Packages changed: Mesa (26.0.0~rc3 -> 26.0.0) Mesa-drivers (26.0.0~rc3 -> 26.0.0) apparmor (4.1.3 -> 4.1.6) desktop-data-openSUSE gimp glycin-loaders (2.0.7 -> 2.0.8) libapparmor (4.1.3 -> 4.1.6) libglycin (2.0.7 -> 2.0.8) openSUSE-release (20260212 -> 20260213) osinfo-db polkit-default-privs (1550+20260122.bb2b3c5 -> 1550+20260212.d84c6be) postfix postgresql18 (18.1 -> 18.2) python-Pillow (12.1.0 -> 12.1.1) tuned (v2.26.1+git.d6ff925 -> 2.26.1+git.d6ff925) webkit2gtk3 (2.50.4 -> 2.50.5) webkit2gtk4 (2.50.4 -> 2.50.5) === Details === ==== Mesa ==== Version update (26.0.0~rc3 -> 26.0.0) Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1 - Update to Mesa 26.0.0 final version * Since Mesa 25.3, RADV has seen significant raytracing performance improvements. * Its `RADV_DEBUG` environment variable has removed the following deprecated options: invariantgeom, nodynamicbounds, nongg_gs and splitfma. Use the driconf variables radv_invariant_geom, radv_no_dynamic_bounds, radv_disable_ngg_gs, and radv_split_fma instead. * RadeonSI switched to ACO by default for better and faster ISA code generation and better GPU performance and better compile times. * This release also introduces KosmicKrisp, a Vulkan to Metal layered driver for macOS. * Users can expect the usual flurry of improvements across all drivers and components, - supersedes u_ppc64le-fix.patch - u_ppc64le-fix.patch: fixes build on pp64le ==== Mesa-drivers ==== Version update (26.0.0~rc3 -> 26.0.0) Subpackages: Mesa-dri Mesa-libva Mesa-vulkan-device-select libvulkan_lvp - Update to Mesa 26.0.0 final version * Since Mesa 25.3, RADV has seen significant raytracing performance improvements. * Its `RADV_DEBUG` environment variable has removed the following deprecated options: invariantgeom, nodynamicbounds, nongg_gs and splitfma. Use the driconf variables radv_invariant_geom, radv_no_dynamic_bounds, radv_disable_ngg_gs, and radv_split_fma instead. * RadeonSI switched to ACO by default for better and faster ISA code generation and better GPU performance and better compile times. * This release also introduces KosmicKrisp, a Vulkan to Metal layered driver for macOS. * Users can expect the usual flurry of improvements across all drivers and components, - supersedes u_ppc64le-fix.patch - u_ppc64le-fix.patch: fixes build on pp64le ==== apparmor ==== Version update (4.1.3 -> 4.1.6) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - update to AppArmor 4.1.6 - various bugfixes - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4 https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6 for the detailed upstream changelogs - update %files for new python LibAppArmor location - refresh kerberosclient-usrmerge.diff ==== desktop-data-openSUSE ==== - Drop update-desktop-files usage (jsc#PED-15198). ==== gimp ==== Subpackages: gimp-plugin-aa gimp-plugin-python3 libgimp-3_0-0 libgimpui-3_0-0 - Add gimp-CVE-2026-2239.patch: fix a heap buffer overflow in psd-util.c (bsc#1257959 CVE-2026-2239 glgo#GNOME/gimp#15812). ==== glycin-loaders ==== Version update (2.0.7 -> 2.0.8) - Update to version 2.0.8: + This release contains the following new component versions: - glycin 3.0.8 - libglycin 2.0.8 - libglycin-gtk4 2.0.8 + Fixed: - Allow fchmodat since it seems to be needed on aarch64/apple silicon at times. - Output log messages to stderr instead of stdout. - Require zvariant 5.9.2 to fix SIGPIPE emissions. + Changed: - Allow time syscall for `rr record`. - Disable sandbox on "bwrap: setting up uid map: Permission denied" error. This error appeared when starting LibreOffice under Debian. ==== libapparmor ==== Version update (4.1.3 -> 4.1.6) - update to AppArmor 4.1.6 - various bugfixes - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4 https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6 for the detailed upstream changelogs - update %files for new python LibAppArmor location - refresh kerberosclient-usrmerge.diff ==== libglycin ==== Version update (2.0.7 -> 2.0.8) - Update to version 2.0.8: + This release contains the following new component versions: - glycin 3.0.8 - libglycin 2.0.8 - libglycin-gtk4 2.0.8 + Fixed: - Allow fchmodat since it seems to be needed on aarch64/apple silicon at times. - Output log messages to stderr instead of stdout. - Require zvariant 5.9.2 to fix SIGPIPE emissions. + Changed: - Allow time syscall for `rr record`. - Disable sandbox on "bwrap: setting up uid map: Permission denied" error. This error appeared when starting LibreOffice under Debian. ==== openSUSE-release ==== Version update (20260212 -> 20260213) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== osinfo-db ==== - jsc#PED-14636 - UEFI as default for new VMs Add-optional-recommended-attribute-to-firmware.patch add-sles16-support.patch add-sles16.1-support.patch ==== polkit-default-privs ==== Version update (1550+20260122.bb2b3c5 -> 1550+20260212.d84c6be) - Update to version 1550+20260212.d84c6be: * profiles: systemd v258.4 ask-password (bsc#1257943) * add GDM manage-user-displays action (bsc#1258025) * build(deps): bump actions/checkout from 6.0.1 to 6.0.2 ==== postfix ==== ==== postgresql18 ==== Version update (18.1 -> 18.2) Subpackages: libpq5 postgresql18-contrib postgresql18-llvmjit postgresql18-server - Update to 18.2: * https://www.postgresql.org/about/news/p-3235/ * https://www.postgresql.org/docs/release/18.2/ * bsc#1258008, CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector * bsc#1258009, CVE-2026-2004: Harden selectivity estimators against being attached to operators that accept unexpected data types. * bsc#1258010, CVE-2026-2005: Fix buffer overrun in contrib/pgcrypto's PGP decryption functions. * bsc#1258011, CVE-2026-2006: Fix inadequate validation of multibyte character lengths. * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against changes in string lowercasing behavior. * obsoletes llvm-21-aarch64.patch - Disown /var/lib/pgsql to support transactional updates. ==== python-Pillow ==== Version update (12.1.0 -> 12.1.1) - Update to 12.1.1 (fixes CVE-2026-25990, bsc#1258125) * Patch libavif for svt-av1 4.0 compatibility #9413 [@hugovk] * Fix OOB Write with invalid tile extents #9427 [@radarhere] ==== tuned ==== Version update (v2.26.1+git.d6ff925 -> 2.26.1+git.d6ff925) - Fix version by reverting "v" prefix which unintentionally slipped in on last commit ==== webkit2gtk3 ==== Version update (2.50.4 -> 2.50.5) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.50.5: + Fix several crashes and rendering issues. - Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream. ==== webkit2gtk4 ==== Version update (2.50.4 -> 2.50.5) Subpackages: WebKitGTK-6.0-lang libjavascriptcoregtk-6_0-1 libwebkitgtk-6_0-4 typelib-1_0-JavaScriptCore-6_0 typelib-1_0-WebKit-6_0 webkitgtk-6_0-injected-bundles - Update to version 2.50.5: + Fix several crashes and rendering issues. - Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.