tests * conf/tests: flush config file to disk * tools: run cargo-update * Revert "accounts: cancel any previous mailbox fetches" ++++ moditect: - Update to v1.3.0 * Features + Use maven-archiver to parse ouputTimestamp + Reduce code duplication in AddModuleInfoTest * Fixes + Generate multi-release directory JAR entries - Removed patch: * 0001-Use-maven-archiver-to-parse-ouputTimestamp.patch + integrated in upstream ++++ net-tools: - Provide more readable error for interface name size checking introduced by net-tools-CVE-2025-46836.patch (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch). ++++ newsflash: - update to version 4.1.3: * Today: use local timezone * LogLevel Info by default * Fix new articles notification count * Local RSS: clean iframes even on summaries ++++ nheko: - Update to 0.12.1 * Security + Fix html escaping in several locations. + Encode urls in tooltips to prevent confusion. + Mark downloads with a "mark of the web" on Windows to warn before executing them. * Features + Commands to modify invite permissions. * Improvements + Also accept unencrypted verification events for compatibility with newer Element clients. + Show an "N hours later" bubble when there are gaps in the timeline. (Alexandru Scvorțov) + Use native emoji font support on Qt6.9. + Ban, unban, kick or redact by replying. + Update GPG key in flatpak refs (you need to readd the Nheko repo, if you are using it). + More framerates for screen sharing. (Integral) + Chunk key requests. + Remove reply fallbacks. + Disable http3 by default to reduce CPU usage. + Limit size of status messages. + Ask for password confirmation when exporting keys. (Integral) + Allow setting a scale factor on Windows. + Show current status message in the status message editor. + Use roomids in event links. + Stable Nheko app installer. * Translations + Russian + Estonian + Finnish + Japanese + German + Simplified Chinese + Indonesian + French + Dutch + Protugese (Brazil) + Chinese Traditional + Ukrainian + Esperanto + Korean * Bugfixes + Long room names breaking invite & community UI. + Message pagination could get stuck in specific cases. + Decline invites from the context menu. + Pinned messages getting cut off. + Room list menu not opening. + Emoji font in reactions. + Row spacing in the command completer. (Integral) + Hours were calculated incorrectly in human-readable durations. (Integral) + Color of emoji picker categories in dark theme. (Integral) + Properly thumbnail tiny videos. + Profile name and unread message count in task bar entries. (Integral) + Properly purge animated media. + Fix sending messages with IME active. (q234rty) + Fix insets on Qt6.7+. + No wayland check on Haiku. (begasus) + Skip users we don't share a room with for invites. + Ignoring empty mxids. + Render avatar changes again. + Skipping room pings. - Remove upstreamed fix-build-with-fmt11.patch ++++ nix: - Add /nix/var/build to %files - Run %fdupes on %buildroot ++++ nvidia-open-driver-G06-signed-cuda: - update non-CUDA variant to 580.76.05 (boo#1247907) - get rid of rule of older KMPs not to load nvidia_drm module, which are still installed in parallel and therefore still active (boo#1247923) ++++ nvidia-settings: - update to version 580.76.05 (boo#1247907) ++++ nvidia-open-driver-G06-signed: - update non-CUDA variant to 580.76.05 (boo#1247907) - get rid of rule of older KMPs not to load nvidia_drm module, which are still installed in parallel and therefore still active (boo#1247923) ++++ openQA: - Update to version 5.1754903895.e603536f: * build(deps-dev): bump @eslint/plugin-kit from 0.3.4 to 0.3.5 * build(deps-dev): bump @eslint/core from 0.15.1 to 0.15.2 * build(deps-dev): bump @eslint/config-helpers from 0.3.0 to 0.3.1 ++++ openrct2: - Update to version 0.4.25 * https://github.com/OpenRCT2/OpenRCT2/releases/tag/v0.4.25 * Feature: [#24468] [Plugin] Add awards to plugin API. * Feature: [#24702] [Plugin] Add bindings for missing cheats (forcedParkRating, ignoreRidePrice, makeAllDestructible). * Feature: [#24794] The load/save browser can now optionally show mini map previews instead of screenshots. * Improved: [#24812] Taiwan Park has been added to the Extras tab if it is present. * Improved: [OpenSFX#12] Add Brake Fix, Buy and Dinghy Slide running sounds. * Change: [#24730] Security guards now only walk slowly in crowded areas. * Change: [#24843] Update android targetSDK to 36. * Fix: [#24598] Cannot load .park files that use official legacy footpaths by accident. * Fix: [#24611] The confirmation prompt for track file deletion is not vertically aligned. * Fix: [#24711] The map smoothing function only partially works for custom height map image files. * Fix: [#24761] The reliability bar in the ride window visually does not go below 10%. * Fix: [#24773] The new ride window debug authors does not show the correct authors for non legacy ride objects. * Fix: [#24775] The scenery and new ride windows do not filter by file name or identifier correctly for non legacy objects. * Fix: [#24777] The stall item preview cycles between all possible colours when random checkbox is ticked. * Fix: [#24794] The load/save browser does not resize cleanly when toggling the preview sidebar. * Fix: [#24824] The Air Powered Vertical Coaster top section track piece has vertical tunnels (original bug). * Fix: [#24825] The River Rapids flat-to-gentle track piece tunnels are incorrect on the gentle side. * Fix: [#24826] The Junior Roller Coaster flat-to-steep track piece tunnels are incorrect. * Fix: [#24829] The pattern of long grass across tiles is different to RCT1 and RCT2. * Fix: [#24831] Park names are being overwritten for custom RCT1 scenarios that use competition id slots. * Fix: [#24838] Not using localized word for conjunction when having multiple shortcuts for the same action. * Fix: [#24841] Fullscreen options do not work correctly with Emscripten. - Update dependencies * objects_version 1.7.2 (1.7.1) * openmusic_version 1.6.1 (1.6) * opensound_version 1.0.6 (1.0.5) ++++ os-autoinst: - Update to version 5.1754924817.84ae0ae: * VMWare: Use grep -F to handle fixed-strings in variables * VMWare: Use POSIX shell on ESXi host that uses Busybox * Add wrappers for testapi variables * backend: Use tpm-tis-device for TPM as default * Require openssh-clients for git clone with ssh * t: use mock not redefine for lua_set * t: make autotest tests pass if lua and/or python are missing ++++ python-bottle: - Make the libalternatives transition conditional ++++ python-Automat: - Make the libalternatives transition conditional ++++ python-CairoSVG: - Make the libalternatives transition conditional ++++ python-MechanicalSoup: - Update to 1.4.0 * Added support for Python 3.12 and 3.13. * Removed support for end of life python versions 3.6, 3.7, and 3.8. * Minimum versions of dependencies ``urllib3`` and ``certifi`` have been specified to mitigate security vulnerabilities. - Adjust upstream source name in spec file - Update BuildRequires and Requires from requirements.txt - Use Python 3.11 on SLE-15 by default ++++ python-aiocsv: - Add BuildRequires on pytest-asyncio due to pytest 8.4.1. - Switch to github tarball for test files. - Skip a test broken by cPython changes. ++++ python-aiohttp_cors: - Update to 0.8.1: * Fix packaging to not install on Python 3.8. * Make the library compatible with aiohttp 3.9+ and Python 3.9+ - Drop patches, merged upstream: * 0001-215-fixing-exception-message-216.patch * 0001-Fix-tests.patch * 278.patch * 412.patch ++++ python-alembic: - Make the libalternatives transition conditional ++++ python-argcomplete: - Make the libalternatives transition conditional ++++ python-argparse-manpage: - Make the libalternatives transition conditional ++++ python-asyncio-pool: - Update to 0.6.0: * Minor changes to support py3.10 + - Fix Source URL to not hardcode the version mulitple times. ++++ python-azure-appconfiguration-provider: - New upstream release + Version 2.2.0 + For detailed information about changes see the CHANGELOG.md file provided with this package ++++ python-bitarray: - Update to 3.6.0 * add `util.random_k()`, see #237 * add `util.sum_indices()` * optimize `util.xor_indices()` * move development files from `examples/` to `devel/` - Adjust file paths for removing .gitignore files from source ++++ python-breathe: - Make the libalternatives transition conditional ++++ python-certomancer: - Add missing BuildRequires on pytest-asyncio and pyhanko-certvalidator. ++++ python-curlylint: - Add patch avoid-resourcewarning.patch: * Avoid ResourceWarning in a metaclass, avoids test failures with pytest 8.4.1. ++++ python-makefun: - Add BuildRequires on pytest-asyncio. - Add patch set-pytest-asyncio-mode.patch: * Set asyncio-mode to auto. ++++ salt: - Revert require M2Crypto >= 0.44.0 for SUSE Family distros - Improve SL Micro 6.2 detection with grains - Fix functional.states.test_user for SLES 16 and Micro systems - Fix the tests failing on AlmaLinux 10 and other clones - Added: * improve-sl-micro-6.2-detection-with-grains.patch * fix-functional.states.test_user-for-sles-16-and-micr.patch * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch ++++ salt-test: - Revert require M2Crypto >= 0.44.0 for SUSE Family distros - Improve SL Micro 6.2 detection with grains - Fix functional.states.test_user for SLES 16 and Micro systems - Fix the tests failing on AlmaLinux 10 and other clones - Added: * improve-sl-micro-6.2-detection-with-grains.patch * fix-functional.states.test_user-for-sles-16-and-micr.patch * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch ++++ python-tree-sitter: - Update to version 0.25.1 * fix: pattern_index parameter to generic predicates is incorrect * build: work around GCC optimizer bug for aarch64 * build: bump tree_sitter/core from 58edb3a to 3624198 * ci(pypi): disable free-threaded builds - From skipped version 0.25.0: * Additions: - Language.name (getter) - Language.abi_version (getter) - Language.semantic_version (getter) - Language.supertypes (getter) - Language.subtypes(supertype) - Node.first_child_for_byte(byte) - Node.first_named_child_for_byte(byte) - Query.string_count (getter) - Query.capture_name(index) - Query.capture_quantifier(pattern_index, capture_index) - Query.string_value(index) - QueryCursor(query) - QueryCursor.match_limit (getter, setter, deleter) - QueryCursor.timeout_micros (getter, setter, deleter) - QueryCursor.did_exceed_match_limit (getter) - QueryCursor.set_max_start_depth(depth) - QueryCursor.set_byte_range(start, end) - QueryCursor.set_point_range(start, end) - QueryCursor.captures(node, predicate, progress_callback) - QueryCursor.matches(node, predicate, progress_callback) - LookaheadIterator.names() - LookaheadIterator.symbols() * Deprecations: - Language.version: use Language.abi_version - Language.query(source): use Query(language, source) - Parser.timeout_micros: use the progress_callback in parse() - QueryCursor.timeout_micros: use the progress_callback in matches() or captures() * Removals: - Node.child_containing_descendant(descendant): use Node.child_with_descendant(descendant) ! - Query.match_limit: moved to QueryCursor.match_limit ! - Query.set_match_limit(limit): moved to QueryCursor.match_limit ! - Query.did_exceed_match_limit: moved to QueryCursor.did_exceed_match_limit ! - Query.timeout_micros: moved to QueryCursor.timeout_micros ! - Query.set_timeout_micros(timeout): moved to QueryCursor.timeout_micros ! - Query.set_max_start_depth(depth): moved to QueryCursor.set_max_start_depth(depth) ! - Query.set_byte_range(byte_range): moved to QueryCursor.set_byte_range(start, end) ! - Query.set_point_range(point_range): moved to QueryCursor.set_point_range(start, end) ! - Query.captures(node, predicate): moved to QueryCursor.captures(node, predicate, progress_callback) ! - Query.matches(node, predicate): moved to QueryCursor.matches(node, predicate, progress_callback) ! - LookaheadIterator.iter_names(): use LookaheadIterator.names() ! * Changes: - Parser.parse(): encoding parameter also accepts "utf16le" & "utf16be" - Parser.parse(): added progress_callback parameter - LookaheadIterator.__next__(): yields tuple[int, str] ! - LookaheadIterator.reset(state, language): renamed from reset_state ! ++++ yt-dlp: - Update to release 2025.08.11 * yt: Add player params to mweb client * dash: Re-extract if using --load-info-json with - -live-from-start ++++ rioterm: - Update to version 0.2.28: * update deps and prepare v0.2.28 * update release.md * fix lint * remove damage * drop snapshots * performer * Improve terminal update synchronization and reduce lock contention * wip new sync logic * flake.lock: Update * default_disable_occluded_render as false * mark 0.2.27 for metainfo.xml ++++ ruby-build: - Update to version 20250811. Changelog: https://github.com/rbenv/ruby-build/releases/tag/v20250811 * JRuby 10.0.2.0 by @headius in #2558 * Mark JRuby versions 9.2 through 9.3 as EOL by @mislav in #2559 ++++ s390-tools: - Amended the .spec file (bsc#1246792) * Changed '%{release}' to '%{rbrelease}' in "DISTRELEASE=" to remove embedded build counters from the binaries - Re-vendor-ed vendor.tar.zst ++++ sdbootutil: - Update to version 1+git20250811.2048838: * Add easy advanced debugging - Update to version 1+git20250811.5fc14ca: * Enable sdbootutil-update-predictions.service on enroll * Fix device not marked as portable * Fix handling of configuration UPDATE_NVRAM - Update to version 1+git20250811.2fd41f0: * Clarify when the boot entries are created * Measure all bootloader combinations * Remove hard coded EFI boot entry name ++++ subfinder: - Version 2.8.0 * New Features - Added pugrecon.com source by @c3l3si4n in #1585 - Added RSECloud source by @dogancanbakir in #1604 - Added environment variable support for API keys by @dogancanbakir in #1607 * Bug Fixes - Fixed Dockerfile build by @dogancanbakir in #1583 - Fix paginations in Hunter and Quake sources by @dogancanbakir in #1603 * Other Changes - Updated installation documentation by @dogancanbakir in #1591 - Updated GoReleaser configuration by @emmanuel-ferdman in #1596 - Removed dead binaryedge source by @x-stp in #1592 - Modernized subfinder source code by @dogancanbakir in #1601 ++++ texlab: - Update to version 5.23.1: * Add --line0, --line1 arguments to the texlab inverse-search command (#1365) * Extract the context provided by latexmkrc to infer additions to TEXINPUTS and BIBINPUTS (#1369) * Add support for latexmk v4.86 (#1410) * Recognize wide float environment in label parsing (#1404) * Treat \gdef, \edef, \xdef and \glet as command definitions (#1402) * Add support for multi-word filtering in workspace symbols (#1396) * Add support for matching incomplete keywords in workspace symbol filtering (#1396) * Add an experimental capability for textDocument/build and textDocument/forwardSearch (#1328) * Allow disabling warnings using % texlab: warnings off and % texlab: warnings on (#1327) * Regenerate diagnostics after loading the TeX distribution (#1376) * Improve handling of nested curly braces in command parsing (#1360) * Don't panic if the server receives a completion request with an invalid position (#1367) * Only return LocationLink[] in textDocument/definition if the client supports it (#1399) * Add --line0, --line1 arguments to the texlab inverse-search command (#1365) * Extract the context provided by latexmkrc to infer additions to TEXINPUTS and BIBINPUTS (#1369) * Add support for latexmk v4.86 (#1410) * Recognize wide float environment in label parsing (#1404) * Treat \gdef, \edef, \xdef and \glet as command definitions (#1402) * Add support for multi-word filtering in workspace symbols (#1396) * Add support for matching incomplete keywords in workspace symbol filtering (#1396) * Add an experimental capability for textDocument/build and textDocument/forwardSearch (#1328) * Allow disabling warnings using % texlab: warnings off and % texlab: warnings on (#1327) * Regenerate diagnostics after loading the TeX distribution (#1376) * Improve handling of nested curly braces in command parsing (#1360) * Don't panic if the server receives a completion request with an invalid position (#1367) * Only return LocationLink[] in textDocument/definition if the client supports it (#1399) ++++ tik: - Update to version 1.3.16: * [15-encrypt] Populate /var in both encryption modes - Update to version 1.3.15: * Populate /var if it's empty ++++ tuba: - update to version 0.10.1: * Composer alt text editor should increase height with the content * gexiv2-0.16 lookup to respect gexiv2 option * Composer editor should have focus by default - update to version 0.10.0: * New composer * In-app web browser * Collapse long posts * Grouped notifications * Clapper is now the default video player * Clapper enhancers are now used to play media from third-party services * Desktop notifications will now be withdrawn when viewing the in-app ones * Polls can now display custom emojis * Mastodon quotes support * Iceshrimp Drive * Iceshrimp Bubble Timeline * Ability to forward reports to the instances of all involved parties * Tab switching using alt+1/2/3/N * Quit App menu entry * Other apps by GeopJr in the about dialog * Input hints about spellcheck and completion on text inputs * More reactive scheduled and draft posts views updates * More fluid convergent horizontal lists by using AdwWrapBox * Use appstreamcli over appstream-glib for metadata validation * Clear new notifications when scrolling to top on the Notifications view * Removed UUID migration fallback * Account switcher handles can now take up to two lines * Enforce MATCH_NAME when searching for secrets * When replying use the most private visibility between the user-default and the replying-to * The proxy setting now gets instantly saved in dconf * Windows ARM builds * Proper URI validation and normalization when adding new accounts * Ctrl+L shortcut for searching * Language specs and styles are now embedded * Meson options are now actual features * Match Audio Visualizer's controls to Clapper's * Transition post action hover style * Round search bars * Featured tab on profile that shows endorsed accounts and featured tags * Delete & Redraft * Search history * Adding favorite hashtags to the sidebar * Endorse account * Feature hashtag * Local-only posting when supported * More settings in dconf, less in GUI * Reveal sensitive media by default setting * Hide interaction counters setting * Alt text extraction from image file metadata * Enabled more features for Pleroma * Smooth and optimize audio visualizer updates by animating states * GApplication to parse command line options * D-Bus service file * Long name and handles will now be ellipsized * Language selector will now use the English locale name for searching * Websockets not connecting right away when the instance uses a different domain for them * Manually refreshing would refresh all constructed timelines instead of just the visible one * Random non-reproducible crashes due to weak references by getting rid of most of them * Scroll to open post when opening a thread * Inability to toggle the sidebar when collapsed using gestures * Removed hacks around labels with custom emojis since the bugs have been fixed upstream * Freezing by attempting to create all profile fields rows allowed when editing your profile when the limit was too high by dynamically appending new rows * Chinese translations not being usable due to the default locale name used * Embed missing icon * Instantly save settings in dconf on window close when work-in-background is enabled * Match libadwaita's 1.7 roundness * Schedule post dialog being too close to the edges * Increased (old) composer's width to fit different locales better * Avatar size bugs from libadwaita 1.7.5 * Profile view errors and empty state never being displayed * Lists appearing blank when containing reserved characters when editing them from a profile * Hidden following/followers counts being displayed as -1 * Timelines not being able to infinite scroll when the min batch size is too small * Thread open post getting memory leaked * Some widgets not removing all their children when they are getting updated * Open post not being selectable when opening a thread after it gets updated * Spoiler being visible for a millisecond when opening a post in a thread even if it doesn't have a spoiler * Uploading attachments on Windows * Segfault on Windows when opening the scheduling dialog * Account switcher badges being in the wrong position * Sidebar badges not being centered * Screen readers freezing on the timelines - use the more common appid as the macro, not appname ++++ virtme: - Update to 1.37: The most interesting feature in this new version is the initial support for systemd. Until now, virtme-ng didn’t support systemd because it relied on a custom init system (virtme-ng-init) to speed up boot time. As a result, tests requiring systemd couldn't run inside the virtme-ng session. With the new - -systemd option, virtme-ng can now (optionally) boot with systemd in the virtualized environment, enabling full systemd interaction during testing. ++++ waybar: - Update to 0.14.0: * Fix default icon in tray module #4234 * fix hyprland/language layout parsing #4242 * fix: 'ethernet' network state should have precedence over 'disabled' #4258 * flake.lock: Update #4256 * Change default tooltip for the battery module. #4274 * enabled pango markup support for tooltip of battery and pulseaudio modules #4284 * fix: prevent persistent workspaces from being duplicated if they exist #4275 * respect gtk color scheme variant for gtk css variable #4292 * fix: hyprland named persistent workspaces#4272 * Fix #4307 #4310 * adding dependency command for arch #4298 * feat: add rfkill network setting #4260 * feat: add a way to override electron app tray icons #4161 * style: clang-format #4315 * fix: unable to disable upower's tooltip #4316 * [hyprland/workspaces] Implement workspace taskbars #3868 * flake.lock: Update #4337 * mpd: add uri and filename format arguments #3849 * ext/workspaces: port from wlr/workspaces to ext-workspace-v1 for a.o. labwc support #4016 * feat: match network interfaces by their altnames #4326 * feat(river): set layout name as class #4080 * Idempotent bar show/hide via configurable user kill signals #3930 * fix: hide tray when there are no non-passive icons #3833 * add openbsd support #4278 * sway/workspaces: Implement reverse-scroll #3929 * Relative paths in included configs #4333 * battery: Add support for battery level related events #4208 * wireplumber & backlight: fix states and support for microphone #4319 ++++ yast2-trans: - Update to version 84.87.20250810.a14658bac6: * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Update translation files * New POT for text domain 'storage'. * Translated using Weblate (Spanish) ------------------------------------------------------------------ ------------------ 2025-8-10 - Aug 10 2025 ------------------- ------------------------------------------------------------------ ++++ Catch2: - Update to version 3.9.1: * Bug fixes: - Fixed bad error reporting for multiple nested assertions (gh#catchorg/Catch2#1292). - Fixed W4702 (unreachable code) in the polyfill for std::unreachable (gh#catchorg/Catch2#3007). - Fixed decomposition of assertions comparing enum-backed bitfields (gh#catchorg/Catch2#3001). - Fixed StringMaker specialization for time_point with non-default duration type (gh#catchorg/Catch2#2685). * Improvements. - Exceptions thrown during stringification of decomposed expression no longer fail the assertion (gh#catchorg/Catch2#2980). - The selection logic for CATCH_TRAP prefers __builtin_debugtrap on all platforms when Catch2 is compiled with Clang. - Add Catch2-pkgconfig-install-destdir.patch: Install pkgconfig file to destdir (gh#catchorg/Catch2#3006); upstream commit. ++++ cflow: - update to 1.8: * New "profiles" providing defaults for different standards of the C language, e.g. cflow --profile=gcc * CFLOW_OPTIONS and CFLOWRC are deprecated * Emacs cflow-mode improved * CVE-2023-6031: buffer-overflow in find_option_type boo#1216964 - update upstream signing key - remove obsolete texinfo macros - drop cflow-gcc15.patch, no longer needed ++++ crossplane-cli: - Update to version 1.20.1: This is a patch release scoped to fixing issues reported by users of Crossplane v1.20 and fixing security related issues in Crossplane's dependencies. * [Backport release-1.20] Fix composite reconciler enabled features option by @ulucinar in #6507 * chore(deps): update module github.com/cloudflare/circl to v1.6.1 [security] (release-1.20) by @crossplane-renovate[bot] in #6529 * chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.3.0 [security] (release-1.20) by @crossplane-renovate[bot] in #6574 * [Backport release-1.20] Requeue on poll interval, not pipeline TTL, when RTC is disabled by @github-actions[bot] in #6621 ++++ dnsdist: - properly set the profilename for apparmor ++++ docker-compose: - Update to version 2.39.2: * Fixes - Fix (regression): compose build render build output with tty support by @ndeloof in #13107 - Add missing "_MODEL suffix" to model variable pass to dependent services of a model by @glours in #13109 - Apply BUILDKIT_PROGRESS value when building with bake by @glours in #13110 - Define pull and no_cache from either service or flags values when building with bake by @glours in #13133 - Only monitor attached services on up command by @glours in [#13114] * Internal - Add Streams Comment by @suwakei in #13103 - Add test of json.go by @suwakei in #13106 - Refactoring of redundant condition checks by @suwakei in [#13104] - Eliminated magic string by @suwakei in #13105 - Use log API for containers we didn't attached to by @ndeloof in #13111 - Use cli-plugins/metadata package by @thaJeztah in #13130 - pkg/compose: simplify getting auth-config key by @thaJeztah in #13120 - Add go as a prerequisite in build instructions by @mattrunyon in #13131 * Dependencies - Build(deps): bump github.com/docker/cli from 28.3.