Packages changed: Mesa (26.1.3 -> 26.1.4) Mesa-drivers (26.1.3 -> 26.1.4) NetworkManager SDL3 (3.4.10 -> 3.4.12) akonadi (26.04.2 -> 26.04.3) akonadi-calendar (26.04.2 -> 26.04.3) akonadi-calendar-tools (26.04.2 -> 26.04.3) akonadi-contacts (26.04.2 -> 26.04.3) akonadi-import-wizard (26.04.2 -> 26.04.3) akonadi-mime (26.04.2 -> 26.04.3) akonadi-search (26.04.2 -> 26.04.3) akregator (26.04.2 -> 26.04.3) analitza (26.04.2 -> 26.04.3) apr ark (26.04.2 -> 26.04.3) at-spi2-core (2.60.4 -> 2.60.5) attr (2.5.2 -> 2.6.0) aurorae6 (6.7.1 -> 6.7.2) baloo-widgets (26.04.2 -> 26.04.3) blinken (26.04.2 -> 26.04.3) blog (2.42 -> 2.45) bluedevil6 (6.7.1 -> 6.7.2) breeze6 (6.7.1 -> 6.7.2) breeze6-gtk (6.7.1 -> 6.7.2) cJSON calendarsupport (26.04.2 -> 26.04.3) clamav (1.5.2 -> 1.5.3) container-selinux (2.249.0 -> 2.250.0) dhcp (4.4.2.P1 -> 4.4.3.P1) discover6 (6.7.1 -> 6.7.2) dolphin (26.04.2 -> 26.04.3) drkonqi6 (6.7.1 -> 6.7.2) eventviews (26.04.2 -> 26.04.3) ffmpegthumbs (26.04.2 -> 26.04.3) flatpak-kcm6 (6.7.1 -> 6.7.2) fwupd (2.1.5 -> 2.1.6) gdk-pixbuf (2.44.6 -> 2.44.7) geoclue2 (2.8.1 -> 2.8.2) gexiv2 (0.16.0 -> 0.16.1) gjs (1.88.0.g4 -> 1.88.1) glibmm2 (2.86.0 -> 2.88.1) glibmm2_4 (2.66.8 -> 2.66.9) glycin-loaders (2.1.1 -> 2.1.5) gnome-keyring gnome-remote-desktop (50.1 -> 50.2) gnome-shell (50.2 -> 50.3) grantleetheme (26.04.2 -> 26.04.3) graphviz grub2 gsasl (2.2.3 -> 2.2.4) gtk-vnc gtk3 gwenview (26.04.2 -> 26.04.3) gzip hwdata (0.408 -> 0.409) incidenceeditor (26.04.2 -> 26.04.3) ipxe json-c (0.18 -> 0.19) kaccounts-integration (26.04.2 -> 26.04.3) kaccounts-providers (26.04.2 -> 26.04.3) kactivitymanagerd6 (6.7.1 -> 6.7.2) kaddressbook (26.04.2 -> 26.04.3) kalgebra (26.04.2 -> 26.04.3) kamera (26.04.2 -> 26.04.3) kanagram (26.04.2 -> 26.04.3) kapptemplate (26.04.2 -> 26.04.3) kate (26.04.2 -> 26.04.3) kbruch (26.04.2 -> 26.04.3) kcachegrind (26.04.2 -> 26.04.3) kcalc (26.04.2 -> 26.04.3) kcalutils (26.04.2 -> 26.04.3) kcharselect (26.04.2 -> 26.04.3) kcolorchooser (26.04.2 -> 26.04.3) kde-cli-tools6 (6.7.1 -> 6.7.2) kde-dev-utils (26.04.2 -> 26.04.3) kde-gtk-config6 (6.7.1 -> 6.7.2) kdecoration6 (6.7.1 -> 6.7.2) kdeedu-data (26.04.2 -> 26.04.3) kdegraphics-mobipocket (26.04.2 -> 26.04.3) kdegraphics-thumbnailers (26.04.2 -> 26.04.3) kdenetwork-filesharing (26.04.2 -> 26.04.3) kdepim-addons (26.04.2 -> 26.04.3) kdepim-runtime (26.04.2 -> 26.04.3) kdeplasma6-addons (6.7.1 -> 6.7.2) kdialog (26.04.2 -> 26.04.3) kernel-source (7.0.12 -> 7.1.2) kgamma6 (6.7.1 -> 6.7.2) kgeography (26.04.2 -> 26.04.3) kglobalacceld6 (6.7.1 -> 6.7.2) khangman (26.04.2 -> 26.04.3) khelpcenter (26.04.2 -> 26.04.3) kidentitymanagement (26.04.2 -> 26.04.3) kig (26.04.2 -> 26.04.3) kimap (26.04.2 -> 26.04.3) kinfocenter6 (6.7.1 -> 6.7.2) kio-extras (26.04.2 -> 26.04.3) kio_audiocd (26.04.2 -> 26.04.3) kiten (26.04.2 -> 26.04.3) kitinerary (26.04.2 -> 26.04.3) kldap (26.04.2 -> 26.04.3) kleopatra (26.04.2 -> 26.04.3) kmag (26.04.2 -> 26.04.3) kmahjongg (26.04.2 -> 26.04.3) kmail (26.04.2 -> 26.04.3) kmail-account-wizard (26.04.2 -> 26.04.3) kmailtransport (26.04.2 -> 26.04.3) kmbox (26.04.2 -> 26.04.3) kmenuedit6 (6.7.1 -> 6.7.2) kmime (26.04.2 -> 26.04.3) kmines (26.04.2 -> 26.04.3) kmousetool (26.04.2 -> 26.04.3) kmplot (26.04.2 -> 26.04.3) knighttime6 (6.7.1 -> 6.7.2) kompare (26.04.2 -> 26.04.3) konsole (26.04.2 -> 26.04.3) kontact (26.04.2 -> 26.04.3) kontactinterface (26.04.2 -> 26.04.3) konversation (26.04.2 -> 26.04.3) korganizer (26.04.2 -> 26.04.3) kpat (26.04.2 -> 26.04.3) kpimtextedit (26.04.2 -> 26.04.3) kpipewire6 (6.7.1 -> 6.7.2) kpkpass (26.04.2 -> 26.04.3) kqtquickcharts (26.04.2 -> 26.04.3) kquickimageeditor6 (0.6.2 -> 0.6.2.1) krb5 kreversi (26.04.2 -> 26.04.3) ksanecore (26.04.2 -> 26.04.3) kscreen6 (6.7.1 -> 6.7.2) kscreenlocker6 (6.7.1 -> 6.7.2) ksmtp (26.04.2 -> 26.04.3) ksshaskpass6 (6.7.1 -> 6.7.2) ksudoku (26.04.2 -> 26.04.3) ksystemstats6 (6.7.1 -> 6.7.2) ktnef (26.04.2 -> 26.04.3) ktouch (26.04.2 -> 26.04.3) kwalletmanager (26.04.2 -> 26.04.3) kwayland-integration6 (6.7.1 -> 6.7.2) kwayland6 (6.7.1 -> 6.7.2) kwin6 (6.7.1 -> 6.7.2) kwin6-x11 (6.7.1 -> 6.7.2) kwordquiz (26.04.2 -> 26.04.3) layer-shell-qt6 (6.7.1 -> 6.7.2) libadwaita (1.9.1 -> 1.9.2) libglycin (2.1.1 -> 2.1.5) libglycin-gtk4 (2.1.1 -> 2.1.5) libgravatar (26.04.2 -> 26.04.3) libisoburn (1.5.6 -> 1.5.8) libisofs (1.5.6.pl01 -> 1.5.8.pl01) libjansson (2.15.0 -> 2.15.1) libkcddb-qt6 (26.04.2 -> 26.04.3) libkdcraw (26.04.2 -> 26.04.3) libkdegames (26.04.2 -> 26.04.3) libkdepim (26.04.2 -> 26.04.3) libkeduvocdocument (26.04.2 -> 26.04.3) libkexiv2-qt6 (26.04.2 -> 26.04.3) libkgapi6 (26.04.2 -> 26.04.3) libkleo (26.04.2 -> 26.04.3) libkmahjongg (26.04.2 -> 26.04.3) libkomparediff2 (26.04.2 -> 26.04.3) libksane (26.04.2 -> 26.04.3) libkscreen6 (6.7.1 -> 6.7.2) libksieve (26.04.2 -> 26.04.3) libksysguard6 (6.7.1 -> 6.7.2) libphonenumber (9.0.31 -> 9.0.33) libplasma6 (6.7.1 -> 6.7.2) libpsl (0.21.5 -> 0.22.0) libstorage-ng (4.5.336 -> 4.5.339) libvirt (12.4.0 -> 12.5.0) libwacom (2.18.0 -> 2.19.0) lilv (0.26.4 -> 0.28.0) lokalize (26.04.2 -> 26.04.3) mailcommon (26.04.2 -> 26.04.3) mailimporter (26.04.2 -> 26.04.3) markdownpart (26.04.2 -> 26.04.3) mbox-importer (26.04.2 -> 26.04.3) messagelib (26.04.2 -> 26.04.3) milou6 (6.7.1 -> 6.7.2) mimetreeparser (26.04.2 -> 26.04.3) mutter (50.2 -> 50.3) ocean-sound-theme6 (6.7.1 -> 6.7.2) okular (26.04.2 -> 26.04.3) openSUSE-release (20260701 -> 20260707) openblas_openmp (0.3.30 -> 0.3.33) openblas_pthreads (0.3.30 -> 0.3.33) pam pam-full-src pam_kwallet6 (6.7.1 -> 6.7.2) parley (26.04.2 -> 26.04.3) pim-data-exporter (26.04.2 -> 26.04.3) pim-sieve-editor (26.04.2 -> 26.04.3) pimcommon (26.04.2 -> 26.04.3) pinentry (1.3.2 -> 1.3.3) pinentry-gui (1.3.2 -> 1.3.3) plasma5support6 (6.7.1 -> 6.7.2) plasma6-activities (6.7.1 -> 6.7.2) plasma6-activities-stats (6.7.1 -> 6.7.2) plasma6-browser-integration (6.7.1 -> 6.7.2) plasma6-desktop (6.7.1 -> 6.7.2) plasma6-disks (6.7.1 -> 6.7.2) plasma6-integration (6.7.1 -> 6.7.2) plasma6-nm (6.7.1 -> 6.7.2) plasma6-openSUSE plasma6-pa (6.7.1 -> 6.7.2) plasma6-print-manager (6.7.1 -> 6.7.2) plasma6-systemmonitor (6.7.1 -> 6.7.2) plasma6-thunderbolt (6.7.1 -> 6.7.2) plasma6-workspace (6.7.1 -> 6.7.2) polkit-kde-agent-6 (6.7.1 -> 6.7.2) powerdevil6 (6.7.1 -> 6.7.2) qqc2-breeze-style6 (6.7.1 -> 6.7.2) qrca (26.04.2 -> 26.04.3) rpm sddm-kcm6 (6.7.1 -> 6.7.2) setxkbmap (1.3.4 -> 1.3.5) signon-kwallet-extension (26.04.2 -> 26.04.3) skanlite (26.04.2 -> 26.04.3) soundtouch (2.3.3 -> 2.4.1) spectacle (6.7.1 -> 6.7.2) sso-mib (0.9.0 -> 0.10.0) step (26.04.2 -> 26.04.3) svgpart (26.04.2 -> 26.04.3) systemd (260.2 -> 260.3) systemsettings6 (6.7.1 -> 6.7.2) taglib (2.2.1 -> 2.3) tbb (2022.3.0 -> 2023.0.0) tftp (5.2 -> 5.3) tmux (3.6b -> 3.7b) umbrello (26.04.2 -> 26.04.3) upower (1.91.2 -> 1.91.3) vim (9.2.0725 -> 9.2.0780) wacomtablet-kcm6 (6.7.1 -> 6.7.2) xdg-desktop-portal-kde6 (6.7.1 -> 6.7.2) xdg-user-dirs === Details === ==== Mesa ==== Version update (26.1.3 -> 26.1.4) Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1 - Update to 26.1.4 bugfix release - -> https://docs.mesa3d.org/relnotes/26.1.4 ==== Mesa-drivers ==== Version update (26.1.3 -> 26.1.4) Subpackages: Mesa-dri Mesa-libva Mesa-vulkan-device-select libvulkan_lvp - Update to 26.1.4 bugfix release - -> https://docs.mesa3d.org/relnotes/26.1.4 ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Modify nfs: Exit gracefully if /etc/fstab is missing (bsc#1185815). ==== SDL3 ==== Version update (3.4.10 -> 3.4.12) - Update to release 3.4.12 * Improved support for external surfaces under Wayland * Fixed visual artifacts when switching render targets with the Vulkan renderer * Fixed crash rendering YUV textures on NVIDIA drivers with the Vulkan renderer * Added SDL_HINT_ENABLE_STEAM_SCREEN_KEYBOARD to customize behavior on Steam Deck and Steam Machine * Added hotplug detection support when using libusb for HIDAPI controllers * Fixed truncated long text input sequences when using sdl2-compat ==== akonadi ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6AkonadiAgentBase6 libKPim6AkonadiAgentWidgetBase6 libKPim6AkonadiCore6 libKPim6AkonadiPrivate6 libKPim6AkonadiWidgets6 libKPim6AkonadiXml6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== akonadi-calendar ==== Version update (26.04.2 -> 26.04.3) Subpackages: akonadi-plugin-calendar kalendarac libKPim6AkonadiCalendar6 libKPim6AkonadiCalendarCore6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * cppcheck knownConditionTrueFalse fix * cppcheck uninitMemberVarNoCtor fix ==== akonadi-calendar-tools ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== akonadi-contacts ==== Version update (26.04.2 -> 26.04.3) Subpackages: akonadi-plugin-contacts libKPim6AkonadiContactCore6 libKPim6AkonadiContactWidgets6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== akonadi-import-wizard ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6ImportWizard6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== akonadi-mime ==== Version update (26.04.2 -> 26.04.3) Subpackages: akonadi-plugin-mime libKPim6AkonadiMime6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== akonadi-search ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6AkonadiSearch6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Partially revert 3bb094eb ==== akregator ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== analitza ==== Version update (26.04.2 -> 26.04.3) Subpackages: libAnalitza9 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== apr ==== - Fixed state being reinitialized to NULL every loop, which the test does not expect. apr-fix-autoinit.patch ==== ark ==== Version update (26.04.2 -> 26.04.3) Subpackages: libkerfuffle26 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== at-spi2-core ==== Version update (2.60.4 -> 2.60.5) Subpackages: libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Update to version 2.60.5: + Fix a possible crash in atk_bridge_adaptor_cleanup. + Attempt to fix event listeners still being wrongly deregistered in some cases. ==== attr ==== Version update (2.5.2 -> 2.6.0) Subpackages: libattr1 - Update to 2.6.0: Major Issues Fixed: - The libacl library functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() take a pathname argument and follow symbolic links. When a privileged user calls one of those functions, an attacker that controls a pathname component can replace a file or directory with a symbolic link and redirect the operation to a different file. This can lead to local privilege escalation. The library functions cannot be fixed without breaking compatibility; the described behaviour is by design. Instead, version 2.4.0 of the acl package introduces the additional functions acl_get_file_at(), acl_set_file_at(), acl_extended_file_at(), and acl_delete_def_file_at(). These functions each take a dirfd file descriptor argument and an at_flags argument and accept the AT_SYMLINK_NOFOLLOW and AT_EMPTY_PATH flags. Use these functions to control when to follow symbolic links. In addition, the libacl functions acl_get_fd(), acl_set_fd(), and acl_extended_fd() functions always operate on the access ACL; the library previously did not offer a way to operate on the default ACL of a directory file descriptor. The new functions remove that restriction. It will be up to each individual program to start using these new library functions where appropriate. - When walking directory trees, the getfacl, setfacl, chacl, and getfattr utilities constructed the full pathname of each file in the tree and