Packages changed: apache2-mod_php8 (8.4.5 -> 8.4.6) kernel-firmware-amdgpu (20250328 -> 20250419) kernel-firmware-intel (20250331 -> 20250419) kernel-firmware-sound (20250408 -> 20250415) libXft (2.3.8 -> 2.3.9) libsoup libspelling (0.4.7 -> 0.4.8) libtirpc openSUSE-release (20250420 -> 20250422) pcre2 (10.44 -> 10.45) php8 (8.4.5 -> 8.4.6) python-pip (24.3.1 -> 25.0.1) sdbootutil (1+git20250410.9086124 -> 1+git20250421.7ffd25a) vim (9.1.1258 -> 9.1.1330) yast2-bootloader (5.0.15 -> 5.0.16) yast2-trans (84.87.20250413.d6cedb22b0 -> 84.87.20250416.5cd9324ae2) === Details === ==== apache2-mod_php8 ==== Version update (8.4.5 -> 8.4.6) - version update to 8.4.6 BCMath: Fixed pointer subtraction for scale. Core: Fixed property hook backing value access in multi-level inheritance. Fixed accidentally inherited default value in overridden virtual properties. Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class). Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()). Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks). Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()). Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache). Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again). Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction). Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown). Fixed OSS-Fuzz #403308724. Fixed bug GH-13193 again (Significant performance degradation in 'foreach'). DBA: Fixed assertion violation when opening the same file with dba_open multiple times. DOM: Fixed bug GH-17991 (Assertion failure dom_attr_value_write). Fix weird unpack behaviour in DOM. Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased). Fix xinclude destruction of live attributes. Fuzzer: Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI). GD: Fixed bug GH-17984 (calls with arguments as array with references). LDAP: Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing). Mbstring: Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes). Opcache: Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT). Fixed bug GH-17966 (Symfony JIT 1205 assertion failure). Fixed bug GH-18037 (SEGV Zend/zend_execute.c). Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken). Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c). Fixed bug GH-18112 (NULL access with preloading and INI option). Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table). PDO: Fix memory leak when destroying PDORow. Standard: Fix memory leaks in array_any() / array_all(). SOAP: Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) . SPL: Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject). Treewide: Fixed bug GH-17736 (Assertion failure zend_reference_destroy()). Windows: Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings). ==== kernel-firmware-amdgpu ==== Version update (20250328 -> 20250419) - Update to version 20250419 (git commit 5aa42075d00c): * amdgpu: update vcn 4.0.5 firmware * amdgpu: update psp 14.0.0 firmware * amdgpu: update vcn 4.0.2 firmware * amdgpu: update psp 13.0.4 firmware * amdgpu: update gc 11.0.1 firmware * amdgpu: update navy flounder firmware * amdgpu: update psp 14.0.4 firmware * amdgpu: update gc 11.5.2 firmware * amdgpu: update vcn 5.0.0 firmware * amdgpu: update smu 14.0.3 firmware * amdgpu: update psp 14.0.3 firmware * amdgpu: update gc 12.0.1 firmware * amdgpu: update sienna cichlid firmware * amdgpu: update yellow carp firmware * amdgpu: update smu 14.0.2 firmware * amdgpu: update psp 14.0.2 firmware * amdgpu: update gc 12.0.0 firmware * amdgpu: update vega20 firmware * amdgpu: update navi14 firmware * amdgpu: update vega12 firmware * amdgpu: update vcn 4.0.4 firmware * amdgpu: update smu 13.0.7 firmware * amdgpu: update psp 13.0.7 firmware * amdgpu: update gc 11.0.2 firmware * amdgpu: update vega10 firmware * amdgpu: update psp 13.0.5 firmware * amdgpu: update navi12 firmware * amdgpu: update psp 13.0.10 firmware * amdgpu: update gc 11.0.3 firmware * amdgpu: update navi10 firmware * amdgpu: update vangogh firmware * amdgpu: update picasso firmware * amdgpu: update vcn 4.0.0 firmware * amdgpu: update psp 13.0.0 firmware * amdgpu: update gc 11.0.0 firmware * amdgpu: update psp 13.0.14 firmware * amdgpu: update gc 9.4.4 firmware * amdgpu: update arcturus firmware * amdgpu: update psp 13.0.6 firmware * amdgpu: update gc 9.4.3 firmware * amdgpu: update beige goby firmware * amdgpu: update psp 13.0.8 firmware * amdgpu: update psp 14.0.1 firmware * amdgpu: update gc 11.5.1 firmware * amdgpu: update psp 13.0.11 firmware * amdgpu: update gc 11.0.4 firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update aldebaran firmware * amdgpu: update dcn 4.01 frmware to 0.1.6.0 ==== kernel-firmware-intel ==== Version update (20250331 -> 20250419) - Update to version 20250419 (git commit 5aa42075d00c): * intel: ish: Update license file for ISH ==== kernel-firmware-sound ==== Version update (20250408 -> 20250415) - Update to version 20250415 (git commit 2f411c10e457): * intel: avs: Update topology file for I2S Analog Devices 4567 * intel: avs: Update topology file for I2S Realtek 5663 * intel: avs: Update topology file for I2S Realtek 5640 * intel: avs: Update topology file for I2S Realtek 5514 * intel: avs: Update topology file for I2S Realtek 298 * intel: avs: Update topology file for I2S Realtek 286 * intel: avs: Update topology file for I2S Realtek 274 * intel: avs: Update topology file for I2S Nuvoton 8825 * intel: avs: Update topology file for I2S Maxim 98927 * intel: avs: Update topology file for I2S Maxim 98373 * intel: avs: Update topology file for I2S Maxim 98357a * intel: avs: Update topology file for HDAudio codecs * intel: avs: Update topology file for HDMI codecs * intel: avs: Update topology file for Digital Microphone Array * intel: avs: Update topology file for I2S Dialog 7219 ==== libXft ==== Version update (2.3.8 -> 2.3.9) - Update to version 2.3.9 * Remove support for building with pre-X11R7 versions of X * Remove support for building with pre-C89 versions of C * Require xproto >= 7.0.22 for _X_UNUSED * meson: Add option to build with meson * fix potential buffer overrun in _XftGlyphDefault * issue 19: Problem loading "SourceCodePro-Regular" font in Fedora * build-fix for older versions of freetype2: FT_HAS_SVG was added late in 2021 * issue 21: remove redundant/out-of-place prototype for XftNameUnparse * manpage formatting-fixes ==== libsoup ==== Subpackages: libsoup-3_0-0 libsoup-lang typelib-1_0-Soup-3_0 - Add CVE fixes: + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914) + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908) - Rerun tests once for s390x should they fail, tests for this arch is very flaky. ==== libspelling ==== Version update (0.4.7 -> 0.4.8) Subpackages: libspelling-lang libspelling1-2 - Update to version 0.4.8: + Improve initial dictionary selection which is particularly useful for languages which don't typically use spaces to separate word boundaries. + Build system fixes for building without enchant + Updated translations. ==== libtirpc ==== Subpackages: libtirpc-netconfig libtirpc3 - add patches from upstream to fix gcc-15 compile time errors: * libtirpc-1.3.6-gcc15-part1.patch * libtirpc-1.3.6-gcc15-part2.patch ==== openSUSE-release ==== Version update (20250420 -> 20250422) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pcre2 ==== Version update (10.44 -> 10.45) Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-8-0-32bit libpcre2-posix3 - Update to 10.45: * New upstream maintainers (and signing key) * Update Unicode support to UCD 16 * Case-insensitive matching of Unicode properties Ll, Lt, and Lu has been changed to match Perl * Case-insensitive matching of backreferences now respects the PCRE2_EXTRA_CASELESS_RESTRICT option * Parsing of the \x escape is stricter, and is no longer parsed as an escape for the NUL character if not followed by '{' or a hexadecimal digit. Use \x00 instead. * Add a new feature called scan substring. This is a type of assertion which matches the content of a capturing block to a sub-pattern. * Add support for UTS#18 compatible character classes * Add support for Perl-style extended character classes * JIT compilation now fails with the new error code PCRE2_ERROR_JIT_UNSUPPORTED for patterns which use features not supported by the JIT compiler. * New options PCRE2_EXTRA_NO_BS0 (disallow \0 as an escape for the NUL character); PCRE2_EXTRA_PYTHON_OCTAL (use Python disambiguation rules for deciding whether \12 is a backreference or an octal escape); PCRE2_EXTRA_NEVER_CALLOUT (disable callout syntax entirely); PCRE2_EXTRA_TURKISH_CASING (use Turkish rules for case-insensitive matching). * Add new API function pcre2_set_optimize() for controlling which optimizations are enabled. * A variety of extensions have been made to pcre2_substitute() and its syntax for replacement strings. These now support: \123 octal escapes; titlecasing \u\L; \1 backreferences; \g<1> and $ backreferences; $& $` $' and $_; new function pcre2_set_substitute_case_callout() to allow locale-aware case transformation. - drop pcre2-10.44-github-issue-415.patch, included upstream - update license to BSD-3-Clause WITH PCRE2-exception and cascade to subpackages and parts (boo#1240358) ==== php8 ==== Version update (8.4.5 -> 8.4.6) Subpackages: php8-ctype php8-dom php8-iconv php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.4.6 BCMath: Fixed pointer subtraction for scale. Core: Fixed property hook backing value access in multi-level inheritance. Fixed accidentally inherited default value in overridden virtual properties. Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class). Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()). Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks). Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()). Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache). Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again). Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction). Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown). Fixed OSS-Fuzz #403308724. Fixed bug GH-13193 again (Significant performance degradation in 'foreach'). DBA: Fixed assertion violation when opening the same file with dba_open multiple times. DOM: Fixed bug GH-17991 (Assertion failure dom_attr_value_write). Fix weird unpack behaviour in DOM. Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased). Fix xinclude destruction of live attributes. Fuzzer: Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI). GD: Fixed bug GH-17984 (calls with arguments as array with references). LDAP: Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing). Mbstring: Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes). Opcache: Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT). Fixed bug GH-17966 (Symfony JIT 1205 assertion failure). Fixed bug GH-18037 (SEGV Zend/zend_execute.c). Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken). Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c). Fixed bug GH-18112 (NULL access with preloading and INI option). Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table). PDO: Fix memory leak when destroying PDORow. Standard: Fix memory leaks in array_any() / array_all(). SOAP: Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) . SPL: Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject). Treewide: Fixed bug GH-17736 (Assertion failure zend_reference_destroy()). Windows: Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings). ==== python-pip ==== Version update (24.3.1 -> 25.0.1) Subpackages: python311-pip python313-pip - update to 25.0.1 * Fix an unsupported type annotation on Python 3.10 and earlier. (#13181) * Fix a regression where truststore would never be used while installing build dependencies. (#13186) * Deprecate the no-python-version-warning flag as it has long done nothing since Python 2 support was removed in pip 21.0. (#13154) * Prefer to display PEP 639 License-Expression in pip show if metadata version is at least 2.4. (#13112) * Support PEP 639 License-Expression and License-File metadata fields in JSON output. pip inspect and pip install --report now emit license_expression and license_file fields in the metadata object, if the corresponding fields are present in the installed METADATA file. (#13134) * Files in the network cache will inherit the read/write permissions of pip’s cache directory (in addition to the current user retaining read/write access). This enables a single cache to be shared among multiple