Packages changed: GraphicsMagick ImageMagick (7.1.2.31 -> 7.1.2.32) MozillaFirefox (156.0 -> 157.0.1) NetworkManager-applet akonadi (26.08.1 -> 26.08.2) akonadi-calendar (26.08.1 -> 26.08.2) akonadi-calendar-tools (26.08.1 -> 26.08.2) akonadi-contacts (26.08.1 -> 26.08.2) akonadi-import-wizard (26.08.1 -> 26.08.2) akonadi-mime (26.08.1 -> 26.08.2) akonadi-search (26.08.1 -> 26.08.2) akregator (26.08.1 -> 26.08.2) analitza (26.08.1 -> 26.08.2) appstream-glib ark (26.08.1 -> 26.08.2) baloo-widgets (26.08.1 -> 26.08.2) blinken (26.08.1 -> 26.08.2) cairomm calendarsupport (26.08.1 -> 26.08.2) cantarell-fonts (0.303.1 -> 0.311) cups-filters cyrus-sasl dolphin (26.08.1 -> 26.08.2) dracut (112+suse.53.g97cbf62 -> 112+suse.54.g5c7a104) elfutils emacs eventviews (26.08.1 -> 26.08.2) expat (2.8.5 -> 2.9.0) ffmpeg-8 (8.1.2 -> 8.1.3) ffmpegthumbs (26.08.1 -> 26.08.2) gettext-runtime gimp git (2.55.0 -> 2.56.0) glib2 (2.88.3 -> 2.88.4) gnome-control-center gnome-settings-daemon gnome-shell gobject-introspection grantleetheme (26.08.1 -> 26.08.2) gstreamer (1.28.7 -> 1.28.8) gstreamer-devtools (1.28.7 -> 1.28.8) gstreamer-plugins-bad (1.28.7 -> 1.28.8) gstreamer-plugins-base (1.28.7 -> 1.28.8) gstreamer-plugins-good (1.28.7 -> 1.28.8) gstreamer-plugins-libav (1.28.7 -> 1.28.8) gstreamer-plugins-rs (1.28.7 -> 1.28.8) gstreamer-plugins-ugly (1.28.7 -> 1.28.8) gwenview (26.08.1 -> 26.08.2) harfbuzz (14.5.1 -> 14.6.0) highway incidenceeditor (26.08.1 -> 26.08.2) kaccounts-integration (26.08.1 -> 26.08.2) kaccounts-providers (26.08.1 -> 26.08.2) kaddressbook (26.08.1 -> 26.08.2) kalgebra (26.08.1 -> 26.08.2) kamera (26.08.1 -> 26.08.2) kanagram (26.08.1 -> 26.08.2) kapptemplate (26.08.1 -> 26.08.2) kate (26.08.1 -> 26.08.2) kbruch (26.08.1 -> 26.08.2) kcachegrind (26.08.1 -> 26.08.2) kcalc (26.08.1 -> 26.08.2) kcalutils (26.08.1 -> 26.08.2) kcharselect (26.08.1 -> 26.08.2) kcolorchooser (26.08.1 -> 26.08.2) kde-dev-utils (26.08.1 -> 26.08.2) kdeedu-data (26.08.1 -> 26.08.2) kdegraphics-mobipocket (26.08.1 -> 26.08.2) kdegraphics-thumbnailers (26.08.1 -> 26.08.2) kdenetwork-filesharing (26.08.1 -> 26.08.2) kdepim-addons (26.08.1 -> 26.08.2) kdepim-runtime (26.08.1 -> 26.08.2) kdevelop (26.08.1 -> 26.08.2) kdialog (26.08.1 -> 26.08.2) kf6-attica (6.30.0 -> 6.31.0) kf6-baloo (6.30.0 -> 6.31.0) kf6-bluez-qt (6.30.0 -> 6.31.0) kf6-breeze-icons (6.30.0 -> 6.31.0) kf6-frameworkintegration (6.30.0 -> 6.31.0) kf6-karchive (6.30.0 -> 6.31.0) kf6-kauth (6.30.0 -> 6.31.0) kf6-kbookmarks (6.30.0 -> 6.31.0) kf6-kcalendarcore (6.30.0 -> 6.31.0) kf6-kcmutils (6.30.0 -> 6.31.0) kf6-kcodecs (6.30.0 -> 6.31.0) kf6-kcolorscheme (6.30.0 -> 6.31.0) kf6-kcompletion (6.30.0 -> 6.31.0) kf6-kconfig (6.30.0 -> 6.31.0) kf6-kconfigwidgets (6.30.0 -> 6.31.0) kf6-kcontacts (6.30.0 -> 6.31.0) kf6-kcoreaddons (6.30.0 -> 6.31.0) kf6-kcrash (6.30.0 -> 6.31.0) kf6-kdav (6.30.0 -> 6.31.0) kf6-kdbusaddons (6.30.0 -> 6.31.0) kf6-kdeclarative (6.30.0 -> 6.31.0) kf6-kded (6.30.0 -> 6.31.0) kf6-kdesu (6.30.0 -> 6.31.0) kf6-kdnssd (6.30.0 -> 6.31.0) kf6-kdoctools (6.30.0 -> 6.31.0) kf6-kfilemetadata (6.30.0 -> 6.31.0) kf6-kglobalaccel (6.30.0 -> 6.31.0) kf6-kguiaddons (6.30.0 -> 6.31.0) kf6-kholidays (6.30.0 -> 6.31.0) kf6-ki18n (6.30.0 -> 6.31.0) kf6-kiconthemes (6.30.0 -> 6.31.0) kf6-kidletime (6.30.0 -> 6.31.0) kf6-kimageformats (6.30.0 -> 6.31.0) kf6-kio (6.30.0 -> 6.31.0) kf6-kirigami (6.30.0 -> 6.31.0) kf6-kitemmodels (6.30.0 -> 6.31.0) kf6-kitemviews (6.30.0 -> 6.31.0) kf6-kjobwidgets (6.30.0 -> 6.31.0) kf6-kmime (6.30.0 -> 6.31.0) kf6-knewstuff (6.30.0 -> 6.31.0) kf6-knotifications (6.30.0 -> 6.31.0) kf6-knotifyconfig (6.30.0 -> 6.31.0) kf6-kpackage (6.30.0 -> 6.31.0) kf6-kparts (6.30.0 -> 6.31.0) kf6-kplotting (6.30.0 -> 6.31.0) kf6-kpty (6.30.0 -> 6.31.0) kf6-kquickcharts (6.30.0 -> 6.31.0) kf6-krunner (6.30.0 -> 6.31.0) kf6-kservice (6.30.0 -> 6.31.0) kf6-kstatusnotifieritem (6.30.0 -> 6.31.0) kf6-ksvg (6.30.0 -> 6.31.0) kf6-ktexteditor (6.30.0 -> 6.31.0) kf6-ktexttemplate (6.30.0 -> 6.31.0) kf6-ktextwidgets (6.30.0 -> 6.31.0) kf6-kunitconversion (6.30.0 -> 6.31.0) kf6-kuserfeedback (6.30.0 -> 6.31.0) kf6-kwallet (6.30.0 -> 6.31.0) kf6-kwidgetsaddons (6.30.0 -> 6.31.0) kf6-kwindowsystem (6.30.0 -> 6.31.0) kf6-kxmlgui (6.30.0 -> 6.31.0) kf6-modemmanager-qt (6.30.0 -> 6.31.0) kf6-networkmanager-qt (6.30.0 -> 6.31.0) kf6-prison (6.30.0 -> 6.31.0) kf6-purpose (6.30.0 -> 6.31.0) kf6-qqc2-desktop-style (6.30.0 -> 6.31.0) kf6-solid (6.30.0 -> 6.31.0) kf6-sonnet (6.30.0 -> 6.31.0) kf6-syndication (6.30.0 -> 6.31.0) kf6-syntax-highlighting (6.30.0 -> 6.31.0) kf6-threadweaver (6.30.0 -> 6.31.0) kgeography (26.08.1 -> 26.08.2) khangman (26.08.1 -> 26.08.2) khelpcenter (26.08.1 -> 26.08.2) kidentitymanagement (26.08.1 -> 26.08.2) kig (26.08.1 -> 26.08.2) kimap (26.08.1 -> 26.08.2) kio-extras (26.08.1 -> 26.08.2) kio_audiocd (26.08.1 -> 26.08.2) kiten (26.08.1 -> 26.08.2) kitinerary (26.08.1 -> 26.08.2) kldap (26.08.1 -> 26.08.2) kleopatra (26.08.1 -> 26.08.2) kmag (26.08.1 -> 26.08.2) kmahjongg (26.08.1 -> 26.08.2) kmail (26.08.1 -> 26.08.2) kmail-account-wizard (26.08.1 -> 26.08.2) kmailtransport (26.08.1 -> 26.08.2) kmbox (26.08.1 -> 26.08.2) kmines (26.08.1 -> 26.08.2) kmousetool (26.08.1 -> 26.08.2) kmplot (26.08.1 -> 26.08.2) kompare (26.08.1 -> 26.08.2) konsole (26.08.1 -> 26.08.2) kontact (26.08.1 -> 26.08.2) kontactinterface (26.08.1 -> 26.08.2) konversation (26.08.1 -> 26.08.2) korganizer (26.08.1 -> 26.08.2) kpat (26.08.1 -> 26.08.2) kpimtextedit (26.08.1 -> 26.08.2) kpkpass (26.08.1 -> 26.08.2) kqtquickcharts (26.08.1 -> 26.08.2) kreversi (26.08.1 -> 26.08.2) ksanecore (26.08.1 -> 26.08.2) ksmtp (26.08.1 -> 26.08.2) ksudoku (26.08.1 -> 26.08.2) ktextaddons (2.1.2 -> 2.2.0) ktnef (26.08.1 -> 26.08.2) ktouch (26.08.1 -> 26.08.2) kwalletmanager (26.08.1 -> 26.08.2) kwordquiz (26.08.1 -> 26.08.2) libeconf (0.8.4 -> 0.8.5) libgexiv2 (0.14.6 -> 0.14.7) libgravatar (26.08.1 -> 26.08.2) libkcddb-qt6 (26.08.1 -> 26.08.2) libkdcraw (26.08.1 -> 26.08.2) libkdegames (26.08.1 -> 26.08.2) libkdepim (26.08.1 -> 26.08.2) libkeduvocdocument (26.08.1 -> 26.08.2) libkexiv2-qt6 (26.08.1 -> 26.08.2) libkgapi6 (26.08.1 -> 26.08.2) libkleo (26.08.1 -> 26.08.2) libkmahjongg (26.08.1 -> 26.08.2) libkomparediff2 (26.08.1 -> 26.08.2) libksane (26.08.1 -> 26.08.2) libksieve (26.08.1 -> 26.08.2) libstorage-ng (4.5.360 -> 4.5.362) libvirt (12.7.0 -> 12.8.0) libvpx (1.16.0 -> 1.17.0) lokalize (26.08.1 -> 26.08.2) mailcommon (26.08.1 -> 26.08.2) mailimporter (26.08.1 -> 26.08.2) mariadb markdownpart (26.08.1 -> 26.08.2) mbox-importer (26.08.1 -> 26.08.2) messagelib (26.08.1 -> 26.08.2) mimetreeparser (26.08.1 -> 26.08.2) mozilla-nss (3.128 -> 3.129) mutter ncurses okular (26.08.1 -> 26.08.2) open-iscsi openSUSE-release (20261007 -> 20261011) parley (26.08.1 -> 26.08.2) parted pim-data-exporter (26.08.1 -> 26.08.2) pim-sieve-editor (26.08.1 -> 26.08.2) pimcommon (26.08.1 -> 26.08.2) pipewire polkit-default-privs (1550+20260928.d1c0e7e -> 1550+20261009.03465cb) python-dnspython (2.8.0 -> 2.9.0) python313-setuptools (80.9.0 -> 84.0.0) qemu (11.1.1 -> 11.1.2) qrca (26.08.1 -> 26.08.2) signon-kwallet-extension (26.08.1 -> 26.08.2) skanlite (26.08.1 -> 26.08.2) soxr step (26.08.1 -> 26.08.2) svgpart (26.08.1 -> 26.08.2) umbrello (26.08.1 -> 26.08.2) unzip util-linux (2.42.3 -> 2.42.4) util-linux-systemd (2.42.3 -> 2.42.4) vlc webkitgtk3 (2.52.6 -> 2.54.1) webkitgtk4 (2.52.6 -> 2.54.1) wireplumber xdg-desktop-portal xorg-x11-server xterm (410 -> 411) xwayland yelp === Details === ==== GraphicsMagick ==== Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - added patches CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which are self-referencing [bsc#1283767] * GraphicsMagick-CVE-2026-103118.patch ==== ImageMagick ==== Version update (7.1.2.31 -> 7.1.2.32) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - Ensure the different src.rpm have different names. - version update to 7.1.2.32 * Force the system version of zlib in the libjpeg-turbo build. 5f3ddea * Preserve Ultra HDR metadata precision #8938 * Preserve EXIF dimensions during transforms #8937 * latest autoconf update a6ba226 * eliminate compiler warnings 3b5dd62 * eliminate compiler warning 7932a3c * eliminate compiler warning ba5d752 * eliminate compile warning 788a643 * eliminate compile warning 2274d05 * eliminate compiler warnings 1cea164 * eliminate compiler warning b501c08 * eliminate compile warnings 471d079 * eliminate compiler warning c6eda74 * ... f604d6d * eliminate compiler warnings ab76ec8 * replace deprecated -affine option 7ee5fba * Corrected the type in the GetMagickModule define. 96cd772 * Fixed the windows build by reverting some of the changes. f8d3f5e * Removed unnecessary includes. e168300 * Restored the cstring includes in Magick++. 1ef6db5 * Pre-declare libstdc++ global types before MagickCore namespace. 