use that pathname to access the file. When a privileged user used those utilities, an attacker that controlled a pathname component could replace a directory with a symbolic link and redirect the operation to a different file, leading to a local privilege escalation. This is fixed by using directory file descriptors and operating relative to those directory file descriptors. - When resolving the final pathname component, the getfacl, setfacl, chacl, getfattr, and setfattr utilities in some cases used functions that resolve symbolic links. This includes the above mentioned libacl functions, but also stat(), chmod(), and chown(). This is fixed by using symlink-safe functions throughout the code. - When restoring a backup, the setfacl and setfattr utilities read the full pathnames of files from the backup. When those pathnames were resolved, pathname components that are symbolic links were traversed. An attacker that controlled a pathname component could replace it with a symbolic link, causing a privileged user to operate on a file other than the one intended. This could lead to the same kind of local privilege escalation as discussed before. This is fixed by using openat2(RESOLVE_NO_SYMLINKS) to resolve the directory components of a pathname, but see Compatibility Notes below for the details. Minor Issues Fixed: - When a symbolic link was specified on the command line but symbolic link traversal was disabled using option -P (--physical), the getfacl and setfacl utilities previously silently ignored the symlink. Now, an ELOOP ("Too many levels of symbolic links") error will result instead. - acl_delete_entry() now verifies that the specified entry belongs to the specified acl. - Numeric uids and gids that cannot be represented in types uid_t and gid_t are checked more carefully and invalid numbers are rejected. - Functions acl_get_file(), acl_get_file_at(), and acl_get_fd() will retry several times when the size of an ACL grows unexpectedly; previously, they only grew the allocated buffer once before giving up. - When passed a directory file descriptor, function perm_copy_fd() didn't copy the default ACL from one directory to the other. It now does. - setfacl --restore accidentally ignored leading whitespace in filenames. It no longer does. - setfacl --restore accidentally called chmod() when in --test mode. It no longer does. - When the setfattr --restore option was used multiple times, a buffer was accessed after being freed. This no longer happens. - When the setfattr -h (--no-dereference) option was given after --restore, it was ignored. Now, the options can be passed in any order. - The -h (--no-dereference) option of getfattr prevented getfattr from recursing into "symbolic link directories". This is wrong. When dirlink is a symbolic link that refers to a directory, "getfattr -Rh dirlink" will now visit that directory. The -P (--physical) option can be used to prevent that. - Similarly, when a symbolic link referring to a directory was specified on the getfacl or setfacl command line, the -R option did not cause that directory to be visited. This has been fixed so that those directories will now be visited. The -P (--physical) option can be used to prevent that. ==== aurorae6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== baloo-widgets ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * tagsfileitemaction: fix crash on empty selection (kde#521325) ==== blinken ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== blog ==== Version update (2.42 -> 2.45) Subpackages: libblogger2 - Update to version 2.45 Fix early boot LUKS prompt on s390x and resolve memory corruptions This update addresses several critical issues in the early boot phase, especially on s390x architectures, and hardens the daemon's architecture: - Initrd/Dracut: Properly include `systemd-ask-password-blog.path` in sysinit.target.wants during the initrd phase to ensure LUKS password prompts are captured early in the zipl phase. - Systemd Units: Drop restrictive `ConditionKernelCommandLine=!plymouth.enable=0` to prevent the agent from being disabled by standard mainframe boot parameters. - Memory Corruption: Fix a critical heap corruption by renaming the conflicting `alignof()` macro to `ALIGNED_SIZEOF()` and zeroing allocated memory for `struct request` (memset) to prevent reading uninitialized pointers #5. - Kernel Command Line: Improve `parse_cmdline()` to support boolean parameters without an explicit value (e.g., `blog.silent` defaults to `blog.silent=1`). - New Features: Introduce `blog.silent` to suppress console I/O and `blog.coldboot` to explicitly trigger the early coldstart password query. - Lifecycle: Switch `KillMode=none` to `KillMode=mixed` to comply with modern systemd process lifecycle management. Fixes: gh#bitstreamout/showconsole#5 Fixes: gh#bitstreamout/showconsole#6 Fixes: bsc#1264176 - Update to version 2.44 Harden blog and use shims units to handle plymouth Disable coldstart requests via epoll Avoid handling fd twice in epoll loop - Correct latest changes of 2.43 - Update to version 2.43 Make sure that if blog is running it is identified as plymouth Latest also add conflicts to systemd-ask-password-console units in the systemd-ask-password-blog units. This should avoid conflicting password agents asking the same question in s390x. ==== bluedevil6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== breeze6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: breeze6-cursors breeze6-decoration breeze6-style - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== breeze6-gtk ==== Version update (6.7.1 -> 6.7.2) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== cJSON ==== - Add baselibs.conf (bsc#1270256) ==== calendarsupport ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6CalendarSupport6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== clamav ==== Version update (1.5.2 -> 1.5.3) Subpackages: libclamav12 libclammspack0 libfreshclam4 - update to 1.5.3 ClamAV 1.5.3 is a patch release with the following fixes: * bsc#1270091, CVE-2026-20217: Fixed a bug in the PESpin unpacker cleanup path that could free pointers into the scanned file buffer and crash the scanner. * bsc#1270107, CVE-2026-20213: Fixed an integer overflow in PE rebuild size calculations that could be reached through a malformed Aspack-packed PE file and lead to a heap buffer overflow write. * bsc#1270089, CVE-2026-20216: Fixed an InstallShield archive extraction limit bypass that could write far more temporary data than intended and exhaust temporary storage. * bsc#1270085, CVE-2026-20214: Fixed an FSG unpacker loop underflow that could write past the section array while scanning a malformed PE file. * bsc#1270092, CVE-2026-20243: Fixed ALZ parser size handling bugs that could cause malformed ALZ archives to panic, abort the scanner, or skip expected scan-limit handling. * bsc#1270088, CVE-2026-20215: Fixed a 7z parser substream count overflow that could under-allocate parser metadata arrays and write past them while reading a malformed archive. * bsc#1270106, CVE-2026-20244: Fixed 32-bit DMG parser size checks that could let a short mish stripe table pass validation and crash 32-bit scanner builds. * Hardened clamscan, clamdscan, and clamonacc quarantine actions against time-of-check/time-of-use races that could redirect copied, moved, or removed files under unsafe quarantine directory configurations. * Upgraded the Rust tar dependency to resolve the RUSTSEC-2026-0067 and RUSTSEC-2026-0068 advisories, and upgraded the Rust openssl dependency to resolve CVE-2026-41676, bsc#1270138. * Raised the minimum required CMake version to 3.17 to fix Linux builds with libcurl v8.21.0 when linking static library dependencies. * Metadata preclass scans now run before the final scan verdict. * ClamOnAcc: Fixed errors when recursively excluded paths are children of an included path. * ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide in the same bucket. ==== container-selinux ==== Version update (2.249.0 -> 2.250.0) - Update to version 2.250.0: * Allow rpmdb to manage files on mounted container filesystems * Add the container_runtime_signull() interface * give container_domain perms on container_file_t fifo_files * Suppress mmap_zero denials for container_runtime_t * rpm: Require policycoreutils >= 3.10 for policydb version 24 support * Add the container_spc_signull() interface * Allow spc_t execstack and execmem (bsc#1268490) - Drop allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch: included upstream - Introduce container_can_execstack boolean for older Java applications and allow execmem (bsc#1268490) - Add patch: allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch ==== dhcp ==== Version update (4.4.2.P1 -> 4.4.3.P1) Subpackages: dhcp-relay dhcp-server - Update dhcrelay script and service. Due to some leftover calls to sysvinit tools the script no longer worked. Now the script is a lot leaner and only implements the sysconfig arg parsing and makes it more of a native systemd service. [bsc#1269228] - Update to version 4.4.3-P1: * Corrected reference count leak in leasequery packets (CVE-2022-2928). * Corrected memory leak in FQDN option unpacking (CVE-2022-2929). * Added OMAPI timed function calls. * Updated BIND libraries to version 9.11.36. * Added support for DHCPv4 option v6-only-preferred (RFC 8925). - Drop obsolete patches already included in version 4.4.3-P1: * dhcp-CVE-2022-2928.patch * dhcp-CVE-2022-2929.patch - Refresh patches: * 0009-dhcp-4.2.6-close-on-exec.patch * 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch * 0016-infiniband-support.patch ==== discover6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-notifier - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== dolphin ==== Version update (26.04.2 -> 26.04.3) Subpackages: dolphin-part libdolphinvcs6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * search/chip: Draw chip with QStyle instead of hardcoding Breeze * viewproperties: ensure not to remove defaults view properties ==== drkonqi6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== eventviews ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6EventViews6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== ffmpegthumbs ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== flatpak-kcm6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - No code changes since 6.7.1 ==== fwupd ==== Version update (2.1.5 -> 2.1.6) Subpackages: fwupd-bash-completion libfwupd3 typelib-1_0-Fwupd-2_0 - Update to version 2.1.6: + This release adds the following features: - Add --filter-protocol to fwupdmgr and fwupdtool - Add a new HSI attribute for coreboot verified boot - Add hashes for the latest DBX for offline machines - Allow parsing Hayden Bridge Thunderbolt firmware - Handle HPE Redfish reset-required updates - Ignore efivar free space on VMWare, GCE and EC2 VMs - Prevent FwupdClient from downloading the same file multiple times - Split UEFI Memory Protection HSI from NX Compat + This release fixes the following bugs: - Avoid an integer overflow in the ifwi-cpd manifest length check - Avoid truncating the AMD Kria FRU board area offset - Block dbx updates on ASUSTeK GL553VD - Check SMEE hardware bit directly for AMD SME detection - Create the ESP OS directory if not found - Detect the BCR device on Celeron LPC SPI controllers - Fall back to a binary firmware when no specific MTD image type is set - Fix AI table clear behavior of the elantp boot code. - Fix errors with fwupd-refresh service not working properly - Fix Genesys GL32xx device locker crash due to argument mismatch - Fix installing KEK updates when using snapd by sending the correct blob - Fix integer underflow when Elan firmware is smaller than one page - Fix possible NULL pointer dereference when updating SteelSeries firmware - Fix the display of the HP UEFI db certificate - Improved usi-dock progress reporting behavior - Increase the parser item limit from 100 to 1000 for large KEKs - Log out of the Redfish session when required on HPE hardware - Only show 'authenticating' after a short delay - Re-process the device metadata when required after all devices are added - Require sealed memfd input to prevent possible TOCTOU attacks - Sanitise the Jabra GNP device version in a more secure way - Validate raydium-tp buffer size before direct index access - Validate that Lenovo dock device-reported program sizes are valid + This release adds support for the following hardware: - Lenovo dual-bank accessory dongle and paired peripherals ==== gdk-pixbuf ==== Version update (2.44.6 -> 2.44.7) Subpackages: gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Update to version 2.44.7: + xpm: Fix loading the xpm module if built-in + glycin: - Fix the build on 32bit - Use fwrite to avoid problems with saving - Add signature for webp - Make filename tricks work in pid namespaces + Updated translations. ==== geoclue2 ==== Version update (2.8.1 -> 2.8.2) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.8.2 New features: * Translations for Georgian an Occitan and instructions for translators. Fixes: * Building translations now works. * Fix double free in on_desktop_id_set() and on_client_proxy_ready(). * Fix some gobject-linter rules in the correctness category. * Document the command to register network NMEA sources to avahi - handle language files ==== gexiv2 ==== Version update (0.16.0 -> 0.16.1) - Update to version 0.16.1: + Fix issue with GIR missing correct package name + Fix memory leak in regression test + Add missing assert in GPS test ==== gjs ==== Version update (1.88.0.g4 -> 1.88.1) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.88.1: + Closed bugs and merge requests: - Breaking change introduced in 1.87.1 - maint: Check for NULL before dereferencing error_out pointer ==== glibmm2 ==== Version update (2.86.0 -> 2.88.1) Subpackages: libgiomm-2_68-1 libglibmm-2_68-1 - Update to version 2.88.1: + Documentation: - NMake Makefiles: Update build info again - README.win32.md: Update info and use UNIX line endings + gmmproc: - Add mmgir, which generates .defs files from GIR files generated by GObject-introspection - Add scripts that generate .defs files with mmgir - Small fixes here and there to adapt to .defs files generated by mmgir - mmgir: Fix compiling parse_gir.cc on Windows - Improve detection of enum and flags in documentation + Build: - Meson build: . Add the build-mmgir option . Ignore C4018 warnings - Autotools build: Distribute tools/mmgir - NMake Makefiles: . More consolidations . Update gmmproc install location . Build the mmgir tool if requested . Build generate_defs_[glib|gio] - Changes from version 2.88.0: + lib: Markup::ParseContext: Add get_offset() and get_tag_start() + Gio: Application: Handle empty description in add_main_option_entry(). + Documentation: - Gio::File: Note where g_free() shall be called. - README.win32.md: Mention Visual Studio 2026, update build info + gmmproc: - tools/defs_gen/docextract: Improve extraction of enum enumerators. Fix the case when no enumerator is documented the old way in the enum block. - tools/defs_gen/enumextract.py, h2def.py: Ignore G_GNUC_FLAG_ENUM before the name of an enum definition. + Build: - Require glib >= 2.87.3 - Meson build: . Don't require the 'dot' command when creating documentation with Doxygen. . Meson build: Make Visual Studio 2026 builds distinct - NMake Makefiles: . Make Visual Studio 2026 builds distinct . Reorganize, fix, and clean up a bit . Make m4 detection more flexible and robust - Make build process more robust ==== glibmm2_4 ==== Version update (2.66.8 -> 2.66.9) Subpackages: libgiomm-2_4-1 libglibmm-2_4-1 - Update to version 2.66.9: + Documentation: - Remove obsolete FSF (Free Software Foundation) address - README.win32.md: Mention Visual Studio 2026, update build info - NMake Makefiles: Update build info again + Build: - Meson build: Make Visual Studio 2026 builds distinct - NMake Makefiles: . Make Visual Studio 2026 builds distinct . Reorganize, fix, and clean up a bit . Make m4 detection more flexible and robust . Make build process more robust . More consolidations . Update gmmproc install location . NMake Makefiles: Build generate_defs_[glib|gio] - Meson build: Don't require the 'dot' command when creating documentation with Doxygen. ==== glycin-loaders ==== Version update (2.1.1 -> 2.1.5) - Update to version 2.1.5: + Fixed: image-rs/jpeg: Support RGB for editing. There are actually images that don't use ycbcr. ==== gnome-keyring ==== Subpackages: gnome-keyring-pam libgck-modules-gnome-keyring - Add gnome-keyring-Drop-X-GNOME-Autostart-Phase.patch gnome-session-service is not responsible anymore for starting session services and complains about the presence of X-GNOME-Autostart-Phase. Removing this will allow whatever else is responsible (systemd, systemd-xdg-autostart-generator or whatever) to act. ==== gnome-remote-desktop ==== Version update (50.1 -> 50.2) - Update to version 50.2: + Fix and enable hardware acceleration for amdgpu + Fix failure to reconnect + Updated translations. ==== gnome-shell ==== Version update (50.2 -> 50.3) Subpackages: gnome-extensions gnome-shell-calendar - Update to version 50.3: + Prevent workspaces from being removed mid-animation + Announce search result description to screen readers + Improve animation when expanding app grid label + Fix spacing in lock screen media notifications + Plugged leak + Misc. bug fixes and cleanups + Updated translations. ==== grantleetheme ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6GrantleeTheme6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== graphviz ==== Subpackages: libcdt6 libcgraph8 libgvc7 libpathplan4 libxdot4 - Remove stale ocaml support, fix disable java support ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-arm64-efi-bls grub2-common grub2-snapper-plugin grub2-systemd-sleep-plugin - grub2.spec: Use unnumbered patch tag https://rpm.org/docs/4.20.x/manual/spec.html#patch ==== gsasl ==== Version update (2.2.3 -> 2.2.4) - Update to release 2.2.4 * NTLM client (not enabled in openSUSE): Avoid use-of-unitialized-value inside libntlm ==== gtk-vnc ==== Subpackages: libgtk-vnc-2_0-0 libgvnc-1_0-0 libgvncpulse-1_0-0 - bsc#1268264 - virt-manager crash when connecting to instance using VNC 009-fix-error-handling-in-main-thread-context.patch - bsc#1258497 - virt-manager segfault error 4 in libgvnc-1.0.so.0.0.1 Renamed 009-let-GLib-manage-the-lifecycle-of-VncDisplay-GObject.patch to 010-let-GLib-manage-the-lifecycle-of-VncDisplay-GObject.patch ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Add gtk3-fix-xi2-xatom.patch: Fix wrong display when handling xi2 xatom. (bsc#1269225, glgo#GNOME/gtk!10105) ==== gwenview ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== gzip ==== - Add CVE-2026-41991.patch: fix insecure temporary file handling in the gzexe utility (and zdiff) when the mktemp utility is not available in the user's PATH. Backport of upstream commit 4e6f8b24ab823146ab8776f0b7fe486ab34d4269. (CVE-2026-41991, bsc#1269622) ==== hwdata ==== Version update (0.408 -> 0.409) - Update to version 0.409: * Update pci, usb and vendor ids ==== incidenceeditor ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6IncidenceEditor6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== ipxe ==== - Fix QEMU live migration (bsc#1269260) issues by match the legacy qemu-ipxe ROM sizes and structure. More specifically: - Drop i386 and aarch64 from FAT EFI ROMs - Compress (-ec) x86_64 EFI and inject (-b) legacy ROM - Add PCI class code 0x02 to EfiRom arguments - Pad all EFI ROMs to exactly 256KB via truncate ==== json-c ==== Version update (0.18 -> 0.19) - Add no-xxd.patch and bring back the full testsuite. - Name the -devel and -doc subpackages based on the SRPM and nothing else. - Drop xxd BuildRequires to break an OBS build cycle; exclude the test_json_parse_cli test (its only consumer) from %check. - Update to 0.19: New features - ----------- * Add support for Commodore Amiga and MorphOS * Allow builds with CMake 4 - sync minimum version across all CMakeLists.txt files * Update openssl command to work for newer versions of openssl. * Add support for building json-c with meson * Support MSVC in packages that use GNU Autoconf. * Add VERSIONINFO to libjson-c.dll * Make json_tokener_free(NULL) a no-op, to simplify cleanup paths. * Explicitly handle NaN values when converting to int * Set errno=RANGE in json_object_get_int/int64/uint64() when the source value can't be represented in the target type. * Make json_parse a bit more useful by adding -u (validate UTF8) and -P (specify arbitrary tokener parse flags), and read from stdin if no filename is provided. * Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict. Significant changes and bug fixes - -------------------------------- * Issue #867 - also disallow control characters in keys in JSON_TOKENER_STRICT mode * Issue #875: cast to unsigned char so bytes above 0x7f aren't interpreted as negative, which was causing the strict-mode control characters check to incorrectly trigger. * Issue #881: don't allow json_tokener_new_ex() with a depth < 1 * Fix linkhash breaking -std=c89 * Fixing Cmake build when using clang-cl, avoids errors about redefining existing symbols * Fix AIX build failure - Add CMake detection for getopt.h * Fix bug involving supplemental code points that look like high surrogates * Fix runtime issue with test_util_file.c in Windows (add O_BINARY) * Fix macro WIN32_LEAN_AND_MEAN redefined * Issue #914: Fix Memory usage regression due to newlocale() on macOS * Issue #916: Fix OOM via large array index in json_pointer_set * Issue #923: Avoid stack recursion in json_object_put() * Issue #927: CVE-2026-9146 - update json_object_iterator documentation * Issue #929: CVE-2026-11322 - fix information disclosure bug in apps/json_parse (not installed by default) * Issue #930: fix locale-dependent strtod in json_object_get_double * Issue #931: deep copy values in json_patch copy op to avoid aliasing and cycles ==== kaccounts-integration ==== Version update (26.04.2 -> 26.04.3) Subpackages: libkaccounts6-2 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kaccounts-providers ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kactivitymanagerd6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kaddressbook ==== Version update (26.04.2 -> 26.04.3) Subpackages: kaddressbook-doc libKPim6AddressbookImportExport6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kalgebra ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kamera ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kanagram ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kapptemplate ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kate ==== Version update (26.04.2 -> 26.04.3) Subpackages: kate-plugins - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kbruch ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kcachegrind ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kcalc ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kcalutils ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6CalendarUtils6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kcharselect ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kcolorchooser ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kde-cli-tools6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * kstart: Unset desktop file name (kde#521679) * Update version for new release 6.7.2 ==== kde-dev-utils ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kde-gtk-config6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: kde-gtk-config6-gtk3 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kdecoration6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libkdecorations3-6 libkdecorations3private2 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kdeedu-data ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdegraphics-mobipocket ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdegraphics-thumbnailers ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdenetwork-filesharing ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdepim-addons ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdepim-runtime ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdeplasma6-addons ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * [Vietnamese Lunar Calendar] Fix midnight JDE rounding in getLocalDayIndex (kde#522099) * applets/colorpicker: Fix sizing * Update version for new release 6.7.2 - Enable Kameleon QMK integration, got whitelisted ==== kdialog ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kernel-source ==== Version update (7.0.12 -> 7.1.2) Subpackages: kernel-64kb kernel-default - Update patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch (bsc#1012628 CVE-2026-53354). - Update patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch (bsc#1012628 CVE-2026-53325 bsc#1269726). suse-add-cves - commit 992f18c - KVM: x86/tdx: Do not print error message on non-present feature (bsc#1270053). - commit 15c3ef6 - Update patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch (bsc#1012628 CVE-2026-52946 bsc#1269113). - commit 9476022 - Linux 7.1.2 (bsc#1012628). - virtiofs: fix UAF on submount umount (bsc#1012628). - media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (bsc#1012628). - ksmbd: reject non-VALID session in compound request branch (bsc#1012628). - drivers/base/memory: set mem->altmap after successful device registration (bsc#1012628). - serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1012628). - serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero (bsc#1012628). - vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1012628). - crypto: qat - remove unused character device and IOCTLs (bsc#1012628). - iio: adc: ti-ads1298: add bounds check to pga_settings index (bsc#1012628). - iio: light: veml6075: add bounds check to veml6075_it_ms index (bsc#1012628). - agp/amd64: Fix broken error propagation in agp_amd64_probe() (bsc#1012628). - Revert "NFSD: Defer sub-object cleanup in export put callbacks" (bsc#1012628). - fuse: re-lock request before replacing page cache folio (bsc#1012628). - io_uring/net: Avoid msghdr on op_connect/op_bind async data (bsc#1012628). - commit 8d2f9d1 - Update config files. Enable PSI measurement (jsc#PED-15418). Align with upstream default and allow simpler usage of PSI data. - commit 1f56042 - Refresh patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch. - Refresh patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch. - Refresh patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch. - Refresh patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch. Update upstream status by: ./scripts/series_sort -u - commit 594ea34 - Refresh patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch. Update upstream status. - commit c4d22cc - selftests/bpf: Tolerate missing files during install (poo#202224). - selftests/bpf: Provide weak definitions for cross-test functions (poo#202224). - selftests/bpf: Tolerate benchmark build failures (poo#202224). - selftests/bpf: Allow test_progs to link with a partial object set (poo#202224). - selftests/bpf: Skip tests whose objects were not built (poo#202224). - selftests/bpf: Tolerate test file compilation failures (poo#202224). - selftests/bpf: Make skeleton headers order-only prerequisites of .test.d (poo#202224). - selftests/bpf: Avoid rebuilds when running emit_tests (poo#202224). - selftests/bpf: Tolerate BPF and skeleton generation failures (poo#202224). - selftests/bpf: Fix test_kmods KDIR to honor O= and distro kernels (poo#202224). - selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224). - commit 58110d9 - ACPICA: Unbreak tools build after switching over to strscpy_pad() (bsc#1268472). - Delete patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch. Replace by a v2 -- the revert was dropped upstream. - commit 37bbff8 - Linux 7.1.1 (bsc#1012628). - fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1012628). - driver core: faux: fix root device registration (bsc#1012628). - driver core: reject devices with unregistered buses (bsc#1012628). - arm64: cputype: Add C1-Ultra definitions (bsc#1012628). - arm64: cputype: Add C1-Premium definitions (bsc#1012628). - arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1012628). ... changelog too long, skipping 98 lines ... - commit 3512c44 ==== kgamma6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kgeography ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kglobalacceld6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKGlobalAccelD6-0 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== khangman ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== khelpcenter ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kidentitymanagement ==== Version update (26.04.2 -> 26.04.3) Subpackages: kidentitymanagement-lang libKPim6IdentityManagementCore6 libKPim6IdentityManagementWidgets6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kig ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kimap ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6IMAP6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kinfocenter6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 * about: prevent loading more than 2 devices on nvidia (kde#521295) * Update version for new release 6.7.2 ==== kio-extras ==== Version update (26.04.2 -> 26.04.3) Subpackages: libkioarchive6-6 trash_kcm - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kio_audiocd ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kiten ==== Version update (26.04.2 -> 26.04.3) Subpackages: fonts-KanjiStrokeOrders - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kitinerary ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6Itinerary6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Fix extracting multi-column VR tickets * 12go: Add support for extracting receipt * Manually extract BDZ ticket prices * Add polferries extractor * Add missing poppler include * Extract checkin times and prices from Accor hotel bookings * Fix arrival stop extraction on French-operated Flixbus tickets * Don't choke on missing currency symbol on IRCTC tickets * Attempt to support both less and more than 1000 in `irctc` PDF * Add price extraction for SRT (thai-railway) * Add price extraction for IRCTC QR ticket ==== kldap ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6LdapCore6 libKPim6LdapWidgets6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kleopatra ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmag ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmahjongg ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmail ==== Version update (26.04.2 -> 26.04.3) Subpackages: kmail-application-icons ktnef - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Drop QTEST_DISABLE_KEYPAD_NAVIGATION from tests ==== kmail-account-wizard ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmailtransport ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6MailTransport6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmbox ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6Mbox6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmenuedit6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kmime ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6Mime6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Don't create headers with an empty type * Stricter checks for yEnc metadata field separation * Bump version for 26.04.3 ==== kmines ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmousetool ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmplot ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== knighttime6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKNightTime0 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kompare ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== konsole ==== Version update (26.04.2 -> 26.04.3) Subpackages: konsole-part konsole-part-lang - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Fix warnings from PreviewJob ==== kontact ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kontactinterface ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6KontactInterface6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== konversation ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Disconnect only the necessary signal ==== korganizer ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kpat ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kpimtextedit ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6TextEdit6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kpipewire6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kpkpass ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6PkPass6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kqtquickcharts ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kquickimageeditor6 ==== Version update (0.6.2 -> 0.6.2.1) Subpackages: kquickimageeditor6-imports libKQuickImageEditor1 - Udpate to 0.6.2.1 * Fix a crash caused by lack of ARGB32 support when built with OpenCV ==== krb5 ==== Subpackages: krb5-client - Prevent read overrun in kdb-ldap: * CVE-2026-11850, bsc#1268131 - Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch ==== kreversi ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== ksanecore ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kscreen6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kscreenlocker6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKScreenLocker6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== ksmtp ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6SMTP6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== ksshaskpass6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== ksudoku ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * main: set surface format to support legacy OpenGL (kde#521401) ==== ksystemstats6 ==== Version update (6.7.1 -> 6.7.2) - Prepare for CAP_PERFMON on ksystemstats_intel_helper - Add patch for hardening (boo#1262779): * 0001-Guard-ksystemstats_intel_helper-against-path-travers.patch - Remove workaroud for Leap 16, works meanwhile - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== ktnef ==== Version update (26.04.2 -> 26.04.3) Subpackages: ktnef-debug-categories libKPim6Tnef6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== ktouch ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kwalletmanager ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kwayland-integration6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kwayland6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKWaylandClient6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kwin6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libkwin6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * backends/drm: disable hardware rotation on older AMD GPUs (kde#521764) * backends/drm: fix SDR MHC2 profiles with a calibration matrix (kde#522301) * multigpuswapchain: force linear target buffers for AMD multi-gpu copies * Move "mouse to focus" and "mouse to center" shortcuts to kwin core (kde#522070) * backends/drm: correctly transform damage to buffer-local (kde#521878) * Optimize querying X window shape (kde#522005) * scene/workspacescene: don't ignore forced software cursor for direct scanout (kde#521953) * wayland/outputdevice: delay done event until the output has a UUID (kde#521826) * backends/drm: use the native colorimetry again (kde#521759) * kcm_*: fix BugReportUrl * plugins/eis: Do not send events from release warp to capture (kde#521486) * backends/drm: disable unused objects even when the last output is removed * scene: Properly crop opaque region of subsurfaces * backends/drm: pre-emptively filter out udev events for non-KMS nodes * scene/surfaceitem_wayland: immediately update the release point of the texture (kde#521687,kde#521960) * Update version for new release 6.7.2 ==== kwin6-x11 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libkwin-x11-6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kwordquiz ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== layer-shell-qt6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libLayerShellQtInterface6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== libadwaita ==== Version update (1.9.1 -> 1.9.2) Subpackages: libadwaita-1-0 typelib-1_0-Adw-1 - Update to version 1.9.2: + Build: - Include prebuilt styles again - Resolve locale directory at runtime on Windows + AdwApplication: Speed up initial style loading + AdwStyleManager: - Speed up initial loading - Check GTK version in runtime instead of build time + AdwSwipeTracker: Ignore mostly orthogonal touchpad scrolls + AdwViewSwitcherSidebar: Fix a leak + Stylesheet: Fix a copypaste error + Updated translations. ==== libglycin ==== Version update (2.1.1 -> 2.1.5) - Update to version 2.1.5: + Fixed: image-rs/jpeg: Support RGB for editing. There are actually images that don't use ycbcr. ==== libglycin-gtk4 ==== Version update (2.1.1 -> 2.1.5) - Update to version 2.1.5: + Fixed: image-rs/jpeg: Support RGB for editing. There are actually images that don't use ycbcr. ==== libgravatar ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6Gravatar6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libisoburn ==== Version update (1.5.6 -> 1.5.8) Subpackages: libisoburn1 xorriso - update to 1.5.8: * Bug fix: -boot_image and -append_partition were not perceived as image manipulation which makes production of an ISO image worthwhile. Thanks Cameron Seader. * Bug fix: -outdev holding an ISO filesystem could get attached wrong start LBA * Bug fix: Command -load "volid" did not work with constant search text * Bug fix: Command -truncate_overwritable on ISO image without MD5 caused double free of memory * Bug fix: -boot_image "any" "replay" failed after the legacy BIOS boot image file was replaced by -map. Thanks Brian C. Lane. * Bug fix: -boot_image system_area=/dev/zero preserved system area of loaded ISO * Bug fix: Size assessment of ISO images smaller than 32 KiB yielded random values * Bug fix: -extract_boot_images reports "No such file or directory" when complaining over an existing target file * Bug fix: Reproducibility of ISO images depended on "undefined" qsort(3) behavior with comparer function result 0. Report and fix proposal by Henrik Lindström. * Bug fix: ATA and SATA drives on modern Linux refused to perform -rollback with -scsi_dev_family "sg" because libburn registered them as ATA without SCSI adress tuple * Bug fix: Symbolic links with xattr could cause unusable ISO filesystems. Thanks Paul von Behren. * Bug fix: When reading multiple slashes in symbolic link targets from an ISO they were condensed to a single one if not marked by the SL ROOT-flag. Thanks Jonas 'Sortie' Termansen. * Bug fix: Empty symbolic link target components which represent add-on slashes were written with ROOT flag set. Thanks Jonas 'Sortie' Termansen. * Bug fix: The last trailing slash in a symbolic link target was not written. Thanks Jonas 'Sortie' Termansen. * Bug fix: The .. directory record exposed Rock Ridge properties of its grand grand parent. Caused by commit 4d0063f7 in 2009 which fixed the block address pointer of the .. record. * New command -volid_for and -as mkisofs option -volid_for. * New command -perform_opc * New -as cdrecord options --perform_opc and --perform_opc_growisofs ==== libisofs ==== Version update (1.5.6.pl01 -> 1.5.8.pl01) - update to 1.5.8.pl01: * Bug fix: iso_image_set_ignore_aclea() inverted the setting for reading the XFS-style project id from disk files * Silenced error messages about ioctl(FS_IOC_FSGETXATTR) * Bug fix: File path of imported BIOS boot image was forgotten when it gets overwritten by a file of the same name. * Bug fix: Reproducibility of ISO images depended on "undefined" qsort(3) behavior with comparer function result 0 * Bug fix: Empty AAIP value spoiled decoding of all AAIP attributes * Bug fix: Symbolic links with xattr could cause unusable ISO filesystems. * Bug fix: When reading multiple slashes in symbolic link targets they were * condensed to a single one if not marked by the SL ROOT-flag * Bug fix: Empty symolic link target components which represent add-on slashes were written with ROOT flag set * Bug fix: The last trailing slash in a symbolic link target was not written * Bug fix: The .. directory record exposed Rock Ridge properties of its * grand grand parent. Caused by commit 4d0063f7 in 2009 which fixed the block address pointer of the .. record. * Bug fix: The characters '.' and ';' were wrongly disallowed with PVD file names * Improved size estimation and property assessment of El Torito hidden boot images * Enabled up to 8 appended GPT partitions and improved their number mapping * New API calls iso_local_get_lfa_flags(), iso_local_set_lfa_flags(), * iso_node_get_lfa_flags(), iso_node_set_lfa_flags(), * iso_util_decode_lfa_flags(), iso_util_encode_lfa_flags(), * iso_util_get_lfa_masks(), iso_util_get_effective_lfa_mask() * New API calls iso_node_get_projid(), iso_node_set_projid(), * iso_local_get_projid(), iso_local_set_projid() * New API call iso_write_opts_set_gpt_with_gaps * New API call iso_local_create_dev() * New API call iso_write_opts_set_rrip_tf_long() and date check for year 2150 * limit to produce 17-byte timestamps * New API call iso_write_opts_set_rrip_tf_y1900() * New API calls iso_image_set_volume_id_v2(), iso_image_get_volume_id_v2(), * iso_image_fs_get_volume_id_v2() * New API call iso_write_opts_set_relaxed_nonvol_atts() ==== libjansson ==== Version update (2.15.0 -> 2.15.1) - Update to 2.15.1: * Include the object key or array index in unpack type mismatch error messages (@cwalther in #731) * Reject negative string length in the json_pack s# and +# formats (@akheron in #740) * Limit recursion depth in dump, equal and deep copy to prevent stack overflow (@akheron in #741) ==== libkcddb-qt6 ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKCddb5 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkdcraw ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKDcrawQt6-5 libkdcraw-qt6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkdegames ==== Version update (26.04.2 -> 26.04.3) Subpackages: kdegames-carddecks-default libKDEGames6 libkdegames-imports - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkdepim ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6Libkdepim6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkeduvocdocument ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkexiv2-qt6 ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKExiv2Qt6-0 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkgapi6 ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6GAPICalendar6 libKPim6GAPICore6 libKPim6GAPIPeople6 libKPim6GAPITasks6 libkgapi6-lang libkgapi6-sasl2-kdexoauth2 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkleo ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6libkleo6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkmahjongg ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKMahjongg6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkomparediff2 ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libksane ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKSaneWidgets6 libksane-icons libksane-lang - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkscreen6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKF6Screen8 libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== libksieve ==== Version update (26.04.2 -> 26.04.3) Subpackages: libksieve6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libksysguard6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-plugins - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== libphonenumber ==== Version update (9.0.31 -> 9.0.33) - update to 9.0.33: * Update phone metadata for region code(s): BF, KE, MC, MW, NO, SG, SI, UG, VN * Update geocoding data for country calling code(s): 47 (en) * Update carrier data for country calling code(s): 36 (en), 40 (en), 65 (en), 84 (en), 232 (en), 235 (en), 250 (en), 256 (en), 265 (en), 386 (en), 503 (en), 1868 (en) - includes changes from v9.0.32: * Update phone metadata for region code(s): DZ, JP, NO, SJ, SO, UG * Update carrier data for country calling code(s): 33 (en), 47 (en), 233 (en), 252 (en), 256 (en) ==== libplasma6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libPlasma7 libplasma6-components libplasma6-desktoptheme - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== libpsl ==== Version update (0.21.5 -> 0.22.0) - Update to version 0.22.0: * Can now be built from the release tarball without Python * Drop an external dependency by implementing the IPv4/IPv6 address checks internally * Avoid using alloca() and improve general portability * Add support for native ICU on Windows and libcucore on Apple systems * Improve the meson and autotools builds and the installed libpsl.pc pkg-config file * Documentation improvements * No soname change (still libpsl.so.5) ==== libstorage-ng ==== Version update (4.5.336 -> 4.5.339) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#1087 - improved logging - 4.5.339 - merge gh#openSUSE/libstorage-ng#1086 - updated tests - 4.5.338 - merge gh#openSUSE/libstorage-ng#1085 - provide functions for mkfs and tune options using vector of strings - use string_view to reduce number of functions - 4.5.337 ==== libvirt ==== Version update (12.4.0 -> 12.5.