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in #13116 - Build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in #13115 - Build(deps): bump github.com/containerd/containerd/v2 from 2.1.3 to 2.1.4 by @dependabot[bot] in #13119 - Build(deps): bump github.com/docker/go-connections from 0.5.0 to 0.6.0 by @dependabot[bot] in #13137 - Build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by @dependabot[bot] in #13138 - Bump golang to 1.23.12 by @austinvazquez in #13142 ++++ flatpak: - Add cd80e843435df5ce70d9a2b6710098135ceb9085.patch: session-helper: Avoid a memory leak. ++++ freeciv: - use meson build system - enable SDL3 client on Tumbleweed and Leap 16.0 ++++ grant: - Update to version 0.2.9: * chore(deps): update anchore dependencies (#235) * chore(deps): bump github.com/anchore/syft from 1.29.0 to 1.29.1 (#233) * chore(deps): bump github.com/anchore/stereoscope (#234) * change install URL to get.anchore.io/grant (#232) * chore(deps): bump github.com/docker/docker (#230) * chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.13 to 0.5.14 (#228) * chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.7 to 6.6.8 (#229) ++++ grype: - Update to version 0.97.2: * Added Features - new syft version adds binary classifier for hashicorp vault [#4121 @willmurphyscode] * Bug Fixes - fix: update syft's nondeterministic Java archive purl and improve groupID for better matching [#3521 #4118 @kzantow] * Dependencies - chore(deps): update anchore dependencies (#2860) - chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 (#2848) - chore(deps): bump actions/cache in /.github/actions/bootstrap (#2854) - chore(deps): bump github/codeql-action from 3.29.6 to 3.29.8 (#2857) - chore(deps): bump golang.org/x/tools from 0.35.0 to 0.36.0 (#2859) - chore(deps): bump actions/cache from 4.2.3 to 4.2.4 (#2855) - chore(deps): bump github/codeql-action from 3.29.5 to 3.29.6 (#2856) - chore(deps): update tools to latest versions (#2839) ++++ iio-sensor-proxy: - Update to version 3.8: * Require 2.76 or newer for the Gio dependency. * Improve handling of buffer sensors which caused a regression in 3.7 for some corner cases. ++++ kor: - Update to version 0.6.4: * chore: pre version bump (#481) * fix: skip kubeconfig initialization for utility and completion commands (#457) ++++ subrandr: - Update to version 0.2.0: * Fix WebVTT text tokenizer sometimes incorrectly assigning classes * Consider ruby items when calculating current line width while breaking * Fix WebExtension PO minting attempt sleep * Implement non-nested WebVTT ruby support * Switch to directly storing `InlineContent` in layout tree * Completely rework inline layout * Add `std::iter::Sum` impl for `Fixed` * Add custom `Debug` impl for `ComputedStyle` * Update WebExtension ++++ libunbound-devel-mini: - Update to 1.23.1: Bug Fixes: * Fix RebirthDay Attack CVE-2025-5994, reported by Xiang Li from AOSP Lab Nankai University. ++++ unbound: - Update to 1.23.1: (boo#1246625) Bug Fixes: * Fix RebirthDay Attack CVE-2025-5994, reported by Xiang Li from AOSP Lab Nankai University. - our package was not built with EDNS subnet support up to this point and therefor was not affected. - prepare enabling quic support: currently fails on missing quic support in openssl. aws-lc is sadly not a drop in replacement for unbound. - enable TCP Fast Open for the server and client - remove unused --with-ldns option - enable cachedb including hiredis support on Tumbleweed new BuildRequires pkgconfig(libhiredis) ++++ qemu: - Update to stable release 10.0.3: Full list of backports here: https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/ A selection of them is reported here too: hvf: arm: Emulate ICC_RPR_EL1 accesses properly target/arm: Correct encoding of Debug Communications Channel registers ui: fix setting client_endian field defaults hw/net/npcm_gmac.c: Send the right data for second packet in a row target/i386: do not expose ARCH_CAPABILITIES on AMD CPU i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14] i386/cpu: Fix overflow of cache topology fields in CPUID.04H i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16] ui/vnc: Do not copy z_stream vhost: Fix used memslot tracking when destroying a vhost device roms: re-remove execute bit from hppa-firmware* file-posix: Fix aio=threads performance regression after enablign FUA amd_iommu: Fix truncation of oldval in amdvi_writeq amd_iommu: Remove duplicated definitions amd_iommu: Fix the calculation for Device Table size amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE amd_iommu: Fix masks for various IOMMU MMIO Registers amd_iommu: Update bitmasks representing DTE reserved fields amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command amd_iommu: Fix Miscellaneous Information Register 0 encoding virtio-net: Add queues for RSS during migration net: fix buffer overflow in af_xdp_umem_create() accel/kvm: Adjust the note about the minimum required kernel version ... ++++ qemu-linux-user: - Update to stable release 10.0.3: Full list of backports here: https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/ A selection of them is reported here too: hvf: arm: Emulate ICC_RPR_EL1 accesses properly target/arm: Correct encoding of Debug Communications Channel registers ui: fix setting client_endian field defaults hw/net/npcm_gmac.c: Send the right data for second packet in a row target/i386: do not expose ARCH_CAPABILITIES on AMD CPU i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14] i386/cpu: Fix overflow of cache topology fields in CPUID.04H i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16] ui/vnc: Do not copy z_stream vhost: Fix used memslot tracking when destroying a vhost device roms: re-remove execute bit from hppa-firmware* file-posix: Fix aio=threads performance regression after enablign FUA amd_iommu: Fix truncation of oldval in amdvi_writeq amd_iommu: Remove duplicated definitions amd_iommu: Fix the calculation for Device Table size amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE amd_iommu: Fix masks for various IOMMU MMIO Registers amd_iommu: Update bitmasks representing DTE reserved fields amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command amd_iommu: Fix Miscellaneous Information Register 0 encoding virtio-net: Add queues for RSS during migration net: fix buffer overflow in af_xdp_umem_create() accel/kvm: Adjust the note about the minimum required kernel version ... ++++ sqlmap: - update to 1.9.8: * Fixes #5936 (Unhandled exception) * Minor update of fingerprinting payloads ++++ syft: - Update to version 1.30.0: * Added Features - add binary classifier for hashicorp vault [#4121 @willmurphyscode] * Bug Fixes - fix: update nondeterministic Java archive cataloging and improve groupID [#3521 #4118 @kzantow] * Dependencies - chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 (#4122) - chore(deps): bump golang.org/x/mod from 0.26.0 to 0.27.0 (#4123) - chore(deps): bump github/codeql-action from 3.29.7 to 3.29.8 (#4124) - chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 (#4115) - chore(deps): bump actions/cache from 4.2.3 to 4.2.4 (#4119) - chore(deps): bump actions/cache in /.github/actions/bootstrap (#4120) - chore(deps): update tools to latest versions (#4111) - chore(deps): update CPE dictionary index (#4112) - chore(deps): update tools to latest versions (#4108) - chore(deps): bump github/codeql-action from 3.29.4 to 3.29.5 (#4096) ++++ tfupdate: - Update to version 0.9.2: * Bump version to v0.9.2 * Update CHANGELOG * Add support for OpenTofu 1.10 * Add support for Terraform 1.12 * Update hcl to v2.24.0 * Update golang.org/x/crypto to v0.41.0 * Add AI agent optimization project structure and guidelines * Add CLAUDE.md for Claude Code guidance ------------------------------------------------------------------ ------------------ 2025-8-9 - Aug 9 2025 ------------------- ------------------------------------------------------------------ ++++ amarok: - Update to 3.3.1 https://blogs.kde.org/2025/08/09/amarok-3.3.1-released/ * Enable saving and loading script console items, autocompletion in script console, and re-enable some more scripting functionality * Convert the remaining main UI toolbuttons to use icons from theme * Clear out remnants of the now-discontinued MusicDNS service * Fix example permission grant command in database settings (kde#386004) * Fix equalizer gains not updating when selecting some presets (kde#463908) * Fix continuing playback after timecoded tracks (cue files etc, (kde#270003) * Fix MusicBrainz search * Properly start CD playback if Amarok is not already running (kde#503310) * Also transmit embedded cover art through MPRIS (kde#357620) * Don't show transcoding dialog after canceling download (kde#275840) * Load network information earlier to avoid crashes on startup (kde#507497) * Try to export as-compatible-as-possible playlist files (kde#507329) * Fix some random crashes during playback ++++ bottom: - Bump rust version requirement to 1.81 - Update to version 0.11.0~0: * Features * Add the ability to configure the disk widget's table columns. * Support AMD GPU data collection on Linux. * Support changing the widget borders. * Support delete key (fn + delete on macOS) to kill processes. * Support using left/right key to collapse/expand process trees respectively. * Add a virtual memory column for processes. * Add option to have process tree entries be collapsed by default. * Bug Fixes * Fix missing parent section names in default config. * Fix typo in default config. * Fix issue where CPU usage in basic mode looks weird if core count isn't divisible by four. * Fix missing selected text background colour in default-light theme. * Fix using "none" for chart legend position in configs. * Fix incorrect default config definitions for chart legends. * Fix support for nilfs2 file system. * Fix properly cleaning up the terminal if the program is terminated due to an Err bubbling to the top. * Fix network graphs using log scaling having broken lines when a point was 0. * Fix for ARC/SWAP not being hidden in basic mode after refactor. * Fix graph lines potentially showing up behind legends. * Fix process kill dialog occasionally causing panics. * Fix missing stats/incorrect mount name for certain entries in the disk widget. * Fix increment for data tables if the change is greater than the number of entries left. * Changes * Rename --enable_gpu to --disable_gpu, and make GPU features enabled by default. * Consider $XDG_CONFIG_HOME on macOS when looking for a default config path in a backwards-compatible fashion. * Allow hyphenated arguments to work as well (e.g. --autohide-time). * Redesign process kill dialog. * Disable mouse capture when disable_click is set. * Change how we calculate swap usage in Windows. Other * Fix missing parent section names in TOML. * Add Terra installation instructions. * Update demo caption in docs. * Update Arch install instructions. * Better handle NVIDIA GPUs on Linux with only libnvidia-ml.so.1. * Make it possible to override completion/manpage generation output directory via env. * Rework how data is stored internally, reducing memory usage a bit. * Update Nix installation instructions. * Update openSUSE installation instructions. * Update Alpine Linux installation instructions. * Fix invalid desktop file values. ++++ dnsdist: - package the docs directory so we can reference it in the example config ++++ freeciv: - freeciv 3.2.0: * Client not compatible with pre-3.2 servers and vice versa * Unit orders are now executed after all the Turn Change activities, and after the AIs have begun their turn. This avoids "double move" issues with units executing orders with replenished movement but still before the new turn * Numerouus ruleset and gameplay changes as listed in https://freeciv.fandom.com/wiki/NEWS-3.2.0 - enable the SDL2 client - Build with Qt6 on Leap 15.6 ++++ geany-plugins: - Update to 2.1: * Various fixes. * New plugin: LSP (Language Server Protocol) plugin * Addons: Avoid status icon flickering on startup * GeanyGenDoc: Add support for local variables * GeanyLaTeX: Improve list insertion * GeanyLua: Add single line comment support to `geany.fileinfo` and rename the multi-line fields * GeniusPaste: Update pastebins * GeniusPaste: Ask confirmation before pasting by default * ProjectOrganizer: Avoid parsing opened files when loading project * ProjectOrganizer: Follow Geany's native dialogs setting * ProjectOrganizer: Add quick navigation popup panel * ProjectOrganizer: Allow configuring external commands * Numbered Bookmarks: Add options to force loading or saving bookmarks * Overview: Do not focus the overview * Vimode: Handle clicks on the margins * Vimode: Add support for fold commands * WebHelper: Add support for loading the current file in the web view - Dropped 644550babb52013d2625a3f8e789bbe94a335b6f.patch since it has been upstreamed. - Dropped db2698cc869274aef353ba7af23d70921d944166.patch since it has been upstreamed. - Dropped geany-plugins-2.0-gcc15.patch since it has been upstreamed. - Use libsoup-3.0 and webkit2gtk-4.1 ++++ ghc-hslua-module-system: - Update hslua-module-system to version 1.2.3. [#]# hslua-module-system-1.2.2 Released 2025-08-09. - Fix compilation error. [#]# hslua-module-system-1.2.2 Released 2025-08-09. - Lists of file paths now have a "FilePath list" metatable that add list methods. ++++ gpxsee: - Update to version 13.46 * Fixed handling of segmented FIT tracks. * Fixed popups/tooltips displaying on Wayland. ++++ helmfile: - Update to version 1.1.4: What's Changed * build(deps): bump github.com/helmfile/vals from 0.41.2 to 0.41.3 by @dependabot[bot] in #2100 * build(deps): bump k8s.io/apimachinery from 0.33.2 to 0.33.3 by @dependabot[bot] in #2101 * fix: update Helm version to v3.17.4 in CI and init.go by @yxxhero in #2102 * build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in #2104 * feat(state): add missingFileHandlerConfig and related logic by @yxxhero in #2105 * refactor(filesystem): add CopyDir method and optimize Fetch function by @yxxhero in #2111 * Allow caching of remote files to be disabled by @jess-sol in [#2112] * refactor(yaml): switch yaml library import paths from gopkg.in to go.yaml.in by @yxxhero in #2114 * build(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #2121 * build(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 by @dependabot[bot] in #2123 ++++ kernel-firmware-amdgpu: - Update to version 20250808 (git commit 8f1ce114de6c): * amdgpu: update renoir firmware * amdgpu: add SMU 14.0.3 kicker firmware * amdgpu: add PSP 14.0.3 firmware * amdgpu: add GC 12.0.1 kicker firmware * amdgpu: update navy flounder firmware * amdgpu: update SDMA 6.1.2 firmware * amdgpu: update PSP 14.0.4 firmware * amdgpu: update GC 11.5.2 firmware * amdgpu: update yellow carp firmware * amdgpu: update VCN 5.0.0 firmware * amdgpu: update SDMA 7.0.1 firmware * amdgpu: update PSP 14.0.3 firmware * amdgpu: update GC 12.0.1 firmware * amdgpu: update sienna cichlid firmware * amdgpu: update vega20 firmware * amdgpu: update SDMA 7.0.0 firmware * amdgpu: update PSP 14.0.2 firmware * amdgpu: update GC 12.0.0 firmware * amdgpu: update vega12 firmware * amdgpu: update vega10 firmware * amdgpu: update VCN 3.1.2 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update GC 10.3.6 firmware * amdgpu: update VCN 4.0.4 firmware * amdgpu: update SDMA 6.0.2 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update navi14 firmware * amdgpu: update SDMA 6.0.3 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update navi12 firmware * amdgpu: update vangogh firmware * amdgpu: update navi10 firmware * amdgpu: update PSP 13.0.0 kicker firmware * amdgpu: update VCN 5.0.1 firmware * amdgpu: update PSP 13.0.12 firmware * amdgpu: update GC 9.5.0 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update SDMA 6.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update PSP 13.0.14 firmware * amdgpu: update PSP 13.0.6 firmware * amdgpu: update GC 9.4.3 firmware * amdgpu: update vpe 6.1.1 firmware * amdgpu: update VCN 4.0.6 firmware * amdgpu: update SDMA 6.1.1 firmware * amdgpu: update PSP 14.0.1 firmware * amdgpu: update GC 11.5.1 firmware * amdgpu: update PSP 13.0.11 firmware * amdgpu: update GC 11.0.4 firmware * amdgpu: update beige goby firmware * amdgpu: update PSP 13.0.8 firmware * amdgpu: update GC 10.3.7 firmware * amdgpu: update VCN 4.0.5 firmware * amdgpu: update PSP 14.0.0 firmware * amdgpu: update GC 11.5.0 firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update SDMA 6.0.1 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update dimgrey_cavefish firmware * amdgpu: update aldebaran firmware ++++ kernel-firmware-ath11k: - Update to version 20250808 (git commit 8f1ce114de6c): * ath11k: WCN6855 hw2.0: update board-2.bin * ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 * ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 * ath11k: QCA2066 hw2.1: update board-2.bin ++++ kernel-firmware-ath12k: - Update to version 20250808 (git commit 8f1ce114de6c): * ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 * ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 ++++ kernel-firmware-bluetooth: - Update to version 20250808 (git commit 8f1ce114de6c): * qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 ++++ kernel-firmware-qcom: - Update to version 20250808 (git commit 8f1ce114de6c): * qcom: Add QDSP firmware file for Qualcomm QDU100 device. * qcom: Update xbl_config firmware file. ++++ okteta: - Update to 0.26.23 * Improved: translations * Changed: try to decode dropped or pasted text as byte values or characters first, depending on cursor focus, before handling as raw bytes * Changed: add to copy data next to raw bytes also a text variant, with byte values or characters depending on cursor focus * Changed: add to dragged data next to raw bytes also a text variant, with byte values or characters depending on cursor focus ++++ podofo: - Update to version 1.0.1 * Fixed PDF signing and pkgconfig bug * Fixed several issues related to use of `nullable>` * XMP: Fixed removing extension from extension bag * XMP: Fix double inserting pdfuaid schema * Text extraction fixes: improved word spacing heuristic, space trimming in ligatures, text in XObject form with non identity matrix * Fixed pkg-config for shared built library - Drop podofo-install_libdir.patch and podofo-fix_pkgconfig.patch (merged upstream) ++++ librime-lua: - Update to git.20250809.68f9c36 - cmake.patch Add cmake_minimum_required to patch cmake failure ++++ nvidia-open-driver-G06-signed-cuda: - make sure these Requires right below are not added on Tumbleweed ++++ nvidia-open-driver-G06-signed: - make sure these Requires right below are not added on Tumbleweed ++++ openQA: - Update to version 5.1754716201.09d147dc: * Dependency cron 2025-08-09 - Update to version 5.1754665747.0074044f: * Revert "Rewrote client script from perl to bash to fix heavy tests" * Revert "Remove test related to deprecated client script" ++++ python-mechanize: - Fix CookieTests * Add 0001-Fix-CookieTests-following-fix-for-CPython-130631.patch ++++ python-ruff: - update to 0.12.8 * Preview features * [flake8-use-pathlib] Expand PTH201 to check all PurePath subclasses * Bug fixes * [flake8-blind-except] Change BLE001 to correctly parse exception tuples * [flake8-errmsg] Exclude typing.cast from EM101 * [flake8-simplify] Fix raw string handling in SIM905 for embedded quotes * [flake8-import-conventions] Avoid false positives for NFKC-normalized __debug__ import aliases in ICN001 * [isort] Fix syntax error after docstring ending with backslash (I002) * [pylint] Mark PLC0207 fixes as unsafe when *args unpacking is present * [pyupgrade] Prevent infinite loop with I002 (UP010, UP035) * [ruff] Parenthesize generator expressions in f-strings (RUF010) * Rule changes * [eradicate] Don't flag pyrefly pragmas as unused code (ERA001) * Documentation * Replace "associative" with "commutative" in docs for RUF036 * Fix copy and line separator colors in dark mode * Fix link to typing documentation * [refurb] Make more examples error out-of-the-box * Other changes * Include column numbers in GitLab output format * Always expand tabs to four spaces in diagnostics * Update pre-commit's ruff id ++++ python-uv: - update to 0.8.8 - long changelog at https://github.com/astral-sh/uv/blob/main/CHANGELOG.mode - fixed CVE-2025-54368 - boo#1247829 ++++ xf86-video-vmware: - removed buidrequires to xatracker ------------------------------------------------------------------ ------------------ 2025-8-8 - Aug 8 2025 ------------------- ------------------------------------------------------------------ ++++ OpenImageIO: - Update to 3.0.9.1 - deps: C++23 support #4844 - deps: Adapt to libheif 1.20.2 #4851 (by toge) ++++ accessibility-inspector: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ akonadi: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix typo: i18ndc is correct not i18ncd ++++ akonadi-calendar: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * collectioncalendar.cpp - in hasRight(), don't assert on invalid calendar ++++ akonadi-calendar-tools: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ akonadi-contacts: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ akonadi-import-wizard: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ akonadi-mime: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ akonadi-search: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ akonadiconsole: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ akregator: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix bug:507808: Clicking "Help" in the Settings dialog goes to a 404 page (kde#507808) * It's stable version ++++ alligator: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ analitza: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ angelfish: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix not being able to open a new tab * Fix close button on tab delegates * Drop DropShadow on mobile tab bar ++++ apache2-mod_php8: - version update to 8.4.11 Calendar: Fixed jewishtojd overflow on year argument. Core: Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order). Fixed bug GH-18907 (Leak when creating cycle in hook). Fix OSS-Fuzz #427814456. Fix OSS-Fuzz #428983568 and #428760800. Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c). Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64). Curl: Fix memory leaks when returning refcounted value from curl callback. Remove incorrect string release. DOM: Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte). LDAP: Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID. MbString: Fixed bug GH-18901 (integer overflow mb_split). Opcache: Fixed bug GH-18639 (Internal class aliases can break preloading + JIT). Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet). Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c). Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading). OpenSSL: Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server). PCNTL: Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers). Phar: Fix stream double free in phar. Fix phar crash and file corruption with SplFileObject. SOAP: Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction). Fix memory leak when URL parsing fails in redirect. SPL: Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash). Standard: Fix misleading errors in printf(). Fix RCN violations in array functions. Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value. Streams: Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error). Zip: Fix leak when path is too long in ZipArchive::extractTo(). ++++ arianna: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ark: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ artikulate: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ audex: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ audiotube: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ awf-gtk2: - New upstream release (3.1.0) * move Mint-L/Mint-X/Mint-Y themes in submenus * set theme on general theme change from GLIB 2.32 * add Help menu and merge GtkScales menuitems * move all scales into a notebook with four tabs ++++ awf-gtk3: - New upstream release (3.1.0) * move Mint-L/Mint-X/Mint-Y themes in submenus * set theme on general theme change from GLIB 2.32 * add Help menu and merge GtkScales menuitems * move all scales into a notebook with four tabs * use CSD dialogs when using GTK_CSD=1 * add GtkInspector menuitem from GTK 3.14 ++++ awf-gtk4: - New upstream release (3.1.0) * move Mint-L/Mint-X/Mint-Y themes in submenus * set theme on general theme change * add Help menu and merge GtkScales menuitems * move all scales into a notebook with four tabs * use CSD dialogs when using GTK_CSD=1 * add GtkInspector menuitem + disable Open recent file menuitem * add icons in menubar and in CSD main menu * add missing buttons for scales and calendar dialogs * add close action for inactive dialog buttons ++++ baloo-widgets: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ blinken: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ bomber: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ bovo: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ calendarsupport: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ calindori: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ cantor: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix qalculate backend with recent versions of libqalculate (kde#507038) ++++ chirp: - Update to version 20250808: * Add Support for Retevis H777 V4.0 * uvk5: Fix band limits * Remove legacy radio detection module ++++ colord-kde: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ dnsdist: - Fix url to the sample configuration - switch build system to meson - fix code 15 build by forcing a newer gcc - update to 2.0.0 https://www.dnsdist.org/changelog.html#change-2.0.0 - new buildrequires: - gnutls - libebpf - build script needs python3-PyYAML to generate sources - preparation for enabling new features in the future: - yaml-config: - adds vendor.tar.xz to vendor the rust modules. built linking fails currently - xdp support - not sure yet if that can be later toggled in the config - quiche support which brings DoH3 ++++ dolphin: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Don't unset XDG_ACTIVATION_TOKEN manually - Drop the zsh completion sub-package ++++ dolphin-plugins: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ python-kiwi: - Do not clobber initialize method There was a method named initialize defined and implemented differently in the dracut modules kiwi-lib and kiwi-repart. kiwi-lib is expected to be shared code across all kiwi dracut modules. However if one module redefines a method of the same name which is used in another module and expected to work differently there, this is evil. This commit cleans up the name conflict and names the kiwi library init function as lib_initialize. All dracut code that is expected to make use of this method has been adopted too. ++++ dragonplayer: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ elisa: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ eventviews: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix Variable 'currentCell' can be declared as pointer to const [constVariablePointer] * Fix BUG 507980: Korganizer crashes on double-click on calendar header (kde#507980) * agendaview.cpp - Show events with no duration as 30 minutes long (kde#61740) * todoview.cpp - add/removeCalendar guard against invalid calendars * monthview.cpp - addCalendar/removeCalendar invalid calendar guards * agendaview.cpp - in removeCalendar(), use pointer comparison * todoviewsortfilterproxymodel.cpp - filterAcceptsRows() valid QModelIndex * todoview.cpp - addCalendar/removeCalendar() don't filter if no change ++++ falkon: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Update CHANGELOG * Add permission management for unknown protocols (kde#425785) ++++ ffmpegthumbs: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ filelight: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * memory: prefer shared_ptr for qobject + deleteLater on them (kde#507656) * remotelister: sort folder before emitting it (kde#507228) * locallister: don't convert to std::function needlessly * test: make sure the unicode test actually finds the root dir * windows: drop unnecessary slow api call ++++ kiten: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ francis: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libheif: - update to 1.20.2: - When opening tiled images, do not check against maximum image size immediately to allow for tile-based decoding of very large images. - Several smaller fixes in writing image sequences - CMake option to disable building of heif-view, which pulls in dependency on SDL - Fixes reading/writing of GIMI content IDs - Some build fixes ++++ geany: - Update to 2.1: * Include themes from geany-themes. * Fix silently truncating files containing NUL bytes. * Improve compatibility focusing the editor window when opening a file externally. * Update placeholders for external printing command to use the same ones as build commands. * Improve corner-case encoding detection and conversion. * Fix losing session after opening several projects. * Fix emission of the "document-activate" signal, leading to glitches in UI and plugins. * Fix spurious CPU load after running a build command. * Use a more reliable method for saving preferences and other auxiliary files. * Fix focusing the symbol list through key binding. * Fix search entry after editing the toolbar. * Fix non-deterministic anonymous symbol names. * Fix displaying symbols declared out of order. * Fix possible invalid memory access when generating user initials on first startup. * Fix replacing placeholders in filenames in build commands. * Add support for searching the Messages and Compiler output. * Add support for modern platform-native file selection dialogs. * Regroup filetypes by letter. * Add filter for open documents sidebar. * Add filter for keybindings preferences. * Add various pref to skip "replace in session" confirmation dialog. * Make it easier to wrap search when the confirmation dialog is shown. * Fix spurious selection when clicking an externally-modified file. * Fix translation of the Various preferences tab. * Do not show redundant None encoding. * Do not display encodings not supported on the system. * Move "Virtual Spaces" preference to "Editor -> Features". * Various UI tweaks. * Allow pasting and autocompletion for multiple carets. * Increase minimal number margin width. - Drop upstreamed reproducible.patch. - Drop upstreamed geany-2.0-gcc15.patch. ++++ llamacpp: - Update to version 6121: * Support intern-s1 * opencl: add swiglu_oai and add_id * vulkan: support fattn sinks * vulkan: Add env var to disable host visible vidmem * ggml: Skip backend library linking code when GGML_BACKEND_DL=ON * ggml : fix fallback to CPU for ununsupported ops * Various bug fixes * Full changelog: https://github.com/ggml-org/llama.cpp/compare/b6100...b6121 ++++ ghc-psqueues: - Update psqueues to version 0.2.8.2. - 0.2.8.2 (2025-08-08) * Use Straka's balancing algorithm for OrdPSQ (#64): Milan Straka's paper 'Adams’ Trees Revisited' argues that Adams' balancing algorithm previously did not have a correct proof. It provides a proof of a slightly modified balancing algorithm that prefers single rotations in many more cases. The small change specified in that paper fixes the frequent quickcheck failures exposed when the balance test was made more precise. * Remove unnecessary dependencies: array, containers, ghc-prim, mtl, unordered-containers ++++ ghostwriter: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ glib2: - Update to version 2.84.4: + Bugs fixed: - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file() - GFile leak in g_local_file_set_display_name during error handling - Incorrect output parameter handling in closure helper of g_settings_bind_with_mapping_closures - gfileutils: fix computation of temporary file name - Fix GFile leak in g_local_file_set_display_name() - gthreadpool: Catch pool_spawner creation failure - gio/filenamecompleter: Fix leaks - gfilenamecompleter: Fix g_object_unref() of undefined value ++++ glib2-doc: - Update to version 2.84.4: + Bugs fixed: - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file() - GFile leak in g_local_file_set_display_name during error handling - Incorrect output parameter handling in closure helper of g_settings_bind_with_mapping_closures - gfileutils: fix computation of temporary file name - Fix GFile leak in g_local_file_set_display_name() - gthreadpool: Catch pool_spawner creation failure - gio/filenamecompleter: Fix leaks - gfilenamecompleter: Fix g_object_unref() of undefined value ++++ glib2-stage1-devel: - Update to version 2.84.4: + Bugs fixed: - (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file() - GFile leak in g_local_file_set_display_name during error handling - Incorrect output parameter handling in closure helper of g_settings_bind_with_mapping_closures - gfileutils: fix computation of temporary file name - Fix GFile leak in g_local_file_set_display_name() - gthreadpool: Catch pool_spawner creation failure - gio/filenamecompleter: Fix leaks - gfilenamecompleter: Fix g_object_unref() of undefined value ++++ go1.22: - Packaging improvements: * Update go_bootstrap_version to