Packages changed: MozillaFirefox (134.0.2 -> 135.0) findutils gstreamer (1.24.11 -> 1.24.12) gstreamer-plugins-bad (1.24.11 -> 1.24.12) gstreamer-plugins-base (1.24.11 -> 1.24.12) gstreamer-plugins-good (1.24.11 -> 1.24.12) gstreamer-plugins-libav (1.24.11 -> 1.24.12) gstreamer-plugins-ugly (1.24.11 -> 1.24.12) nautilus (47.1 -> 47.2) ncurses (6.5.20250118 -> 6.5.20250201) openSUSE-release (20250204 -> 20250205) python-hpack (4.0.0 -> 4.1.0) rpm tigervnc util-linux util-linux-systemd webrtc-audio-processing-1 === Details === ==== MozillaFirefox ==== Version update (134.0.2 -> 135.0) Subpackages: MozillaFirefox-branding-upstream MozillaFirefox-translations-common - Mozilla Firefox 135.0 https://www.mozilla.org/en-US/firefox/135.0/releasenotes MFSA 2025-07 (bsc#1236539) * CVE-2025-1009 (bmo#1936613) Use-after-free in XSLT * CVE-2025-1010 (bmo#1936982) Use-after-free in Custom Highlight * CVE-2025-1018 (bmo#1910818) Fullscreen notification is not displayed when fullscreen is re-requested * CVE-2025-1011 (bmo#1936454) A bug in WebAssembly code generation could result in a crash * CVE-2025-1012 (bmo#1939710) Use-after-free during concurrent delazification * CVE-2025-1019 (bmo#1940162) Fullscreen notification not properly displayed * CVE-2025-1013 (bmo#1932555) Potential opening of private browsing tabs in normal browsing windows * CVE-2025-1014 (bmo#1940804) Certificate length was not properly checked * CVE-2025-1016 (bmo#1936601, bmo#1936844, bmo#1937694, bmo#1938469, bmo#1939583, bmo#1940994) Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 * CVE-2025-1017 (bmo#1926256, bmo#1935471, bmo#1935984) Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 * CVE-2025-1020 (bmo#1939063, bmo#1942169) Memory safety bugs fixed in Firefox 135 and Thunderbird 135 - requires rust 1.83 ==== findutils ==== Subpackages: findutils-lang - do not crash when file system loop was encountered [bsc#1231472] - added patches fix https://git.savannah.gnu.org/cgit/findutils.git/commit/?id=e5d6eb919b9 + findutils-avoid-crash-system-loop.patch - modified patches % findutils-xautofs.patch (p1) ==== gstreamer ==== Version update (1.24.11 -> 1.24.12) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.24.12: + Highlighted bugfixes: - d3d12: Fix shaders failing to compile with newer dxc versions - decklinkvideosink: Fix handling of caps framerate in auto mode; also a decklinkaudiosink fix - devicemonitor: Fix potential crash macOS when a device is unplugged - gst-libav: Fix crash in audio encoders like avenc_ac3 if input data has insufficient alignment - gst-libav: Fix build against FFmpeg 4.2 as in Ubuntu 20.04 - gst-editing-services: Fix Python library name fetching on Windows - netclientclock: Don't store failed internal clocks in the cache, so applications can re-try later - oggdemux: Seeking and duration fixes - osxaudiosrc: Fixes for failing init/no output on recent iOS versions - qtdemux: Use mvhd transform matrix and support for flipping - rtpvp9pay: Fix profile parsing - splitmuxsrc: Fix use with decodebin3 which would occasionally fail with an assertion when seeking - tsdemux: Fix backwards PTS wraparound detection with ignore-pcr=true - video-overlay-composition: Declare the video/size/orientation tags for the meta and implement scale transformations - vtdec: Fix seeks occasionally hanging on macOS due to a race condition when draining - webrtc: Fix duplicate payload types with RTX and multiple video codecs - win32-pluginoader: Make sure not to create any windows when inspecting plugins - wpe: Various fixes for re-negotiation, latency reporting, progress messages on startup - x264enc: Add missing data to AvcDecoderConfigurationRecord in codec_data for high profile variants - cerbero: Support using ccache with cmake if enabled - Various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements + gstreamer: - device: Fix racy nullptr deref on macOS when a device is unplugged - iterator: Added error handling to filtered iterators - netclientclock: Don't ever store failed internal clocks in the cache - netclock-replay: use gst_c_args when building, fixing build failure on Solaris - pluginloader-win32: create no window - pluginloader-win32: fix use after free in find_helper_bin_location - sparsefile: ensure error is set when read_buffer() returns 0 - basetransform: fix incorrect logging inside gst_base_transform_query_caps ==== gstreamer-plugins-bad ==== Version update (1.24.11 -> 1.24.12) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.24.12: + decklinkvideosink: - Fix handling of caps framerate in auto mode - Don't crash if started without corresponding video sink + d3d12: Fix shaders failing to compile with newer dxc versions + tsdemux: Fix backwards PTS wraparound detection with ignore-pcr=true + vtdec: - fix seeks hangs due to a race condition draining - seeks freeze the pipeline + wayland: Print table split when DMABuf format changes + webrtc: fix duplicate