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-libs - Update to libvirt 12.5.0 - bsc#1268382 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v12-5-0-2026-07-01 ==== libwacom ==== Version update (2.18.0 -> 2.19.0) Subpackages: libwacom-data libwacom9 - update to 2.19.0: * libwacom_list_styli_from_database() provides a WacomStylus list of all known styli * libwacom_database_ref() and libwacom_database_unref() to simplify callers having * libwacom_get_width_mm() and libwacom_get_height_mm() for the tablet dimensions in mm. The .tablet files switched to mm too. * New generic 3 button + eraser tool, assigned to some Huion devices by default * New devices: - Gaomon M5 V2 - HP Envy x360 15-fh0xxx - Huion Inspiroy Frego S (L310), Kamvas Pro 27 (GT2701), H610 Pro V2 - Lenovo ThinkBook 14s Yoga ITL - Wacom HID 53FD - Xencelabs Pen Display 16 ==== lilv ==== Version update (0.26.4 -> 0.28.0) - update to 0.28.0: * Add early assertions for non-null parameters in public API * Add lilv_state_get_bundle_path() * Always create state files with O_CLOEXEC on glibc >= 2.7 * Clarify relative symbolic link creation when saving state * Fix build with dynmanifest support * Fix crash when loading plugin classes on Windows * Fix potential file loss when saving state with no link directory * Fix potential iterator leaks and resulting log message flood * Fix replacing links when saving over state * Fix test build when no C++ compiler is available * Improve error handling when writing and deleting state ==== lokalize ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Update mailing lists for Norwegian translation teams ==== mailcommon ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6MailCommon6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== mailimporter ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6MailImporter6 libKPim6MailImporterAkonadi6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== markdownpart ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== mbox-importer ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== messagelib ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== milou6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== mimetreeparser ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6MimeTreeParserCore6 libKPim6MimeTreeParserWidgets6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== mutter ==== Version update (50.2 -> 50.3) - Update to version 50.3: + Fix erroneous stack order changes on workspace switches + De-prioritize focusing desktop windows + Ensure preferred_scale event is sent to clients + Fix incorrect accumulated damage in screencasts + Fix triggering OSK for text_input_v3 version 1 clients + Fixed crashes + Misc. bug fixes and cleanups - Drop patches applied upstream: + ba64e055b5159a3acd5b4e4bc3d381066b26c62c.patch + 5096.patch ==== ocean-sound-theme6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== okular ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== openSUSE-release ==== Version update (20260701 -> 20260707) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openblas_openmp ==== Version update (0.3.30 -> 0.3.33) - disable tests for i586 as sblat tests fail - Added compatlib packages (compatlibopenblas_serial0, compatlibopenblas_openmp0, compatlibopenblas_pthreads0) that provide update-alternatives support for backward compatibility (bsc#1268086) (bsc#1268086) - Compatlib packages are automatically installed via Supplements when upgrading from OpenBLAS >= 0.3.30 to maintain existing update-alternatives configurations - The main library packages no longer require update-alternatives, making them suitable for transactional systems. Users who need update-alternatives support can explicitly install the compatlib packages - Fixed pkgconfig and cmake symlinks to point directly to flavor-specific directories (e.g., /usr/lib64/openblas-openmp/) instead of through update-alternatives, ensuring consistent library resolution - Updated README.SUSE to document the new packaging structure and compatlib usage - Update to version 0.3.33 general: * fixed incorrect cast in SBGEMM test case causing spurious failures * fixed invalid memory access in converted C CBLAS tests * made BIGNUMA setting automatic when cores exceed 256 * imported recent Reference-LAPACK 3.13.0 updates including: - implemented LARF1F and ORM2R functions - changed loop order in GETC2 for better performance - added NaN checks for input matrix A in GEEV - fixed support for jobu/v in LAPACKE_GESVDQ_WORK - fixed workspace size calculation in TGSEN - optimized looping in LACPY/LASCL/LANTR with fat matrix and UPLO=L arm64: * worked around serious GCC15 miscompilation of DDOT kernel affecting most non-SVE targets * fixed accuracy issue in GEMV kernel for Neoverse V1 and SVE targets * fixed broken STRMM and SSYMM in DYNAMIC_ARCH builds on non-SME hardware * added optimized SHGEMM kernel for Neoverse N2 * added autodetection of Cortex A75/A76 and Neoverse V3 loongarch64: * fixed build failure from missing half-precision float type support * fixed long-standing bug in asserting 64bit capability in c_check helper x86_64: * added workaround for LLVM miscompilation of AVX512 GEMM kernels * fixed CMake compilation with NVIDIA HPC compiler - Update to version 0.3.32 general: * fixed LAPACK GESV reimplementation to compute LU factorization even when NRHS is zero * improved error message when compile-time buffer allocation exceeded * fixed non-serialized access problem in parallelized SYRK by concurrent callers * fixed ABI mismatch in internal CDOT/ZDOT version used by C fallback LAPACK * improved f_check script for detecting Fortran compiler with embedded dashes in paths * fixed memory access issues in utests detected by Address Sanitizer * fixed Makefile errors when only subset of precision types selected * fixed OpenMP compiler option for Intel Ifx compiler arm64: * fixed potential miscompilation of SDOT/DDOT/DSDOT kernels * improved BGEMM and SBGEMM kernel performance for Neoverse V2 * added optimized SSUM and DSUM kernels for Neoverse N1 * added preliminary Neoverse V3 support as NEOVERSEV2 * added cpu autodetection for Cortex A725 and X925 * fixed compilation of GEMM kernels for VORTEXM4/ARMV9SME without multithreading loongarch64: * fixed POTRF returning wrong results on LA464 from incorrect parameter setting power: * fixed compilation problems from missing half-precision float support * fixed potential POWER10 DGEMV kernel miscompilation by limiting optimization level * fixed SCAL issue on PPCG4/PPC970 running Linux riscv64: * optimized CROT/ZROT kernel for vector length 128 in non-unit stride path * improved SBGEMM/SHGEMM and related type conversion helper functions * fixed probing for BFLOAT16 support in DYNAMIC_ARCH cpu detection x86_64: * fixed potential gcc 15.x miscompilation of AVX512 SGEMM kernel for small sizes * fixed SROT and DROT kernels for Haswell to have consistent FMA rounding * added automatic detection of Intel Arrow Lake H/U, Panther Lake, and Jasper Lake * added detection of Intel Emerald Rapids and upcoming models * updated cache size translation table in cpu model autodetection * improved cpu detection fallback to include Nehalem as non-AVX option * fixed Makefile build issue with clang and SkylakeX SGEMM kernel - Update to version 0.3.31 general: * reverted matrix partitioning optimization from 0.3.30 that could cause race conditions in GEMM * added bfloat16 extensions BGEMM and BGEMV * added BLAS interface for GEMM_BATCH extensions * added GEMM_BATCH_STRIDED extensions and CBLAS interface * added basic infrastructure for half-precision float (FP16) format using SH prefix * reimplemented LAPACK SLAED3/DLAED3 using multithreading, improving SSYEVD/DSYEVD performance * limited memory allocation retries to avoid infinite hanging on low-memory systems * fixed thread lockup with python 3.9 or older and numpy * introduced problem size thresholds for multithreading in STRMV/DTRMV, CHER/ZHER functions, and SGER/DGER * improved autodetection of Fortran compiler * fixed INTERFACE64=1 option passing to flang-new compiler * fixed potential deadlock after fork() in multithreaded code * fixed CMake builds on FreeBSD and from Cygwin * fixed cross-compilation to RISCV targets via CMake * fixed installation of cblas.h when NO_CBLAS=0 * fixed missing user-defined pre/postfixes on functions in lapack.h and lapacke.h arm64: * building BFLOAT16 kernels now enabled by default * improved overall GEMM, SYMM and HEMM performance on A64FX * improved SDOT/DDOT performance on A64FX * improved multithreading performance of SDOT/DDOT on A64FX via throttling table * improved SGER/DGER performance on A64FX and NEOVERSEV1 * improved multithreading GEMM performance on A64FX and NEOVERSEV1 * improved GEMV kernel for SVE-capable targets * improved multithreading SGEMM on NEOVERSEV1 and V2 ... changelog too long, skipping 31 lines ... * added support for building with CMake ==== openblas_pthreads ==== Version update (0.3.30 -> 0.3.33) - disable tests for i586 as sblat tests fail - Added compatlib packages (compatlibopenblas_serial0, compatlibopenblas_openmp0, compatlibopenblas_pthreads0) that provide update-alternatives support for backward compatibility (bsc#1268086) (bsc#1268086) - Compatlib packages are automatically installed via Supplements when upgrading from OpenBLAS >= 0.3.30 to maintain existing update-alternatives configurations - The main library packages no longer require update-alternatives, making them suitable for transactional systems. Users who need update-alternatives support can explicitly install the compatlib packages - Fixed pkgconfig and cmake symlinks to point directly to flavor-specific directories (e.g., /usr/lib64/openblas-openmp/) instead of through update-alternatives, ensuring consistent library resolution - Updated README.SUSE to document the new packaging structure and compatlib usage - Update to version 0.3.33 general: * fixed incorrect cast in SBGEMM test case causing spurious failures * fixed invalid memory access in converted C CBLAS tests * made BIGNUMA setting automatic when cores exceed 256 * imported recent Reference-LAPACK 3.13.0 updates including: - implemented LARF1F and ORM2R functions - changed loop order in GETC2 for better performance - added NaN checks for input matrix A in GEEV - fixed support for jobu/v in LAPACKE_GESVDQ_WORK - fixed workspace size calculation in TGSEN - optimized looping in LACPY/LASCL/LANTR with fat matrix and UPLO=L arm64: * worked around serious GCC15 miscompilation of DDOT kernel affecting most non-SVE targets * fixed accuracy issue in GEMV kernel for Neoverse V1 and SVE targets * fixed broken STRMM and SSYMM in DYNAMIC_ARCH builds on non-SME hardware * added optimized SHGEMM kernel for Neoverse N2 * added autodetection of Cortex A75/A76 and Neoverse V3 loongarch64: * fixed build failure from missing half-precision float type support * fixed long-standing bug in asserting 64bit capability in c_check helper x86_64: * added workaround for LLVM miscompilation of AVX512 GEMM kernels * fixed CMake compilation with NVIDIA HPC compiler - Update to version 0.3.32 general: * fixed LAPACK GESV reimplementation to compute LU factorization even when NRHS is zero * improved error message when compile-time buffer allocation exceeded * fixed non-serialized access problem in parallelized SYRK by concurrent callers * fixed ABI mismatch in internal CDOT/ZDOT version used by C fallback LAPACK * improved f_check script for detecting Fortran compiler with embedded dashes in paths * fixed memory access issues in utests detected by Address Sanitizer * fixed Makefile errors when only subset of precision types selected * fixed OpenMP compiler option for Intel Ifx compiler arm64: * fixed potential miscompilation of SDOT/DDOT/DSDOT kernels * improved BGEMM and SBGEMM kernel performance for Neoverse V2 * added optimized SSUM and DSUM kernels for Neoverse N1 * added preliminary Neoverse V3 support as NEOVERSEV2 * added cpu autodetection for Cortex A725 and X925 * fixed compilation of GEMM kernels for VORTEXM4/ARMV9SME without multithreading loongarch64: * fixed POTRF returning wrong results on LA464 from incorrect parameter setting power: * fixed compilation problems from missing half-precision