go1.21 from go1.20 to shorten the bootstrap chain. go1.21 can optionally be bootstrapped with gccgo and serve as the inital version of go1.x. * Refs boo#1247816 bootstrap go1.21 with gccgo ++++ go1.23: - Packaging improvements: * Update go_bootstrap_version to go1.21 from go1.20 to shorten the bootstrap chain. go1.21 can optionally be bootstrapped with gccgo and serve as the inital version of go1.x. * Refs boo#1247816 bootstrap go1.21 with gccgo ++++ granatier: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ grantlee-editor: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ grantleetheme: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ gwenview: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ human-theme-gtk: - New upstream release (2.6.0) * (gtk3) fix geany statusbar (regression) * (gtk3) fix separator for menu in toolbar * (gtk3) fix background color for popover menu * (gtk3) fix design of GNOME terminal * (gtk3) fix design of Pluma statusbar * (gtk4) fix menuitem height * (gtk4) add styles for icons in menubar * (gtk3 & 4) fix dialog layout and buttons position/margin, with our without CSD dialogs, so same layout between gtk3 & gtk4 => same as mate-appearance-properties => some PR for MATE on github.com/mate-desktop * add default colors for terminal (white on black) * MATE users will enjoy fixed design for transparent panels * MATE+Mint users will enjoy new design for mint menu applet PR => github.com/linuxmint/mintmenu/pull/285 PR => github.com/ubuntu-mate/mate-menu/pull/89 * Xfce users will enjoy new design for whisker menu ++++ incidenceeditor: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ itinerary: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Prefer current trip group when determining the default to import into * Use a slightly more reasonable default for querying departures at a hotel * Add 25.08.0 release notes * Set correct states on the live location sharing action * Don't offer Matrix spaces in the room selection dialog for sharing * Ignore Matrix rooms of unknown type * Update flight seat in the timeline delegate on reservation changes * Write more information about the generating app into export files * Workaround gliches between journey section line segments * Recover LiveData arrival and departure indices when importing * Fix flight editor airport name input validation * Start alternative search at start of day for unbound tickets * Initialize departure time editors with departure day * Handle intermediate stops not allowing boarding/alighting at all * Resolve ISO 3166-2 region codes before address formatting * Small cleanup in FormPlatformDelegate ++++ jenkins-x-cli: - Update to version 3.16.19: * chore(deps): upgrade jenkins-x-plugins/jx-preview to version 0.6.0 ++++ juk: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ k3b: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kaccounts-integration: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kaccounts-integration-kf5: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kaccounts-providers: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kaddressbook: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kajongg: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kalarm: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Update version description * Remove excess spacing in Preferences dialog ++++ kalgebra: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kalk: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix: Correctly handle locale-specific decimal separators (kde#507525) ++++ kalm: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kalzium: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kamoso: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kanagram: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kapman: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kapptemplate: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kargo-cli: - Update to version 1.7.2: * no CLI-related changes ++++ kasts: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kate: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix return type for KateMainWindow::showMessage * tools: Make connection single shot * Correct method call in UrlbarContainer::enterEvent() * use the maintained https://github.com/bscan/PerlNavigator for Perl * default is markdown for hover strings (kde#494139) * Fixed disappearing bookmarks on document close * Limit Terraform LSP to project directory (kde#507020) * Use KIO::moveAs to rename file (kde#506802) * Fix tab restore when "open to right of current tab" is true (kde#495419) * Fix tab order restore with limited tabs (kde#495419) * StashManager: allow to stash files without backing files * Use darkRed/darkGreen in light mode (kde#506911) * Rehighlight diff when editor theme changes (kde#506911) * Fix stash dialog * Fix cursor position not being restored with multiple views (kde#506956) * be silent per default ++++ katomic: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kbackup: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kblackbox: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kblocks: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kbounce: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kbreakout: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kbruch: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kcachegrind: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kcalc: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kcalutils: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kcharselect: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kclock: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kcolorchooser: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kcron: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix translation catalog name (kde#507976) ++++ kde-inotify-survey: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ poxml: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdebugsettings: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdeconnect-kde: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Drop unused kconfigwidgets dependency - Merge the zsh completion files into the main package ++++ kdeedu-data: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkdegames: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdegraphics-mobipocket: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Avoid overflow of dict offsets in bounds checks * Add heuristic to protect HuffDic decompressor against 'ZIP bombs' * Abort HuffDic decompression on first error * Avoid HuffDic decompressor dictionary out-of-bounds accesses * Verify hasDRM() returns the correct value * Fix invalid QStringDecoder instantiation for cp1252 * Add support for categorized logging * Add missing bounds check for HuffDic records * Verify a truncated valid file does not cause invalid reads * Fix invalid QTextCodec access for invalid files * Fix possible out-of-bounds read when determining extra flags * Fix possible out-of-bounds read for EXTH parsing * Move PDB class definition to private header, clean it up * Add missing bounds checks for getImage(), clean up, extend tests ++++ kdegraphics-thumbnailers: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * [BlenderCreator] Fix memory leak by using std::unique_ptr for gzFile ++++ kdenetwork-filesharing: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdenlive: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Too many changes since 25.07.80, only listing bugfixes: * Correctly show custom effects when displaying video (or audio) only effects (kde#358436) * Add SVT-AV1 to codecs which use `crf` option (kde#492708) * Fix startup crash when QML Graphics API is set to Vulkan (kde#503162) * Fix transcoding of files with missing duration. (kde#507396) * Convert Keyboard schemes from .rc to xml after download since this is what is expected (kde#503526) * Reduce minimum height of Speech Editor Widget (kde#465766) * Fix Vosk Speech-To-Text producing garbage subtitles (kde#503985) * Fix transform presets restoring incorrect frame size (kde#505964) * Defang dragging subtitle clips down to create a new layer (kde#506414) * Fix setting Whisper language breaks in text based editing (kde#506100) * Make the subtitle edit widget resizable to adapt to lower resolutions. (kde#506899) - Add a _constraints file. Some arch complain when builds need less than 4 GB (e.g. ppc64le) ++++ kdepim-addons: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * We need ktextaddons 1.7.1 for this one * Convert to markdown/highlighting but need new 1.7.1 * Use a QTextEdit * Fix dialog * Add manager + implement question * Return error * Allow to show dialogbox * Use pointer here * Return icon name * Allow to use TextAutoGenerateQuickAskDialog ++++ kdepim-runtime: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdesdk-scripts: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdesdk-thumbnailers: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdevelop: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Never store precompiled preambles in memory to work around a crash (kde#486932) ++++ kdevelop-plugin-php: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdevelop-plugin-python3: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdf: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdialog: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdiamond: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdnssd: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ keditbookmarks: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ keysmith: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kfind: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kfourinline: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kgeography: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kget: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kgoldrunner: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kgpg: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kgraphviewer: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ khangman: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ khealthcertificate: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ khelpcenter: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kidentitymanagement: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kig: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix for python-based kig math formulas * cmake: Remove unused variable * cmake: Replace obsolete QT_MAJOR_VERSION instance * cmake: Remove endif(foo) in favour of endif() ++++ kigo: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ killbots: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kimagemapeditor: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kimap: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kio-admin: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kio-extras: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Drop unused ktextwidgets dependency ++++ kio-gdrive: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kio_audiocd: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kamera: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kdesdk-kioslaves: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kirigami-gallery: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kiriki: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix dataChanged() called with an invalid index range ++++ kitinerary: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Keeping `readDateTime` in for PkPass Pretix parser * Add Cvent PkPass Extractor * add eventbrite pkpass extractor * Enhance ticket parsing functionality across various scripts * Add Odoo PDF parsing functionality and configuration * Support another (newer?) Pretix PDF ticket variant * Support English B&B Hotel confirmation emails * Support extracting multi-leg ZSSK tickets * Add extractor for pathe.fr PkPass. * Parse dates crossing a month boundary correctly in Tito tickets * Add extractorscript for Northlink Ferries (Scotland) * Handle German date/time formats in Eurostar PDF tickets * Gopass: add SPDX headers * Gopass: add i18n map * Add Gopass Ticket Confirmation Extractor * Extract departure date from Eurostar pkpass files * Add basic globtour.com bus ticket extractor script * Build Flatpak in stable branch against stable dependencies * Correctly sort unbound bus tickets * Add extractor script for Arriva bus tickets * Handle more language variants in SCNF PDF ticket dates * Support German language variant of Eurostar PDFs * Support prepositions date/time format in BlablaBus tickets ++++ kjournald: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * cmake: Restore setting the VERSION and SOVERSION for libkjournald * cmake: Drop unused lib/CMakeLists.txt ++++ kjumpingcube: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kldap: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kleopatra: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Use icon functions from libkleo for status icons ++++ klettres: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ klickety: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ klines: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmag: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmahjongg: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmail: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * src/kmreaderwin.cpp - remove an unnecessary qDebug ++++ kmail-account-wizard: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmailtransport: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmbox: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmime: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix header type mismatch by removing null bytes from MIME header names ++++ kmines: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmix: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmousetool: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmouth: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kmplot: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ knavalbattle: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ knetwalk: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ knights: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ koko: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kolf: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kollision: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kolourpaint: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kompare: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kongress: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ konqueror: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ konquest: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ konsole: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix regression: Unix locale encoding is UTF-8 * ensure symlinked shells don't break the tests - Merge the zsh completion files into the main package ++++ kontact: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Add stable to true + fix stable url version ++++ kontactinterface: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kontrast: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ konversation: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Pass a valid QWidget pointer to QFileDialog (kde#437584) ++++ kopeninghours: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kor: - Update to version 0.6.3: * chore: pre version bump (#478) * feat: Discover unused ClusterRoleBindings (#473) * chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 (#474) * chore(deps): bump github.com/prometheus/client_golang (#475) * fix: support multiple kubeconfig files from KUBECONFIG env (#453) * chore(deps): bump k8s.io/apiextensions-apiserver from 0.33.2 to 0.33.3 (#468) * feat: add flags to skip owner-referenced resources (#467) * chore(deps): bump github.com/go-viper/mapstructure/v2 (#465) * chore(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 (#464) * feat: upgrade goreleaser to v2 (#458) * chore(deps): bump k8s.io/apiextensions-apiserver from 0.33.1 to 0.33.2 (#460) ++++ korganizer: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * whatsnew - "The current view is remembered" * koviewmanager.cpp - Fix readSettings() to restore the previous view * Revert "Todoview - no longer show the todolist in the sidebar in todo view" * Drop unnecessary KPim6IdentityManagement dependency * Whatsnew 6.5: add events without duration are displayed as 30 min long * Check for valid collections * kotodoview.cpp - do not call the BaseView * reparentingmodel.cpp - deal with possible mapToSource failures ++++ kosmindoormap: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kde-dev-utils: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kpat: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Switch to standardised BUILD_DOC cmake option ++++ kpimtextedit: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kpkpass: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kpmcore: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kpublictransport: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Increase coverage rating for Transitous in Italy * Correctly handle different polyline encoding precisions from MOTIS * Treat carrier field in SNCF onboard API responses as optional (kde#506874) * Update Transitous coverage data from Transport API Repository * src/tools/transport-api-sync.cpp - fix compile * Fix parsing dropoff constraints from Hafas * Update DE-BW coverage areas from Transport API Repository * Pick preferred protocol when Transport API Repository has multiple options * Try harder to find a country-wide backend for country-constraint geocoding * Add scheduled arrival date role * Add onboard API support for XiamenAir ++++ kqtquickcharts: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix the version and dependency of the cmake config file ++++ krdc: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ krecorder: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Use correct file extension for audio-only files * Reset audio recorder when back is requested * Reset media path if no current recording (kde#505679) * Switch to default page when recording is ended * Fix removing discarded recording * Fix saving and loading format settings (kde#489903) * Set settings window as modal dialog ++++ kreversi: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ krfb: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kruler: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ksanecore: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kshisen: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ksirk: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * flatpak: We don't need QCA anymore ++++ ksmtp: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ksnakeduel: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kspaceduel: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ksquares: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ksudoku: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ksystemlog: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kteatime: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ktimer: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ktnef: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ktorrent: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ktouch: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * cmake: Search for KQtQuickCharts again ++++ ktrip: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ ktuberling: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kturtle: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kubrick: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kunifiedpush: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kwalletmanager: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kwave: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kweather: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kweathercore: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ kwordquiz: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkcddb-qt6: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkcompactdisc: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkdcraw-qt6: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkeduvocdocument: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkexiv2-qt6: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkcddb: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkdcraw: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkexiv2: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkmahjongg: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkgapi6: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libgravatar: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkdepim: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ mailcommon: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ mailimporter: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ mimetreeparser: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ pimcommon: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libkleo: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libksane: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libktorrent: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ marble: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libgcrypt: - Update to 1.11.2: * portability fixes * Support secp256k1 by KEM API. GnuPG has recently switched to use the KEM interface and a few folks are using this curve * Fix a missing initialization in RSA's generate_fips. * Use '.rodata' section for read-only data of poly1305-p10le ++++ libkomparediff2: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libksieve: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ librest: - Update to version 0.10.2: + Rename Meson project to librest - Changes from version 0.10.1: + Allow to use the CI to publish the release + Use G_DEFINE_QUARK when possible - Changes from version 0.10.0: + Handle some potential problems in parsing oauth2 access tokens + Allow to use rest and rest-extras from a single header + Fix the declaration of the RestOAuth2Error quark function + Name the RestOAuth2Error enum + Fixes several annotation issues - Drop patches merged upstream: + 0001-rest_proxy_call_sync-bail-out-if-no-payload.patch + 0002-Handle-some-potential-problems-in-parsing-oauth2-acc.patch - Update URL and Source following upstream name changes. ++++ rocs: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ libxkbcommon: - Update to release 1.11.0 * New keymap text format, `XKB_KEYMAP_FORMAT_TEXT_V2` (not yet frozen and considered a living standard). * Added the new parameter `lockOnRelease` for the key action `LockGroup()`. * Added the new parameter `unlockOnPress` for the key modifier action `SetMods()`, `LatchMods()` and `LockMods()` * Added the new parameter `latchOnPress` for the key action `LatchMods()`. * Raised the layout count limit from 4 to 32. Requires using `XKB_KEYMAP_FORMAT_TEXT_V2`. * Virtual modifiers are now mapped to their_canonical encoding if they are not mapped explicitly. * Added support for the constants `Level` for any valid level index. ++++ linkerd-cli-edge: - Update to version 25.8.2: No CLI-related changes in the changelog * Dependencies - build(deps): bump the clap group with 2 updates (#14330) - build(deps): bump h2 from 0.4.11 to 0.4.12 (#14331) - build(deps): bump tokio-metrics from 0.4.3 to 0.4.4 (#14332) - build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 (#14325) - build(deps): bump tj-actions/changed-files (#14323) - build(deps): bump google-github-actions/auth from 2.1.11 to 2.1.12 (#14322) - build(deps): bump tj-actions/changed-files (#14321) - build(deps): bump signal-hook-registry from 1.4.5 to 1.4.6 (#14320) - build(deps): bump cc from 1.2.30 to 1.2.31 (#14317) - build(deps): bump tokio-util from 0.7.15 to 0.7.16 (#14319) - build(deps): bump event-listener from 5.4.0 to 5.4.1 (#14318) - build(deps): bump tokio from 1.47.0 to 1.47.1 (#14316) ++++ lokalize: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Open editor tab in background when Control key pressed (kde#504957) ++++ lskat: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ luanti: - Update to version 5.13.0: * Full changes: https://docs.luanti.org/about/changelog/#5120--5130 ++++ man: - Update to man-db 2.13.1 (2 May 2025) * Update various manual page translation * Fix various minor formatting issues in manual pages. * Tolerate additional spaces in preprocessor strings. * Fix check for generated source files in out-of-tree builds. * Fix building with the `musl` C library. * Recognize another Ukrainian translation of the `NAME` section. * Increase the maximum size of the `NAME` section from 8192 to 16384 bytes. - Port patches * man-db-2.6.3-listall.dif * man-db-2.9.4.patch ++++ markdownpart: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ massif-visualizer: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ mbox-importer: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ melange: - Update to version 0.30.5: * Fix and improve file permission linters; update tests to mirror actual usage (#2118) ++++ menulibre: - update to version 2.4.0: * Improved desktop environment integration * The new "Exec Editor" makes editing command arguments easier * Help dialogs replace the wall-of-text tooltips * Separators are displayed in the sidebar again * Numerous UX tweaks make MenuLibre easier on the eyes - use the pyproject macros, as using python install is going to be deprecated ++++ merkuro: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ messagelib: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ minuet: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ neochat: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix account switching on logout * Fix loading * Fix common crash during login * Replace duplicate beginResetModel with endResetModel * Fix test * Prepare for new RoomId format ++++ okular: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * textpage: Speed up space removal * Fix distinguished name parser * Fix crash in DocumentPrivate::evaluateKeystrokeEventChange (kde#506851) * Fix crash when a JS call triggers another JS call * Kill the repeated 'Modified:' in Anno Prop Dialog ++++ openbao: - Update to version 2.3.2: * Breaking Changes Due to security vulnerabilities, there are three breaking changes in this security release: - audit subsystem will no longer allow creation of new devices via the API except by setting unsafe_allow_api_audit_creation. In the v2.4.0 release, support for configuration-based audit device definition will be added. - auth/ldap has changed entity formats to normalize against whitespace and case-sensitivity when the unsafe username_as_alias=true parameter is set. - TOTP codes now must be exactly N numeric digits and cannot contain leading or trailing whitespace and will be rejected by the API if they do. * SECURITY - audit: Add server configuration options to disable audit mount creation via the API and to disable audit log prefixing. HCSEC-2025-14 / CVE-2025-6000 / CVE-2025-54997. [GH-1634] - unsafe_allow_api_audit_creation (default: false) controls the ability to create audit mounts via the API - allow_audit_log_prefixing (default: false) controls the availability of the prefix audit mount option - auth/mfa: correctly limit reuse of TOTP codes during login MFA enforcement. HCSEC-2025-19 / CVE-2025-6015 / CVE-2025-55003. [GH-1629] - auth/userpass: Prevent timing-based leak in userpass auth method. HCSEC-2025-15 / CVE-2025-6011 / CVE-2025-54999. Assumed to also apply to HCSEC-2025-21 / CVE-2025-6010. [GH-1628] - core/auth: Correctly handle alias lookahead for user lockout consistency. HCSEC-2025-16 / CVE-2025-6004 / CVE-2025-54998. - auth/userpass: Consistently handle alias lookahead as case insensitive. HCSEC-2025-16 / CVE-2025-6004 / CVE-2025-54998. - auth/ldap: Attempt consistent entity aliasing w.r.t. spacing and casing. HCSEC-2025-16 / CVE-2025-6004 / CVE-2025-54998 and HCSEC-2025-20 / CVE-2025-6013 / CVE-2025-55001. [GH-1632] - core/identity: Correctly lowercase policy names to prevent root policy assignment. HCSEC-2025-13 / CVE-2025-5999 / CVE-2025-54996. [GH-1627] - secrets/totp: Fix TOTP verification reuse bypass when the TOTP code contains spaces. HCSEC-2025-17 / CVE-2025-6014 / CVE-2025-55000. [GH-1625] * IMPROVEMENTS - core: Update to Go 1.24.6. [GH-1637] * BUG FIXES - Ignore missing mounts when deleting a namespace. This can happen when a mount is unmounted in parallel. [GH-1594] - agent/template: add missing backoff mechanism for the templating server [GH-1448] - core/namespaces: fixed race condition in namespace deletion operation during instance sealing [GH-1525] - core/policies: fix bug with missing existing policies in namespaces during failover, startup [GH-1613] - identity/oidc: Fix unintentional lowercasing of namespace accessor in assignments. [GH-1539] ++++ palapeli: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ parley: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ partitionmanager: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ pgloader: - disable also i586 as building fails - add the same excludearch as the sbcl package itself has ++++ php8: - version update to 8.4.11 Calendar: Fixed jewishtojd overflow on year argument. Core: Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order). Fixed bug GH-18907 (Leak when creating cycle in hook). Fix OSS-Fuzz #427814456. Fix OSS-Fuzz #428983568 and #428760800. Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c). Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64). Curl: Fix memory leaks when returning refcounted value from curl callback. Remove incorrect string release. DOM: Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte). LDAP: Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID. MbString: Fixed bug GH-18901 (integer overflow mb_split). Opcache: Fixed bug GH-18639 (Internal class aliases can break preloading + JIT). Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet). Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c). Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading). OpenSSL: Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server). PCNTL: Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers). Phar: Fix stream double free in phar. Fix phar crash and file corruption with SplFileObject. SOAP: Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction). Fix memory leak when URL parsing fails in redirect. SPL: Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash). Standard: Fix misleading errors in printf(). Fix RCN violations in array functions. Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value. Streams: Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error). Zip: Fix leak when path is too long in ZipArchive::extractTo(). ++++ php8-APCu: - Update to version 5.1.26 * Fixed hang introduced in apcu 5.1.25, which can occur when defragmentation is triggered under load. * Fixed a test on PHP 8.5. - Update to version 5.1.25 * If the cache is full, try to clean up expired entries based on their per-entry hard TTL even if the soft apc.ttl is 0. Previously the entire cache was discarded. * If a new entry cannot be inserted due to fragmentation, the cache will be defragmented, combining many small free blocks into one big free block by moving around cache entries. This avoids the need to discard the entire cache in more cases. * The access time (which is used by the soft apc.ttl) is now also updated when using apcu_exists(). * apc.entries_hint now defaults to 512 entries per 1MB of shared memory. Previously the default was 4096, independent of shm_size. This could lead to a large number of hash collisions if shm_size was increased without also increasing entries_hint. * Added apc.mmap_hugepage_size to use huge pages of a certain size for the apcu shared memory segment. This requires support for huge pages to be enabled in the kernel. Note that even if this option is not set, shared memory is still configured to use transparent huge pages. * The apc.shm_segments ini option has been removed. Multiple SHM segments are no longer supported. (They were already not supported when using mmap, which is the default mode of operation) * The apc.smart configuration setting should now work more reliably. Values > 1 can be used to increase the chance of discarding the entire cache when the amount of memory freed by removing expired entries was too small. This could be useful if performance degrades due to executing the logic to remove expired entries (+ defragmentation) too frequently during periods of high memory usage. * The number of cache cleanups performed (removal of expired entries) is now available in the array returned by apcu_cache_info() (via array key "cleanups"). * The number of defragmentations performed is now available in the array returned by apcu_cache_info() (via array key "defragmentations"). * Fixed several issues that caused inserting new entries to fail unexpectedly. ++++ php8-embed: - version update to 8.4.11 Calendar: Fixed jewishtojd overflow on year argument. Core: Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order). Fixed bug GH-18907 (Leak when creating cycle in hook). Fix OSS-Fuzz #427814456. Fix OSS-Fuzz #428983568 and #428760800. Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c). Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64). Curl: Fix memory leaks when returning refcounted value from curl callback. Remove incorrect string release. DOM: Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte). LDAP: Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID. MbString: Fixed bug GH-18901 (integer overflow mb_split). Opcache: Fixed bug GH-18639 (Internal class aliases can break preloading + JIT). Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet). Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c). Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading). OpenSSL: Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server). PCNTL: Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers). Phar: Fix stream double free in phar. Fix phar crash and file corruption with SplFileObject. SOAP: Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction). Fix memory leak when URL parsing fails in redirect. SPL: Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash). Standard: Fix misleading errors in printf(). Fix RCN violations in array functions. Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value. Streams: Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error). Zip: Fix leak when path is too long in ZipArchive::extractTo(). ++++ php8-fastcgi: - version update to 8.4.11 Calendar: Fixed jewishtojd overflow on year argument. Core: Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order). Fixed bug GH-18907 (Leak when creating cycle in hook). Fix OSS-Fuzz #427814456. Fix OSS-Fuzz #428983568 and #428760800. Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c). Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64). Curl: Fix memory leaks when returning refcounted value from curl callback. Remove incorrect string release. DOM: Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte). LDAP: Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID. MbString: Fixed bug GH-18901 (integer overflow mb_split). Opcache: Fixed bug GH-18639 (Internal class aliases can break preloading + JIT). Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet). Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c). Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading). OpenSSL: Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server). PCNTL: Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers). Phar: Fix stream double free in phar. Fix phar crash and file corruption with SplFileObject. SOAP: Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction). Fix memory leak when URL parsing fails in redirect. SPL: Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash). Standard: Fix misleading errors in printf(). Fix RCN violations in array functions. Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value. Streams: Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error). Zip: Fix leak when path is too long in ZipArchive::extractTo(). ++++ php8-fpm: - version update to 8.4.11 Calendar: Fixed jewishtojd overflow on year argument. Core: Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order). Fixed bug GH-18907 (Leak when creating cycle in hook). Fix OSS-Fuzz #427814456. Fix OSS-Fuzz #428983568 and #428760800. Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c). Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64). Curl: Fix memory leaks when returning refcounted value from curl callback. Remove incorrect string release. DOM: Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte). LDAP: Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID. MbString: Fixed bug GH-18901 (integer overflow mb_split). Opcache: Fixed bug GH-18639 (Internal class aliases can break preloading + JIT). Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet). Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c). Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading). OpenSSL: Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server). PCNTL: Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers). Phar: Fix stream double free in phar. Fix phar crash and file corruption with SplFileObject. SOAP: Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction). Fix memory leak when URL parsing fails in redirect. SPL: Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash). Standard: Fix misleading errors in printf(). Fix RCN violations in array functions. Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value. Streams: Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error). Zip: Fix leak when path is too long in ZipArchive::extractTo(). ++++ php8-gnupg: - Update to 1.5.4 * Fixed GH-57: PHP 8.5 build failure due to usage of removed zend_exception_get_default() * Fixed GH-59: Failure to build with gpgme >= 2.0.0 due to romoved trustlist - Remove 60.patch (upstreamed) - Remove no_uid_hint_msg.gpg that was accidentally not packaged in the archive 1.5.2 available from upstream (no longer needed) ++++ php8-test: - version update to 8.4.11 Calendar: Fixed jewishtojd overflow on year argument. Core: Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order). Fixed bug GH-18907 (Leak when creating cycle in hook). Fix OSS-Fuzz #427814456. Fix OSS-Fuzz #428983568 and #428760800. Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c). Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64). Curl: Fix memory leaks when returning refcounted value from curl callback. Remove incorrect string release. DOM: Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte). LDAP: Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID. MbString: Fixed bug GH-18901 (integer overflow mb_split). Opcache: Fixed bug GH-18639 (Internal class aliases can break preloading + JIT). Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet). Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c). Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading). OpenSSL: Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server). PCNTL: Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers). Phar: Fix stream double free in phar. Fix phar crash and file corruption with SplFileObject. SOAP: Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction). Fix memory leak when URL parsing fails in redirect. SPL: Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash). Standard: Fix misleading errors in printf(). Fix RCN violations in array functions. Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value. Streams: Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error). Zip: Fix leak when path is too long in ZipArchive::extractTo(). ++++ picmi: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ pim-data-exporter: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ pim-sieve-editor: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Add stable to true ++++ plasmatube: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Elide source switcher text ++++ pluto: - Update to version 5.22.3: * ci, feat - allow explicitly setting the container image (#577) ++++ python-azure-identity: - New upstream release + Version 1.24.0 + For detailed information about changes see the CHANGELOG.md file provided with this package ++++ python-azure-identity-broker: - New upstream release + Version 1.3.0 + For detailed information about changes see the CHANGELOG.md file provided with this package - Update Requires from setup.py ++++ python-discid: - Update to 1.3.0 * Modernized, PEP 518 compatible, build system using ``pyproject.toml``. * Minimum supported Python version is now 3.9. * :issue:`51` tests requiring a physical disc are not run by default anymore. Set the environment variable ``DISCID_TESTS_REQUIRE_DISC`` to enable them or run ``make disccheck``. * Fixed :func:`put` to work with first track number greater than 1. * Add :attr:`Disc.cddb_query_string` property. - Update BuildRequires from pyproject.toml ++++ python-pycares: - Update to 4.10.0 (actually fixes CVE-2025-48945, bsc#1244691) * Remove unused import by @saghul in #240 * Fixup chunked TXT record test by @saghul in #242 * Remove overzealous checks by @saghul in #241 * Fix OpenBSD build by @saghul in #243 * Make result.type Final by @Dreamsorcerer in #246 * Idna resource reduction using a length check by @Vizonex in #247 * Add read & write process_fd functions by @Vizonex in #245 * build(deps): bump pypa/cibuildwheel from 2.23.3 to 3.0.0 by @dependabot[bot] in #244 * Remove context manager support by @saghul in #252 * Fixup test CI by @saghul in #254 * Refactor channel destruction logic by @saghul in #253 - use system c-ares instead of bundled version - add python-pycares.rpmlintrc to ignore false positive of using gethostbyname. ++++ python-radexreader: - New upstream release (1.3.0) * add bash autocomplete script * updated udev rule for Radex ONE (usb serial) * fix some "possible" crash when the returned report is shorter than expected ++++ python-typer-slim: - Add patch handle-excess-whitespace-not-exists.patch: * Handle excess whitespace in one testcase. ++++ qmlkonsole: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ qrca: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ rke2-selinux: - Update to version 0.21.stable.1: * Align License name with SPDX Identifier (#91) * Transfer containerd.log from container_var_lib_t to containerd_log_t ++++ semaphore: - Update to version 2.15.7 (2.15.6 was not released): * fix: sql query ++++ signon-kwallet-extension: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * CI: Remove Qt5 builders that don't exist anymore ++++ skanlite: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ skanpage: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Truncate existing files when overwriting (kde#507174) ++++ skladnik: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ step: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ svgpart: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ sweeper: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ telly-skout: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ texmaker: - Add CVE-2025-50952.patch: guard against zero offset to a potential nullptr (bsc#1247798,CVE-2025-50952); patch based on upstream git master commit 0f3ca81 (gh#uclouvain/openjpeg#1510). ++++ tokodon: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix possible erroneous trailing space in OAuth scope parameter ++++ umbrello: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - Changes since 25.07.80: * Fix runtime update ++++ wofi: - update to 1.5.1: * dmenu mode will now auto-close with status 0 if no entries are provided and custom entry is not allowed * Added the API function wofi_no_custom_entry() * update_surface_size() no longer performs a resize if width or height is 0 * Create a `strict-contains` matching mode for a more obvious sort order. * Added {} to close_on_focus_loss if statement * add close_on_focus_loss optionfor wofi to close when it loses focus * Add CLI option to hide the search bar * fix: Call update_surface_size() inside hide_search_first() * Added drun-ignore_metadata * iswlower() and iswupper() are now used when fuzzy matching so that the score is correctly computed when using non-ascii characters * Proper unicode support in match.c so case insensitive matching works on non-ascii characters * Added additional information about the semantics of shift vs non-shift modifiers * Moved the list of modifier names to the top of wofi-keys(7) to make it easier to find * Added documentation explicitly specifying how to use modifier keys * Switched out the string literal "Up" for key_default to match the rest of the key definitions * Added documentation for how to bind multiple key combinations to a single action * Fixed incorrect key binding listed in wofi(5) for key_backward * Hiding the search bar now disables it so you can't type into it. Fixes #234 * Added --no-custom-entry * Greatly simplified the line size code, it works a lot better than before * Added the use_search_box option * Fixed hide_search=true for surfaces that don't use percent sizing * The hide_search config option now behaves correctly. It does exactly the same thing as key_hide_search but on launch. This now also allows you to un-hide the search with key_hide_search if wofi is launched with hide_search=true * Fixed #216 arrow key issue. This was caused by the fix to #184. Both issues should now be resolved * Fixed segfault when cache is broken #213 ++++ xsimd: - Deduplicate files in %install using %fdupes macro - Make the -devel and the -doc packages noarch ++++ yakuake: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ zanshin: - Update to 25.08.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/25.08.0/ - No code change since 25.07.80 ++++ zellij: - Update to version 0.43.1: * chore(release): v0.43.1 * docs(changelog): KKP fix * fix(terminal): handle omitted flags in kitty keyboard protocol push sequence (#4334) * fix(web): use session name as initial document title (#4357) * fix(compact-bar): make tooltip hints use opaque bg (#4356) * docs(readme): description and roadmap update * docs(changelog): resurrection fix * fix(list): do not list sessions as resurrectable unless they are (#4354) * docs(changelog): terminal title fix * fix: terminal title (#4352) - Update to version 0.43.0: * chore(release): v0.43.0 * style: link and help fixes (#4339) * fix(ci): make cross compilation work with the no-web variant (#4330) * style: some cleanups (#4329) * docs(about): release notes for version 0.43.0 (#4326) * fix(web): focus terminal on init (#4325) * fix(web): allow pasting with cmd-v (#4321) * fix(web-client): theme not loading (#4265) * Add gruber-darker theme (#4288) * fix(web_server): Handle extracting session_token from multiple cookies (#4271) ------------------------------------------------------------------ ------------------ 2025-8-7 - Aug 7 2025 ------------------- ------------------------------------------------------------------ ++++ MistServer: - Update to new upstream release 3.8 * Feature: Auto-pushes can now be disabled based on specific tags (or stream names) being present on the stream * Feature: Live stream processes can now be disabled based on specific tags (or stream names) being present on the stream * Feature: Triggers can now be disabled based on specific tags (or stream names) being present on the stream * Feature: DTSC-pulled streams are now automatically tagged with the "#replicated" tag * Feature: Support for VP8/VP9/Opus codecs in MP4 input and output * Feature: Support for AV1 input and output in RTP-based protocols (WebRTC, RTSP, SDP) * Feature: Support for AV1 input in TS-based protocols (and partial support for AV1 output) * Improvement: Improved usability of the "edit stream" page in the web interface * Improvement: Updated mbedtls subproject to upstream 3.6.4 rather than the ancient fork used until now * Improvement: The controller has been rewritten to use an event loop rather than threads * Improvement: Custom variables API updated to be object-based rather than array-based, API calls now actually documented too * Improvement: Updated more of the internal code to use more readable/modern (C++11 rather than C++98) syntax * Improvement: Logs in the web interface now update in real time and contain more information * Bugfix: SRT protocol remote addresses reported correctly again * Bugfix: SRT input "acceptable streamid" setting works again * Bugfix: ulibc-based compiles now function * Bugfix: Fixed WebRTC datachannels not working if there were no metadata tracks in the stream * Bugfix: Blank stream names no longer get auto-rejected before the PUSH_REWRITE trigger could rewrite them * Bugfix: Fixed case-sensitivity in stream keys used with WebRTC or RTSP push input * Bugfix: Fixed the built-in updater and update check code * Bugfix: Fixed internal version number for libsrt subproject being incorrect * Bugfix: Load balancer integration now more quickly and more correctly determines the current stream ingest status * Bugfix: Fixed VP9 support input and output in RTP-based protocols (WebRTC, RTSP, SDP) * Bugfix: Fixed some minor JSON parser edgecase bugs, specifically around empty arrays and objects * Bugfix: HTTP-based URLs in triggers no longer contain "?stream=STREAMNAME" unless that was actually in the request URL - Provide MistServer reported version via DRELEASE flag ++++ NetworkManager: - Update to version 1.54.0: + Add support for configuring per-device IPv4 forwarding via the "ipv4.forwarding" connection property. + Add a new "prefix-delegation" setting containing a "subnet-id" property that specifies the subnet to choose on the downstream interface when using IPv6 prefix delegation. + Support OCI baremetal in nm-cloud-setup + When activating a WireGuard connection to an IPv6 endpoint, now NetworkManager creates firewall rules to ensure that the incoming packets are not dropped by kernel reverse path filtering. + Add support for configuring the loopback interface in nmtui. + Most of the properties of ovs-bridge and ovs-port connections can now be reapplied at runtime without bringing the connection down. + Add a new "sriov.preserve-on-down" property that controls whether NetworkManager preserves the SR-IOV parameters set on the device when the connection is deactivated, or whether it resets them to their default value. + Introduce a new "ovs-dpdk.lsc-interrupt" property to configure the Link State Change (LSC) detection mode for OVS DPDK interfaces. + The initrd-generator now can parse the NVMe Boot Firmware Table (NBFT) to configure networking during early boot. + Add systemd services to provide networking in the initrd. - Drop 2069.patch: Fixed in an alternative way upstream. - Rebase patches with quilt. - Add pkgconfig(libnvme) BuildRequires: New dependency. - Update to version 1.52.1: + Fail early if we cannot get current FEC (Forward Error Correction) value. + Allow reapplying ovs-bridge and ovs-port properties. + When activating a WireGuard connection to an IPv6 endpoint, now NetworkManager creates firewall rules to ensure that the incoming packets are not dropped by kernel reverse path filtering. ++++ agama: - Allow to "add" or "remove" patterns from the current or defined user selection patterns list (bsc#1247456). ++++ agama-yast: - Do not use 'retry' as default answer for questions (bsc#1247436). ++++ alloy: - update to 1.10.1: Full list of changes: https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101 * Bugfixes - Fix issue with faro.receiver cors not allowing X-Scope-OrgID and traceparent headers. (@mar4uk) - Fix issues with propagating cluster peers change notifications to components configured with remotecfg. (@dehaansa) - Fix issues with statistics reporter not including components only configured with remotecfg. (@dehaansa) - Fix issues with prometheus.exporter.windows not propagating dns collector config. (@dehaansa) - Fixed a bug in prometheus.write.queue which caused retries even when max_retry_attempts was set to 0. (@ptodev) - Fixed a bug in prometheus.write.queue which caused labelling issues when providing more than one label in external_labels. (@dehaansa) - Add application_host and network_inter_zone features to beyla.ebpf component. (@marctc) - Fix issues in loki.process where stage.multiline did not pass through structured metadata. (@jan-mrm) - Fix URLs in the Windows installer being wrapped in quotes. (@martincostello) - Fixed an issue where certain otelcol.* components could prevent Alloy from shutting down when provided invalid configuration. (@thampiotr) ++++ audacity: - Remove Use-full-function-prototypes-in-libnyquist.patch now upstream - Update to 3.7.5 * #8942 Windows on ARM support (Thanks, Vasanth K (@vask2108) and Linaro!) * #9121 FLAC importer now supports 32-bit PCM (Thanks, Dr. K. D. Murray (@kdm9)!) * #8851 Fixed crash when rendering spectrum view (Thanks, Hailey Somerville (@haileys)!) * #9097 Fixed lost focus when registration window was closed * #8932 Fixed crash on wav import (when audio file is up to 7 ms long) * #4444 Fixed crash when using Macro Wizard * #9100, #8890 Updated libopus to 1.5.2, updated libcurl to 8.12.1, updated libpng to 1.6.50 ++++ budgie-desktop-branding: - Use Requires: distribution-logos-branding-SLE for Backports/SLE build * All files from distribution-logos-SLE has been merged into distribution-logos-branding-SLE including the icons, and it is no longer providing systemd-icon-branding capacity ++++ chezmoi: - Update to version 2.64.0: - Features * feat: Remove support for deprecated Hashicorp Vault Secrets * feat: Add hardlink test to doctorcmd * feat: Add --age-recipients-file flag to add command * feat: Add --age-recipient flag to add command * feat: Add automatic Bitwarden CLI unlock * feat: Rename returnEmpty template function to abortEmpty * feat: Add returnEmpty template function - Fixes * fix: Always use diff.pager if configured * fix: Use external diff tool for apply and re-add previews * fix: Fix bad skip instruction in test script issue4479 - Documentation updates * docs: Add notes on edit watch and hardlink subtleties * docs: Add Beyond Compare merge tool configuration ++++ chromium: - really install libffmpeg.so if using the bundled one and block the extra dependency ++++ rabbitmq-server: - Restore SLES logrotate file, (bsc#1246091) ++++ form: - Update to version 4.3.1: * Fixed build errors on 32-bit machines (gh#vermaseren/form#422). * Fixed integer overflows in moebius_ with large numbers (gh#vermaseren/form#430). * Fixed possible memory errors in expanding user-defined preprocessor macros (gh#vermaseren/form#434). * Fixed an extremely rare bug in the long division with GMP (gh#vermaseren/form#439). - Add patches from upstream to fix building documentation: * form-build-docs-without-git-repo.patch (gh#form-dev/form#497). * form-fix-doxygen-failure.patch (gh#form-dev/form#467). - Make doc package noarch. - Add a %check section and run `make check`. ++++ gtk3: - Update to version 3.24.50: + Themes: - Add a progress-working-symbolic icon - Support strokes in symbolic icons - Update theme CSS - Remove hardcoded Cantarell font + GtkShortcutsWindow: Differentiate all keypad symbols visually + GtkApplication: Register unsandboxed apps with the portals + X11: Fix problems with gtk_window_get_geometry + Wayland: Fix a crash + Input: Make compose sequence visuals configurable + Printing: - Fix the build with libcups 3 - Support gnome-papers as previewer + Updated translations. ++++ hledger: - Install embedded man and info pages to be viewable without invoking hledger first i.e. to view in any man/info viewer. ++++ hledger-ui: - Install embedded man and info pages to be viewable without invoking hledger first i.e. to view in any man/info viewer. ++++ git-repo: - Update to version 2.57.3: * project: fallback to reading HEAD when rev-parse fails * hooks: verify hooks project has worktree before running * sync: fix connection error on macOS for interleaved sync * project: Fix GetHead to handle detached HEADs * sync: Don't checkout if no worktree * sync: Default to interleaved mode * project: Use git rev-parse to read HEAD * sync: Improve UI and error reporting for interleaved mode * project: Use plumbing commands to manage HEAD * progress: Make end() idempotent * sync: support post-sync hook in * init: Add environment variable for git-lfs ++++ govulncheck-vulndb: - Update to version 0.0.20250807T150727 2025-08-07T15:07:27Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3849 CVE-2025-47907 ++++ grub2: - Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953) * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch ++++ hashcat: - Use %global instead of %define - Remove python3-devel from recommends ++++ himmelblau: - Update to version 1.2.0+git.0.6befefc: * Version 1.2.0 * Fix Kerberos credential cache permissions; (bsc#1247735), (CVE-2025-54882) * Set file owner and group before writing its content * Ensure alias domains match when checking Intune device id * Debian 12 doesn't support ConditionPathExists and notify-reload * Write scripts policy to a readable directory * Apply Intune policies right after enrollment * Add more debug instrumentation * Provide device_id to Intune enrollment if not cached * Ensure nss cache directory is created during install * Remove /var/cache/himmelblaud access from tasks daemon * Resolve daemon startup absolute path warnings * Version 1.1.0 * Delay Intune enrollment on Device Auth fail * Do not leak the Intune IW service token in the logs ++++ jenkins-x-cli: - Update to version 3.16.18: * chore(deps): upgrade jenkins-x-plugins/jx-preview to version 0.5.14 - Update to version 3.16.17: * chore(deps): bump jenkins-x-plugins/jx-release-version ++++ jujutsu: - update to 0.32.0: * Breaking changes - In revsets, symbol expressions (such as change ID prefix) no longer resolve to multiple revisions, and error out if resolved to more than one revisions. Use change_id(prefix) or bookmarks(exact:name) to query divergent changes or conflicted bookmarks. Commands like jj rebase no longer require all: to specify multiple destination revisions. - jj op abandon now discards previous versions of a change (or predecessors) if they become unreachable from the operation history. The evolution history is truncated accordingly. - Once jj op abandon and jj util gc are run in a repository, old versions of jj might get "commit not found" error on jj evolog. - commit.working_copies() template method now returns List - The previously predefined amend alias has been removed. You can restore it by setting the config aliases.amend = ["squash"]. * Deprecations - The all: revset modifier and ui.always-allow-large-revsets setting is planned to be removed in a future release. #6016 - Rename the core.fsmonitor and core.watchman settings to fsmonitor.backend, and fsmonitor.watchman respectively. * New features - jj workspace list now accepts -T/--template option to customize its output via templates. - Added templates.workspace_list template to customize the output of