Packages changed: ImageMagick (7.1.2.15 -> 7.1.2.16) MozillaFirefox (148.0 -> 148.0.2) gcc15 kernel-source lapack lensfun libavif (1.3.0 -> 1.4.0) nfs-utils openSUSE-release (20260310 -> 20260311) ovmf pavucontrol (6.1 -> 6.2) perl-MIME-tools (5.515.0 -> 5.517.0) postfix (3.11.0 -> 3.11.1) python-Pillow selinux-policy (20260310 -> 20260311) xdg-utils === Details === ==== ImageMagick ==== Version update (7.1.2.15 -> 7.1.2.16) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.2.16 * Add overflow check to JXL write path #8591 * fix heap over-read in BilateralBlurImage with even-dimension kernels #8595 * Add overflow checks to PS3 write path #8590 * Add overflow check to sixel write path #8587 * Add overflow check to SGI write path #8588 * Add overflow checks to BMP/DIB write paths and DIB read path #8573 * fix NULL pointer dereference in HEIC NCLX color profile allocation #8585 * Fix double-free in SVG gradientTransform / transform parsing #8583 * Typo fix in coders/dng.c #8580 ==== MozillaFirefox ==== Version update (148.0 -> 148.0.2) Subpackages: MozillaFirefox-branding-upstream MozillaFirefox-translations-common - Mozilla Firefox 148.0.2 * https://www.firefox.com/en-US/firefox/148.0.2/releasenotes MFSA 2026-19 (boo#) * CVE-2026-3846 (bmo#2018400) Same-origin policy bypass in the CSS Parsing and Computation component * CVE-2026-3847 (bmo#2017513, bmo#2017622, bmo#2019341) Memory safety bugs fixed in Firefox 148.0.2 * Fixed an issue where searches entered in the Firefox Home search field were incorrectly redirected to the address bar for some users who had disabled search handoff behavior via advanced settings. (bmo#2017049) * Fixed an issue where some web-based rich text editors stopped applying formatting, such as bold or italic. (bmo#2020927) * Fixed an issue where videos could autoplay unexpectedly on YouTube despite autoplay being blocked, particularly impacting screen reader users. (bmo#2020233) * Fixed an issue that caused some absolutely positioned elements meant to be centered, for example, using `margin: auto with inset: 0`, to appear left-aligned on initial load. (bmo#2017440) * Fixed an issue where the “Switch to Tab” suggestion in the address bar appeared blank for pages without a title. (bmo#2020341) ==== gcc15 ==== - Update gcc15-Wtime_t-conversion.patch to allow conversions to/from uint32_t. Filter out -Wtime_t-conversion from flags to build D target library files. ==== kernel-source ==== - perf metricgroup: Fix metricgroup__has_metric_or_groups (bsc#1259358). - Delete patches.suse/Revert-perf-metricgroup-Don-t-early-exit-if-no-CPUID.patch. Replace the revert by an upstream fix. - commit da5960c - Revert "perf metricgroup: Don't early exit if no CPUID table exists" (bsc#1259358). - commit 382985e - Revert "fix mm_cid race (bsc#1258936)." This reverts commit ac981d7fc2f61a11573db2572dc5af0684e23ee2, it does not work. - commit 446493f - fix mm_cid race (bsc#1258936). - commit ac981d7 ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - Add %bcond_with{,out} alternatives and disable by default for SLFO. - Split baselibs.conf into two flavors, one for update-alternatives, one for dropping them. Decide in %prep which one to choose. ==== lensfun ==== Subpackages: lensfun-data liblensfun1 - Update lens databse ==== libavif ==== Version update (1.3.0 -> 1.4.0) - update to 1.4.0: * Added since 1.3.0 - Allow avifenc to read png or jpeg files through stdin using --stdin-format. - Support some Sample Transform schemes as defined in the version 1.2 of the AVIF specification. - Add an optional argument to the --depth flag of avifenc used to enable a bit depth extension scheme in the encoded file. - Add support for converting jpeg files with Apple style gain