Packages changed: colord (1.4.6 -> 1.4.8) cryptsetup (2.8.0 -> 2.8.1) kernel-source (6.16.1 -> 6.16.3) kmod === Details === ==== colord ==== Version update (1.4.6 -> 1.4.8) - Update to version 1.4.8: + New Features: - Add AppStream metainfo XML with hardware provide info. - Add support for -Dsystemd_root_prefix to make local building easier. - Install sysusers.d config file if configured user is not root. + Bugfixes: - Add the source attribute for each man page. - Drop component type from AppStream metadata XML to avoid parsing error. - Fix a critical warning when running the self tests. - Fix USB scanners not working with RestrictAddressFamilies. - Fix writing to the database with ProtectSystem=strict. - Properly set the status to CD_SESSION_STATUS_RUNNING. - Use g_ascii_strtod instead of atof(). - Use sqlite3_errmsg() to avoid getting a mutable error message. - Changes from version 1.4.7: + Bugfixes: - Add various hardenings to the systemd service. - Always close the ICC profile when loading fails. - Avoid destructing LCMS plugin twice with lcms 2.14. - Do not make state files executable in tmpfiles.d/colord.conf. - Fix a double free spotted by Coverity. - Fix an error check when parsing the DTP94 data. - Fix a -Wincompatible-pointer-types warning. - Fix potential crash when reading from broken Huey hardware. - Set FILE_OFFSET_BITS explicitly. - Use a 64-bit time_t. - Use thread context for Gamut Alarm codes. - Drop colord-CVE-2021-42523.patch and harden_colord.service.patch: fixed upstream. ==== cryptsetup ==== Version update (2.8.0 -> 2.8.1) Subpackages: libcryptsetup12 - Update to 2.8.1: * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers. * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase. * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher). - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it. - Null cipher is sometimes used to create an empty container for later reencryption. - Only an empty passphrase can activate such a container (the same as in LUKS1). * Do not silently decrease PBKDF parallel cost (threads) if set by an option. - The maximum parallel cost is limited to 4 threads. * Fixes to configuration and installation scripts. - Meson and autoconf tools now properly support --prefix option for temporary directory installation. - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf. - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf. - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release. * Major update to manual pages. - Try to explain the PBKDF hardcoded limits. - Add a better explanation for automatic integrity tag recalculation. - Mention crypt/verity/integritytab. - Remove or reformulate some misleading warnings present only with old and no longer supported kernels. - Clarify that some commands do not wipe data and unify OPAL reset wording. - Clarify the --label option. - There are also many other grammar and stylistic fixes to unify the man-page style. * Fixes for false-positive and annoying (optional) warnings added in recent compilers. ==== kernel-source ==== Version update (6.16.1 -> 6.16.3) - Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel" This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b. See: https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20 and earlier. - commit b954ff4 - Linux 6.16.3 (bsc#1012628). - ext4: replace ext4_writepage_trans_blocks() (bsc#1012628). - ext4: reserved credits for one extent during the folio writeback (bsc#1012628). - ext4: correct the reserved credits for extent conversion (bsc#1012628). - ext4: enhance tracepoints during the folios writeback (bsc#1012628). - ext4: restart handle if credits are insufficient during allocating blocks (bsc#1012628). - ext4: refactor the block allocation process of ext4_page_mkwrite() (bsc#1012628). - ext4: fix stale data if it bail out of the extents mapping loop (bsc#1012628). - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (bsc#1012628). - ext4: process folios writeback in bytes (bsc#1012628). - commit a0f1db3 - ixgbe: prevent from unwanted interface name changes (). - devlink: let driver opt out of automatic phys_port_name generation (). - commit 4419082 - Linux 6.16.2 (bsc#1012628). - io_uring: don't use int for ABI (bsc#1012628). - io_uring: export io_[un]account_mem (bsc#1012628). - io_uring/zcrx: account area memory (bsc#1012628). - io_uring/memmap: cast nr_pages to size_t before shifting (bsc#1012628). - io_uring/net: commit partial buffers on retry (bsc#1012628). - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (bsc#1012628). - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (bsc#1012628). - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628). - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (bsc#1012628). - smb3: fix for slab out of bounds on mount to ksmbd (bsc#1012628). - smb: client: remove redundant lstrp update in negotiate protocol (bsc#1012628). - gpio: virtio: Fix config space reading (bsc#1012628). - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (bsc#1012628). - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW (bsc#1012628). - gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628). - Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628). - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (bsc#1012628). - gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628). - leds: flash: leds-qcom-flash: Fix registry access after re-bind (bsc#1012628). - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (bsc#1012628). - netlink: avoid infinite retry looping in netlink_unicast() (bsc#1012628). - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628). - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (bsc#1012628). - net: gianfar: fix device leak when querying time stamp info (bsc#1012628). - net: enetc: fix device and OF node leak at probe (bsc#1012628). - net: mtk_eth_soc: fix device leak at probe (bsc#1012628). - net: ti: icss-iep: fix device and OF node leaks at probe (bsc#1012628). - net: dpaa: fix device leak when querying time stamp info (bsc#1012628). - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (bsc#1012628). - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (bsc#1012628). - fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628). - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (bsc#1012628). - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (bsc#1012628). - NFS: Fix the setting of capabilities when automounting a new filesystem (bsc#1012628). - PCI: Extend isolated function probing to LoongArch (bsc#1012628). - LoongArch: BPF: Fix jump offset calculation in tailcall (bsc#1012628). - LoongArch: Don't use %pK through printk() in unwinder (bsc#1012628). - LoongArch: Make relocate_new_kernel_size be a .quad value (bsc#1012628). - LoongArch: Avoid in-place string operation on FDT content (bsc#1012628). - LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628). - sunvdc: Balance device refcount in vdc_port_mpgroup_check (bsc#1012628). - clk: samsung: exynos850: fix a comment (bsc#1012628). ... changelog too long, skipping 916 lines ... - commit f9359c1 ==== kmod ==== Subpackages: libkmod2 - kmod-testsuite * BuildIgnore pesign-obs-integration (new runtime requirement of kernel-default-devel): we don't need it for the kmod testsuite, and it also breaks the build as we aren't producting any binaries. (bsc#1248108)