payload types with RTX and multiple video codecs + wpevideosrc: Clear cached SHM buffers after caps re-negotiation + wpe: - Report latency and start-up progress messages - Remove glFlush() when filling buffer + Fix build with gtk3 but not wayland + Various fixes found from adding extra warning flags ==== gstreamer-plugins-base ==== Version update (1.24.11 -> 1.24.12) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.24.12: + oggdemux: fixes seeking in some cases by not overwriting a valid duration with CLOCK_TIME_NONE + video-overlay-composition: Declare the video/size/orientation tags for the meta & implement scale transformation + Various fixes found from adding extra warning flags ==== gstreamer-plugins-good ==== Version update (1.24.11 -> 1.24.12) Subpackages: gstreamer-plugins-good-gtk gstreamer-plugins-good-lang - Update to version 1.24.12: + osxaudiosrc: Fixes for failing init/no output on recent iOS versions + qtdemux: Use mvhd transform matrix and support for flipping + qtmux: fix critical warnings on negotiation error + rtpvp9pay: fix profile parsing + splitmuxsrc: - Ensure only a single stream-start event is pushed - decodebin3 Fails with assertion in mq_slot_handle_stream_start when seeking + Various fixes found from adding extra warning flags ==== gstreamer-plugins-libav ==== Version update (1.24.11 -> 1.24.12) - Update to version 1.24.12: + avaudenc: fix crash in avenc_ac3 if input buffers are insufficiently aligned + avcodecmap: Only use new channel positions when compiling against new enough ffmpeg + gst-libav: 1.24.11: Fails to build with minimum supported ffmpeg version ==== gstreamer-plugins-ugly ==== Version update (1.24.11 -> 1.24.12) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.24.12: + x264enc: add missing data to AvcDecoderConfigurationRecord, and switch to GstByteWriter ==== nautilus ==== Version update (47.1 -> 47.2) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 47.2: + Enhancements: - Adopt CI release workflow - Speed up batch file deletions - Speed up simple recursive search through mount monitors + Bugfixes: - Fix thumbnails for changed files - Fix parent path URIs for remote path - Fix potential crashes in directory callbacks + Updated translations. ==== ncurses ==== Version update (6.5.20250118 -> 6.5.20250201) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20250201 + add to the possible headers declaring the C++ std::bad_alloc (report by Carl Hansen). + modify check for stdbool.h to be more conservative in case the headers are used with a compiler other than that which was used to configure (Redhat #2342514). + improve MKlib_gen.sh handling of "bool" type, for building link_test + improve formatting/style of manpages (patches by Branden Robinson). - Add ncurses patch 20250125 + improve error-handling in c++ binding (report by Mingjie Shen). + strict compiler-warning fixes for upcoming gcc15 - Install missed ticw.pc - Update README.devel ==== openSUSE-release ==== Version update (20250204 -> 20250205) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-hpack ==== Version update (4.0.0 -> 4.1.0) - Update to 4.1.0 * API Changes (Backward Incompatible)** - Support for Python 3.6 has been removed. - Support for Python 3.7 has been removed. - Support for Python 3.8 has been removed. - Renamed `InvalidTableIndex` exception to `InvalidTableIndexError`. * API Changes (Backward Compatible)** - Support for Python 3.9 has been added. - Support for Python 3.10 has been added. - Support for Python 3.11 has been added. - Support for Python 3.12 has been added. - Support for Python 3.13 has been added. - Optimized bytes encoding of headers. - Updated packaging and testing infrastructure. - Code cleanup and linting. - Added type hints. - Refresh healthcheck.patch - Refresh test_fixtures.tar.xz - Switch build system from setuptools to pyproject.toml * Add python-pip and python-wheel to BuildRequires * Replace %python_build with %pyproject_wheel * Replace %python_install with %pyproject_install * Update name for dist directory in %files section ==== rpm ==== Subpackages: librpmbuild10 - allow to have the primary binding signature in the unhashed area * updated rpmpgp_legacy-1.0.tar.gz to rpmpgp_legacy-1.1.tar.gz ==== tigervnc ==== Subpackages: libXvnc1 tigervnc-selinux xorg-x11-Xvnc xorg-x11-Xvnc-module - Only add selinux on %suse_version >= 1600 ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Create and own directories /etc/blkid.conf.d and /usr/etc/blkid.conf.d (boo#1235887#c3). - Add missingok for /etc/blkid.conf. ==== util-linux-systemd ==== Subpackages: lastlog2 liblastlog2-2 - Create and own directories /etc/blkid.conf.d and /usr/etc/blkid.conf.d (boo#1235887#c3). - Add missingok for /etc/blkid.conf. ==== webrtc-audio-processing-1 ==== - Fix package name in spec file to include the -1 - Rename package to webrtc-audio-processing-1 to use the unversioned package name for webrtc-audio-processing 2.1