float support * fixed potential POWER10 DGEMV kernel miscompilation by limiting optimization level * fixed SCAL issue on PPCG4/PPC970 running Linux riscv64: * optimized CROT/ZROT kernel for vector length 128 in non-unit stride path * improved SBGEMM/SHGEMM and related type conversion helper functions * fixed probing for BFLOAT16 support in DYNAMIC_ARCH cpu detection x86_64: * fixed potential gcc 15.x miscompilation of AVX512 SGEMM kernel for small sizes * fixed SROT and DROT kernels for Haswell to have consistent FMA rounding * added automatic detection of Intel Arrow Lake H/U, Panther Lake, and Jasper Lake * added detection of Intel Emerald Rapids and upcoming models * updated cache size translation table in cpu model autodetection * improved cpu detection fallback to include Nehalem as non-AVX option * fixed Makefile build issue with clang and SkylakeX SGEMM kernel - Update to version 0.3.31 general: * reverted matrix partitioning optimization from 0.3.30 that could cause race conditions in GEMM * added bfloat16 extensions BGEMM and BGEMV * added BLAS interface for GEMM_BATCH extensions * added GEMM_BATCH_STRIDED extensions and CBLAS interface * added basic infrastructure for half-precision float (FP16) format using SH prefix * reimplemented LAPACK SLAED3/DLAED3 using multithreading, improving SSYEVD/DSYEVD performance * limited memory allocation retries to avoid infinite hanging on low-memory systems * fixed thread lockup with python 3.9 or older and numpy * introduced problem size thresholds for multithreading in STRMV/DTRMV, CHER/ZHER functions, and SGER/DGER * improved autodetection of Fortran compiler * fixed INTERFACE64=1 option passing to flang-new compiler * fixed potential deadlock after fork() in multithreaded code * fixed CMake builds on FreeBSD and from Cygwin * fixed cross-compilation to RISCV targets via CMake * fixed installation of cblas.h when NO_CBLAS=0 * fixed missing user-defined pre/postfixes on functions in lapack.h and lapacke.h arm64: * building BFLOAT16 kernels now enabled by default * improved overall GEMM, SYMM and HEMM performance on A64FX * improved SDOT/DDOT performance on A64FX * improved multithreading performance of SDOT/DDOT on A64FX via throttling table * improved SGER/DGER performance on A64FX and NEOVERSEV1 * improved multithreading GEMM performance on A64FX and NEOVERSEV1 * improved GEMV kernel for SVE-capable targets * improved multithreading SGEMM on NEOVERSEV1 and V2 ... changelog too long, skipping 31 lines ... * added support for building with CMake ==== pam ==== - Fix password comparison timing leak from pam_userdb [CVE-2026-54411], [bsc#1268290] * pam_userdb-fix-password-comparison-timing-leak.patch ==== pam-full-src ==== Subpackages: pam-extra pam-manpages - Fix password comparison timing leak from pam_userdb [CVE-2026-54411], [bsc#1268290] * pam_userdb-fix-password-comparison-timing-leak.patch ==== pam_kwallet6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: pam_kwallet6-common - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== parley ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== pim-data-exporter ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== pim-sieve-editor ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== pimcommon ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6PimCommon6 libKPim6PimCommonAkonadi6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== pinentry ==== Version update (1.3.2 -> 1.3.3) - Update to 1.3.3: * gtk,curses: Add --focus=ok option to CONFIRM command. [T8315] * tty: Discard input on timeout. [rP4c72137885] * Various build fixes. ==== pinentry-gui ==== Version update (1.3.2 -> 1.3.3) Subpackages: pinentry-gnome3 pinentry-gtk2 pinentry-qt6 - Update to 1.3.3: * gtk,curses: Add --focus=ok option to CONFIRM command. [T8315] * tty: Discard input on timeout. [rP4c72137885] * Various build fixes. ==== plasma5support6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libPlasma5Support6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-activities ==== Version update (6.7.1 -> 6.7.2) Subpackages: libPlasmaActivities7 plasma6-activities-imports - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-activities-stats ==== Version update (6.7.1 -> 6.7.2) Subpackages: libPlasmaActivitiesStats1 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-browser-integration ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-desktop ==== Version update (6.7.1 -> 6.7.2) Subpackages: plasma6-desktop-emojier plasma6-kimpanel-ibus - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 * KCMMouse: fix some layout issues (kde#521992) * Don't make warnings fatal in kcm_kded test * Don't import desktoptest in kcm_kded appium test * Drop bug482267 test * FolderView: More robust drop url generation (kde#521713) * WorkspaceOPtions: fix warnings * applets/kickoff: add selection highlight for SectionView (kde#522154) * applets/kickoff: correctly show highlight in the Places page * Update version for new release 6.7.2 ==== plasma6-disks ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-integration ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-nm ==== Version update (6.7.1 -> 6.7.2) Subpackages: plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Fix overflow in network details (kde#522333) * Bump QtKeychain dependency * vpn/openconnect: Make Connect button more obvious * kded: Do not try to send DBus errors when handling a no reply request * Update version for new release 6.7.2 - Explicitly require QtKeychain >= 0.16.0 ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.7.2 ==== plasma6-pa ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-print-manager ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 * [print-queue] Elide job processing message * Update version for new release 6.7.2 ==== plasma6-systemmonitor ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 * processtable: Remove unnecessary separator * table: Hide the icon for processes in tree mode if it is empty (kde#442095) * Update version for new release 6.7.2 ==== plasma6-thunderbolt ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - No code changes since 6.7.1 ==== plasma6-workspace ==== Version update (6.7.1 -> 6.7.2) Subpackages: plasma6-session plasma6-session-x11 plasma6-workspace-libs sddm-qt6-branding-openSUSE - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * plasma-windowed: Check for SNI being null * applets/devicenotifier: Check StorageAccess being null (kde#522051) * runners/bookmarks: Set minimum letter count to 2 * runners/bookmarks: Recreate cache dir if it was removed before * runners/bookmarks: Load favicon only when match actually matches * Update version for new release 6.7.2 ==== polkit-kde-agent-6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== powerdevil6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== qqc2-breeze-style6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== qrca ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== rpm ==== Subpackages: librpmbuild10 - Add Requires: (rpm-plugin-selinux if selinux-policy) - harden ndb code [bsc#1269584] [CVE-2026-44605] * new patch: ndbharden.diff - split all plugins into subpackages * this allows for an easy way to get rid of a plugin, it's also what other distributions do - make the imaevmsign plugin build in a multibuild flavor * updated patch: imaevmsignplugin.diff - rpm2archive: use size 0 for hardlinked files as bnew versions of gnu tar reject non-zero sizes [bsc#1269150] * updated patch: rpm2archive.diff - backport fix for add_sysuser macro [bsc#1269571] * updated patch: macrosin.diff - backport rpmuncompress security fix [bsc#1268747] [CVE-2026-44604] * new patch: rpmuncompress.diff - switch from rpmpgp_legacy to libpgpr * multiple bug fixes, support for v5 and v6 signatures * updated patch: pgpreleasemtime.diff - turn on imaevm file signature support and move the imaevm code that needs the libimaevm library into a plugin. Put this plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246] * new patch: imaevmsignplugin.diff ==== sddm-kcm6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== setxkbmap ==== Version update (1.3.4 -> 1.3.5) - update to 1.3.5: * Man page: update history from XFree86 4.3 to 3.2 * setxkbmap references appear as far back as 3.2 in the XFree86 Changelog. * manual page: Rewrite in semantic markup * Rewrite the reference manual in BSD-style mdoc(7) semantic markup, providing greatly enhanced search on all supported manual compilers. * Improve man page formatting * More closely follow common style as described on * meson: Add option to build with meson ==== signon-kwallet-extension ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== skanlite ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== soundtouch ==== Version update (2.3.3 -> 2.4.1) - update to 2.4.1: * Fix buffer overflow when processing >16 channels * fix: fix unused variables in DLMain * fix: fix warning for unused peaklevel in release mode - Update to 2.4.0: * Set CMake minimum version to 3.5 to avoid deprecation warning * Increase max nr. of channels from 16 to 32 * Don't use `pow()` when using integer precision samples * Replace `-Ofast` that's being deprecated in some compilers, by `-O3 -ffast-math` - Refresh disable-ffast-math.patch ==== spectacle ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== sso-mib ==== Version update (0.9.0 -> 0.10.0) - Import version 0.10.0 This release adds an async API for all functions that communicate via DBus. The API is modeled similar to gdbus. Manpages for tools are also now provided. ==== step ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== svgpart ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== systemd ==== Version update (260.2 -> 260.3) Subpackages: libsystemd0 libudev1 systemd-boot systemd-container udev - Import commit a6ea105861b47842aed56242325ac1f33603c9c6 (merge of v260.3) This update includes the following fix: 91873ca3d7 nss-systemd: avoid ELF TLS for recursion guard (bsc#1254924) - Drop 1001-units-drop-Before-sockets.target-from-networkd-resol.patch and 1002-nss-systemd-avoid-ELF-TLS-for-recursion-guard.patch, both are part of v260.3. ==== systemsettings6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== taglib ==== Version update (2.2.1 -> 2.3) Subpackages: libtag2 libtag_c2 - update to 2.3: * MP4: Support for chapters (Nero and QuickTime). * WAV: Support for BEXT and iXML chunks. * FLAC: Support for BEXT and iXML application blocks. * Opus: New audio property `outputGain()`. * Speed up Matroska reading by using seek head for element lookup. * Speed up Matroska writing by offering multiple write style modes. * More tolerant handling of files with oversized RIFF chunks, zero size ID3v2 * frames and Matroska chapters without edition. * Avoid wrong content-based detection as MPEG files. * Fix bitrate calculations for MPEG ADTS and MP4 ESDS. * Fix data race with multi-threaded use of `MP4::ItemFactory`. * Fix unbounded recursion in EBML/Matroska `MasterElement` and MP4 atoms. * Limit number of MP4 atoms at top level. * Fix writing too many offsets when updating MP4 stco/co64 atoms. * Fix k bounds in Shorten Rice-Golomb coding. ==== tbb ==== Version update (2022.3.0 -> 2023.0.0) - update to 2023.0.0: * [Preview] Introduced ability to wait for a single task in a ``task_group`` instead of waiting for all tasks to finish. This increases reactivity and decreases latency in key user workloads. * [Preview] Introduced ``flow::resource_limited_node`` and ``flow::resource_limiter`` classes. These nodes only