Packages changed: MicroOS-release (20260829 -> 20260830) kernel-source (7.2.0 -> 7.2.2) llvm22 orc (0.4.42 -> 0.4.43) patterns-base === Details === ==== MicroOS-release ==== Version update (20260829 -> 20260830) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== kernel-source ==== Version update (7.2.0 -> 7.2.2) - Linux 7.2.2 (bsc#1012628). - inet: frags: strip GSO state from fragments before reassembly (bsc#1012628 CVE-2026-80590). - commit 820247d - Linux 7.2.1 (bsc#1012628). - ptp: vmclock: prevent read-only mappings from becoming writable (bsc#1012628). - futex: Fix might_sleep() warning in futex_pivot_pending() (bsc#1012628). - Bluetooth: hci_aml: validate firmware segment lengths (bsc#1012628). - Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 (bsc#1012628). - Bluetooth: ISO: zero the sockaddr before returning it in getname (bsc#1012628). - Bluetooth: ISO: do not force BT_LISTEN after a failed BIG sync (bsc#1012628). - Bluetooth: hci_sync: Fix accept list UAF during suspend (bsc#1012628). - Bluetooth: hci_event: validate LE Set CIG Parameters response (bsc#1012628). - Bluetooth: hci_event: fix LE list UAF on reset (bsc#1012628). - HID: input: read battery capacity from its actual report offset (bsc#1012628). - HID: hyperv: validate initial device info bounds (bsc#1012628). - HID: uclogic: fix use-after-free of inrange_timer on remove (bsc#1012628). - HID: sensor: custom: Fix use-after-free in enable_sensor (bsc#1012628). - HID: ft260: fix stack-use-after-return write in I2C read race (bsc#1012628). - HID: core: fix number/pointer type confusion on long items (bsc#1012628). - HID: rapoo: fix missing hid_is_usb() check (bsc#1012628). - HID: nintendo: stop device IO before hid_hw_stop on probe failure (bsc#1012628). - HID: nintendo: register input device after capabilities are set (bsc#1012628). - HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() (bsc#1012628). - HID: huawei: fix missing hid_is_usb() check (bsc#1012628). - HID: asus: fix missing hid_is_usb() check (bsc#1012628). - net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1012628). - HID: pidff: fix OOB write when hid->inputs is empty (bsc#1012628). - HID: core: fix OOB read of field->usage in hid_set_field() (bsc#1012628). - HID: magicmouse: do not keep a stale msc->input if no input is claimed (bsc#1012628). - HID: magicmouse: re-enable multitouch after reset-resume (bsc#1012628). - HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() (bsc#1012628). - HID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-C (bsc#1012628). - nvmet: pci-epf: put CQ ref on create_cq mapping failure (bsc#1012628). - nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work() (bsc#1012628). - nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations (bsc#1012628). - nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1012628). - nvmet-fc: fix invalid free in LS IOD error path (bsc#1012628). - nvmet-auth: zero the AUTH_RECEIVE response buffer (bsc#1012628). - dmaengine: fsl-edma: Add error handling for devm_kasprintf (bsc#1012628). - mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() (bsc#1012628). - ipv6: fix use-after-free in ip6_finish_output2() (bsc#1012628). - ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1012628). - nfc: nci: free destination parameters when closing a connection (bsc#1012628). - nfc: nci: fix uninit-value in the RF discover/activated NTF handlers (bsc#1012628). - nfc: nci: fix out-of-bounds write in nci_target_auto_activated() (bsc#1012628). - nfc: nci: add data_len bound checks to activation parameter extractors (bsc#1012628). - nfc: st21nfca: validate ATR_REQ length against the received frame (bsc#1012628). - nfc: pn533: purge fragmented skbs during cleanup (bsc#1012628). - nfc: llcp: reject PDUs shorter than the LLCP header (bsc#1012628). - nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1012628). - nfc: llcp: bound the connect_sn TLV walk to the skb (bsc#1012628). - nfc: microread: validate target discovery payload lengths (bsc#1012628). - nfc: fdp: bound the device-reported read length and fix an skb leak (bsc#1012628). - nfc: digital: clamp SENSF_RES length to the destination buffer (bsc#1012628). - xfs: restore nofs context unconditionally in xfs_trans_roll (bsc#1012628). - xfs: validate attr entry pointer before field access (bsc#1012628). ... changelog too long, skipping 75 lines ... - commit 1f86c97 ==== llvm22 ==== - Add llvm-deterministic-loopunroll.patch for reproducible builds. ==== orc ==== Version update (0.4.42 -> 0.4.43) - Update to version 0.4.43: + Add AVX512 support + neon: - add divluw rule (used in GStreamer's compositor, videomixer, gaudieffects and alpha-blending code paths) - add mulslq, mululq rules, shlq, shrsq, shruq (used in GStreamer's audio processing element) + orccodemem: Invalidate code chunks when recycling for QEMU + orcprogram-c: Allow negative constants + arm, neon: Split ARM and NEON logic into 32-bit and 64-bit + RISC-V: many fixes and enhancements, including some new rules + LoongArch: various fixes and enhancements + OpenBSD/FreeBSD improvements + Miscellaneous fixes ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-hardware patterns-base-minimal_base patterns-base-x11 - immutable_base: install transactional-wrapper by default on SLE (jsc#PED-15607)