maps. - Add support for PNG cICP chunk when decoding PNG files. If a PNG file contains a cICP chunk and other color information chunks, such as iCCP (ICC profile), the other chunks are ignored as per the PNG Specification Third Edition Section 4.3. - Support reading Sample-Transform-based 16-bit AVIF files when avifDecoder::imageContentToDecode & AVIF_IMAGE_CONTENT_SAMPLE_TRANSFORMS is not zero. - Support Sample Transform derived image items with grid input image items. - Add --sato flag to avifdec to enable Sample Transforms support at decoding. - Add --grid option to avifgainmaputil. - Apply clean aperture crop, rotation and mirror when decoding to PNG or JPEG. Remove orientation information from Exif if present. - Add avif::RGBImageCleanup to the C++ API. * Changed since 1.3.0 - Set avifDecoder::image->depth to the same value after avifDecoderParse() as after avifDecoderNextImage() when the file to decode contains a 'sato' derived image item. - avifdec only enables Sample Transform decoding when --depth is set to 16. - Update dav1d.cmd/dav1d_android.sh/LocalDav1d.cmake: 1.5.3 - Update googletest.cmd/LocalGTest.cmake: v1.17.0 - Update libgav1.cmd: v0.20.0 - Update libjpeg.cmd/LocalJpeg.cmake: 3.1.3 - Update libyuv.cmd/LocalLibyuv.cmake: deeb764bb (1922) - Update libsharpyuv.cmd/LocalLibsharpyuv.cmake: v1.6.0 - Update libxml2.cmd/LocalLibXml2.cmake: v2.15.1 - Update aom.cmd/LocalAom.cmake: v3.13.1 - Update LocalAvm.cmake: research-v13.0.0 - Update rav1e.cmd/LocalRav1e.cmake: cargo-c v0.10.20, corrosion v0.6.1, rav1e v0.8.1 - Update svt.cmd/svt.sh/LocalSvt.cmake: v4.0.1 - Update zlibpng.cmd/LocalZlibpng.cmake: libpng 1.6.55, zlib 1.3.2 - Fix grayscale conversion when changing the bit depth. - Bump cmake_minimum_required from 3.13 to 3.22 - Associate transformative properties with alpha auxiliary image items. - Always forward the CICP color primaries, transfer characteristics, and matrix coefficients to the AV1 encoder, which writes them in the Sequence Header OBU, for compatibility with libraries that wrongly ignore the colr box. - Use a "quality to quantizer (QP)" mapping formula designed for AOM_TUNE_IQ. - Set tuning before applying the user-provided specific aom codec options. - Use AOM_TUNE_PSNR by default when encoding alpha with libaom because AOM_TUNE_SSIM causes ringing for alpha. - Use AOM_TUNE_IQ by default when encoding still non-RGB color samples with libaom v3.13.0 or later. - Converting an image containing a gain map using avifenc with the --grid flag now also splits the gain map into a grid. - In avifenc, set Exif orientation to 1 (no transformation) when converting JPEGs to AVIF. - Use all-intra encoding for a layered image if the total number of layers is 2 and the quality of the first layer is very low (q <= 10). * Removed since 1.3.0 - Remove ext/avm.cmd. - Remove the AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM CMake flag. - Remove support for libaom versions up to 2.0.0 inclusive. - Un-export the private function avifImagePushProperty(). ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - Update to 2.8.6: https://mirrors.edge.kernel.org/pub/linux/utils/nfs-utils/2.8.6/2.8.6-Changelog * Fix access checks when mounting subdirectories in NFSv3 * support: Add a mini-library to extract and apply RPC credentials * mountd: Separate lookup of the exported directory and the mount path * mountd: Minor refactor of get_rootfh() * mountstats: Fix per-operation percentages with nconnect * nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock * nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices * Revert "nfsrahead: enable event-driven mountinfo monitoring" * gssd: add a helper to determine the set of encryption types to pass to