Packages changed: bash curl (8.15.0 -> 8.16.0) edict (20230511 -> 20251001) gpg2 kernel-source (6.16.9 -> 6.17.0) libgpg-error nvidia-open-driver-G06-signed (580.82.07_k6.16.9_1 -> 580.95.05_k6.17.0_1) openSUSE-release (20250930 -> 20251001) patterns-xfce python313 python313-core xfce4-session === Details === ==== bash ==== Subpackages: bash-lang bash-loadables bash-sh - DRop use of patchutils: the patch tarball seems to contain only patches to be applied -p0. This allows us to shorten the build cycle. ==== curl ==== Version update (8.15.0 -> 8.16.0) Subpackages: libcurl4 - curl: http: handle user-defined connection headers [bsc#1249448] * Add curl-handle_user-defined_connection_headers.patch - Update to 8.16.0: * Security fixes: - [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path - [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask * Changes: - curl: add --follow and --out-null - curl: add --parallel-max-host to limit concurrent connections per host - curl: make --retry-delay and --retry-max-time accept decimal seconds - hostip: cache negative name resolves - ip happy eyeballing: keep attempts running - multi: add curl_multi_get_offt - multi: add CURLMOPT_NETWORK_CHANGED to signal network changed - netrc: use the NETRC environment variable (first) if set - smtp: allow suffix behind a mail address for RFC 3461 - tls: make default TLS version be minimum 1.2 - tool_getparam: add support for `--longopt=value` - vquic: drop msh3 - websocket: support CURLOPT_READFUNCTION * Bugfixes: - _PROTOCOLS.md: mention file:// is only for absolute paths - acinclude: --with-ca-fallback only works with OpenSSL - bufq: add integer overflow checks before chunk allocations - cmake: fix `ENABLE_UNIX_SOCKETS=OFF` with pre-fill enabled on unix - cmake: fix setting LTO properties on the wrong targets - configure: tidy up internal names in ngtcp2 ossl detection logic - connectdata: remove primary+secondary ip_quadruple - connection: terminate after goaway - cookie: don't treat the leading slash as trailing - cookie: remove expired cookies before listing - curl: tool_read_cb fix of segfault - curl_ossl: extend callback table for nghttp3 1.11.0 - DEPRECATE.md: drop old OpenSSL versions - idn: reject conversions that end up as a zero length hostname - ngtcp2: extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0 - ngtcp2: handshake timeout should be equal to --connect-timeout - openssl: add and use `HAVE_OPENSSL3` internal macro - openssl: check SSL_write() length on retries - openssl: clear errors after a failed `d2i_X509()` - openssl: drop redundant `HAVE_OPENSSL_VERSION` macro - openssl: drop single-use interim macro `USE_OPENSSL_SRP` - openssl: output unescaped utf8 x509 issuer/subject DNs - parallel-max: bump the max value to 65535 - resolving: dns error tracing - schannel: add an error message for client cert not found - schannel: assume `CERT_CHAIN_REVOCATION_CHECK_CHAIN` - schannel: fix renegotiation - schannel: improve handshake procedure - socks: do_SOCKS5: Fix invalid buffer content on short send - threaded-resolver: fix shutdown - tool_getparam: warn on more unicode prefixes - tool_urlglob: add integer overflow protection - urlapi: allow more path characters "raw" when asked to URL encode - urlglob: only accept 255 globs - vtls: set seen http version on successful ALPN - websocket: handling of PONG frames - websocket: improve handling of 0-len frames - websocket: reset upload_done when sending data - ws: avoid NULL pointer deref in curl_ws_recv * Rebase libcurl-ocloexec.patch ==== edict ==== Version update (20230511 -> 20251001) - Stop marking up edict as essential for locale(ja). - Update to snapshot 20251001 * No changelog recorded. ==== gpg2 ==== Subpackages: dirmngr gpg2-lang - Remove the infodir directory if it exists. ==== kernel-source ==== Version update (6.16.9 -> 6.17.0) - docs: kdoc: handle the obsolescensce of docutils.ErrorString() (bsc#1250507). - commit 6ec5a94 - Update patches.kernel.org/6.16.8-120-tty-hvc_console-Call-hvc_kick-in-hvc_write-unc.patch (bsc#1012628 bsc#1230062). Add a bug reference. - commit 19ace99 - update to 6.17 final - update configs - i386 (copied from x86_64) - DEBUG_WX=y - PTDUMP_DEBUGFS=n - HID_LENOVO=m (ppc64le, armv7hl, armv6hl) - commit 50583f4 ==== libgpg-error ==== Subpackages: libgpg-error0 libgpg-error0-32bit - No longer explicitly require info by -devel package: info files are handled by a transfiletrigger when info is present. ==== nvidia-open-driver-G06-signed ==== Version update (580.82.07_k6.16.9_1 -> 580.95.05_k6.17.0_1) - fixed 'osc service run download_files' - update to version 580.95.05 (boo#1250536) - get rid of multiversion for the KMPs, since it only brought/brings us trouble and no benefit at all (jsc#PED-12049) * remove any ^Conflicts and ^Provides: multiversion from /usr/lib/rpm/kernel-module-subpackage * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e. updates/ subdir ==== openSUSE-release ==== Version update (20250930 -> 20251001) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== patterns-xfce ==== Subpackages: patterns-xfce-xfce patterns-xfce-xfce_basis patterns-xfce-xfce_laptop - Correct supplements of patterns-xfce_laptop* to match with patterns-desktop-mobile instead of patterns-desktop-laptop (bsc#1248802) ==== python313 ==== Subpackages: python313-curses python313-dbm python313-tk python313-x86-64-v3 - Add gh139257-Support-docutils-0.22.patch to fix build with latest docutils (>=0.22) gh#python/cpython#139257 ==== python313-core ==== Subpackages: libpython3_13-1_0 libpython3_13-1_0-x86-64-v3 python313-base python313-base-x86-64-v3 - Add gh139257-Support-docutils-0.22.patch to fix build with latest docutils (>=0.22) gh#python/cpython#139257 ==== xfce4-session ==== Subpackages: xfce4-session-lang - Add mic-mute and Windows-key handling for Wayland labwc (bsc#1248802)