jj workspace list. - jj fix now buffers the standard error stream from subprocesses and emits the output from each all at once. The file name is printed before the output. - jj status now collapses fully untracked directories into one line. It still fully traverses them while snapshotting but they won't clutter up the output with all of their contents. - Add the working-copy.eol-conversion config which is similar to the git core.autocrlf config. A heuristics is used to detect if a file is a binary file to prevent the EOL conversion from changing binary files unexpectedly. - Add a .parents() method to the Operation type in the templating language. - Merge tools config can now explicitly forbid using them as diff editors or diff formatters. Built-in tools that do not function well as diff editing tools or as diff formatters will now report an error when used as such. - jj diffedit now accepts filesets to edit only the specified paths. - AnnotationLine objects in templates now have a original_line_number() -> Integer method. - Commit templates now support .files() to list all existing files at that revision. - Glob patterns now support {foo,bar} syntax. There may be subtle behavior changes as we use the globset library now. - The new bisect(x) revset function can help bisect a range of commits to find when a bug was introduced. - New first_parent() and first_ancestors() revset functions which are similar to parents() and ancestors(), but only traverse the first parent of each commit (similar to Git's - -first-parent option). - New signing.backends.ssh.revocation-list config for specifying a list of revoked public keys for commit signature verification. - jj fix commands now replace $root with the workspace's root path. This is useful for tools stored inside the workspace. * Fixed bugs - Fixed an error in jj util gc caused by the empty blob being missing from the Git store. #7062 - jj op diff -p and jj op log -p now show content diffs from the first predecessor only. #7090 - jj git fetch no longer shows NaN% progress when connecting to slow remotes. #7155 ++++ kargo-cli: - Update to version 1.7.1: * no CLI-related changes ++++ kernel-default: - Enable CONFIG_CMA_SYSFS This is a generally useful feature for anyone using CMA or investigating CMA issues, with a small and simple code base and no runtime overhead. - commit e137475 - Update config files. Set CONFIG_CMA_AREAS values to their new upstream default. - commit e9e75eb - crypto: hkdf - skip TVs with unapproved salt lengths in FIPS mode (bsc#1241200 bsc#1246134 bsc#1245608). - commit 1ae9298 - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1247726). - commit f83c8f3 ++++ kernel-source: - Enable CONFIG_CMA_SYSFS This is a generally useful feature for anyone using CMA or investigating CMA issues, with a small and simple code base and no runtime overhead. - commit e137475 - Update config files. Set CONFIG_CMA_AREAS values to their new upstream default. - commit e9e75eb - crypto: hkdf - skip TVs with unapproved salt lengths in FIPS mode (bsc#1241200 bsc#1246134 bsc#1245608). - commit 1ae9298 - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1247726). - commit f83c8f3 ++++ kernel-docs: - Enable CONFIG_CMA_SYSFS This is a generally useful feature for anyone using CMA or investigating CMA issues, with a small and simple code base and no runtime overhead. - commit e137475 - Update config files. Set CONFIG_CMA_AREAS values to their new upstream default. - commit e9e75eb - crypto: hkdf - skip TVs with unapproved salt lengths in FIPS mode (bsc#1241200 bsc#1246134 bsc#1245608). - commit 1ae9298 - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1247726). - commit f83c8f3 ++++ kernel-kvmsmall: - Enable CONFIG_CMA_SYSFS This is a generally useful feature for anyone using CMA or investigating CMA issues, with a small and simple code base and no runtime overhead. - commit e137475 - Update config files. Set CONFIG_CMA_AREAS values to their new upstream default. - commit e9e75eb - crypto: hkdf - skip TVs with unapproved salt lengths in FIPS mode (bsc#1241200 bsc#1246134 bsc#1245608). - commit 1ae9298 - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1247726). - commit f83c8f3 ++++ kernel-obs-build: - Enable CONFIG_CMA_SYSFS This is a generally useful feature for anyone using CMA or investigating CMA issues, with a small and simple code base and no runtime overhead. - commit e137475 - Update config files. Set CONFIG_CMA_AREAS values to their new upstream default. - commit e9e75eb - crypto: hkdf - skip TVs with unapproved salt lengths in FIPS mode (bsc#1241200 bsc#1246134 bsc#1245608). - commit 1ae9298 - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1247726). - commit f83c8f3 ++++ kernel-obs-qa: - Enable CONFIG_CMA_SYSFS This is a generally useful feature for anyone using CMA or investigating CMA issues, with a small and simple code base and no runtime overhead. - commit e137475 - Update config files. Set CONFIG_CMA_AREAS values to their new upstream default. - commit e9e75eb - crypto: hkdf - skip TVs with unapproved salt lengths in FIPS mode (bsc#1241200 bsc#1246134 bsc#1245608). - commit 1ae9298 - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1247726). - commit f83c8f3 ++++ kernel-syms: - Enable CONFIG_CMA_SYSFS This is a generally useful feature for anyone using CMA or investigating CMA issues, with a small and simple code base and no runtime overhead. - commit e137475 - Update config files. Set CONFIG_CMA_AREAS values to their new upstream default. - commit e9e75eb - crypto: hkdf - skip TVs with unapproved salt lengths in FIPS mode (bsc#1241200 bsc#1246134 bsc#1245608). - commit 1ae9298 - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1247726). - commit f83c8f3 ++++ kernel-vanilla: - Enable CONFIG_CMA_SYSFS This is a generally useful feature for anyone using CMA or investigating CMA issues, with a small and simple code base and no runtime overhead. - commit e137475 - Update config files. Set CONFIG_CMA_AREAS values to their new upstream default. - commit e9e75eb - crypto: hkdf - skip TVs with unapproved salt lengths in FIPS mode (bsc#1241200 bsc#1246134 bsc#1245608). - commit 1ae9298 - btrfs: fix log tree replay failure due to file with 0 links and extents (bsc#1247726). - commit f83c8f3 ++++ rust-keylime: - Update vendored crates (bsc#1247193, CVE-2025-58266) * shlex 1.3.0 - Rebase keylime-agent.conf.diff for current configuration - Drop Cargo_lock.patch patch, already present in Cargo.lock - Update to version 0.2.7+141: * service: Use WantedBy=multi-user.target * rpm: Add subpackage for push-attestation agent * push-model: implement continuous attestation with configurable intervals * Retry registration forever in the state machine * Add Verifier URL to configuration * Align exp.backoff to current configuration format * Increase coverage of state machine (using Context) * Increase coverage of struct_filler.rs * Groom code (remove dead code) * Fix exponential backoff (10secs, 4xx accepted) * test: Add documentation test to tests/run.sh * tpm: Avoid running code example during documentation tests * state_machine: Always start the agent from the Unregistered state * Add fixes for the URL construction * Refactor evidences collection in push attestation agent * push-model: refactor attestation logic into a state machine * Fix body sending by allowing serializing strings (#1057) * Log ResilientClient errors/response status codes (#1055) * Add AK signing scheme and hash algorithm to negotiation * tpm: Add method to extract signing scheme and hash algorithm from AK * Allow custom content-type/accept headers * Integrate exponential backoff to registration (#1052) * keylime/structures: Rename ShaValues to PcrBanks * Add resilient_client for exponential backoff (#1048) ++++ lego: - Update to version 4.25.2: * Prepare release v4.25.2 * tests: clean up code (#2612) * tests: change the signature of the method BuildHTTPS (#2611) * chore: clean up (#2610) * tests: simplify fake DNS server (rfc2136) (#2609) * fix: enforce HTTPS to the ACME server (#2608) * tests: use better test domains (#2603) * chore: clean up tests and code (#2602) * fix: remove wrong env var (#2600) * feat: log when dynamic renew date not yet reached (#2597) * Detach v4.25.1 ++++ python313-core: - Update to 3.13.6: - Security - gh-135661: Fix parsing start and end tags in html.parser.HTMLParser according to the HTML5 standard. - Whitespaces no longer accepted between does not end the script section. - Vertical tabulation (\v) and non-ASCII whitespaces no longer recognized as whitespaces. The only whitespaces are \t\n\r\f and space. - Null character (U+0000) no longer ends the tag name. - Attributes and slashes after the tag name in end tags are now ignored, instead of terminating after the first > in quoted attribute value. E.g. . - Multiple slashes and whitespaces between the last attribute and closing > are now ignored in both start and end tags. E.g. . - Multiple = between attribute name and value are no longer collapsed. E.g. produces attribute “foo” with value “=bar”. - gh-102555: Fix comment parsing in html.parser.HTMLParser according to the HTML5 standard. --!> now ends the comment. - - > no longer ends the comment. Support abnormally ended empty comments <--> and <--->. - gh-135462: Fix quadratic complexity in processing specially crafted input in html.parser.HTMLParser. End-of-file errors are now handled according to the HTML5 specs – comments and declarations are automatically closed, tags are ignored (CVE-2025-6069, bsc#1244705). - gh-118350: Fix support of escapable raw text mode (elements “textarea” and “title”) in html.parser.HTMLParser. - Core and Builtins - gh-58124: Fix name of the Python encoding in Unicode errors of the code page codec: use “cp65000” and “cp65001” instead of “CP_UTF7” and “CP_UTF8” which are not valid Python code names. Patch by Victor Stinner. - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-136541: Fix some issues with the perf trampolines on x86-64 and aarch64. The trampolines were not being generated correctly for some cases, which could lead to the perf integration not working correctly. Patch by Pablo Galindo. - gh-109700: Fix memory error handling in PyDict_SetDefault(). - gh-78465: Fix error message for cls.__new__(cls, ...) where cls is not instantiable builtin or extension type (with tp_new set to NULL). - gh-135871: Non-blocking mutex lock attempts now return immediately when the lock is busy instead of briefly spinning in the free threading build. - gh-135607: Fix potential weakref races in an object’s destructor on the free threaded build. - gh-135496: Fix typo in the f-string conversion type error (“exclamanation” -> “exclamation”). - gh-130077: Properly raise custom syntax errors when incorrect syntax containing names that are prefixes of soft keywords is encountered. Patch by Pablo Galindo. - gh-135148: Fixed a bug where f-string debug expressions (using =) would incorrectly strip out parts of strings containing escaped quotes and # characters. Patch by Pablo Galindo. - gh-133136: Limit excess memory usage in the free threading build when a large dictionary or list is resized and accessed by multiple threads. - gh-132617: Fix dict.update() modification check that could incorrectly raise a “dict mutated during update” error when a different dictionary was modified that happens to share the same underlying keys object. - gh-91153: Fix a crash when a bytearray is concurrently mutated during item assignment. - gh-127971: Fix off-by-one read beyond the end of a string in string search. - gh-125723: Fix crash with gi_frame.f_locals when generator frames outlive their generator. Patch by Mikhail Efimov. - Library - gh-132710: If possible, ensure that uuid.getnode() returns the same result even across different processes. Previously, the result was constant only within the same process. Patch by Bénédikt Tran. - gh-137273: Fix debug assertion failure in locale.setlocale() on Windows. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-81325: tarfile.TarFile now accepts a path-like when working on a tar archive. (Contributed by Alexander Enrique Urieles Nieto in gh-81325.) - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-136549: Fix signature of threading.excepthook(). - gh-136523: Fix wave.Wave_write emitting an unraisable when open raises. - gh-52876: Add missing keepends (default True) parameter to codecs.StreamReaderWriter.readline() and codecs.StreamReaderWriter.readlines(). - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a zoneinfo.ZoneInfoNotFoundError is raised rather than a PermissionError. Patch by Victor Stinner. - gh-134759: Fix UnboundLocalError in email.message.Message.get_payload() when the payload to decode is a bytes object. Patch by Kliment Lamonov. - gh-136028: Fix parsing month names containing “İ” (U+0130, LATIN CAPITAL LETTER I WITH DOT ABOVE) in time.strptime(). This affects locales az_AZ, ber_DZ, ber_MA and crh_UA. - gh-135995: In the palmos encoding, make byte 0x9b decode to › (U+203A - SINGLE RIGHT-POINTING ANGLE QUOTATION MARK). - gh-53203: Fix time.strptime() for %c and %x formats on locales byn_ER, wal_ET and lzh_TW, and for %X format on locales ar_SA, bg_BG and lzh_TW. - gh-91555: An earlier change, which was introduced in 3.13.4, has been reverted. It disabled logging for a logger during handling of log messages for that logger. Since the reversion, the behaviour should be as it was before 3.13.4. - gh-135878: Fixes a crash of types.SimpleNamespace on free threading builds, when several threads were calling its __repr__() method at the same time. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when non-OSError exception is raised during connection and socket’s close() raises OSError. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when the Happy Eyeballs algorithm resulted in an empty exceptions list during connection attempts. - gh-135855: Raise TypeError instead of SystemError when _interpreters.set___main___attrs() is passed a non-dict object. Patch by Brian Schubert. - gh-135815: netrc: skip security checks if os.getuid() is missing. Patch by Bénédikt Tran. - gh-135640: Address bug where it was possible to call xml.etree.ElementTree.ElementTree.write() on an ElementTree object with an invalid root element. This behavior blanked the file passed to write if it already existed. - gh-135444: Fix asyncio.DatagramTransport.sendto() to account for datagram header size when data cannot be sent. - gh-135497: Fix os.getlogin() failing for longer usernames on BSD-based platforms. - gh-135487: Fix reprlib.Repr.repr_int() when given integers with more than sys.get_int_max_str_digits() digits. Patch by Bénédikt Tran. - gh-135335: multiprocessing: Flush stdout and stderr after preloading modules in the forkserver. - gh-135244: uuid: when the MAC address cannot be determined, the 48-bit node ID is now generated with a cryptographically-secure pseudo-random number generator (CSPRNG) as per RFC 9562, §6.10.3. This affects uuid1(). - gh-135069: Fix the “Invalid error handling” exception in encodings.idna.IncrementalDecoder to correctly replace the ‘errors’ parameter. - gh-134698: Fix a crash when calling methods of ssl.SSLContext or ssl.SSLSocket across multiple threads. - gh-132124: On POSIX-compliant systems, multiprocessing.util.get_temp_dir() now ignores TMPDIR (and similar environment variables) if the path length of AF_UNIX socket files exceeds the platform-specific maximum length when using the forkserver start method. Patch by Bénédikt Tran. - gh-133439: Fix dot commands with trailing spaces are mistaken for multi-line SQL statements in the sqlite3 command-line interface. - gh-132969: Prevent the ProcessPoolExecutor executor thread, which remains running when shutdown(wait=False), from attempting to adjust the pool’s worker processes after the object state has already been reset during shutdown. A combination of conditions, including a worker process having terminated abormally, resulted in an exception and a potential hang when the still-running executor thread attempted to replace dead workers within the pool. - gh-130664: Support the '_' digit separator in formatting of the integral part of Decimal’s. Patch by Sergey B Kirpichev. - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a ZoneInfoNotFoundError is raised rather than a IsADirectoryError. - gh-130664: Handle corner-case for Fraction’s formatting: treat zero-padding (preceding the width field by a zero ('0') character) as an equivalent to a fill character of '0' with an alignment type of '=', just as in case of float’s. - Tools/Demos - gh-135968: Stubs for strip are now provided as part of an iOS install. - Tests - gh-135966: The iOS testbed now handles the app_packages folder as a site directory. - gh-135494: Fix regrtest to support excluding tests from - -pgo tests. Patch by Victor Stinner. - gh-135489: Show verbose output for failing tests during PGO profiling step with –enable-optimizations. - Documentation - gh-135171: Document that the iterator for the leftmost for clause in the generator expression is created immediately. - Build - gh-135497: Fix the detection of MAXLOGNAME in the configure.ac script. - Remove upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch - CVE-2025-6069-quad-complex-HTMLParser.patch ++++ python313-nogil-nogil-core: - Update to 3.13.6: - Security - gh-135661: Fix parsing start and end tags in html.parser.HTMLParser according to the HTML5 standard. - Whitespaces no longer accepted between does not end the script section. - Vertical tabulation (\v) and non-ASCII whitespaces no longer recognized as whitespaces. The only whitespaces are \t\n\r\f and space. - Null character (U+0000) no longer ends the tag name. - Attributes and slashes after the tag name in end tags are now ignored, instead of terminating after the first > in quoted attribute value. E.g. . - Multiple slashes and whitespaces between the last attribute and closing > are now ignored in both start and end tags. E.g. . - Multiple = between attribute name and value are no longer collapsed. E.g. produces attribute “foo” with value “=bar”. - gh-102555: Fix comment parsing in html.parser.HTMLParser according to the HTML5 standard. --!> now ends the comment. - - > no longer ends the comment. Support abnormally ended empty comments <--> and <--->. - gh-135462: Fix quadratic complexity in processing specially crafted input in html.parser.HTMLParser. End-of-file errors are now handled according to the HTML5 specs – comments and declarations are automatically closed, tags are ignored (CVE-2025-6069, bsc#1244705). - gh-118350: Fix support of escapable raw text mode (elements “textarea” and “title”) in html.parser.HTMLParser. - Core and Builtins - gh-58124: Fix name of the Python encoding in Unicode errors of the code page codec: use “cp65000” and “cp65001” instead of “CP_UTF7” and “CP_UTF8” which are not valid Python code names. Patch by Victor Stinner. - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-136541: Fix some issues with the perf trampolines on x86-64 and aarch64. The trampolines were not being generated correctly for some cases, which could lead to the perf integration not working correctly. Patch by Pablo Galindo. - gh-109700: Fix memory error handling in PyDict_SetDefault(). - gh-78465: Fix error message for cls.__new__(cls, ...) where cls is not instantiable builtin or extension type (with tp_new set to NULL). - gh-135871: Non-blocking mutex lock attempts now return immediately when the lock is busy instead of briefly spinning in the free threading build. - gh-135607: Fix potential weakref races in an object’s destructor on the free threaded build. - gh-135496: Fix typo in the f-string conversion type error (“exclamanation” -> “exclamation”). - gh-130077: Properly raise custom syntax errors when incorrect syntax containing names that are prefixes of soft keywords is encountered. Patch by Pablo Galindo. - gh-135148: Fixed a bug where f-string debug expressions (using =) would incorrectly strip out parts of strings containing escaped quotes and # characters. Patch by Pablo Galindo. - gh-133136: Limit excess memory usage in the free threading build when a large dictionary or list is resized and accessed by multiple threads. - gh-132617: Fix dict.update() modification check that could incorrectly raise a “dict mutated during update” error when a different dictionary was modified that happens to share the same underlying keys object. - gh-91153: Fix a crash when a bytearray is concurrently mutated during item assignment. - gh-127971: Fix off-by-one read beyond the end of a string in string search. - gh-125723: Fix crash with gi_frame.f_locals when generator frames outlive their generator. Patch by Mikhail Efimov. - Library - gh-132710: If possible, ensure that uuid.getnode() returns the same result even across different processes. Previously, the result was constant only within the same process. Patch by Bénédikt Tran. - gh-137273: Fix debug assertion failure in locale.setlocale() on Windows. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-81325: tarfile.TarFile now accepts a path-like when working on a tar archive. (Contributed by Alexander Enrique Urieles Nieto in gh-81325.) - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-136549: Fix signature of threading.excepthook(). - gh-136523: Fix wave.Wave_write emitting an unraisable when open raises. - gh-52876: Add missing keepends (default True) parameter to codecs.StreamReaderWriter.readline() and codecs.StreamReaderWriter.readlines(). - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a zoneinfo.ZoneInfoNotFoundError is raised rather than a PermissionError. Patch by Victor Stinner. - gh-134759: Fix UnboundLocalError in email.message.Message.get_payload() when the payload to decode is a bytes object. Patch by Kliment Lamonov. - gh-136028: Fix parsing month names containing “İ” (U+0130, LATIN CAPITAL LETTER I WITH DOT ABOVE) in time.strptime(). This affects locales az_AZ, ber_DZ, ber_MA and crh_UA. - gh-135995: In the palmos encoding, make byte 0x9b decode to › (U+203A - SINGLE RIGHT-POINTING ANGLE QUOTATION MARK). - gh-53203: Fix time.strptime() for %c and %x formats on locales byn_ER, wal_ET and lzh_TW, and for %X format on locales ar_SA, bg_BG and lzh_TW. - gh-91555: An earlier change, which was introduced in 3.13.4, has been reverted. It disabled logging for a logger during handling of log messages for that logger. Since the reversion, the behaviour should be as it was before 3.13.4. - gh-135878: Fixes a crash of types.SimpleNamespace on free threading builds, when several threads were calling its __repr__() method at the same time. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when non-OSError exception is raised during connection and socket’s close() raises OSError. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when the Happy Eyeballs algorithm resulted in an empty exceptions list during connection attempts. - gh-135855: Raise TypeError instead of SystemError when _interpreters.set___main___attrs() is passed a non-dict object. Patch by Brian Schubert. - gh-135815: netrc: skip security checks if os.getuid() is missing. Patch by Bénédikt Tran. - gh-135640: Address bug where it was possible to call xml.etree.ElementTree.ElementTree.write() on an ElementTree object with an invalid root element. This behavior blanked the file passed to write if it already existed. - gh-135444: Fix asyncio.DatagramTransport.sendto() to account for datagram header size when data cannot be sent. - gh-135497: Fix os.getlogin() failing for longer usernames on BSD-based platforms. - gh-135487: Fix reprlib.Repr.repr_int() when given integers with more than sys.get_int_max_str_digits() digits. Patch by Bénédikt Tran. - gh-135335: multiprocessing: Flush stdout and stderr after preloading modules in the forkserver. - gh-135244: uuid: when the MAC address cannot be determined, the 48-bit node ID is now generated with a cryptographically-secure pseudo-random number generator (CSPRNG) as per RFC 9562, §6.10.3. This affects uuid1(). - gh-135069: Fix the “Invalid error handling” exception in encodings.idna.IncrementalDecoder to correctly replace the ‘errors’ parameter. - gh-134698: Fix a crash when calling methods of ssl.SSLContext or ssl.SSLSocket across multiple threads. - gh-132124: On POSIX-compliant systems, multiprocessing.util.get_temp_dir() now ignores TMPDIR (and similar environment variables) if the path length of AF_UNIX socket files exceeds the platform-specific maximum length when using the forkserver start method. Patch by Bénédikt Tran. - gh-133439: Fix dot commands with trailing spaces are mistaken for multi-line SQL statements in the sqlite3 command-line interface. - gh-132969: Prevent the ProcessPoolExecutor executor thread, which remains running when shutdown(wait=False), from attempting to adjust the pool’s worker processes after the object state has already been reset during shutdown. A combination of conditions, including a worker process having terminated abormally, resulted in an exception and a potential hang when the still-running executor thread attempted to replace dead workers within the pool. - gh-130664: Support the '_' digit separator in formatting of the integral part of Decimal’s. Patch by Sergey B Kirpichev. - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a ZoneInfoNotFoundError is raised rather than a IsADirectoryError. - gh-130664: Handle corner-case for Fraction’s formatting: treat zero-padding (preceding the width field by a zero ('0') character) as an equivalent to a fill character of '0' with an alignment type of '=', just as in case of float’s. - Tools/Demos - gh-135968: Stubs for strip are now provided as part of an iOS install. - Tests - gh-135966: The iOS testbed now handles the app_packages folder as a site directory. - gh-135494: Fix regrtest to support excluding tests from - -pgo tests. Patch by Victor Stinner. - gh-135489: Show verbose output for failing tests during PGO profiling step with –enable-optimizations. - Documentation - gh-135171: Document that the iterator for the leftmost for clause in the generator expression is created immediately. - Build - gh-135497: Fix the detection of MAXLOGNAME in the configure.ac script. - Remove upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch - CVE-2025-6069-quad-complex-HTMLParser.patch ++++ libstorage-ng: - merge gh#openSUSE/libstorage-ng#1037 - added function BlkDevice::is_valid_dm_table_name - 4.5.273 ++++ vlc: - Drop obsolete and unused libxvidcore-devel BuildRequires. - Switch faad build_cond to without and move plugin to main package. ++++ yubico-piv-tool: - update to 2.7.2: * ykcs11: Handle a silent verification failure when opening a PKCS11 session. No impact on authentication enforcement for the usage of credentials on the YubiKey * ykcs11: Use "VERIFY_NONE" as PIN to skip verification when using keys with PIN policy "never" * ykcs11: Use "VERIFY_BIO" as PIN to trigger bio verification on the YubiKey * cmd: Get public key of an existing private key * cmd: Improve output of the status command to include slots with only a private key stored * cmd: Fix OID for attestation cross-signature extensions * cmd: Deprecate the --scp11 flag and rename it to --enc ++++ libzypp: - Fix evaluation of libproxy results (bsc#1247690) - Replace URL variables inside mirrorlist/metalink files (fixes #667) - version 17.37.16 (35) ++++ meshlab: - Update to version 2025.07 * a new plugin for loading and saving 3mf files * several bugfixes. ++++ mkosi: - Add 0001-Drop-microsecond-resolution-for-datetime.now.patch * Backport upstream patch to address an issue in OBS, where a manifest is sometimes not created if the image contains only one RPM package on architectures with fast CPUs. The root cause is rounding errors when comparing the RPM INSTALLTIME attribute (int) and datetime.now (float). ++++ mutt: - Exclude sample ca-bundle.crt as it is outdated (bsc#1246321) ++++ octave-forge-statistics: - Update to version 1.7.5: * mean, median, std, var, and mad shadow core Octave's functions before Octave 9.1. * incompatibility with the nan package. * There are 2 new functions and 4 new classdefs introduced in this release. * Several bug fixes related to various issues (gh#gnu-octave/statistics#183, gh#gnu-octave/statistics#199, gh#gnu-octave/statistics#200, gh#gnu-octave/statistics#203, gh#gnu-octave/statistics#204, gh#gnu-octave/statistics#212, gh#gnu-octave/statistics#215). * Fixed the slow kd-tree implementation in knnsearch and rangesearch functions. * The old style cvpartition class has been deprecated in favor of the newly introduced classdef implementation. * crossval needs attention, see issue (gh#gnu-octave/statistics#217). ++++ ollama: - Update to version 0.11.4: * openai: allow for content and tool calls in the same message * openai: when converting role=tool messages, propagate the tool name * openai: always provide reasoning * Bug fixes ++++ openQA: - Update to version 5.1754567283.cc45a4c0: * Rewrote client script from perl to bash to fix heavy tests * Remove script declaration on profiles * build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 * Remove test related to deprecated client script * Obsolete script/client after 4 year deprecation period ++++ orage: - Update to version 4.20.2 * Changed recurrence limits from 100 to 9999 (MR !78). * Minor cleanup of log messages. ++++ osv-scanner: - Update to version 2.2.0: OSV-Scanner now supports all OSV-Scalibr features behind experimental flags (--experimental-plugins, see details here)! * Features: - Feature #2146 Allow manual OSV-Scalibr plugin selection. - Feature #2144 Add OSV-Scalibr version to osv-scanner - -version output. - Feature #2021 Add experimental support for running OSV-Scalibr detectors. - Feature #2079 Fall back to offline extractor if the transitive one fails, so at least direct dependencies are returned. - Feature #2032 Add summary section at the top of outputs and a 'Fixed Version' column. - Feature #2076 Support Ubuntu severity type. * Fixes: - Bug #2141 Fix OSV-Scanner json scans not matching with correct ecosystem. - Bug #2084 Show absolute paths when scanning containers. - Bug #2126 Log and preserve package count before continuing on db error. - Bug #2095 Pass through plugin capabilities correctly. - Bug #2051 Properly flag if running on Linux or Mac OSs for plugin compatibility. - Bug #2072 Add missing "text" property in description fields. - Bug #2068 Change links in output to go to the specific vulnerability page instead of the list page. - Bug #2064 Fix SARIF v3 output to include results. * API Changes: - API Change #2096 Allow log handler to be overridden. * Dependencies: - chore(deps): update alpine:3.22 docker digest to 4bcff63 (#2089) - chore(deps): update github/codeql-action action to v3.29.5 (#2116) - chore(deps): update golang docker tag to v1.24.5 (#2062) - chore(deps): update golang:1.24.5-alpine3.21 docker digest to 6edc205 (#2090) ++++ python-tpm2-pytss: - Refresh the source tarball. ++++ python-aiohttp: - Update to 3.12.15 * Fixed :class:`~aiohttp.DigestAuthMiddleware` to preserve the algorithm case from the server's challenge in the authorization response. This improves compatibility with servers that perform case-sensitive algorithm matching (e.g., servers expecting ``algorithm=MD5-sess`` instead of ``algorithm=MD5-SESS``) * Remove outdated contents of ``aiohttp-devtools`` and ``aiohttp-swagger`` from Web_advanced docs. * Started including the ``llhttp`` :file:`LICENSE` file in wheels by adding ``vendor/llhttp/LICENSE`` to ``license-files`` in :file:`setup.cfg` * Updated a regex in `test_aiohttp_request_coroutine` for Python 3.14. ++++ python-aiosmtplib: - Disable tests, tests doesn't work with latest pytest-asyncio gh#cole/aiosmtplib@3b4bd0d7048c ++++ python-anyio: - Increase timeout in in test_keyboardinterrupt_during_test, it helps with flaky tests in i586 arches. ++++ python-bracex: - Update to 2.6 * NEW: Drop support for Python 3.8. * NEW: Add support for Python 3.14. ++++ python-flux-local: - update to 7.8.0: * fix: render out oci volume mount images by @buroa in #981 * chore(deps): update actions/download-artifact action to v5 by @renovate[bot] in #982 ++++ python-logilab-common: - Update to 2.1.0 * support python 3.12 * feat(compat): remove old python2 compatibility code - Adjust upstream source name in spec file - Use Python 3.11 on SLE-15 by default ++++ python-magicalimport: - Fix fdupes (it doesn't expand automatically) ++++ python-meshtastic: - Update to 2.7.0 * Add check for poetry install to regen-protobufs.sh * Add seeed xiao esp32s3 support * Plumb reply_id into sendText and sendData * Allow forced UTF-8 encoding for --export-config * Add handling of clientNotification on FromRadio * add --set-is-unmessageable to CLI commands * Add Ringtone and Canned Messages to --export-config and --configure * Export missing defaults when set False * Protobufs are updated to 2.7.4 - Replace LICENSES/GPL-3.0-only.txt with LICENSE.md in %license section ++++ python-poetry: - Skip more tests that require /tmp to be mounted exec. ++++ python-pytest-xprocess: - Add upstream patch fix-test_process_initialization.patch gh#pytest-dev/pytest-xprocess#157 to fix tests in slow machines ++++ python-usbsdmux: - Update to 25.8: * This release fixes a bug in which the MQTT reporting feature could break the tool, if the MQTT broker is not available: MQTT: Continue switching the Mux on MQTT error by @SmithChart in #96 * usbsdmux: sd_regs: Fix ruff error regarding the use of percent formatting by @hnez in #89 * CI: run checks on a schedule and allow workflow_dispatch by @hnez in #90 * contrib/udev: explicitly load the sg module in the udev rule by @hnez in #88 * Fix postal address in the LGPL by @SmithChart in #94 (Reported by @yaneti in #91) * Make License and Copyright Information compatible to Reuse 3.3 specification by @SmithChart in #97 ++++ python313: - Update to 3.13.6: - Security - gh-135661: Fix parsing start and end tags in html.parser.HTMLParser according to the HTML5 standard. - Whitespaces no longer accepted between does not end the script section. - Vertical tabulation (\v) and non-ASCII whitespaces no longer recognized as whitespaces. The only whitespaces are \t\n\r\f and space. - Null character (U+0000) no longer ends the tag name. - Attributes and slashes after the tag name in end tags are now ignored, instead of terminating after the first > in quoted attribute value. E.g. . - Multiple slashes and whitespaces between the last attribute and closing > are now ignored in both start and end tags. E.g. . - Multiple = between attribute name and value are no longer collapsed. E.g. produces attribute “foo” with value “=bar”. - gh-102555: Fix comment parsing in html.parser.HTMLParser according to the HTML5 standard. --!> now ends the comment. - - > no longer ends the comment. Support abnormally ended empty comments <--> and <--->. - gh-135462: Fix quadratic complexity in processing specially crafted input in html.parser.HTMLParser. End-of-file errors are now handled according to the HTML5 specs – comments and declarations are automatically closed, tags are ignored (CVE-2025-6069, bsc#1244705). - gh-118350: Fix support of escapable raw text mode (elements “textarea” and “title”) in html.parser.HTMLParser. - Core and Builtins - gh-58124: Fix name of the Python encoding in Unicode errors of the code page codec: use “cp65000” and “cp65001” instead of “CP_UTF7” and “CP_UTF8” which are not valid Python code names. Patch by Victor Stinner. - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-136541: Fix some issues with the perf trampolines on x86-64 and aarch64. The trampolines were not being generated correctly for some cases, which could lead to the perf integration not working correctly. Patch by Pablo Galindo. - gh-109700: Fix memory error handling in PyDict_SetDefault(). - gh-78465: Fix error message for cls.__new__(cls, ...) where cls is not instantiable builtin or extension type (with tp_new set to NULL). - gh-135871: Non-blocking mutex lock attempts now return immediately when the lock is busy instead of briefly spinning in the free threading build. - gh-135607: Fix potential weakref races in an object’s destructor on the free threaded build. - gh-135496: Fix typo in the f-string conversion type error (“exclamanation” -> “exclamation”). - gh-130077: Properly raise custom syntax errors when incorrect syntax containing names that are prefixes of soft keywords is encountered. Patch by Pablo Galindo. - gh-135148: Fixed a bug where f-string debug expressions (using =) would incorrectly strip out parts of strings containing escaped quotes and # characters. Patch by Pablo Galindo. - gh-133136: Limit excess memory usage in the free threading build when a large dictionary or list is resized and accessed by multiple threads. - gh-132617: Fix dict.update() modification check that could incorrectly raise a “dict mutated during update” error when a different dictionary was modified that happens to share the same underlying keys object. - gh-91153: Fix a crash when a bytearray is concurrently mutated during item assignment. - gh-127971: Fix off-by-one read beyond the end of a string in string search. - gh-125723: Fix crash with gi_frame.f_locals when generator frames outlive their generator. Patch by Mikhail Efimov. - Library - gh-132710: If possible, ensure that uuid.getnode() returns the same result even across different processes. Previously, the result was constant only within the same process. Patch by Bénédikt Tran. - gh-137273: Fix debug assertion failure in locale.setlocale() on Windows. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-81325: tarfile.TarFile now accepts a path-like when working on a tar archive. (Contributed by Alexander Enrique Urieles Nieto in gh-81325.) - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-136549: Fix signature of threading.excepthook(). - gh-136523: Fix wave.Wave_write emitting an unraisable when open raises. - gh-52876: Add missing keepends (default True) parameter to codecs.StreamReaderWriter.readline() and codecs.StreamReaderWriter.readlines(). - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a zoneinfo.ZoneInfoNotFoundError is raised rather than a PermissionError. Patch by Victor Stinner. - gh-134759: Fix UnboundLocalError in email.message.Message.get_payload() when the payload to decode is a bytes object. Patch by Kliment Lamonov. - gh-136028: Fix parsing month names containing “İ” (U+0130, LATIN CAPITAL LETTER I WITH DOT ABOVE) in time.strptime(). This affects locales az_AZ, ber_DZ, ber_MA and crh_UA. - gh-135995: In the palmos encoding, make byte 0x9b decode to › (U+203A - SINGLE RIGHT-POINTING ANGLE QUOTATION MARK). - gh-53203: Fix time.strptime() for %c and %x formats on locales byn_ER, wal_ET and lzh_TW, and for %X format on locales ar_SA, bg_BG and lzh_TW. - gh-91555: An earlier change, which was introduced in 3.13.4, has been reverted. It disabled logging for a logger during handling of log messages for that logger. Since the reversion, the behaviour should be as it was before 3.13.4. - gh-135878: Fixes a crash of types.SimpleNamespace on free threading builds, when several threads were calling its __repr__() method at the same time. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when non-OSError exception is raised during connection and socket’s close() raises OSError. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when the Happy Eyeballs algorithm resulted in an empty exceptions list during connection attempts. - gh-135855: Raise TypeError instead of SystemError when _interpreters.set___main___attrs() is passed a non-dict object. Patch by Brian Schubert. - gh-135815: netrc: skip security checks if os.getuid() is missing. Patch by Bénédikt Tran. - gh-135640: Address bug where it was possible to call xml.etree.ElementTree.ElementTree.write() on an ElementTree object with an invalid root element. This behavior blanked the file passed to write if it already existed. - gh-135444: Fix asyncio.DatagramTransport.sendto() to account for datagram header size when data cannot be sent. - gh-135497: Fix os.getlogin() failing for longer usernames on BSD-based platforms. - gh-135487: Fix reprlib.Repr.repr_int() when given integers with more than sys.get_int_max_str_digits() digits. Patch by Bénédikt Tran. - gh-135335: multiprocessing: Flush stdout and stderr after preloading modules in the forkserver. - gh-135244: uuid: when the MAC address cannot be determined, the 48-bit node ID is now generated with a cryptographically-secure pseudo-random number generator (CSPRNG) as per RFC 9562, §6.10.3. This affects uuid1(). - gh-135069: Fix the “Invalid error handling” exception in encodings.idna.IncrementalDecoder to correctly replace the ‘errors’ parameter. - gh-134698: Fix a crash when calling methods of ssl.SSLContext or ssl.SSLSocket across multiple threads. - gh-132124: On POSIX-compliant systems, multiprocessing.util.get_temp_dir() now ignores TMPDIR (and similar environment variables) if the path length of AF_UNIX socket files exceeds the platform-specific maximum length when using the forkserver start method. Patch by Bénédikt Tran. - gh-133439: Fix dot commands with trailing spaces are mistaken for multi-line SQL statements in the sqlite3 command-line interface. - gh-132969: Prevent the ProcessPoolExecutor executor thread, which remains running when shutdown(wait=False), from attempting to adjust the pool’s worker processes after the object state has already been reset during shutdown. A combination of conditions, including a worker process having terminated abormally, resulted in an exception and a potential hang when the still-running executor thread attempted to replace dead workers within the pool. - gh-130664: Support the '_' digit separator in formatting of the integral part of Decimal’s. Patch by Sergey B Kirpichev. - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a ZoneInfoNotFoundError is raised rather than a IsADirectoryError. - gh-130664: Handle corner-case for Fraction’s formatting: treat zero-padding (preceding the width field by a zero ('0') character) as an equivalent to a fill character of '0' with an alignment type of '=', just as in case of float’s. - Tools/Demos - gh-135968: Stubs for strip are now provided as part of an iOS install. - Tests - gh-135966: The iOS testbed now handles the app_packages folder as a site directory. - gh-135494: Fix regrtest to support excluding tests from - -pgo tests. Patch by Victor Stinner. - gh-135489: Show verbose output for failing tests during PGO profiling step with –enable-optimizations. - Documentation - gh-135171: Document that the iterator for the leftmost for clause in the generator expression is created immediately. - Build - gh-135497: Fix the detection of MAXLOGNAME in the configure.ac script. - Remove upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch - CVE-2025-6069-quad-complex-HTMLParser.patch ++++ python313-documentation: - Update to 3.13.6: - Security - gh-135661: Fix parsing start and end tags in html.parser.HTMLParser according to the HTML5 standard. - Whitespaces no longer accepted between does not end the script section. - Vertical tabulation (\v) and non-ASCII whitespaces no longer recognized as whitespaces. The only whitespaces are \t\n\r\f and space. - Null character (U+0000) no longer ends the tag name. - Attributes and slashes after the tag name in end tags are now ignored, instead of terminating after the first > in quoted attribute value. E.g. . - Multiple slashes and whitespaces between the last attribute and closing > are now ignored in both start and end tags. E.g. . - Multiple = between attribute name and value are no longer collapsed. E.g. produces attribute “foo” with value “=bar”. - gh-102555: Fix comment parsing in html.parser.HTMLParser according to the HTML5 standard. --!> now ends the comment. - - > no longer ends the comment. Support abnormally ended empty comments <--> and <--->. - gh-135462: Fix quadratic complexity in processing specially crafted input in html.parser.HTMLParser. End-of-file errors are now handled according to the HTML5 specs – comments and declarations are automatically closed, tags are ignored (CVE-2025-6069, bsc#1244705). - gh-118350: Fix support of escapable raw text mode (elements “textarea” and “title”) in html.parser.HTMLParser. - Core and Builtins - gh-58124: Fix name of the Python encoding in Unicode errors of the code page codec: use “cp65000” and “cp65001” instead of “CP_UTF7” and “CP_UTF8” which are not valid Python code names. Patch by Victor Stinner. - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-136541: Fix some issues with the perf trampolines on x86-64 and aarch64. The trampolines were not being generated correctly for some cases, which could lead to the perf integration not working correctly. Patch by Pablo Galindo. - gh-109700: Fix memory error handling in PyDict_SetDefault(). - gh-78465: Fix error message for cls.__new__(cls, ...) where cls is not instantiable builtin or extension type (with tp_new set to NULL). - gh-135871: Non-blocking mutex lock attempts now return immediately when the lock is busy instead of briefly spinning in the free threading build. - gh-135607: Fix potential weakref races in an object’s destructor on the free threaded build. - gh-135496: Fix typo in the f-string conversion type error (“exclamanation” -> “exclamation”). - gh-130077: Properly raise custom syntax errors when incorrect syntax containing names that are prefixes of soft keywords is encountered. Patch by Pablo Galindo. - gh-135148: Fixed a bug where f-string debug expressions (using =) would incorrectly strip out parts of strings containing escaped quotes and # characters. Patch by Pablo Galindo. - gh-133136: Limit excess memory usage in the free threading build when a large dictionary or list is resized and accessed by multiple threads. - gh-132617: Fix dict.update() modification check that could incorrectly raise a “dict mutated during update” error when a different dictionary was modified that happens to share the same underlying keys object. - gh-91153: Fix a crash when a bytearray is concurrently mutated during item assignment. - gh-127971: Fix off-by-one read beyond the end of a string in string search. - gh-125723: Fix crash with gi_frame.f_locals when generator frames outlive their generator. Patch by Mikhail Efimov. - Library - gh-132710: If possible, ensure that uuid.getnode() returns the same result even across different processes. Previously, the result was constant only within the same process. Patch by Bénédikt Tran. - gh-137273: Fix debug assertion failure in locale.setlocale() on Windows. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-81325: tarfile.TarFile now accepts a path-like when working on a tar archive. (Contributed by Alexander Enrique Urieles Nieto in gh-81325.) - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-136549: Fix signature of threading.excepthook(). - gh-136523: Fix wave.Wave_write emitting an unraisable when open raises. - gh-52876: Add missing keepends (default True) parameter to codecs.StreamReaderWriter.readline() and codecs.StreamReaderWriter.readlines(). - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a zoneinfo.ZoneInfoNotFoundError is raised rather than a PermissionError. Patch by Victor Stinner. - gh-134759: Fix UnboundLocalError in email.message.Message.get_payload() when the payload to decode is a bytes object. Patch by Kliment Lamonov. - gh-136028: Fix parsing month names containing “İ” (U+0130, LATIN CAPITAL LETTER I WITH DOT ABOVE) in time.strptime(). This affects locales az_AZ, ber_DZ, ber_MA and crh_UA. - gh-135995: In the palmos encoding, make byte 0x9b decode to › (U+203A - SINGLE RIGHT-POINTING ANGLE QUOTATION MARK). - gh-53203: Fix time.strptime() for %c and %x formats on locales byn_ER, wal_ET and lzh_TW, and for %X format on locales ar_SA, bg_BG and lzh_TW. - gh-91555: An earlier change, which was introduced in 3.13.4, has been reverted. It disabled logging for a logger during handling of log messages for that logger. Since the reversion, the behaviour should be as it was before 3.13.4. - gh-135878: Fixes a crash of types.SimpleNamespace on free threading builds, when several threads were calling its __repr__() method at the same time. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when non-OSError exception is raised during connection and socket’s close() raises OSError. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when the Happy Eyeballs algorithm resulted in an empty exceptions list during connection attempts. - gh-135855: Raise TypeError instead of SystemError when _interpreters.set___main___attrs() is passed a non-dict object. Patch by Brian Schubert. - gh-135815: netrc: skip security checks if os.getuid() is missing. Patch by Bénédikt Tran. - gh-135640: Address bug where it was possible to call xml.etree.ElementTree.ElementTree.write() on an ElementTree object with an invalid root element. This behavior blanked the file passed to write if it already existed. - gh-135444: Fix asyncio.DatagramTransport.sendto() to account for datagram header size when data cannot be sent. - gh-135497: Fix os.getlogin() failing for longer usernames on BSD-based platforms. - gh-135487: Fix reprlib.Repr.repr_int() when given integers with more than sys.get_int_max_str_digits() digits. Patch by Bénédikt Tran. - gh-135335: multiprocessing: Flush stdout and stderr after preloading modules in the forkserver. - gh-135244: uuid: when the MAC address cannot be determined, the 48-bit node ID is now generated with a cryptographically-secure pseudo-random number generator (CSPRNG) as per RFC 9562, §6.10.3. This affects uuid1(). - gh-135069: Fix the “Invalid error handling” exception in encodings.idna.IncrementalDecoder to correctly replace the ‘errors’ parameter. - gh-134698: Fix a crash when calling methods of ssl.SSLContext or ssl.SSLSocket across multiple threads. - gh-132124: On POSIX-compliant systems, multiprocessing.util.get_temp_dir() now ignores TMPDIR (and similar environment variables) if the path length of AF_UNIX socket files exceeds the platform-specific maximum length when using the forkserver start method. Patch by Bénédikt Tran. - gh-133439: Fix dot commands with trailing spaces are mistaken for multi-line SQL statements in the sqlite3 command-line interface. - gh-132969: Prevent the ProcessPoolExecutor executor thread, which remains running when shutdown(wait=False), from attempting to adjust the pool’s worker processes after the object state has already been reset during shutdown. A combination of conditions, including a worker process having terminated abormally, resulted in an exception and a potential hang when the still-running executor thread attempted to replace dead workers within the pool. - gh-130664: Support the '_' digit separator in formatting of the integral part of Decimal’s. Patch by Sergey B Kirpichev. - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a ZoneInfoNotFoundError is raised rather than a IsADirectoryError. - gh-130664: Handle corner-case for Fraction’s formatting: treat zero-padding (preceding the width field by a zero ('0') character) as an equivalent to a fill character of '0' with an alignment type of '=', just as in case of float’s. - Tools/Demos - gh-135968: Stubs for strip are now provided as part of an iOS install. - Tests - gh-135966: The iOS testbed now handles the app_packages folder as a site directory. - gh-135494: Fix regrtest to support excluding tests from - -pgo tests. Patch by Victor Stinner. - gh-135489: Show verbose output for failing tests during PGO profiling step with –enable-optimizations. - Documentation - gh-135171: Document that the iterator for the leftmost for clause in the generator expression is created immediately. - Build - gh-135497: Fix the detection of MAXLOGNAME in the configure.ac script. - Remove upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch - CVE-2025-6069-quad-complex-HTMLParser.patch ++++ python313-nogil: - Update to 3.13.6: - Security - gh-135661: Fix parsing start and end tags in html.parser.HTMLParser according to the HTML5 standard. - Whitespaces no longer accepted between does not end the script section. - Vertical tabulation (\v) and non-ASCII whitespaces no longer recognized as whitespaces. The only whitespaces are \t\n\r\f and space. - Null character (U+0000) no longer ends the tag name. - Attributes and slashes after the tag name in end tags are now ignored, instead of terminating after the first > in quoted attribute value. E.g. . - Multiple slashes and whitespaces between the last attribute and closing > are now ignored in both start and end tags. E.g. . - Multiple = between attribute name and value are no longer collapsed. E.g. produces attribute “foo” with value “=bar”. - gh-102555: Fix comment parsing in html.parser.HTMLParser according to the HTML5 standard. --!> now ends the comment. - - > no longer ends the comment. Support abnormally ended empty comments <--> and <--->. - gh-135462: Fix quadratic complexity in processing specially crafted input in html.parser.HTMLParser. End-of-file errors are now handled according to the HTML5 specs – comments and declarations are automatically closed, tags are ignored (CVE-2025-6069, bsc#1244705). - gh-118350: Fix support of escapable raw text mode (elements “textarea” and “title”) in html.parser.HTMLParser. - Core and Builtins - gh-58124: Fix name of the Python encoding in Unicode errors of the code page codec: use “cp65000” and “cp65001” instead of “CP_UTF7” and “CP_UTF8” which are not valid Python code names. Patch by Victor Stinner. - gh-137314: Fixed a regression where raw f-strings incorrectly interpreted escape sequences in format specifications. Raw f-strings now properly preserve literal backslashes in format specs, matching the behavior from Python 3.11. For example, rf"{obj:\xFF}" now correctly produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo. - gh-136541: Fix some issues with the perf trampolines on x86-64 and aarch64. The trampolines were not being generated correctly for some cases, which could lead to the perf integration not working correctly. Patch by Pablo Galindo. - gh-109700: Fix memory error handling in PyDict_SetDefault(). - gh-78465: Fix error message for cls.__new__(cls, ...) where cls is not instantiable builtin or extension type (with tp_new set to NULL). - gh-135871: Non-blocking mutex lock attempts now return immediately when the lock is busy instead of briefly spinning in the free threading build. - gh-135607: Fix potential weakref races in an object’s destructor on the free threaded build. - gh-135496: Fix typo in the f-string conversion type error (“exclamanation” -> “exclamation”). - gh-130077: Properly raise custom syntax errors when incorrect syntax containing names that are prefixes of soft keywords is encountered. Patch by Pablo Galindo. - gh-135148: Fixed a bug where f-string debug expressions (using =) would incorrectly strip out parts of strings containing escaped quotes and # characters. Patch by Pablo Galindo. - gh-133136: Limit excess memory usage in the free threading build when a large dictionary or list is resized and accessed by multiple threads. - gh-132617: Fix dict.update() modification check that could incorrectly raise a “dict mutated during update” error when a different dictionary was modified that happens to share the same underlying keys object. - gh-91153: Fix a crash when a bytearray is concurrently mutated during item assignment. - gh-127971: Fix off-by-one read beyond the end of a string in string search. - gh-125723: Fix crash with gi_frame.f_locals when generator frames outlive their generator. Patch by Mikhail Efimov. - Library - gh-132710: If possible, ensure that uuid.getnode() returns the same result even across different processes. Previously, the result was constant only within the same process. Patch by Bénédikt Tran. - gh-137273: Fix debug assertion failure in locale.setlocale() on Windows. - gh-137257: Bump the version of pip bundled in ensurepip to version 25.2 - gh-81325: tarfile.TarFile now accepts a path-like when working on a tar archive. (Contributed by Alexander Enrique Urieles Nieto in gh-81325.) - gh-130522: Fix unraisable TypeError raised during interpreter shutdown in the threading module. - gh-130577: tarfile now validates archives to ensure member offsets are non-negative. (Contributed by Alexander Enrique Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249). - gh-136549: Fix signature of threading.excepthook(). - gh-136523: Fix wave.Wave_write emitting an unraisable when open raises. - gh-52876: Add missing keepends (default True) parameter to codecs.StreamReaderWriter.readline() and codecs.StreamReaderWriter.readlines(). - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a zoneinfo.ZoneInfoNotFoundError is raised rather than a PermissionError. Patch by Victor Stinner. - gh-134759: Fix UnboundLocalError in email.message.Message.get_payload() when the payload to decode is a bytes object. Patch by Kliment Lamonov. - gh-136028: Fix parsing month names containing “İ” (U+0130, LATIN CAPITAL LETTER I WITH DOT ABOVE) in time.strptime(). This affects locales az_AZ, ber_DZ, ber_MA and crh_UA. - gh-135995: In the palmos encoding, make byte 0x9b decode to › (U+203A - SINGLE RIGHT-POINTING ANGLE QUOTATION MARK). - gh-53203: Fix time.strptime() for %c and %x formats on locales byn_ER, wal_ET and lzh_TW, and for %X format on locales ar_SA, bg_BG and lzh_TW. - gh-91555: An earlier change, which was introduced in 3.13.4, has been reverted. It disabled logging for a logger during handling of log messages for that logger. Since the reversion, the behaviour should be as it was before 3.13.4. - gh-135878: Fixes a crash of types.SimpleNamespace on free threading builds, when several threads were calling its __repr__() method at the same time. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when non-OSError exception is raised during connection and socket’s close() raises OSError. - gh-135836: Fix IndexError in asyncio.loop.create_connection() that could occur when the Happy Eyeballs algorithm resulted in an empty exceptions list during connection attempts. - gh-135855: Raise TypeError instead of SystemError when _interpreters.set___main___attrs() is passed a non-dict object. Patch by Brian Schubert. - gh-135815: netrc: skip security checks if os.getuid() is missing. Patch by Bénédikt Tran. - gh-135640: Address bug where it was possible to call xml.etree.ElementTree.ElementTree.write() on an ElementTree object with an invalid root element. This behavior blanked the file passed to write if it already existed. - gh-135444: Fix asyncio.DatagramTransport.sendto() to account for datagram header size when data cannot be sent. - gh-135497: Fix os.getlogin() failing for longer usernames on BSD-based platforms. - gh-135487: Fix reprlib.Repr.repr_int() when given integers with more than sys.get_int_max_str_digits() digits. Patch by Bénédikt Tran. - gh-135335: multiprocessing: Flush stdout and stderr after preloading modules in the forkserver. - gh-135244: uuid: when the MAC address cannot be determined, the 48-bit node ID is now generated with a cryptographically-secure pseudo-random number generator (CSPRNG) as per RFC 9562, §6.10.3. This affects uuid1(). - gh-135069: Fix the “Invalid error handling” exception in encodings.idna.IncrementalDecoder to correctly replace the ‘errors’ parameter. - gh-134698: Fix a crash when calling methods of ssl.SSLContext or ssl.SSLSocket across multiple threads. - gh-132124: On POSIX-compliant systems, multiprocessing.util.get_temp_dir() now ignores TMPDIR (and similar environment variables) if the path length of AF_UNIX socket files exceeds the platform-specific maximum length when using the forkserver start method. Patch by Bénédikt Tran. - gh-133439: Fix dot commands with trailing spaces are mistaken for multi-line SQL statements in the sqlite3 command-line interface. - gh-132969: Prevent the ProcessPoolExecutor executor thread, which remains running when shutdown(wait=False), from attempting to adjust the pool’s worker processes after the object state has already been reset during shutdown. A combination of conditions, including a worker process having terminated abormally, resulted in an exception and a potential hang when the still-running executor thread attempted to replace dead workers within the pool. - gh-130664: Support the '_' digit separator in formatting of the integral part of Decimal’s. Patch by Sergey B Kirpichev. - gh-85702: If zoneinfo._common.load_tzdata is given a package without a resource a ZoneInfoNotFoundError is raised rather than a IsADirectoryError. - gh-130664: Handle corner-case for Fraction’s formatting: treat zero-padding (preceding the width field by a zero ('0') character) as an equivalent to a fill character of '0' with an alignment type of '=', just as in case of float’s. - Tools/Demos - gh-135968: Stubs for strip are now provided as part of an iOS install. - Tests - gh-135966: The iOS testbed now handles the app_packages folder as a site directory. - gh-135494: Fix regrtest to support excluding tests from - -pgo tests. Patch by Victor Stinner. - gh-135489: Show verbose output for failing tests during PGO profiling step with –enable-optimizations. - Documentation - gh-135171: Document that the iterator for the leftmost for clause in the generator expression is created immediately. - Build - gh-135497: Fix the detection of MAXLOGNAME in the configure.ac script. - Remove upstreamed patches: - CVE-2025-8194-tarfile-no-neg-offsets.patch - CVE-2025-6069-quad-complex-HTMLParser.patch ++++ read-only-root-fs: - Migrate from ro to ro=vfs (boo#1156421) - Update to version 1.0+git20250807.5b5844c: * Remove workarounds obsoleted by ro=vfs ++++ rioterm: - Update to version 0.2.27: * prepare v0.2.27 * add notes * use borrowed ID * font id should be always default to respect cell * update releases.md * Fix CJK characters displaying higher than Latin characters * Implement consistent font metrics for CJK rendering * unify clearsubregion to remove texture (ref: #709) * update com.rioterm.Rio.metainfo.xml * update docs about terminfo * update terminfo * prioritize xterm-rio if installed ++++ rubygem-agama-yast: - Do not use 'retry' as default answer for questions (bsc#1247436). ++++ spec-cleaner: - Update to version 1.2.4+2: * Add python_group_libalternatives to excludes-bracketing * Add common python macros to excludes-bracketing * Update distro-copyright to be more explicit ++++ sysextmgr: - Update to version 0.0+git20250806.0599a82: * sysextmgrd: fix mkosi manifest usage * CI: add libzio and zlib devel dependencies * Add support for mkosi manifest ++++ tempo-cli: - Update to version 2.8.2: No CLI-related changes in this release ++++ tik: - Update to version 1.3.14: * [15-encrypt] Create /var/lib/sdbootutil if it doesn't already exist (boo#1247713) ++++ timoni: - Update to version 0.25.2: * Update dependencies to Kubernetes v1.33.3 * Update `cuelang.org/go` to v0.14.0 * build(deps): bump the ci group across 1 directory with 3 updates ------------------------------------------------------------------ ------------------ 2025-8-6 - Aug 6 2025 ------------------- ------------------------------------------------------------------ ++++ CoreFreq: - added fix-leap16-compilation.patch to fix compilation on x86_64 Leap 16.0 ++++ FreeCAD: - Update to version 1.0.2 This is a bugfix release, no new features ++++ agama: - Automatically retry registration when a network error happens during autoinstallation (bsc#1246990) - Emit HTTP event when storage is configured, including the client id (gh#agama-project/agama#2640). ++++ agama-products: - Drop Beta from Leap 16.0. We've agreed to not use RC and simply go with Leap 16.0 just like on boot menu. ++++ agama-yast: - Emit D-Bus signal when storage is configured, including the client id (gh#agama-project/agama#2640). ++++ apache2-mod_security2: - update to 2.9.12: * CVE-2025-54571: Improper error handling (boo#1247674) * remove unused condition from msc_status_engine.c * remove unwanted '\0' string terminator from argument's valu - drop modsecurity-2.9.3-input_filtering_errors.patch different change included upstream ++++ aurorae6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ bluedevil6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ breeze6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * ci: Remove FreeBSD and Windows Qt5 pipelines ++++ chromium: - add patch: chromium-139-pdfium-openjpeg-CVE-2025-54874.patch (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg - re-add updated patch: ppc-fedora-0002-regenerate-xnn-buildgn.patch from https://src.fedoraproject.org/rpms/chromium/blob/ rawhide/f/0002-regenerate-xnn-buildgn.patch ++++ lagrange: - update to 1.18.6 - Added Samogitian (sgs) UI translation. - Link icons are now included in the clickable part of a line. - Fixed handling of percent-encoded semicolons in the URI path component. - Fixed crash when opening context menu in some input fields. - Updated UI translations. ++++ digger-cli: - Update to version 0.6.116: * feat/alias for project names (#2070) * fix vendoring (#2069) ++++ discover6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * flatpak: Correct loop initialization for remote insertion ordering * Only show message for (outdated) beta Flatpaks for actual beta apps (kde#496327) ++++ drkonqi6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * prevent CoreImage from being invalid (kde#507625) * bugzilla: prefer api errors over http errors (kde#506717) ++++ ed: - GNU ed 1.22.1: * Ed now departs from POSIX and ignores SIGPIPE to prevent commands like 'w !:' or ',!:' from terminating ed. A broken pipe is now detected as any other write error ++++ flatpak-kcm6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - No code changes since 6.4.3 ++++ gdm: - Add gdm-plymouth-quit-wait.patch: Disable plymouth-quit-wait.service (bsc#1243439). ++++ llamacpp: - Drop 0001-dl-load-path.patch: use GGML_BACKEND_DIR instead - Enable loading backends dynamically - Update to version 6100: * llama : add gpt-oss (#15091) * llama : add --n-cpu-moe option (#15077) * llama : enable LLAMA_SET_ROWS=1 by default (#14959) * server : add openai-style logit_bias support (#14946) * server : implement universal assisted decoding (#12635) * mtmd : support MiniCPM-V 4.0 (#14983) * opencl: add f16 for `add`, `sub`, `mul`, `div` (#14984) * model : add hunyuan dense (#14878) * model : add text-only support for Kimi-VL * model: support GLM 4.5 family of models (#14939) * model : support Qwen3-Embedding (#15023) * graph : Optimize graph operations * vulkan: various bug fixes and optimizations * Various bug fixes ++++ git-town: - Update to version 21.4.1: * Bug Fixes - Fixes parsing of the new Git metadata config entries that disable auto-resolving phantom conflicts (#5326). ++++ go1.23: - go1.23.12 (released 2025-08-06) includes security fixes to the database/sql and os/exec packages, as well as bug fixes to the runtime. Refs boo#1229122 go1.23 release tracking CVE-2025-47906 CVE-2025-47907 * go#74803 go#74466 boo#1247719 security: fix CVE-2025-47906 os/exec: LookPath bug: incorrect expansion of "", "." and ".." in some PATH configurations * go#74832 go#74831 boo#1247720 security: fix CVE-2025-47907 database/sql: incorrect results returned from Rows.Scan * go#74415 runtime: use-after-free of allpSnapshot in findRunnable * go#74693 runtime: segfaults in runtime.(*unwinder).next * go#74721 cmd/go: TestScript/build_trimpath_cgo fails to decode dwarf on release-branch.go1.23 * go#74726 cmd/cgo/internal/testsanitizers: failures with signal: segmentation fault or exit status 66 ++++ go1.24: - go1.24.6 (released 2025-08-06) includes security fixes to the database/sql and os/exec packages, as well as bug fixes to the runtime. Refs boo#1236217 go1.24 release tracking CVE-2025-47906 CVE-2025-47907 * go#74804 go#74466 boo#1247719 security: fix CVE-2025-47906 os/exec: LookPath bug: incorrect expansion of "", "." and ".." in some PATH configurations * go#74833 go#74831 boo#1247720 security: fix CVE-2025-47907 database/sql: incorrect results returned from Rows.Scan * go#73800 runtime: RSS seems to have increased in Go 1.24 while the runtime accounting has not * go#74416 runtime: use-after-free of allpSnapshot in findRunnable * go#74694 runtime: segfaults in runtime.(*unwinder).next * go#74760 os/user:nolibgcc: TestGroupIdsTestUser failures ++++ go1.25: - go1.25rc3 (released 2025-08-06) is a release candidate version of go1.25 cut from the master branch at the revision tagged go1.25rc3. Refs boo#1244485 go1.25 release tracking CVE-2025-47906 CVE-2025-47907 * go#74466 boo#1247719 security: fix CVE-2025-47906 os/exec: LookPath bug: incorrect expansion of "", "." and ".." in some PATH configurations * go#74831 boo#1247720 security: fix CVE-2025-47907 database/sql: incorrect results returned from Rows.Scan ++++ govulncheck-vulndb: - Update to version 0.0.20250806T202249 2025-08-06T20:22:49Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2022-0392 GHSA-m6gx-rhvj-fh52 * GO-2022-0396 GHSA-g54h-m393-cpwq * GO-2022-0452 CVE-2022-29162 GHSA-f3fp-gc8g-vw66 * GO-2022-0456 CVE-2022-29177 GHSA-wjxw-gh3m-7pm5 * GO-2022-0617 CVE-2020-8562 GHSA-qh36-44jv-c8xj * GO-2022-0703 CVE-2019-11253 GHSA-pmqp-h87c-mr78 * GO-2022-0771 CVE-2020-26241 GHSA-69v6-xc2j-r2jf * GO-2022-0775 CVE-2020-26240 GHSA-v592-xf75-856p * GO-2022-0782 CVE-2019-1002101 GHSA-34jx-wx69-9x8v * GO-2022-0802 CVE-2019-11251 GHSA-6qfg-8799-r575 * GO-2022-0814 CVE-2018-19184 GHSA-9h4h-8w5p-f28w * GO-2022-0835 CVE-2016-9962 GHSA-gp4j-w3vj-7299 * GO-2022-0867 CVE-2020-8551 GHSA-qhm4-jxv7-j9pq * GO-2022-0871 CVE-2018-16733 GHSA-qr2j-wrhx-4829 * GO-2022-0885 CVE-2020-8558 GHSA-wqv3-8cm6-h6wg * GO-2022-0886 CVE-2018-1002101 GHSA-wqwf-x5cj-rg56 * GO-2022-0890 CVE-2020-8555 GHSA-x6mj-w4jf-jmgw * GO-2022-0907 CVE-2021-25735 GHSA-g42g-737j-qx6j * GO-2022-0908 CVE-2021-25737 GHSA-mfv7-gq43-w965 * GO-2022-0910 CVE-2021-25741 GHSA-f5f7-6478-qm6p * GO-2022-0914 CVE-2021-30465 GHSA-c3xm-pvg7-gh7r * GO-2022-0983 CVE-2021-25743 GHSA-f9jg-8p32-2f55 * GO-2023-1492 CVE-2017-1000056 GHSA-2jx2-76rc-2v7v * GO-2023-1627 CVE-2023-27561 GHSA-vpvm-3wq2-2wvm * GO-2023-1628 CVE-2022-3162 GHSA-2394-5535-8j88 * GO-2023-1629 CVE-2022-3294 GHSA-jh36-q97c-9928 * GO-2023-1682 CVE-2023-25809 GHSA-m8cg-xc2p-r3fc * GO-2023-1683 CVE-2023-28642 GHSA-g2j6-57v7-gm8c * GO-2023-1864 CVE-2023-2431 GHSA-xc8m-28vv-4pjc * GO-2023-1891 CVE-2023-2727 GHSA-qc2g-gmh6-95p4 * GO-2023-1892 CVE-2023-2728 GHSA-cgcv-5272-97pr * GO-2023-1946 CVE-2019-1002100 GHSA-q4rr-64r9-fwgf * GO-2023-1959 CVE-2018-1002100 GHSA-2jq6-ffph-p4h8 * GO-2023-1977 CVE-2017-1002102 GHSA-mm7g-f2gg-cw8g * GO-2023-1985 CVE-2015-7561 GHSA-2h9c-34v6-3qmr * GO-2023-2159 CVE-2021-25736 GHSA-35c7-w35f-xwgh * GO-2023-2341 CVE-2023-5528 GHSA-hq6q-c2x6-hmch * GO-2024-2528 GHSA-j86v-2vjr-fg8f * GO-2024-2529 GHSA-pm3m-32r3-7mfh * GO-2024-2530 GHSA-vjg6-93fv-qv64 * GO-2024-2753 CVE-2020-8557 GHSA-55qj-gj3x-jq9r * GO-2024-2754 CVE-2020-8566 GHSA-5x96-j797-5qqw * GO-2024-2755 CVE-2020-8563 GHSA-5xfg-wv98-264m * GO-2024-2780 CVE-2019-11245 GHSA-r76g-g87f-vw8f * GO-2024-2883 CVE-2025-47908 GHSA-mh55-gqvf-xfwm * GO-2024-2994 CVE-2024-5321 GHSA-82m2-cv7p-4m75 * GO-2024-3110 CVE-2024-45310 GHSA-jfvp-7x6p-h2pv * GO-2024-3277 CVE-2024-0793 GHSA-h7wq-jj8r-qm7p * GO-2025-3436 CVE-2025-24883 GHSA-q26p-9cq4-7fc2 * GO-2025-3465 CVE-2025-0426 GHSA-jgfp-53c3-624w * GO-2025-3507 GHSA-6wxf-7784-62fp * GO-2025-3521 CVE-2025-1767 GHSA-3wgm-2gw2-vh5m * GO-2025-3522 CVE-2024-9042 GHSA-vv39-3w5q-974q * GO-2025-3547 CVE-2024-7598 GHSA-r56h-j38w-hrqq * GO-2025-3605 CVE-2025-3445 GHSA-7vpp-9cxj-q8gv * GO-2025-3645 CVE-2019-11243 GHSA-gc2p-g4fg-29vh * GO-2025-3774 CVE-2025-4563 GHSA-hj2p-8wj8-pfq4 ++++ breeze6-gtk: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ hashcat: - Use %python3_fix_shebang to replace python path with the right one ++++ ibmtss: - Do not ship test data (bsc#1239985) ++++ installation-images-MicroOS: - merge gh#openSUSE/installation-images#764 - remove initviocons (bsc#1247578) - 17.159 ++++ installation-images-openSUSE: - merge gh#openSUSE/installation-images#764 - remove initviocons (bsc#1247578) - 17.159 ++++ jasper: - Update to 4.2.8: * Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (#402, #403) bsc#1247901 (CVE-2025-8837) ++++ kactivitymanagerd6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kanidm: - Update to version 1.7.1~git0.130a31d29: * Release 1.7.1 * Update tracing-forest * Handle SEC1 private key (#3761) ++++ kargo-cli: - Update to version 1.7.0: Kargo 1.7.0 contains breaking changes (unrelated to the CLI), see https://github.com/akuity/kargo/releases/tag/v1.7.0 * no CLI-related changes * Dependencies - chore(deps): bump argo-cd, argo-rollouts, and cert-manager to latest versions (#4669) - chore(deps): bump curlimages/curl from 8.14.1 to 8.15.0 (#4647) - chore(deps): bump golang from 1.24.4-bookworm to 1.24.5-bookworm (#4611) - chore(deps): bump google.golang.org/api from 0.241.0 to 0.242.0 in the go-minor group (#4653) - chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 (#4575) - chore(deps): bump korthout/backport-action from 3.2.0 to 3.2.1 (#4526) - chore(deps): bump library/node from 24.1.0 to 24.3.0 (#4525) - chore(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#4527) - chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 (#4644) - chore(deps): bump the go-minor group across 1 directory with 2 updates (#4479) - chore(deps): bump the go-minor group with 2 updates (#4553) - chore(deps): bump the go-minor group with 5 updates (#4528) - chore(deps): bump the go-minor group with 5 updates (#4690) - chore(deps): bump the go-minor group with 8 updates (#4614) - chore(deps): bump the go-patch group with 13 updates (#4652) - chore(deps): bump the go-patch group with 3 updates (#4689) - chore(deps): bump the js-major group in /ui with 7 updates (#4651) - chore(deps): bump the js-minor group across 1 directory with 19 updates (#4616) - chore(deps): bump the js-minor group in /ui with 5 updates (#4694) - chore(deps): bump the js-minor group in /ui with 7 updates (#4650) - chore(deps): bump the js-patch group across 1 directory with 13 updates (#4530) - chore(deps): bump the js-patch group in /ui with 2 updates (#4554) - chore(deps): bump the js-patch group in /ui with 5 updates (#4649) - chore(deps/api): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 in /api in the go-minor group (#4529) - chore(deps/api): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 in /api in the go-minor group (#4696) - chore(deps/api): bump the go-patch group in /api with 3 updates (#4645) - chore(deps/pkg): bump k8s.io/apimachinery from 0.33.2 to 0.33.3 in /pkg in the go-patch group (#4648) - chore(deps/tools): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible in /hack/tools (#4713) - chore(deps/tools): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /hack/tools (#4521) - chore(deps/tools): bump github.com/golangci/golangci-lint/v2 from 2.2.1 to 2.2.2 in /hack/tools in the go-patch group (#4612) - chore(deps/tools): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in /hack/tools (#4574) - chore(deps/tools): bump k8s.io/code-generator from 0.33.2 to 0.33.3 in /hack/tools in the go-patch group (#4691) - chore(deps/tools): bump the go-minor group in /hack/tools with 2 updates (#4692) - chore(deps/tools): update `golangci-lint` to v2 (#3921) ++++ kde-cli-tools6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kde-gtk-config6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kdecoration6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kdeplasma6-addons: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * tabbox/windowswitchers: Work around QtQuick crashing kwin ++++ kernel-default: - Delete patches.rpmify/libbpf-do-not-compile-with-Werror.patch. Gcc 15 was fixed in sr#1297061 (bsc#1245584). - commit 5e7fcd4 ++++ kernel-source: - Delete patches.rpmify/libbpf-do-not-compile-with-Werror.patch. Gcc 15 was fixed in sr#1297061 (bsc#1245584). - commit 5e7fcd4 ++++ kernel-docs: - Delete patches.rpmify/libbpf-do-not-compile-with-Werror.patch. Gcc 15 was fixed in sr#1297061 (bsc#1245584). - commit 5e7fcd4 ++++ kernel-firmware-amdgpu: - Update to version 20250805 (git commit b6b0b15278c7): * amdgpu: Update GCN 4.0.5 microcode * amdgpu: Update SDMA 6.1.0 microcode * amdgpu: Update GC 11.5.0 microcode ++++ kernel-kvmsmall: - Delete patches.rpmify/libbpf-do-not-compile-with-Werror.patch. Gcc 15 was fixed in sr#1297061 (bsc#1245584). - commit 5e7fcd4 ++++ kernel-obs-build: - Delete patches.rpmify/libbpf-do-not-compile-with-Werror.patch. Gcc 15 was fixed in sr#1297061 (bsc#1245584). - commit 5e7fcd4 ++++ kernel-obs-qa: - Delete patches.rpmify/libbpf-do-not-compile-with-Werror.patch. Gcc 15 was fixed in sr#1297061 (bsc#1245584). - commit 5e7fcd4 ++++ kernel-syms: - Delete patches.rpmify/libbpf-do-not-compile-with-Werror.patch. Gcc 15 was fixed in sr#1297061 (bsc#1245584). - commit 5e7fcd4 ++++ kernel-vanilla: - Delete patches.rpmify/libbpf-do-not-compile-with-Werror.patch. Gcc 15 was fixed in sr#1297061 (bsc#1245584). - commit 5e7fcd4 ++++ kgamma6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kglobalacceld6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kinfocenter6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kmenuedit6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kpipewire6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ krdp6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kscreen6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kscreenlocker6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * greeter: extract qml i18n as well (kde#507240) ++++ ksshaskpass6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ libksysguard6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * plugins/network: Do not announce data for processes that are not added yet ++++ ksystemstats6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kubevirt: - Update to version 1.6.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.6.0 - Drop upstream patches Update-module-golang.org-x-oauth2-to-v0.27.0-SECURITY.patch Update-module-golang.org-x-net-to-v0.38.0-SECURITY.patch ++++ kubo: - Remove commented out commands in kubo.spec - Update to 0.36.0: * Full changelog at https://github.com/ipfs/kubo/releases/tag/v0.36.0 * HTTP Retrieval Client Now Enabled by Default * Bitswap Broadcast Reduction * Update go-log to v2 * Kubo now uses AutoNATv2 as a client * Overwrite option for files cp command * Gateway now supports negative HTTP Range requests * Option for filestore command to remove bad blocks * ConnMgr.SilencePeriod configuration setting exposed * Fix handling of EDITOR env var * Dependency updates ++++ kumactl: - Update to version 2.11.4: * fix(helm): properly set addresses when a list is provided (backport of #14112) (#14132) * chore(deps): bump envoy from v1.34.3 to v1.34.4 (#14076) ++++ kwayland-integration6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kwayland6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ kwctl: - Update to version 1.27.2: * Bug Fixes - fix: Set default rustls provider (#1301) - fix: Use correct path for resource-catalog.json cache file (#1300) * Maintenance - build(deps): update crate-ci/typos action to v1.35.1 (#1302) - build(deps): update github-actions (#1296) - build(deps): update rust crate tokio to v1.47.1 (#1297) - build(deps): update rust crate serde_json to v1.0.142 - autoclosed (#1294) - build(deps): update taiki-e/install-action action to v2.57.4 (#1295) - build(deps): update rust crate clap to v4.5.42 (#1292) - build(deps): update taiki-e/install-action action to v2.57.2 (#1293) ++++ kwin6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * kcms/tabbox: set up i18n for preview * scene/itemrenderer_opengl: use the correct rendering intent for the color pipeline * a11ykeyboardmanager: Send second modifier press to screenreader (kde#507545) * plugins/screencast: Only offer explicit sync if the DRM device supports it * autotests/screencast: make the window fullscreen, and wait for it to be presented * backends/drm: avoid dropping the color pipeline cache for empty pipelines * plugins/magnifier: allocate an fbo when rendering, and don't crash if it fails * plugins/magnifier: actually set the initial zoom properly (kde#507248) * backends/drm: never use default colorimetry of the edid * tabbox: Work around QtQuick crashing kwin (kde#506502) ++++ kwin6-x11: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * Filter out disconnected outputs in X11 backend ++++ layer-shell-qt6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * When activating, also try token from XDG_ACTIVATION_TOKEN ++++ lazygit: - Update to version 0.54.1: * Stop updating Jesse's homebrew tap * Create a user-specific temp dir to avoid permission problems on multi-user machines * Updated Fedora section in the README.md file. * README.md: Update Sponsors - Packaging improvements: * Update to BuildRequires: golang(API) >= 1.24 matching go.mod - Update to version 0.54.0: * Update translations from Crowdin * Add breaking changes notice about hunk mode being the default now * Cleanup: whitespace * Show hint about hunk staging mode being the default now, and how to switch to line mode * Cleanup: rely on zero values for initialization * Enable hunk staging mode by default * Change the "toggle hunk selection" binding description to be dynamic * Add support for dynamic binding descriptions * Add a GetShortDescription() method to Binding * Cleanup: better receiver name * Remove the kill package dependency * Close the pty instead of killing the process for runAndDetectCredentialRequest * Don't kill processes in RunAndProcessLines * Don't kill tasks when we no longer need them * Close a task's stdout pipe when we are done with it * Create temp directories inside a "lazygit" folder rather than top-level in /tmp * Don't exit after handling daemon mode * Improve .gitignoring debug executables * Use a better approach for determining pushed and merge statuses * Change GetCommitsOptions.RefForPushedStatus to a models.Ref * Move the Ref interface from gui/types to models * Cleanup: remove the ignoringWarnings hack from GetMergeBase * Draw divergence from base branch right-aligned in branches view * refactor: use slices.Equal to simplify code * Stage only tracked files when staging all in filter-by-tracked-files view * Add test demonstrating the problem * Make the minimum required git version a placeholder in the error text * Revert "Add IsAnnotated field to models.Tag struct" * Use a different way to check if a tag is annotated * Add tests for tag information rendering * Fix index out of bounds panic when repository has massive tag lists * Move parentHashes and divergence fields before extraInfo in git log format * Cleanup: use nil for empty slice * Allow rewording and dropping commits in filtering mode * Extract helper function for integration test * Inline the OutsideFilterMode guard into every binding * Show the key for focusing the main view ("[0]" by default) in the main view title prefix * Fix display of panel jump keys for disabled bindings * Allow focusing the main view for the status panel * Move the "Focus main view" command to the global section of the keybindings menu * Make LabelFromKey return an empty string for unset keys * Include commands without keybinding in options menu * Don't use hunk mode for added or deleted files * Add a test case for a deleted file to TestParseAndFormatPlain * Fix showing range diff across a rename when filtering by path * Add test for range diff across rename * Fix showing diffs for renamed file when filtering by path * Refactor commit loading and reflog commit loading to extract shared code * Always append -- to git show command * Remove unnecessary setSubCommits indirection * Fix showing only filtered reflog entries when filtering by path * Use the non-filtered reflog for undoing * Don't get reflog commits twice unnecessarily in filtering mode * Cleanup: simplify git arguments for reflog loading * Add test that demonstrates problem with showing filtered history of file with renames * Make stash filtering work when filtering on a folder * Make stash loading work in filtering mode * Revert "chore: use null char as a stash entries divider during loading" * Add integration test for filtering the stashes list by file path * Refresh all affected scopes when entering/exiting filtering * Allow passing SUB_COMMITS scope to Refresh when no subcommits view is showing * Fix visual regression when exiting filtering mode * Remove unnecessary golangci-lint install step from dev-container Dockerfile * Remove unused script lint.sh * Use a better way of pinning the version of golangci-lint * Support Alt+Backspace for word deletion in text areas * Fix `--amend` when the commit message is empty * Add confirmation for nuking the working tree * Fix `last branch` to `previous branch` in `TranslationSet.CheckoutByNameTooltip` * Update cheatsheets and schema * Add new command "Checkout previous branch" * Fix search results being off by two lines during rebase or in divergence view * Make prepareConversionArrays a little more concurrency safe * Allow double-clicking suggestions * Allow switching between confirmation and suggestions by clicking * Extract helper function * Allow scrolling background views with the mouse wheel when a popup is showing * Cleanup: use FocusedView property for mouse bindings * Make conditions easier to understand * Exclude "." from file path suggestions * Remove outdated comment * Add proper double-click handling for list views * Assert that only one controller can set click or render functions on a BaseContext * Allow more than one controller to attach OnFocus/OnFocusLost functions * Cleanup: use nil for empty slice * Remove GetOnRenderToMain, GetOnFocus, and GetOnFocusLost from BaseContext * Bump gocui * Fix more unstable tests * Fix stale main view content when entering/exiting filtering view * Fix unstable tests * Add a prompt for the sort order menus for branches * Add tooltips for commit log menu * Add configuration hints to existing tooltips * Add breaking changes entry for the changed sort order for branches * Add enum validation for Git.Log.Order and Git.Log.ShowGraph * Un-deprecate UserConfig.Git.Log.Order and ShowGraph * Move LocalBranchSortOrder and RemoteBranchSortOrder to user config * Add missing validation tests * Move DiffContextSize and RenameSimilarityThreshold to user config * Move IgnoreWhitespaceInDiffView to user config * Fix keybinding display for local branches sort order to indicate it's a menu * Remove git version specific code for versions we no longer support * Remove obsolete git version restrictions * Remove obsolete tests * Bump minimum required git version to 2.32 * Remove obsolete git version restriction in test * Add confirmation for hard reset when there are uncommitted changes * Use ConfirmIf where applicable * Add convenience function ConfirmIf * Remove deprecated edit configs * Use non-deprecated 'OS.Open' config in OpenFile test on Windows * Remove unused TranslationSet fields * Fix wrong text being used in error message * Remove some unused code * Fix scrolling hunk into view when selecting next hunk * Cleanup: remove unused method Focus from PatchExplorerContext * Cleanup: fix comment * Bring back files from vendor directory that we accidentally excluded * Clean up .gitignore * Remove the homebrew tap from the readme * Make it run at 8am instead of in the middle of the night * Create annotated tags * Make the release workflow run only from stefanhaller's fork * Set a default shell for all jobs * Update goreleaser to v2 * README.md: Update Sponsors * Remove redundant curlies * Properly use sponsors PR token * Use fine-grained sponsors PR token * Try using PAT on sponsors CI * Update the peter-evans/create-pull-request action to v7 * Move `if` to job level so that the entire thing doesn't run in forks * Raise sponsors PRs as a draft * fix: broken markdown by replace \n into ++++ lftp: - Re-download lftp-4.9.2-cdefs.patch. - Drop usage of deprectated desktop_file_update. - Generate a po/LINGUAS file: gettext 0.25.x dropped the deprecated ALL_LINGUAS variable, but the entire build script is so legacy, that just working around with the still supported po/LINGUAS is the easiest for now. - BuildRequire gettext nstead of gettext-tools: allow OBS to shortcut through the gettext mini flavors. ++++ libkscreen6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma5support6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ libplasma6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * ConfigView: Resize to implicitSize before saved size * [pluginloader] Fix listing applets without KPackage * [pluginloader] Fix loading non-KPackage-based containments * [pluginloader] Don't call invalid filter function ++++ plasma6-activities: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-activities-stats: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ manifold: - update use-python3.patch with the upstream fix - Update to 3.2.1 - Bug Fixes - Fix downstream builds by @pca006132 in #1302 - Add MANIFOLD_FOUND cmake variable by @Trzeth in #1307 - Fix Manifold.Simplify test on intel macos by @Trzeth and @pca006132 in #1311 and #1322 (the real fix is probably the one below) - Fix broken halfedge pairing by @pca006132 in #1319 - Make batch boolean deterministic by @pca006132 in #1321 - Fix odr violation by @pca006132 in #1323 - Misc - Add old version gcc to CI by @Trzeth in #1308 - Add Cadova to users by @tomasf in #1312 - Fix faceID documentation in wasm bindings by @jirihon in [#1317] - Disable async free when asan is enabled by @pca006132 in [#1325] - Update to 3.2.0 - Bug Fixes - Make GCC floating-point operations standard conforming by @pca006132 in #1273 - Add missing Manifold.simplify() method to Python API by @jonathanhogg in #1282 - Fixed meshID regression by @elalish in #1287 - Fix pyi vert_properties type by @Trzeth in #1291 - Update Clipper2 to 1.5.4 and fix CrossSection::Offset by @Trzeth in #1292 - Skip halfedges that are removed by @pca006132 in #1296 - Fix stubgen path by @Trzeth in #1301 - Add cmake check for fp related options by @pca006132 in #1300 - Performance Improvements - Misc performance improvements by @pca006132 in #1269 - Use union-find for winding number by @pca006132 in #1271 - Faster halfedge pairing for large meshes by @pca006132 in [#1279] - Misc - Use cmake4 in the CI by @pca006132 in #1274 - Add Arcol to README.md by @prideout in #1286 - Add Bento3D to README.md by @sorashin in #1288 - Add fuzzing instructions by @pca006132 #1214 - Add JoinType.Bevel by @elektrohenk in #1299 - add use-python3.patch https://github.com/elalish/manifold/issues/1327 ++++ mpg123: - Update to version 1.33.2 libmpg123: * Do not modify raw ID3v2 data while parsing. This used to be fine before MPG123_STORE_RAW_ID3 got introduced. Not anymore. ++++ nftables: - Update to release 1.1.4 * Add conntrack information to monitor trace command. * Add a 'check' fib result to check for routes. * Better error reporting with re-declarations set/map with different types. * Restore meta hour matching on ranges spanning date boundaries, e.g. `... meta hour "21:00"-"02:00"` * Display number of set elements in rule listings. * Allow deleting maps via their handle. ++++ libnftnl: - Update to release 1.3.0 * set: dump set backend name (hash, rbtree...) and elem count, if available ++++ opencv3: - Add opencv-ppc64le-power9.patch, fix missing vec_cvfo on POWER9 due to unavailable VSX float64 conversion ++++ opencv: - Add opencv-ppc64le-power9.patch, fix missing vec_cvfo on POWER9 due to unavailable VSX float64 conversion ++++ opencv-qt6: - Add opencv-ppc64le-power9.patch, fix missing vec_cvfo on POWER9 due to unavailable VSX float64 conversion ++++ libvirt: - Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks %post script (see comment 13 in bsc#1242998) ++++ longhornctl: - Update to version 1.9.1: * release: update version file for v1.9.1 * fix(deps): update patch digest dependencies to v0.33.3 * fix(workflow): use correct token * fix(workflow): create token on demand * fix: fix credential eror * release: update version file for v1.9.1-rc1 * fix(deps): update patch digest dependencies * fix(deps): update github.com/longhorn/go-common-libs digest to 81fc0ee * fix(deps): update patch digest dependencies * fix(deps): update patch digest dependencies * fix(deps): update module github.com/longhorn/longhorn-manager to v1.9.0 * release: update version file for v1.9.0 * release: update version file for v1.9.0-rc4 * fix(deps): update patch digest dependencies * release: update version file for v1.9.0-rc3 * fix(deps): update patch digest dependencies to v0.33.1 * fix(deps): update patch digest dependencies * release: update version file for v1.9.0-rc2 * fix(deps): update patch digest dependencies * chore(deps): update docker/dockerfile docker tag to v1.15.1 * release: update version file for v1.9.0-rc1 * chore(deps): update docker/dockerfile docker tag to v1.15.0 * fix(deps): update patch digest dependencies * fix(deps): update github.com/longhorn/go-common-libs digest to 0dd2ad3 * feat: update comment * feat: use ID_LIKE instead of ID * fix(deps): update patch digest dependencies * fix(deps): update patch digest dependencies * feat(installer): add support for SLE Micro OS * fix(deps): update patch digest dependencies * chore: update ImageBciBase to registry.suse.com/bci/bci-base:15.6 * chore(Dockerfile): update golangci-lint to v1.64.6 * chore(deps): update docker dependencies * fix(deps): update module github.com/longhorn/longhorn-manager to v1.9.0-dev-20250309 * fix(deps): update patch digest dependencies * fix(deps): update module github.com/longhorn/longhorn-manager to v1.9.0-dev-20250223 * fix(deps): update module github.com/spf13/cobra to v1.9.1 * fix(ci): fix multi-platform build env issue for gha * fix(ci): fixed project name * fix(deps): update module github.com/spf13/cobra to v1.9.0 * fix(deps): update github.com/longhorn/go-common-libs digest to 151615b * chore(deps): update dependency go to v1.24.0 * fix(deps): update patch digest dependencies * feat: self-contained container image build * chore(vendor): update dependencies * fix(deps): update patch digest dependencies * chore(deps): update docker/dockerfile docker tag to v1.13.0 * fix(deps): update module sigs.k8s.io/kustomize/kyaml to v0.19.0 * fix(deps): update patch digest dependencies * fix(deps): update github.com/longhorn/go-common-libs digest to ec79818 * chore(version): update version file to v1.9.0-dev * fix(deps): update module github.com/otiai10/copy to v1.14.1 * fix(deps): update github.com/longhorn/go-common-libs digest to 5a6ca24 * fix(deps): update github.com/longhorn/go-common-libs digest to 3f84afe ++++ milou6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ ocean-sound-theme6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ okteto: - Update to version 3.10.0: * New Feature - Update buildkit dependencies in go.mod and go.sum by @jLopezbarb in #4737 - [TEST] feat: implement nodeSelector and resources inheritance from Kubernetes resources by @rberrelleza in #4741 - Enhance DestroyPreview functionality to include timeout parameter by @jLopezbarb in #4745 * Bug Fix - Don't build images on deploy command if the calculation of images to build is an empty list by @ifbyol in #4739 - reduce severity of JSON parsing error log, and skip parsing when the log is empty by @rberrelleza in #4743 - Improved error handling when the backend returns a 401 error, to force a new login by @ifbyol in #4747 - Add unit test for CreateDev function and fix TargetPort type in Service translation by @jLopezbarb in #4748 ++++ ollama: - Update to version 0.11.0: * New model: OpenAI gpt-oss 20B and 120B * Quantization - MXFP4 format ++++ openQA: - Update to version 5.1754477962.22b1fea4: * Extend docs on lua test modules ++++ openSUSE-release-tools: - Update to version 20250806.05cbe030: * ttm/releaser.py: Fix check for config completeness ++++ opencv-nogui: - Add opencv-ppc64le-power9.patch, fix missing vec_cvfo on POWER9 due to unavailable VSX float64 conversion ++++ openvpn: - add (bsc#1239783) -- fix build against 6.16 * 0001-dco-linux-avoid-redefining-ovpn-enums.patch ++++ os-autoinst: - Update to version 5.1754492266.4c80bae: * Add wrappers for testapi variables * backend: Use tpm-tis-device for TPM as default * Require openssh-clients for git clone with ssh * Avoid running `$basetest->parse_serial_output_qemu` without checks * t: use mock not redefine for lua_set * setup-multi-machine: extend network service detection ++++ osc: - 1.19.1 - Command-line: - Use OSC_PACKAGE_CACHE_DIR env var instead of deprecated OSC_PACKAGECACHEDIR - Connection: - Check for both upper and lowercase versions of HTTP_PROXY and HTTPS_PROXY env vars - Library: - Add 'trackingbranch' field to ScmsyncObsinfo model - Revert "Return None if GitStore cannot determine apiurl" - Throw a proper exception when 'apiurl' argument of 'makeurl()' is empty - Move code setting apiurl from store to 'osc.conf.get_config()' - Simplify 'osc.commandline.Osc.get_api_url()' to return the value from 'self.options' - Remove 'osc.commandline.Osc.post_argparse()' because it's no longer used - Fix unit tests to use the new code path to run osc - Fix osc.gitea_api.dt_sanitize() by replacing dateutil with datetime ++++ oxygen6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * ci: Remove FreeBSD Qt5 pipeline ++++ pam_kwallet6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-openSUSE: - Update to 6.4.4 ++++ plasma6-browser-integration: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * mpris: Make artwork sizes algorithm more spec-compliant * KRunnerPlugins: Limit icon size to reduce DBus traffic * purpose: Also hide purpose menu on focus loss * Purpose: Make AlternativesMenu a regular window (kde#507368) ++++ plasma6-desktop: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * applets/kicker: correctly position search field (kde#507397) * kcms/tablet: Make pen tab scrollable * Refactor panel widget editing UI for RTL (kde#505489) * FolderItemDelegate: Fix "undefined" warning * PositionerTest: Update tests * FolderModel: If screen is not used, clear dropTargetPositions (kde#490891) * FolderView: Use perStripe from positioner, fix off-by-one error (kde#506638) * Positioner: Do not change anything during resolution updates (kde#490891) * Fixed drag and drop behavior when desktop is scrollable (kde#506670) * foldermodel: delete previous qfilesystemwatcher (kde#507239) * foldermodel: init all members * Only interact with file and folders when directly touching them (kde#505038) ++++ plasma6-disks: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-firewall: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-integration: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * Drop FreeBSD Qt5 CI ++++ plasma6-mobile: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-nano: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-nm: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-pa: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * VolumeControlsConfig: remove unnecessary wideMode ++++ plasma6-print-manager: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-sdk: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-workspace: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * KCMColors: Do not forward the output of editDialogProcess (kde#504007) * Make Cachedir check concurrent * Revert "Disable linux-qt6-next while the regression in Qt gets fixed" * DesktopProtocol: If symlink target desktop file is unwritable, create new one to ApplicationsLocation (kde#506032) * Allow to remove icon widgets from context menu (kde#503832) * applets/kicker: Call OpenUrlJob with mimeType * Assume a place is of type inode/directory * runners/recentdocuments: Use mime type we get from the results model * delete image-data from hint (kde#507304) * Force keep notifications in history if they were triggered in DnD (kde#504571) * Notificationmanager: Remove QConcatenateBlablaModel workaround for Qt 6.9.1 (kde#471130) * Reparent menu actions to the temporarily created QMenu in global menu (kde#505876) * global menu applet: fix single button mode on X11 (kde#506170) ++++ plasma6-systemmonitor: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-thunderbolt: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - No code changes since 6.4.3 ++++ plasma6-vault: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plasma6-welcome: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * PowerfulWhenNeeded: Fix multi-line translated text (kde#506225) ++++ plasma6-workspace-wallpapers: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ plymouth-theme-breeze6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ polkit-kde-agent-6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ powerdevil6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ product-composer: - update to version 0.6.12: * Compress appstream meta data only with gz (boo#1247510) * Add appstream screenshots.tar uncompressed if available. ++++ python-CppHeaderParser: - Initial packaging effort for CppHeaderParser 2.7.4 (PED#13362, PED#13381). ++++ python-Markdown: - set the minimum version of setuptools to 77.0 to match upstream pyproject.toml ++++ python-Unidecode: - set the minimum python version to 3.7 ++++ python-azure-mgmt-msi: - Revert to previous upstream version 7.0.0 to address compatibility issues with azure-cli 2.76.0 due to API mismatch with the Azure SDK ++++ python-envier: - Remove Requires on mypy, it's python-mypy. - Skip broken test with the new mypy. ++++ python-extra-platforms: - update to 3.2.3: * Add detection of macOS Tahoe (v26.x) ++++ python-fasteners: - Skip a recalcitrant test. ++++ python-magicalimport: - Update to 0.9.2 * Refactor: Consolidate packaging configuration to pyproject.toml (#21) * Drop support for Python < 3.10 (#22) * The command for running tests has been updated in both the CI workflow and the Makefile. (#24) * Fix: Ensure all tests pass in Makefile (#25) * docs: Update README to Markdown and expand content (#26) * migrated the project to use hatch and hatchling. (#28) * chore: adjust Makefile * chore: bump version - Drop command line to remove examples folder - Rename README.rst to README.md in %doc section - Update BuildRequries from pyproject.toml - Use Python 3.11 on SLE-15 by default ++++ python-pyasn1-modules: - fix changelog formatting - Update to 0.4.2 * Updated dependency constraint to be compatible with pyasn1 0.6.1, which removed the pyasn1.compat.octets module - Drop pyasn1-061.patch, merged upstream ++++ python-pyfiglet: - Update to 1.0.3 * Fix typos in README.md * __init__.py: Fix a tiny typo in a comment * Update README.md * Tests : Use slant instead of doh to use only fonts-contrib * Added: Double-Blocky Font * Big type hinting and modernization upgrade ++++ python-pylibacl: - Update to 0.7.3 * This is a test-only changes release, removing some very old testing for reference counts, introduced in 2012, but which stopped working with Python 3.14 as it changed reference counting by introducing optimizations in some cases. No need to upgrade unless you want to make sure the test suite passes on 3.14, and no real failures are hidden by the broken reference testing. * Additionally, the release enables CI on Python 3.14, thanks Marcin Zajączkowski! ++++ python-pymssql: - Update to version 2.3.7 * Allow to specify openssl dependency on macos - from version 2.3.6 * Build manylinux wheels using manylinux2014 image - Use Python 3.11 on SLE-15 by default ++++ python-pynitrokey: - update to 0.10.0: * Remove obsolete nkfido2 commands by @robin-nitrokey in #670 * Remove ecdsa dependency by @robin-nitrokey in #671 * PIV: validate PINs to be 6 to 8 numbers by @sosthene-nitrokey in #675 * Update Nitrokey SDK by @robin-nitrokey in #672 * nk3: Deprecate secrets get and register aliases by @robin-nitrokey in #673 ++++ python-python-socks: - Update to 2.7.2 * Avoid leaking an open socket (trio) by @aaugustin (#44) ++++ python-pytils: - Update to 0.4.4 * chore: publish a wheel (#67) * chore: Switch to setuptools build backend * style: formatting by ruff (#71) * chore: Added type hints (#72) * chore: Apply pyupgrade * chore: Add ruff check * chore: Fix ruff errors * chore: Refactor/update numeral (#74) * chore(release): 0.4.4 - Update BuildRequires from pyproject.toml ++++ python-pyupgrade: - Update to 3.20.0 * upgrade asottile/workflows * pyupgrade fixes for python 3.14 ++++ python-qstylizer: - Update to 0.2.4 * Fix regex string to stop SyntaxWarning - from version 0.2.3 * Upgrade pytest * Remove python 3.7 from tox list * Remove python 3.7 from tox list * Fix typo in tests: use assert_called_once_with() * Fix split regex for top-level object properties and props that aren't camelCase - Drop qstylizer-pr17-fix-py12-mock.patch, merged upstream - Use Python 3.11 on SLE-15 by default ++++ python-uv: - update to 0.8.5 * Enhancements * Enable uv run with a GitHub Gist * Improve HTTP response caching log messages * Show wheel tag hints in install plan * Support installing additional executables in uv tool install * Preview features * Enable extra build dependencies to 'match runtime' versions * Remove duplicate extra-build-dependencies warnings for uv pip * Use "option" instead of "setting" in pylock warning * Respect extra build requires when reading from wheel cache * Preserve lowered extra build dependencies * Bug fixes * Add Python versions to markers implied from wheels * Ensure consistent indentation when adding dependencies * Fix handling of python-preference = system when managed interpreters are on the PATH * Fix symlink preservation in virtual environment creation * Gracefully handle entrypoint permission errors * Include wheel hashes from local Simple indexes * Prefer system Python installations over managed ones when --system is used * Remove retry wrapper when matching on error kind * Revert h2 upgrade * Documentation * Improve visibility of copy and line separator in dark mode ++++ qqc2-breeze-style6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ rbac-manager: - Update to version 1.9.2 (1.9.1 was not released): * Dependency bump (#546) * docs: update documentation from template (#545) * docs: update documentation from template (#478) * docs: fix links ++++ rubygem-agama-yast: - Emit D-Bus signal when storage is configured, including the client id (gh#agama-project/agama#2640). ++++ sddm-kcm6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ sequoia-octopus-librnp: - update to 1.11.1 - This release fixes a DoS attack. An attacker can create an OpenPGP message that includes a zip bomb. Instead of aborting after having parsed a certain amount of data, the Octopus would parse the whole message. When processing a message that contains a zip bomb, this would cause Thunderbird to freeze for an unacceptably long time. This issue was reported by codean via our YesWeHack bug bounty program. ++++ spectacle: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ stackit-cli: - Update to version 0.38.0: * chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.3 to 5.3.0 (#901) (@dependabot[bot]) * chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.7 to 6.6.8 (#896) (@dependabot[bot]) * chore(deps): bump github.com/stackitcloud/stackit-sdk-go/services/iaas (#886) (@dependabot[bot]) * chore(deps): bump github.com/stackitcloud/stackit-sdk-go/services/mongodbflex (#881) (@dependabot[bot]) * chore(deps): bump github.com/stackitcloud/stackit-sdk-go/services/objectstorage (#887) (@dependabot[bot]) * chore(deps): bump github.com/stackitcloud/stackit-sdk-go/services/rabbitmq (#880) (@dependabot[bot]) * chore(deps): bump github.com/stackitcloud/stackit-sdk-go/services/secretsmanager (#882) (@dependabot[bot]) * chore(deps): bump github.com/stackitcloud/stackit-sdk-go/services/serverbackup (#885) (@dependabot[bot]) * chore(deps): update renovatebot/github-action action to v43.0.4 (#878) (@stackit-pipeline) * chore(deps): update renovatebot/github-action action to v43.0.5 (#897) (@stackit-pipeline) * feat(auth): support output format in stackit auth get-access-token command (#889) (@jkroepke) * feat(mongodb-flex): add readWriteAnyDatabase role (#884) (@PietvanderMeulen) * feat(ske): add commands to trigger hibernate, wakeup maintenance, and reconcile (#873) (@h3adex) * feat(ske): respect KUBECONFIG environment variable (#876) (@KevinGimbel) * fix(deps): update stackit sdk modules (#883) (@stackit-pipeline) ++++ systemsettings6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ tomcat: - Update to Tomcat 9.0.107 * Fixed CVEs: + CVE-2025-52520: Align size tracking for multipart requests with FileUpload's use of long. (bsc#1246388) + CVE-2025-52434: Improve stability of APR/native connector. (bsc#1246389) + CVE-2025-53506: Apply the initial HTTP/2 connection limits earlier. (bsc#1246318) * Catalina + Fix: Ensure application configured welcome files override the defaults when configuring an embedded web application programmatically. (markt) + Fix: Allow the default servlet to set the content length when the content length is known, no content has been written and a Writer is being used. (markt) + Fix: 69717: Correct a regression in the fix for CVE-2025-49125 that prevented access to PreResources and PostResources when mounted below the web application root with a path that was terminated with a file separator. (remm/markt) + Fix: 69731: Fix an issue that meant that the value of maxParameterCount applied was smaller than intended for multipart uploads with non-file parts when the parts were processed before query string parameters. (markt) + Fix: Align size tracking for multipart requests with FileUpload's use of long. (schultz) * Coyote + Fix: 69710: Increase the default for maxPartCount from 10 to 50. Update the documentation to provide more details on the memory requirements to support multi-part uploads while avoiding a denial of service risk. (markt) + Fix: 69713: Correctly handle an HTTP/2 data frame that includes padding when the headers include a content-length. (remm/markt) + Fix: Correctly collect statistics for HTTP/2 requests and avoid counting one request multiple times. Based on pull request #868 by qingdaoheze. (markt) + Fix: Fix JMX value for keepAliveCount on the endpoint. Also add the value of useVirtualThreads in JMX. (remm) + Fix: Improve stability of APR/native connector. (markt) + Fix: 69728: Remove incorrect warning when HTTP/2 is used with optional certificate verification and improve the warnings when a web application tries to use CLIENT-CERT with either HTTP/2 or a JSSE implementation of TLS 1.3. (markt) + Fix: When setting the initial HTTP/2 connection limit, apply those limits earlier. (markt) * Jasper + Code: Remove IMPL_OBJ_START from EL grammar for IDENTIFIER. (markt) + Code: Remove the INSTANCEOF and FUNCTIONSUFFIX definitions from the EL grammar as both are unused. (markt) * Web applications + Add: Documentation. Provide more explicit guidance regarding the security considerations for enabling write access to the web application via WebDAV, HTTP PUT requests or similar. (markt) + Add: Documentation. Add a section on reverse proxies to the security considerations page. (markt) * Other + Update: Update UnboundID to 7.0.3. (markt) + Update: Update Checkstyle to 10.25.1. (markt) + Update: Improvements to French translations. (remm) + Update: Improvements to Japanese translations provided by tak7iji. (markt) ++++ tomcat10: - Update to Tomcat 10.1.43 * Fixed CVEs: + CVE-2025-52520: Align size tracking for multipart requests with FileUpload's use of long. (bsc#1246388) + CVE-2025-53506: Apply the initial HTTP/2 connection limits earlier. (bsc#1246318) * Catalina + Fix: Ensure application configured welcome files override the defaults when configuring an embedded web application programmatically. (markt) + Fix: Allow the default servlet to set the content length when the content length is known, no content has been written and a Writer is being used. (markt) + Fix: 69717: Correct a regression in the fix for CVE-2025-49125 that prevented access to PreResources and PostResources when mounted below the web application root with a path that was terminated with a file separator. (remm/markt) + Fix: 69731: Fix an issue that meant that the value of maxParameterCount applied was smaller than intended for multipart uploads with non-file parts when the parts were processed before query string parameters. (markt) + Fix: Align size tracking for multipart requests with FileUpload's use of long. (schultz) * Coyote + Fix: 69710: Increase the default for maxPartCount from 10 to 50. Update the documentation to provide more details on the memory requirements to support multi-part uploads while avoiding a denial of service risk. (markt) + Fix: 69713: Correctly handle an HTTP/2 data frame that includes padding when the headers include a content-length. (remm/markt) + Fix: Correctly collect statistics for HTTP/2 requests and avoid counting one request multiple times. Based on pull request #868 by qingdaoheze. (markt) + Fix: Fix JMX value for keepAliveCount on the endpoint. Also add the value of useVirtualThreads in JMX. (remm) + Fix: 69728: Remove incorrect warning when HTTP/2 is used with optional certificate verification and improve the warnings when a web application tries to use CLIENT-CERT with either HTTP/2 or a JSSE implementation of TLS 1.3. (markt) + Fix: When setting the initial HTTP/2 connection limit, apply those limits earlier. (markt) * Jasper + Code: Remove IMPL_OBJ_START from EL grammar for IDENTIFIER. (markt) + Code: Remove the INSTANCEOF and FUNCTIONSUFFIX definitions from the EL grammar as both are unused. (markt) * Web applications + Add: Documentation. Provide more explicit guidance regarding the security considerations for enabling write access to the web application via WebDAV, HTTP PUT requests or similar. (markt) + Add: Documentation. Add a section on reverse proxies to the security considerations page. (markt) * Other + Update: Update UnboundID to 7.0.3. (markt) + Update: Update Checkstyle to 10.25.1. (markt) + Update: Improvements to French translations. (remm) + Update: Improvements to Japanese translations provided by tak7iji. (markt) ++++ tomcat11: - Update to Tomcat 11.0.9 - adapt tomcat-jdt.patch * Fixed CVEs: + CVE-2025-52520: Align size tracking for multipart requests with FileUpload's use of long. (bsc#1246388) + CVE-2025-53506: Apply the initial HTTP/2 connection limits earlier. (bsc#1246318) * Catalina + Fix: Ensure application configured welcome files override the defaults when configuring an embedded web application programmatically. (markt) + Update: Optimize Request#getCharsetHolder to avoid repeated parsing when charset is null. Patch provided by morning-gu. (schultz) + Fix: Allow the default servlet to set the content length when the content length is known, no content has been written and a Writer is being used. (markt) + Fix: 69717: Correct a regression in the fix for CVE-2025-49125 that prevented access to PreResources and PostResources when mounted below the web application root with a path that was terminated with a file separator. (remm/markt) + Fix: 69731: Fix an issue that meant that the value of maxParameterCount applied was smaller than intended for multipart uploads with non-file parts when the parts were processed before query string parameters. (markt) + Fix: Align size tracking for multipart requests with FileUpload's use of long. (schultz) * Coyote + Fix: 69710: Increase the default for maxPartCount from 10 to 50. Update the documentation to provide more details on the memory requirements to support multi-part uploads while avoiding a denial of service risk. (markt) + Fix: 69713: Correctly handle an HTTP/2 data frame that includes padding when the headers include a content-length. (remm/markt) + Fix: Correctly collect statistics for HTTP/2 requests and avoid counting one request multiple times. Based on pull request #868 by qingdaoheze. (markt) + Fix: Fix JMX value for keepAliveCount on the endpoint. Also add the value of useVirtualThreads in JMX. (remm) + Fix: 69728: Remove incorrect warning when HTTP/2 is used with optional certificate verification and improve the warnings when a web application tries to use CLIENT-CERT with either HTTP/2 or a JSSE implementation of TLS 1.3. (markt) + Fix: When setting the initial HTTP/2 connection limit, apply those limits earlier. (markt) * Jasper + Code: Remove IMPL_OBJ_START from EL grammar for IDENTIFIER. (markt) + Code: Remove the INSTANCEOF and FUNCTIONSUFFIX definitions from the EL grammar as both are unused. (markt) * Web applications + Add: Documentation. Provide more explicit guidance regarding the security considerations for enabling write access to the web application via WebDAV, HTTP PUT requests or similar. (markt) + Add: Documentation. Add a section on reverse proxies to the security considerations page. (markt) * Other + Update: Update to the Eclipse JDT compiler 4.36. (markt) + Update: Update UnboundID to 7.0.3. (markt) + Update: Update Checkstyle to 10.25.1. (markt) + Update: Improvements to French translations. (remm) + Update: Improvements to Japanese translations provided by tak7iji. (markt) ++++ toolbox: - Update to version 2.4+git20250806.ba48bd3: * Add SCC credentials if available [bsc#1247491] ++++ wacomtablet-kcm6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 ++++ whois: - Update to version 5.6.4: * Updated the .cm and .to TLD servers ++++ xdg-desktop-portal-kde6: - Update to 6.4.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.4.4 - Changes since 6.4.3: * Update version for new release 6.4.4 * globalshortcuts: Return shortcuts when dialog is accepted ------------------------------------------------------------------ ------------------ 2025-8-5 - Aug 5 2025 ------------------- ------------------------------------------------------------------ ++++ ImageMagick: - added patches [bsc#1247475] + ImageMagick-filename-placeholder-regression-1.patch + ImageMagick-filename-placeholder-regression-2.patch + ImageMagick-filename-placeholder-regression-3.patch ++++ MozillaFirefox: - Mozilla Firefox 141.0.2 * Fixed a startup crash experienced by some Linux users with outdated NVIDIA drivers. (bmo#1978911) * Fixed a regression that caused canvas objects to be draggable, causing web compatibility issues. (bmo#1978673) * Fixed a crash in the Web Developer Tools panel that could occur when inspecting pages with