limit_krb5_enctypes() * gssd: get the permitted enctypes from the krb5 library on startup * gssd: add enctypes_list_to_string() * gssd: remove the limit-to-legacy-enctypes option * conffile: fix discards const from pointer target * mount.nfs: fix discards const from pointer target * nfsrahead: enable event-driven mountinfo monitoring * nfsdctl: load modules on nl family resolution error * nfsdctl: remove unneeded newlines from xlog() format strings * nfsdctl: query netlink policy before sending the minthreads attribute to kernel * nfsdctl: only resolve netlink family names once * nfsdctl: unconditionally enable support for min-threads ==== openSUSE-release ==== Version update (20260310 -> 20260311) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ovmf ==== Subpackages: qemu-ovmf-x86_64 - Add patch to fix truncation screen issue (bsc#1259122) - ovmf-MdeModulePkg-ConSplitterDxe-Set-default-ConOut-mode.patch - Add patch to fix crash on RISC-V without a TPM device: * ovmf-OvmfPkg-RiscVVirt-PlatformPei-Do-not-set-PcdTpmBaseA.patch ==== pavucontrol ==== Version update (6.1 -> 6.2) Subpackages: pavucontrol-lang - Update to version 6.2: + Add a checkbox to disable unavailable profiles. + Avoid inhibiting monitor source suspend. + Fix peak decay when monitor is suspended. + Add a build option to disable audio feedback. + Updated translations. - Update option passed to meson setup following upstream changes. - Add pkgconfig(libcanberra) BuildRequires: New dependency. ==== perl-MIME-tools ==== Version update (5.515.0 -> 5.517.0) - updated to 5.517.0 (5.517) see /usr/share/doc/packages/perl-MIME-tools/ChangeLog 5.517 2026-02-10 Dianne Skoll * VERSION 5.517 RELEASED * Add a missing test message file that was causing tests to fail. 5.516 2026-02-10 Dianne Skoll * VERSION 5.516 RELEASED * Handle MIME parameters of the form param= better (ie, a parameter with no value at all.) It's treated the same as param="" rather than aborting the parse. * Diagnose additional types of malformed MIME as ambiguous. Specifically, an empty boundary parameters like boundary= or boundary="" is treated as ambiguous. Thanks to Stoiko Ivanov for pointing out this missing case. ==== postfix ==== Version update (3.11.0 -> 3.11.1) - update to 3.11.1 * Bugfix (defect introduced: 20260219): alias_maps errors when default_database_type was not set in main.cf. * Bugfix (defect introduced: Postfix 3.0): buffer over-read when Postfix is configured with an enhanced status code not followed by other text. For example, "5.7.2" without text after the three-number code, in an access(5) table, header or body checks, or with "$rbl_code $rbl_text" in rbl_reply_maps or default_rbl_reply. These are all uncommon configurations. * Bugfix (defect introduced: Postfix 3.3): null pointer in nbdb_reindexd(8) because the "service_name" value was not propagated. * During Postfix start-up, avoid a spurious error message from nbdb_reindexd(8), when non_bdb_migration_level disables automatic re-indexing. ==== python-Pillow ==== - Reactivate tests 'test_stroke' and 'test_stroke_multiline' - Skip failed tests with libavif 1.4.0 in Factory/TW: 'TestFileAvif and (test_write_rgb or test_encoder_advanced_codec_options)' ==== selinux-policy ==== Version update (20260310 -> 20260311) Subpackages: selinux-policy-targeted - Update to version 20260311: * Allow redis_t to create netlink_rdma_socket * Allow systemd create symlinks in /run/varlink/registry * Support hooks in /run/systemd/resolve.hook * Allow virtlogd_t dac_override for virtlock (bsc#1253389) * Allow mdadm use modprobe (bsc#1257793) ==== xdg-utils ==== Subpackages: xdg-utils-screensaver - Allow xdg-utils to be installed with busybox-which. This enables its installation in distrobox containers.