users. (#11012) * Return the size, along with the number, of files cleared on pip cache purge and pip cache remove (#12176) * Cache python-requires checks while filtering potential installation candidates. (#13128) * Optimize package collection by avoiding unnecessary URL parsing and other processing. (#13132) * Reorder the encoding detection when decoding a requirements file, relying on UTF-8 over the locale encoding by default, matching the documented behaviour. (#12771) * The pip version self check is disabled on EXTERNALLY-MANAGED environments. (#11820) * Fix a security bug allowing a specially crafted wheel to execute code during installation. (#13079) * The inclusion of packaging 24.2 changes how pre-release specifiers with < and > behave. Including a pre-release version with these specifiers now implies accepting pre-releases (e.g., <2.0dev can include 1.0rc1). To avoid implying pre-releases, avoid specifying them (e.g., use <2.0). The exception is !=, which never implies pre-releases. (#13163) * The --cert and --client-cert command-line options are now respected while installing build dependencies. Consequently, the private _PIP_STANDALONE_CERT environment variable is no longer used. (#5502) * The --proxy command-line option is now respected while installing build dependencies. (#6018) ==== sdbootutil ==== Version update (1+git20250410.9086124 -> 1+git20250421.7ffd25a) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper - Update to version 1+git20250421.7ffd25a: * Report when PCR 15 cannot be predicted * Reap failed keys * Improve asking passwords (bsc#1241171) ==== vim ==== Version update (9.1.1258 -> 9.1.1330) Subpackages: vim-data vim-data-common xxd - update to 9.1.1330: * patch 9.1.1330: may receive E315 in terminal * patch 9.1.1329: cannot get information about command line completion * patch 9.1.1328: too many strlen() calls in indent.c * patch 9.1.1327: filetype: nroff detection can be improved * runtime(doc): cross-link :| meaning :p and explain E749 * runtime(doc): style: clarify to prefer 2 spaces after a sentence * runtime(pov): deprecate `#render` and `#statistics` in syntax script * patch 9.1.1326: invalid cursor position after 'tagfunc' * runtime(keymaps): update Brazilian keymaps * patch 9.1.1325: tests: not checking error numbers properly * runtime(doc): clarify 'includeexpr' is not used for * runtime(filetype): improve *.h filetype detection * runtime(indent-tests): Raise timeouts for "search*()"es * runtime(indent-tests): Annotate timed "search*()"es for tracing * runtime(indent-tests): Instrument timed "search*()" calls * patch 9.1.1324: undefined behaviour if X11 connection dies * patch 9.1.1323: b:undo_ftplugin not executed when re-using buffer * runtime(nix): set iskeyword and b:match_words in ftplugin * runtime(doc): clarify "nearest" value for 'completeopt' * runtime(doc): Tweak documentation style a bit * patch 9.1.1322: small delete register cannot paste multi-line correctly * patch 9.1.1321: filetype: MS ixx and mpp files are not recognized * patch 9.1.1320: filetype: alsoft config files are not recognized * patch 9.1.1319: Various typos in the code, issue with test_inst_complete.vim * patch 9.1.1318: tests: test_format fails * runtime(jjdescription): Don't require a space to start comments * patch 9.1.1317: noisy error when restoring folds from session fails * patch 9.1.1316: missing memory allocation failure in os_mswin.c * patch 9.1.1315: completion: issue with fuzzy completion and 'completefuzzycollect' * patch 9.1.1314: max allowed string width too small * patch 9.1.1313: compile warning about uninitialized value * patch 9.1.1312: tests: Test_backupskip() fails when HOME is defined * patch 9.1.1311: completion: not possible to limit number of matches * patch 9.1.1310: completion: redundant check for preinsert effect * runtime(gleam): Update ftplugin, use recommended_style config variable * patch 9.1.1309: tests: no test for 'pummaxwidth' with non-truncated "kind" * runtime: set 'cpoptions' for line-continuation in various runtime files * runtime(tar): remove dependency on netrw#WinPath, include mapping doc * runtime(netrw): remove deprecated functions * patch 