execute when they can successfully acquire the necessary resources from the resource limiters associated with the node. This feature is used to guard access to shared resources, while maximizing available parallelism in the graph. * [Preview] Introduced ``task_arena`` core type selector to better support hybrid architectures with several core types. Users use this new flexible API to more tightly constrain execution to set preferences for the specific core types that match their workload. * [Preview] Added global control parameter to set default block time behavior on server HW. This allows developers to revert to older blocking behavior if their applications are not able to fully utilize all cores, thereby reducing idle spinning. * Added new API to create a set of NUMA bound task arenas, simplifying common patterns used to optimize for NUMA architectures. * Extended Flow Graph functional node deduction guides to support non-static member function and member object pointers as a node bodies. * The Flow Graph join_node and indexer_node now support 10 or more input ports. * Explicit deduction guides for ``blocked_nd_range`` are now a fully supported feature. * Added native WASM exception handling support. - tbb-python-setuptools.patch (upstream) ==== tftp ==== Version update (5.2 -> 5.3) - update to 5.3: * tftp: convert IPv6-mapped IPv4 addresses to IPv4 * tftpd: Canonicalize all the addresses * tftpd: Canonicalize myaddr before address_is_local() * recvfrom: update config.h define for in_pktinfo.ipi_addr * Modernize: use sigaction() whenever possible. Remove uses of common. * tftpd.8: document IPv6 handling in remapping rules * tftp: drop "inline" from definition of usage() * tftpd: explicitly declare timer() static - drop tftp-c99.patch: obsolete - drop tftp-multi-addresses.patch: upstream (differently) ==== tmux ==== Version update (3.6b -> 3.7b) - tmux 3.7b * Fix so that the end of a synchronized update again triggers a redraw. - tmux 3.7a: * Fix crash in break-pane when no name is provided. * Scrollbar options are now cached rather than being looked up for every redraw * Only forbid #( in names, allow #[, empty names, : and . - tmux 3.7: * Add floating panes. * Add -g to kill-session to kill all sessions in a session group * When mode-keys is set to vi, do not allow the cursor to go into the invisible extra cell to the right of the visible text; this is closer to what vi(1) does. * Add emacs-style recentre-top-bottom command to copy mode. * Add support for line numbers in copy mode. * Make C-[ have the same bindings as Escape for terminals with extended keys where they are different. * Add ability to forward progress bar to outside terminal. * Add detach to default session menu. * Add -C flag to command-prompt to match display-message -C (do not freeze panes). * Add remain-on-exit key to keep pane around until a key is pressed. * Add some new mouse ranges called "control0" to "control9" and use to add some mouse controls to the pane state line. * Add bracket_paste_flag format flag. * Copy hyperlinks when redrawing popup so they do not vanish. * Work around systemd killing panes early during system shutdown by creating dependencies from the panes to the service which started tmux. * Draw message as one format, allowing prompts and messages to occupy only a portion of the status bar, overlaying the normal status content rather than replacing the entire line. A new message-format option now controls the entire message (like status-format). The message-style option now need to include "fill" in order to cover the whole width (the default has "fill=yellow"). * Add pane_pipe_pid with pipe file descriptor. * Make -c work with new-session -A. * Pass paste buffer through vis(3) when pasting to prevent buffers containing for example the bracket end sequence causing issues, a new -S flag disables. * Add sorting (-O flag) and a custom format (-F) to list-keys. * Add scroll-exit-on, scroll-exit-off, scroll-exit-toggle commands to copy mode. * Refresh copy mode when style changes. * Make sorting code common and add -O for sorting to the list commands. * Add -e flag to command-prompt to close if empty. * Add paste to the default pane menu. * If cannot find a terminator for palette responses, treat as a partial key not complete. * Do not send theme unless it has changed, and do not send immediately when updates are enabled. * Do not use ;;s in list-keys output as it is confusing and cannot be parsed on input. * Redraw pane borders when entering or leaving alternate screen. * Add focus-follows-mouse option. * Add selection_mode format variable for copy mode. * Add prompt-command-cursor-style. * With status-keys vi, move the cursor left by one when pressing Escape to enter command mode, like vi. * Add {current}/{active} for -t for current window or active pane. * Add support for applications to use synchronized output mode (DECSET 2026) to prevent screen tearing during rapid updates. * Do not set a default prompt cursor colour because some terminals (urxvt, st) do not support the reset sequence. * Add a scroll-to-mouse command for copy mode to scroll to the mouse position and bind to the scrollbar, brings the scrollbar keys into line with the other mouse keys. * Add a missing skin tone character. * Do not show scrollbar when entering copy mode from a pane in the alternate screen. * Add a get-clipboard option which when enabled (the default is off) and a clipboard is requested from a pane, requests it from the terminal and forwards to the requesting pane; also remove the now-redundant forward-to-pane ability from "refresh-client -l" (issue 4275). * Do not remove TERM for commands run from config file * Add seconds options for clock mode ==== umbrello ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== upower ==== Version update (1.91.2 -> 1.91.3) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 - Update to version 1.91.3: + Feature: up-device-battery: Prefer "Standard" over "Fast" charging + Fix: Resolve potential leaks + Fix: Potential out-of-bound access + Fix: Improve access control + Fix: Remove unused codes + Fix: Fix for Asus Battery Charge Threshold Detection - Drop 25303ba52771ee514b70fb1a5318a8313889ac31.patch: Added upstream. ==== vim ==== Version update (9.2.0725 -> 9.2.0780) Subpackages: vim-data vim-data-common xxd - update to 9.2.0780 patch 9.2.0780: Memory leak in evalvars.c on alloc failure patch 9.2.0779: Memory leak in type_name_func() on alloc failure patch 9.2.0778: Memory Leak in compile_dict() on alloc failure patch 9.2.0777: Memory leak in add_defer() on alloc failure patch 9.2.0776: Memory leak in sign_getlist() on alloc failure patch 9.2.0775: Memory Leak in highlight_get_info() on alloc failure patch 9.2.0774: Memory leak in f_getscriptinfo() on alloc failure patch 9.2.0773: Memory leak in evalfunc.c on alloc failure patch 9.2.0772: Vim9: Null dereference inside alloc_type() patch 9.2.0771: dict_add_list() has inconsistent ownership on failure patch 9.2.0770: dict_add_dict() has inconsistent ownership on failure translation(zh_CN): Add Chinese man pages patch 9.2.0769: conversion to utf-16be using iconv is inconsistent patch 9.2.0768: legacy/vim9cmd modifiers are not exclusive patch 9.2.0767: legacy/vim9cmd modifiers do not set script version for options values patch 9.2.0766: quick_tab entries for empty letters point to the wrong index patch 9.2.0765: popup: opacity popup over a terminal is not cleared when moved patch 9.2.0764: Compiler warning about unused function translation(sr): Update Serbian translation patch 9.2.0763: tests: style issue in test_plugin_netrw runtime(xml): Update xml syntax file runtime(doc): regenerate help tags patch 9.2.0762: duplicated sub-option name check in :set completion runtime(screen): Bring the syntax up to version 5 runtime(typst): Improve ftplugin, and syntax file patch 9.2.0761: runtime(netrw): Unix: unable to open '\' file patch 9.2.0760: Compiler warning for using potentially uninitialized var patch 9.2.0759: Some code for 'autocompletedelay' is no longer needed runtime(autoload/dist): gx may use xdg-open on macOS patch 9.2.0758: pum: No opacity when background not set for Popup menu group patch 9.2.0757: tests: test_popupwin fails with zsh because of the prompt patch 9.2.0756: Session with multiple tabpages sets 'winminheight' to 0 patch 9.2.0755: 'autocomplete' behaves inconsistently when recording patch 9.2.0754: repeated completion length lookup in search_for_exact_line patch 9.2.0753: GTK GUI deferred redraw skipped on 'lazyredraw' runtime: add missing fnameescape()/shellescape() in a few runtime files patch 9.2.0752: GTK4: drag-and-drop does not support HTML patch 9.2.0751: GTK3 GUI is slow under Wayland translation(ru): Updated message files patch 9.2.0750: completion: 'autocompletedelay' deferral leaks state patch 9.2.0749: 'autocompletedelay' interferes with i_CTRL-K patch 9.2.0748: 'autocompletedelay' interferes with CTRL-G U runtime(netrw): Use consistent forward slashes patch 9.2.0747: cscope: connection leak when growing the array fails patch 9.2.0746: NULL pointer dereference in gui_photon patch 9.2.0745: Crash with truncated spellfile patch 9.2.0744: popup_atcursor() closes immediately on white space runtime(odin): Update indent script, add indent tests patch 9.2.0743: string macros silently accept a size of the wrong type runtime(vim): Fix heredoc triggering misidentifcation of Vim9 script patch 9.2.0742: filetype: SSH keys and related filetypes not recognized runtime(css): add more missing CSS properties patch 9.2.0741: complete_check() does not return TRUE for mapped input patch 9.2.0740: GTK4: scrollbar wrongly displayed patch 9.2.0739: completion: 'autocompletedelay' blocks the main loop and drops autocommands runtime: guard recommended style settings consistently patch 9.2.0738: ml_recover() may write beyond block buffer CI: Bump actions/checkout in the github-actions group across 1 directory patch 9.2.0737: tests: comment test can be improved patch 9.2.0736: potential command execution in PHP omni-completion patch 9.2.0735: [security]: arbitrary Ex command execution during C omni-completion runtime(doc): Tweak documentation style and typo patch 9.2.0734: function pointer passed to STRNCMP() instead of a length runtime(cabal): Update compiler, ftplugin, syntax, add indent script patch 9.2.0733: GTK3: GUI slow on X11 since dropping the alpha channel patch 9.2.0732: session: terminal restored using absolute columns/rows patch 9.2.0731: GTK4 GUI scrollbar size not updated when restoring a session patch 9.2.0730: GTK4 GUI tabline is not updated patch 9.2.0729: % skips parens on continued quoted lines runtime(doc): Add installer updates to version9.txt patch 9.2.0728: filetype: supertux info pattern is relative to current dir patch 9.2.0727: popup images not rendered correctly when unfocused patch 9.2.0726: filetype detect missing from completion ==== wacomtablet-kcm6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== xdg-desktop-portal-kde6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * screencast: connect stream closed() on m_streams, not the moved-from vector * Update version for new release 6.7.2 ==== xdg-user-dirs ==== - Add drop-x-gnome-autostart.patch: Allow systemd to manage the start of xdg-user-dirs user service. When X-GNOME-Autostart-Phase is set in a .desktop file, systemd ignores it, and since gnome-session stopped handling services, we ended up with it never beeing started. https://gitlab.freedesktop.org/xdg/xdg-user-dirs/-/work_items/52