2adb894 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8 af7b850 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w 0e82a4d * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4 12db6f0 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j 1926ccf * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c 15892fc * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6 fb743d6 * eliminate compiler warning ce948a1 * https://github.com/ImageMagick/ImageMagick/issues/8939 1a0d1b7 * eliminate compiler warning 5921a78 * eliminate compiler warning 0fcc3eb * Fix static libuhdr and module linking #8940 * latest autoconf update e6eed39 * fix: preserve destination on UHDR encoder failure #8941 * https://github.com/ImageMagick/ImageMagick/issues/8939 3501ef3 * revert cd53798 * https://github.com/ImageMagick/ImageMagick/issues/8939 72b82a8 * append random hex code to backup filename 6ace963 * match destructor to constructor 960adad * create a secure temporary filename caaad71 * move O_NOFOLLOW to main IM header 989dfd4 * fix: preserve UHDR resize filters #8942 * https://github.com/ImageMagick/ImageMagick/issues/8939 81142c9 * check for '>' terminator on DOCTYPE 3cb153f * revert 08328d8 * improve DOCTYPE block 3ca8bea * cosmetic a5e13b9 * more robuse DOCTYPE parser 399d4bd * Preserve JPEG comments during automatic Ultra HDR decoding #8943 * Reset gain-map canvas before replaying crops #8944 * Fix grayscale Ultra HDR base encoding #8945 * threads heuristic now based on pixel rather than row count 04fd261 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w ce92ae0 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm cafc737 * Compose gain-map crop transforms before rounding #8948 * eliminate compiler warning 8174e9a * eliminate compiler warning ab0c467 * check for connection reset 1532081 * https://github.com/ImageMagick/ImageMagick/issues/8949 9249cab * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q6h4-6f2h-8hfq 2ec49e6 * build(deps): bump ubuntu from `2260313` to `513c074` in /.devcontainer #8951 * Removed incorrect option. c534219 * Disable more parts of libjpeg-turbo in the oss-fuzz build. 599ebe5 * Honor quality settings when transforming retained gain maps #8947 * Revert some of the oss-fuzz changes. a19ff07 * Explicitly set the include dir in the oss-fuzz build to fix libjpeg-turbo issue. 3797e92 * Preserve IPTC profiles during automatic Ultra HDR decoding #8952 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4h52-f5gr-2w2h 2814fa0 * Cache distributed pixel cache shared secret. 6f04f5f * Improved method name. ed3e3ab * No longer include a private header file in a public header file. c9a7583 * Correct exception throwing method. ecb4d97 * More corrections of exception throw methods. 0369b85 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4 e4f7ad9 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r b2d579d * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5 6cfb8d8 * eliminate compiler exception ca20b6b * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx 9e78949 * block file descriptor inheritance c9120e9 * eliminate compiler warning 4129773 * eliminate compiler exception 1eac014 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9 5a5c2e5 * Report buffered output failures when closing blobs #8954 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72 d98509b * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2fgx-26mg-j4f4 15ce9c9 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x 48c49d0 * eliminate compiler warning 281db90 * eliminate compiler warning 9efb94b * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x 2ed1b96 * Moved unpacking of libraw image to a separate method. fef349d * Various security and performance improvements for the ase decoder (GHSA-gwj6-pm7x-3r63) 5ecd5b0 * Added extra security check (GHSA-gwj6-pm7x-3r63) 0691546 * https://github.com/ImageMagick/ImageMagick/issues/8957 9bf9100 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j f053f77 * build(deps): bump the codeql-action group with 3 updates #8960 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5 da4cfd7 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w6hf-vvx5-4qmj 7d3a270 ... changelog too long, skipping 69 lines ... CVE-2026-106570 [bsc#1284667] ==== MozillaFirefox ==== Version update (156.0 -> 157.0.1) Subpackages: MozillaFirefox-branding-upstream - Mozilla Firefox 157.0.1 * Fixed downloads failing on macOS when Firefox is set to ask where to save files but doesn't have permission to access the Downloads folder. (bmo#2077390) * Fixed the sidebar getting stuck on the Bookmarks or AI Chatbot panel for some users. (bmo#2076296) * Fixed the Restore from Backup option not appearing during onboarding on Windows. (bmo#2073401) MFSA 2026-104 * CVE-2026-106016 (bmo#2067465) Mitigation bypass in the File Handling component - Mozilla Firefox 157.0 https://www.firefox.com/en-US/firefox/157.0/releasenotes/ MFSA 2026-97 (bsc#1282929) * CVE-2026-100756 (bmo#2047721) Incorrect boundary conditions in the Audio/Video: Playback component * CVE-2026-100757 (bmo#2049352) Use-after-free in the Widget component * CVE-2026-100758 (bmo#2049792) Sandbox escape in the DOM: Navigation component * CVE-2026-100759 (bmo#2054736) Uninitialized