Packages changed:
  giflib
  libzypp (17.38.2 -> 17.38.4)
  llvm21
  openSUSE-release (20260311 -> 20260312)
  openexr
  pam
  pam-full-src
  python-gobject (3.56.0 -> 3.56.1)
  sdbootutil (1+git20260303.90d816d -> 1+git20260311.73a155b)
  sg3_utils (1.48+9.ecc03bb -> 1.48+13.54da4276)
  zypper (1.14.94 -> 1.14.95)

=== Details ===

==== giflib ====

- Added patch:
  * 0001-Avoid-potentuial-double-free-on-weird-images.patch
    + fixing bsc#1259502 (CVE-2026-23868): double-free result of a
    shallow copy can lead to memory corruption

==== libzypp ====
Version update (17.38.2 -> 17.38.4)

- Fix Product::referencePackage lookup (bsc#1259311)
  Use a provided autoproduct() as hint to the package name of the
  release package. It might be that not just multiple versions of
  the same release package provide the same product version, but
  also different release packages.
- version 17.38.4 (35)
- specfile: on fedora use %{_prefix}/share as zyppconfdir if
  %{_distconfdir} is undefined (fixes #693)
  This will set '-DZYPPCONFDIR=%{zyppconfdir}' for cmake.
- Fall back to a writable location when precaching packages
  without root (bsc#1247948)
- version 17.38.3 (35)

==== llvm21 ====

- Exclude bolt from update-alternatives: the runtime libraries are
  unversioned, so multiple versions of the package cannot coexist.

==== openSUSE-release ====
Version update (20260311 -> 20260312)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== openexr ====
Subpackages: libIex-3_4-33 libIex-3_4-33-x86-64-v3 libIlmThread-3_4-33 libIlmThread-3_4-33-x86-64-v3 libOpenEXR-3_4-33 libOpenEXR-3_4-33-x86-64-v3 libOpenEXRCore-3_4-33 libOpenEXRCore-3_4-33-x86-64-v3

- added patches
  fix build with glibc 2.43 [bsc#1258747]
  * openexr-glibc-2.43.patch

==== pam ====
Subpackages: pam-32bit

- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]

==== pam-full-src ====
Subpackages: pam-extra pam-manpages

- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]

==== python-gobject ====
Version update (3.56.0 -> 3.56.1)
Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo python313-gobject python313-gobject-Gdk python313-gobject-cairo

- Update to version 3.56.1:
  + Fix `do_dispose` for floating objects
  + Updates and fixes for Windows documentation

==== sdbootutil ====
Version update (1+git20260303.90d816d -> 1+git20260311.73a155b)
Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper

- Update to version 1+git20260311.73a155b:
  * Add ESP_FREE_SPACE config option
  * Merge both 710 components for grub2-bls
  * Allow partial unenrollment
  * Drop pcr-oracle
  * Edit crypttab options only for tracked devices
  * Fix bootloader PCR measurements for portable installations
  * Fix PCR predictions for grub2-bls without shim

==== sg3_utils ====
Version update (1.48+9.ecc03bb -> 1.48+13.54da4276)
Subpackages: libsgutils2-1_48-2

- Update to version 1.48+13.54da4276:
  * Merge SLFO:Main code into factory ('ours' strategy, no code changes)
- Update to version 1.48+11.e034865b:
  * rescan-scsi-bus.sh: Fix invocation of udevadm (boo#1258664)

==== zypper ====
Version update (1.14.94 -> 1.14.95)
Subpackages: zypper-log zypper-needs-restarting

- Report download progress for command line rpms (fixes #613)
- Hint to '-vv ref' to see the mirrors used to download the
  metadata (bsc#1257882)
- Service: Allow "zypper ls SERVICE ..." to test whether a
  service with this alias is defined (bsc#1252744)
  The command prints an abstract of all services passed on the
  command line. It returns 3-ZYPPER_EXIT_ERR_INVALID_ARGS if some
  argument does not name an existing service.
- Keep repo data when updating the service settings (bsc#1252744)
- info: Enhance pattern content table (bsc#1158038)
  Alternatives (multiple packages providing the same requirement)
  are now listed as a single entry in the content table. The entry
  shows either the installed package which satisfies the
  requirement or the requirement itself as type 'Provides'.
  Listing all potential alternatives was miss leading, especially
  if the alternatives were mutual exclusive. It looked like an
  installed pattern had not-installed requirements and it was not
  possible to install all requirements at the same time.
- version 1.14.95