9.1.1308: completion: cannot order matches by distance to cursor * patch 9.1.1307: make syntax does not reliably detect different flavors * patch 9.1.1306: completion menu rendering can be improved * patch 9.1.1305: completion menu active after switching windows/tabs * patch 9.1.1304: filetype: some man files are not recognized * runtime(netrw): upstream snapshot of v180 * patch 9.1.1303: missing out-of-memory check in linematch.c * patch 9.1.1302: Coverity warns about using uninitialized value * patch 9.1.1301: completion: cannot configure completion functions with 'complete' * patch 9.1.1300: wrong detection of -inf * runtime(doc): update enum helptext * patch 9.1.1299: filetype: mbsyncrc files are not recognized * runtime(doc): update options.txt and clarify 'wildmode' further * runtime(gleam): update Maintainer and filetype options * patch 9.1.1298: define_function() is too long * patch 9.1.1297: Ctrl-D scrolling can get stuck * runtime(new-tutor): update tutor and correct comandline completion * patch 9.1.1296: completion: incorrect truncation logic * patch 9.1.1295: clientserver: does not handle :stopinsert correctly * runtime(doc): disable last-position-jump in diff mode * runtime(doc): Improve 'wildmode' setting desciption * patch 9.1.1294: gui tabline menu does not use confirm when closing tabs * runtime(doc): correct backslash escaping comma example * patch 9.1.1293: comment plugin does not handle 'exclusive' selection for comment object * patch 9.1.1292: statusline not correctly evaluated * runtime(sh): Do not look up a "sh" utility in $PATH for "sh_13.sh" * runtime(filetype): make shell filetype detection more robust * patch 9.1.1291: too many strlen() calls in buffer.c * runtime(keymaps): include 2 Brazilian Keymaps * runtime(vim): Update-base-syntax, match full :*grep, :make, :sort and :filter commands * patch 9.1.1290: tests: missing cleanup in test_filetype.vim * patch 9.1.1289: tests: no test for matchparen plugin with WinScrolled event * runtime(remind): include remind.vim ftplugin * runtime(vim): Update base-syntax, improve :command highlighting * runtime(help): add omni completion and 'iskeyword' to filetype plugin * runtime(lf): improve syntax script, add filetype plugin * patch 9.1.1288: Using wrong window in ll_resize_stack() * runtime(doc): rename wrong option to 'pummaxwidth' * patch 9.1.1287: quickfix code can be further improved * patch 9.1.1286: filetype: help files not detected when 'iskeyword' includes ":" * patch 9.1.1285: Vim9: no error message for missing method after "super." * patch 9.1.1284: not possible to configure pum truncation char * runtime(lua): fix whitespace style issues in lua ftplugin * runtime(lua): improve foldexpr, add vim9 script version * runtime(doc): Fix minor typo in options.txt * runtime(fstab): set formatoptions-=t in filetype plugin * runtime(svelte): add matchit support to svelte filetype plugin * patch 9.1.1283: quickfix stack is limited to 10 items * patch 9.1.1282: Build and test failure without job feature * patch 9.1.1281: extra newline output when editing stdin * patch 9.1.1280: trailing additional semicolon in get_matches_in_str() * patch 9.1.1279: Vim9: null_object and null_class are no reserved names * patch 9.1.1278: Vim9: too long functions in vim9type.c * runtime(vim): Update base-syntax, match full :redir command * patch 9.1.1277: tests: trailing comment char in test_popupwin * patch 9.1.1276: inline word diff treats multibyte chars as word char * runtime(doc): update WinScrolled documentation * runtime(vim): Update base-syntax, improve :set backslash handling * patch 9.1.1275: MS-Windows: Not possible to pass additional flags to Make_mvc ... changelog too long, skipping 30 lines ... - add more units for rlimit rules ==== yast2-bootloader ==== Version update (5.0.15 -> 5.0.16) - Calling "sdbootutil set-timeout" with the correct parameters (bsc#1236578). - 5.0.16 ==== yast2-trans ==== Version update (84.87.20250413.d6cedb22b0 -> 84.87.20250416.5cd9324ae2) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20250416.5cd9324ae2: * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Georgian) * Translated using Weblate (Slovenian)