memory in the Storage: Quota Manager component * CVE-2026-100760 (bmo#2058017) Sandbox escape in the Security: Process Sandboxing component * CVE-2026-100761 (bmo#2059020) Privilege escalation due to use-after-free in the Graphics: WebGPU component * CVE-2026-100762 (bmo#2059404) Sandbox escape due to use-after-free in the DOM: Content Processes component * CVE-2026-100763 (bmo#2059929) Incorrect boundary conditions in the Graphics: WebGPU component * CVE-2026-100764 (bmo#2061290) Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component * CVE-2026-100765 (bmo#2061399) Use-after-free in the JavaScript: WebAssembly component * CVE-2026-100766 (bmo#2061526) Information disclosure in the Networking: JAR component * CVE-2026-100767 (bmo#2063680) Use-after-free in the Networking: Cache component * CVE-2026-100768 (bmo#2064832) Use-after-free in the Graphics: WebGPU component * CVE-2026-100769 (bmo#2067190) Use-after-free in the JavaScript: WebAssembly component * CVE-2026-100770 (bmo#2068322) Sandbox escape due to use-after-free in the DOM: Content Processes component * CVE-2026-100771 (bmo#2068336) Undefined behavior in the DOM: Streams component * CVE-2026-100772 (bmo#2068340) Use-after-free in the DOM: Core & HTML component * CVE-2026-100773 (bmo#2068346) Use-after-free in the Storage: IndexedDB component * CVE-2026-100774 (bmo#2068351) Use-after-free in the DOM: Core & HTML component * CVE-2026-100775 (bmo#2068367) Sandbox escape in the Graphics component * CVE-2026-100776 (bmo#2068374) Use-after-free in the JavaScript: WebAssembly component * CVE-2026-100777 (bmo#2068375) Use-after-free in the Graphics: Canvas2D component * CVE-2026-100778 (bmo#2068406) Sandbox escape due to use-after-free in the DOM: Core & HTML component * CVE-2026-100779 (bmo#2068417) Use-after-free in the XSLT component * CVE-2026-100780 (bmo#2068422) Use-after-free in the DOM: Core & HTML component * CVE-2026-100781 (bmo#2068434) Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component * CVE-2026-100782 (bmo#2068456) Privilege escalation due to incorrect boundary conditions in the Graphics component * CVE-2026-100783 (bmo#2069804) Uninitialized memory in the Audio/Video component * CVE-2026-100784 (bmo#2070264) Use-after-free in the Layout: Text and Fonts component * CVE-2026-100785 (bmo#2071064) Use-after-free in the DOM: Core & HTML component * CVE-2026-100786 (bmo#2071067) Sandbox escape due to use-after-free in the Graphics component * CVE-2026-100787 (bmo#2071068) Sandbox escape in the XUL component * CVE-2026-100788 (bmo#2072413) Invalid pointer in the JavaScript: WebAssembly component * CVE-2026-100789 (bmo#2072429) Use-after-free in the Graphics: Canvas2D component * CVE-2026-100790 (bmo#2072432) Use-after-free in the XSLT component * CVE-2026-100791 (bmo#2072433) Use-after-free in the DOM: Core & HTML component * CVE-2026-100792 (bmo#2073266) JIT miscompilation in the JavaScript: WebAssembly component * CVE-2026-100793 (bmo#2073268) JIT miscompilation in the JavaScript Engine component * CVE-2026-100794 (bmo#2028871) Sandbox escape due to incorrect boundary conditions in the ... changelog too long, skipping 83 lines ... - Skip profiling when %want_reproducible_builds is set (boo#1040589) ==== NetworkManager-applet ==== Subpackages: NetworkManager-connection-editor - Update version dependencies according to meson.build. ==== akonadi ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6AkonadiAgentBase6 libKPim6AkonadiAgentWidgetBase6 libKPim6AkonadiCore6 libKPim6AkonadiPrivate6 libKPim6AkonadiWidgets6 libKPim6AkonadiXml6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * ETM: mark re-added ancestor collections as populated - Stop requiring mariadb and qt6-sql-mysql ==== akonadi-calendar ==== Version update (26.08.1 -> 26.08.2) Subpackages: akonadi-plugin-calendar kalendarac libKPim6AkonadiCalendar6 libKPim6AkonadiCalendarCore6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== akonadi-calendar-tools ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== akonadi-contacts ==== Version update (26.08.1 -> 26.08.2) Subpackages: akonadi-plugin-contacts libKPim6AkonadiContactCore6 libKPim6AkonadiContactWidgets6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== akonadi-import-wizard ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6ImportWizard6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== akonadi-mime ==== Version update (26.08.1 -> 26.08.2) Subpackages: akonadi-plugin-mime libKPim6AkonadiMime6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== akonadi-search ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6AkonadiSearch6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== akregator ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== analitza ==== Version update (26.08.1 -> 26.08.2) Subpackages: libAnalitza9 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== appstream-glib ==== Subpackages: libappstream-glib8 - Update version dependencies according to meson.build. ==== ark ==== Version update (26.08.1 -> 26.08.2) Subpackages: libkerfuffle26 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== baloo-widgets ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== blinken ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== cairomm ==== - Update version dependencies according to meson.build. ==== calendarsupport ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6CalendarSupport6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== cantarell-fonts ==== Version update (0.303.1 -> 0.311) - Update to version 0.311: + Also provide a ss01 variant for the "fl" ligature, which I forgot in the last release. + Relax Python version requirements to >= 3.10 when using uv. - Changes from version 0.310: + Extend ss01 to all lowercase 'l' characters and add a feature name. + Improve autohinting of 'я' and disable autohinting for 'Ф' because it rendered badly. + Static fonts will now have PANOSE values. They're incomplete, but better than nothing. + The VF will carry a name ID 25 to help e.g. Adobe apps tell it apart from the statics. Maybe it also helps other apps. + Implement soft-dotting for more glyphs. + Remove unreachable glyphs from font, lightening them by a few bytes. + Updated translations. - Call %meson_test in %check section: there are currently no tests defined yet though. ==== cups-filters ==== Subpackages: cups-filters-cups-browsed - No longer provide the serial backend with 0700 permissions so cupsd does no longer run it as root but as usual as user 'lp' to avoid CVE-2026-95511 "Root arbitrary file overwrite via serial ... device-URI path" https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-m74w-wg6q-vvpj "`lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend" (bsc#1282291) Note the general security advice in the section "Allow printer admin tasks for a normal user" in https://en.opensuse.org/SDB:CUPS_in_a_Nutshell - No longer provide any other backend with 0700 permissions so cupsd does no longer run them as root but as usual as user 'lp' because running something as root by default is a generic security issue which we avoid now by default so the user must set less secure permissions manually only as specifically needed. In particular longer provide /usr/lib/cups/backend/beh /usr/lib/cups/backend/cups-brf /usr/lib/cups/backend/implicitclass with 0700 permissions by default so in particular https://bugzilla.opensuse.org/show_bug.cgi?id=1178604 re-appears but security by default is mandatory nowadays, cf. the sections "Security: Make Things Not Just Work" and "Automated print queue setup via cups-browsed" in https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings ==== cyrus-sasl ==== Subpackages: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-plain libsasl2-3 - Fix heap-based buffer overflow in DIGEST-MD5 add_to_challenge(): buffer size was not recomputed after quoting expanded the value, allowing a malicious server to overflow the client heap. (bsc#1284687) CVE-2026-107161 * add cyrus-sasl-digestmd5-quote-overflow.patch - Clean up an synchronize changes - Fix packages for Immutable Mode - cyrus-sasl (jsc#PED-14856) ==== dolphin ==== Version update (26.08.1 -> 26.08.2) Subpackages: dolphin-part libdolphinvcs6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * CI: Comment flatpak job * confirmationssettingspage: Set vertical text alignment for form labels * kstandarditemlistwidget: Fix poorly legible selection text with certain styles and color schemes (kde#524851) * folderspanel: set hightLightEntireRow for view (kde#486383) * dolphinview: Refresh the default zoom level when previews are toggled (kde#524842) * viewproperties: keep the style chosen for a special folder (kde#501442) ==== dracut ==== Version update (112+suse.53.g97cbf62 -> 112+suse.54.g5c7a104) - Update to version 112+suse.54.g5c7a104: * fix(systemd-pcrextend): add systemd-pcrextend.socket ==== elfutils ==== Subpackages: libasm1 libdw1 libelf1 - fix description typos ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox etags - Disable test41 of tramp as this fails - Fix lexical bindings in site-lisp path again (boo#1277717) ==== eventviews ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6EventViews6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== expat ==== Version update (2.8.5 -> 2.9.0) Subpackages: libexpat1 - update to 2.9.0: * Security fixes: * CVE-2026-102633, bsc#1283493: integer overflow in expat_realloc on 32bit platforms * CVE-2026-77214, bsc#1284334: out-of-bounds read in XML_ParseBuffer due to missing validation of the len parameter * drop the patch, fixed upstream: * expat-CVE-2026-102633.patch * Bug fixes: * Handle OOM when copying encodingName in XML_ParserReset * New features: * Properties API to get and set scalar properties of a parser * Five new 64bit location API functions ==== ffmpeg-8 ==== Version update (8.1.2 -> 8.1.3) Subpackages: libavcodec62 libavfilter11 libavformat62 libavutil60 libswresample6 libswscale9 - Correctly enable apv encoder, encoder is named liboapv. - Update to release 8.1.3 * More robust parsing of formats - Delete ffmpeg-8-CVE-2026-58049.patch, ffmpeg-8-CVE-2026-64833.patch, ffmpeg-8-CVE-2026-64834.patch, ffmpeg-8-CVE-2026-65703.patch, ffmpeg-8-CVE-2026-65704.patch, ffmpeg-8-CVE-2026-65705.patch, ffmpeg-8-CVE-2026-65706.patch, ffmpeg-8-CVE-2026-66037.patch, ffmpeg-8-CVE-2026-70628.patch, ffmpeg-8-CVE-2026-70629.patch, ffmpeg-8-CVE-2026-70630.patch, ffmpeg-8-CVE-2026-70631.patch, ffmpeg-8-CVE-2026-70632.patch, ffmpeg-8-CVE-2026-75141.patch, ffmpeg-8-CVE-2026-75142.patch, ffmpeg-8-CVE-2026-75143.patch, ffmpeg-8-CVE-2026-75144.patch, ffmpeg-8-CVE-2026-75145.patch, ffmpeg-8-CVE-2026-75146.patch, ffmpeg-8-CVE-2026-75147.patch, ffmpeg-8-CVE-2026-66036-shim01.patch (merged) - Delete ffmpeg-8-CVE-2026-66036.patch (feature patch not accepted upstream for 8.x) - Enable apv encoder support, add pkgconfig(oapv) BuildRequires and pass enable-liboapv to configure. - Add 0001-avcodec-liboapvenc-fix-build-with-openapv-1.1.patch ==== ffmpegthumbs ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== gettext-runtime ==== Subpackages: envsubst libtextstyle0 - Add lexical-binding statement to suse-start-po-mode.el to fix emacs 31 warning on startup ==== gimp ==== Subpackages: gimp-plugin-aa gimp-plugin-python3 libgimp-3_0-0 libgimpui-3_0-0 - CVE-2026-96546: one-byte out-of-bounds heap read in the uncompressed DDS loader (bsc#1282601) * gimp-CVE-2026-96546.patch - CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#1282596) * gimp-CVE-2026-97185.patch ==== git ==== Version update (2.55.0 -> 2.56.0) Subpackages: git-core git-email git-gui git-svn git-web gitk perl-Git - update to 2.56.0: - UI, Workflows & Features - Advice shown by "git status" when the local branch is behind or has diverged from its push branch has been updated to suggest "git pull ". - The handling of promisor-remote protocol capability has been updated to allow the other side to add to the list of promisor remotes via the 'promisor.acceptFromServerURL' configuration variable. - The 'ort' merge backend has been hardened against corrupt trees by ensuring it aborts under appropriate error conditions. - The `fetch.followRemoteHEAD` configuration variable has been added to provide a default for the per-remote `remote..followRemoteHEAD` setting. - "git log --follow" has been updated to better handle non-linear history, in which the path being tracked gets renamed differently in multiple history lines. - The "git repo info" command has been taught new keys to output both absolute and relative paths for "gitdir" and "commondir", supported by a new path-formatting helper extracted from "git rev-parse". - When 'git push origin/main' or 'git branch origin main' is run, the command is now recognized as a potential typo, and advice has been added to offer a typo fix. - The 'git refs' toolbox has been extended with new 'create', 'delete', 'update', and 'rename' subcommands to create, delete, update, and rename references, respectively. - The experimental 'git history' command has been taught a new 'drop' subcommand to remove a commit, with its descendants replayed onto its parent. - The alignment of commit object name abbreviations in 'git blame' output has been optimized to reserve a column for marks (caret, question mark, or asterisk) only when such marks are actually shown. - Option parsing with 'git rev-parse --parseopt' and in most 'git' subcommands has been updated to exit with 0 (instead of 129) when the help option ('-h' or '--help') is requested directly by the user, aligning with standard Unix convention. - The '[includeIf "condition"]' conditional inclusion facility for configuration files has been taught to use the location of the worktree in its condition. - The usage string and SYNOPSIS for 'git fast-export' have been standardized to make them consistent with each other and with other commands. - 'git log --graph' has been modified to visually distinguish parentless 'root' commits (and commits that become roots due to history simplification) by indenting them, preventing them from