Packages changed: aws-lc (5.0.0 -> 5.4.0) evince gcc16 (16.1.1+git8886 -> 16.1.1+git9423) kernel-source (7.1.4 -> 7.1.5) openSUSE-release (20260729 -> 20260731) openblas_openmp openblas_pthreads === Details === ==== aws-lc ==== Version update (5.0.0 -> 5.4.0) - Update to version 5.4.0: + Add AArch64 NEON runtime fallback for ML-KEM and ML-DSA + Support for EVP_AEAD_CTX_copy + Remove dead P-256 nistz asm under OPENSSL_SMALL and extend the size-check harness + Use built-in Camellia in krb5 integration patch; fix CTS doc label + add AES-KWP wrap/unwrap CASTs - Update to version 5.3.0: + Add ACVP support for multi-expansion HKDF - Update to version 5.2.0: + OPENSSL_SMALL: imply MY_ASSEMBLER_IS_TOO_OLD_FOR_512AVX on x86_64 + Documented and added feature stability tests for EVP_AEAD implementations that support concurrency through EVP_AEAD_CTX_seal/gather functions + Fix libgit2, xtrabackup, grpc tests and add OSSL3 peer cert APIs + Null-guard EVP_AEAD_CTX_cleanup for fork+shm safety + Add Symbol Versioning Support + Symbol versioning follow-ups: register peer cert APIs, fix dist_pkg_tests matrix + Add ML-KEM decapsulate CASTs to break-kat tooling + Pin required libssh2 integration to a release + openssl/target.h: Allow building for the e2k architecture + Add CTS mode, krb5 integration test + Gate s2n-bignum _alt variants under OPENSSL_SMALL + Fix SSL_OP_IGNORE_UNEXPECTED_EOF being ignored over sockets - Update to version 5.1.0: + Quote LIBCRYPTO_PATH for dynamic load test + Add SSL_CTX_set_security_callback and related APIs for OpenSSL compat + ML-DSA: import and enable x86_64 assembly backend from mldsa-native + Fix PostgreSQL integration: match upstream revoked-cert alert regex + Support SSL_OP_IGNORE_UNEXPECTED_EOF option + Stabilize libgit2 integration test + Fix SSL_CTX_add_extra_chain_cert slot routing for chains added before the leaf + Make OPENSSL_memcmp constant time + Add WASIp2 build and test support + Move TLS 1.3 KDF into the FIPS module and wire up ACVP + Define OPENSSL_INIT_NO_ATEXIT as a no-op + ML-DSA: import and enable aarch64 assembly backend from mldsa-native + Add 'version -fips' to surface FIPS module version in openssl tool + Concurrency is not generally supported for EVP_AEAD_CTX_foo functions ==== evince ==== Subpackages: evince-lang evince-plugin-pdfdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Add evince-CVE-2026-63729.patch: Fix use-after-free in synctex_parser.c from TeX Live (bsc#1272433). ==== gcc16 ==== Version update (16.1.1+git8886 -> 16.1.1+git9423) Subpackages: cpp16 gcc16-locale libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to gcc-16.1.1+git9423 - Build a full cross-x86_64 compiler [bsc#1272616], but not on %ix86 - Update gcc15-Wtime_t-conversion.patch - Make build recipe compatible with POSIX sh - do not pass in -fhardened ==== kernel-source ==== Version update (7.1.4 -> 7.1.5) - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect (git-fixes). - commit 862e13e - Linux 7.1.5 (bsc#1012628). - crypto: algif_skcipher - force synchronous processing (bsc#1012628). - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (bsc#1012628). - crypto: sun4i-ss - Remove insecure and unused rng_alg (bsc#1012628). - media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work (bsc#1012628). - ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (bsc#1012628). - ALSA: hda: conexant: Remove mic bias threshold override (bsc#1012628). - ALSA: hda: Fix cached processing coefficient verbs (bsc#1012628). - ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 (bsc#1012628). - media: uvcvideo: Use hw timestaming if the clock buffer is full (bsc#1012628). - media: uvcvideo: Avoid partial metadata buffers (bsc#1012628). - media: uvcvideo: Fix buffer sequence in frame gaps (bsc#1012628). - media: uvcvideo: Fix dev_sof filtering in hw timestamp (bsc#1012628). - media: uvcvideo: Do not add clock samples with small sof delta (bsc#1012628). - media: uvcvideo: Relax the constrains for interpolating the hw clock (bsc#1012628). - media: uvcvideo: Fix sequence number when no EOF (bsc#1012628). - dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties (bsc#1012628). - dt-bindings: power: imx93: Add MIPI PHY power domain (bsc#1012628). - serial: msm: Disable DMA for kernel console UART (bsc#1012628). - serial: max310x: implement gpio_chip::get_direction() (bsc#1012628). - serial: 8250_omap: clear rx_running on zero-length DMA completes (bsc#1012628). - rxrpc: serialize kernel accept preallocation with socket teardown (bsc#1012628). - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (bsc#1012628). - rxrpc: Don't move a peeked OOB message onto the pending queue (bsc#1012628). - rxrpc: Fix UAF in rxgk_issue_challenge() (bsc#1012628). - rxrpc: Fix socket notification race (bsc#1012628). - rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) (bsc#1012628). - rxrpc: Fix potential infinite loop in rxrpc_recvmsg() (bsc#1012628). - rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something to rotate (bsc#1012628). - rxrpc: Fix oob challenge leak in cleanup after notification failure (bsc#1012628). - rxrpc: Fix ACKALL packet handling (bsc#1012628). - rxrpc: Fix the reception of a reply packet before data transmission (bsc#1012628). - rxrpc: Fix leak of connection from OOB challenge (bsc#1012628). - rxrpc: Fix double unlock in rxrpc_recvmsg() (bsc#1012628). - afs: Fix netns teardown to cancel the preallocation charger (bsc#1012628). - afs: fix NULL pointer dereference in afs_get_tree() (bsc#1012628). - afs: handle CB.InitCallBackState3 requests without a server record (bsc#1012628). - afs: Fix further netns teardown to cancel the preallocation charger (bsc#1012628). - afs: Fix uncancelled rxrpc OOB message handler (bsc#1012628). - fbcon: fix NULL pointer dereference for a console without vc_data (bsc#1012628). - fbcon: Use correct type for vc_resize() return value (bsc#1012628). - soc: fsl: qe_ports_ic: Add missing cleanup on device removal (bsc#1012628). - openrisc: mm: Fix section mismatch between map_page and __set_fixmap (bsc#1012628). - clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() (bsc#1012628). - accel/amdxdna: Fix leak when pinning ubuf pages (bsc#1012628). - drm/rockchip: inno-hdmi: Switch to drmm_kzalloc() (bsc#1012628). - drm/rockchip: dw_dp: Switch to drmm_kzalloc() (bsc#1012628). - drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() (bsc#1012628). - drm/rockchip: Test for imported buffers with drm_gem_is_imported() (bsc#1012628). - drm/tidss: Drop extra drm_mode_config_reset() call (bsc#1012628). - drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges (bsc#1012628). - accel/amdxdna: Create shared functions for AIE2 and AIE4 (bsc#1012628). - accel/amdxdna: Adjust size for copy_to_user() (bsc#1012628). - accel/amdxdna: Handle DETACH_DEBUG_BO through config_debug_bo path (bsc#1012628). - accel/amdxdna: Fix iommu_map_sgtable() return value handling (bsc#1012628). ... changelog too long, skipping 3694 lines ... - commit 5c9ff0f ==== openSUSE-release ==== Version update (20260729 -> 20260731) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openblas_openmp ==== Subpackages: compatlibopenblas_openmp0 libopenblas_openmp0 - Keep building the devel libraries on the "serial" flavour with alternatives enabled, as they can be installed in parallel and there is the flexiblas integration interwined with them - Build the devel libraries on the same flavour set as default for the building architecture (pthreads in x86_64, openmp elsewhere) - On systems built without alternatives mode, ensure the various libopenblas_FLAVOUR packages conflict with each other. ==== openblas_pthreads ==== Subpackages: compatlibopenblas_pthreads0 libopenblas_pthreads0 - Keep building the devel libraries on the "serial" flavour with alternatives enabled, as they can be installed in parallel and there is the flexiblas integration interwined with them - Build the devel libraries on the same flavour set as default for the building architecture (pthreads in x86_64, openmp elsewhere) - On systems built without alternatives mode, ensure the various libopenblas_FLAVOUR packages conflict with each other.