appearing falsely related to unrelated commits rendered immediately above them. - Userdiff patterns for Swift have been added, with support for Swift-specific constructs such as attributes, modifiers, failable initializers, and generics. - Configuration file locking has been updated to retry for a short period, avoiding failures when multiple processes attempt to update the configuration simultaneously. - The 'remote-object-info' command has been added to 'git cat-file --batch-command', allowing clients to request object metadata (currently size) from a remote server via protocol v2 without downloading the entire object. Format placeholders are dynamically filtered on the client based on server-advertised capabilities, returning empty strings for inapplicable or unsupported fields. - 'git branch -d' has been taught to report when a branch cannot be deleted because it is being used in an active bisect run. - 'git mv' has been updated to check for a missing destination leading directory during the checking phase, allowing 'git mv - n' to report the failure. The error message when the rename(2) syscall fails has also been improved to name both the source and the destination. - 'git add' has been taught a new '--resolved' option to stage conflict-resolved paths, while leaving unrelated local changes unstaged. It scans the unmerged paths for leftover conflict markers and aborts if any are found. - The known limitations of the ref format migration in 'git refs' have been moved to be displayed as a warning admonition directly under the description of the 'migrate' subcommand, improving visibility. A reference to 'git-maintenance' has also been corrected to use the 'linkgit' macro. - The 'git bisect' command has been taught a '--reset-when-found[=]' option that tells the command to automatically run 'git bisect reset' to jump back to the original state or to the found culprit. - The 'git branch' command has been taught the '--delete-merged' option to remove local branches that are already merged into their tracked remote-tracking branches. - The 'remote-object-info' command for 'git cat-file - -batch-command' has been extended to support the '%(objecttype)' placeholder. - The usage string of 'git fast-import' has been updated to use the parse_options() API for displaying help, and its SYNOPSIS in the documentation has been standardized to match. - The error message given by 'git send-email' when a message file is missing a 'Subject:' header has been clarified, and the error string is now terminated with a newline so that Perl avoids appending its internal source location data. - The '--shallow-file' option of 'git' command requires a value, but the code did not check the presence of a value and ... changelog too long, skipping 702 lines ... c486c1df72 hk/typofix later to maint). ==== glib2 ==== Version update (2.88.3 -> 2.88.4) Subpackages: glib2-tools libgio-2_0-0 libgirepository-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 typelib-1_0-GIRepository-3_0 typelib-1_0-GLib-2_0 typelib-1_0-GLibUnix-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - Update to version 2.88.4: * Bugs fixed: + gio/tests/services: - Installed service file contains build path - Fix installed service file containing build path + docs: Fix gio gi-docgen docs_url + gconstructor: Reference _tls_used also on GCC, CLang + fix: handle long filenames in trash by truncating from front + Backport various security fixes * Updated translations. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces gnome-control-center-users - Add libgnome-volume-control-Avoid-NULL-deref.patch: Avoid NULL deref when card has no active profile (bsc#1278300 glgo#GNOME/libgnome-volume-control!38) ==== gnome-settings-daemon ==== - Add libgnome-volume-control-Avoid-NULL-deref.patch: Avoid NULL deref when card has no active profile (bsc#1278300 glgo#GNOME/libgnome-volume-control!38) ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar - Add libgnome-volume-control-Avoid-NULL-deref.patch: Avoid NULL deref when card has no active profile (bsc#1278300 glgo#GNOME/libgnome-volume-control!38) ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - Add upstream setuptools84.patch to fix build with setuptools v84 ==== grantleetheme ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6GrantleeTheme6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== gstreamer ==== Version update (1.28.7 -> 1.28.8) Subpackages: gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.28.8: * Highlighted bugfixes: + Various security fixes and playback fixes + Fix adaptivedemux2 HLS and DASH playback regression + Fix FLAC audio seeking regression + Various RTP depayloader and RTSP client SDP handling fixes + MXF demuxer: Added support for reading AAF AIFF-AIFC audio + VA-API compositor: Fix alpha blending with Intel driver + Windows media audio/video seeking improvements + AMD AMF AV1 video encoder force-keyframe fixes + Fix endless drain in some FFmpeg wrapper audio encoders and support dual mono hlssink3 improvements + ISOBMFF dash/iso/fmp4 muxer fixes for timestamp rollover in 2036 + cerbero: Rework checksum verification to allow mirror retries + Various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements * gstreamer: + baseparse: Fix accumulating of detection buffers + buffer: Don't leave buffers with dangling memory pointers if appending memory fails + buffer: Prevent NULL pointer dereferences when deserializing reference timestamp meta + value: fix crash when comparing mixed-type lists + ptp: Fix build failures with Rust 1.99 - Rebase gstreamer-pie.patch with quilt. - Migrate to xz compression and manual service run. ==== gstreamer-devtools ==== Version update (1.28.7 -> 1.28.8) - Update to version 1.28.8: * No changes, stable bump only. - Migrate to xz compression and manual service run ==== gstreamer-plugins-bad ==== Version update (1.28.7 -> 1.28.8) Subpackages: libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgsthip-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.28.8: * adpcmenc: stop the IMA encode loop before reading past the input frame * amfav1enc: Force a key frame on force-key-unit * ccutils: Miscellaneous parsing fixes * closedcaption: Use truncated length when converting CEA708 / CEA608 S334-1A data too * d3d12: Various GstBaseTransform::transform_meta() related fixes * hipevent: Fix device ID getter * hipmemory: Fix minor leak and typo * jpegparse: handle missing NUL terminator in COM segment * mpegts: fix GError usage in a loop * mxfdemux: Add support for reading AAF AIFF-AIFC audio * mxfmux: Fix possible crash when adding a new segment due to frame reordering * nvh264dec: Fix top field POC in DPB entry * rsvgdec: Fix out-of-bounds read when scanning for SVG end tag * rtp: Various small (RTP and not) depayloader fixes * segmentationoverlay: + Fix off-by-one bug and add test + Respect video meta strides * va: compositor: Fix alpha blending with Intel driver * vmaf: use GST_PARAM_DOC_SHOW_DEFAULT for "threads" property * vulkan: + encoder: DPB slots and DBP barrier fixes + h26x enc/dec misc fixes + tests: examples fixes * webrtc/nice: Fix crash in nice_candidate_free during gather - Refresh spandsp3.patch with quilt. - Migrate to xz compression and manual service run - Add pkgconfig(libfreeaptx) BuildRequires and stop passing openaptx=disable to meson setup, build aptx support. Also drop the conditional pkgconfig(libopenaptx) BuildRequires. ==== gstreamer-plugins-base ==== Version update (1.28.7 -> 1.28.8) Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.28.8: * appsink: Reset EOS state on PAUSED → READY * audio-resampler-neon: handle Thumb1-only builds correctly * audio-resampler-neon: Follow-up from "fix Thumb encoding and use Clang O2 calculation for strides" * audio: video: Validate audio/video meta deserialization & other meta deserialization fixes * audioconverter: guard against NULL input in do_convert_out * sdpmessage: Avoid sign bit when hex-escaping chars * udmabuf: Open device with O_RDONLY instead O_RDWR * videoconvertscale: Take GstVideoMeta into account when converting - Rebase patches with quilt. - Migrate to xz compression and manual service run. - Drop required versions define, manually set it, as the obs ignores the define. ==== gstreamer-plugins-good ==== Version update (1.28.7 -> 1.28.8) Subpackages: gstreamer-plugins-good-gtk - Update to version 1.28.8: * adaptivedemux2: + Drain downloadhelper main context with the main context as the thread default + SIGABRT in downloadhelper_stop() draining transfer context + Remove redundant hls_dep fallback, re-enabling unit tests * audiofx: Miscellaneous FIR filter fixes * flacparse: + regression since 1.28 - valid FLAC errors out with "Internal data stream error" after a seek + Fix resyncing after a seek * matroska: Use the display unit for storing the display aspect ratio more accurately * matroskamux: DisplayWidth rounding loses aspect ratio for non-integer PARs * matroskademux: fix crash caused by bogus xiph codec data packet sizes * qtmux: preserve earliest reordered presentation time * rtph265depay: Check for short packets before processing them * rtph265pay: unmap the RTP header before appending the payload * rtpsession: Ignore SDES priv RTCP packets with invalid lengths * rtp: Various small (RTP and not) depayloader fixes * rtpL8depay, rtpL16depay, rtpL24depay: fix out of bounds write for high channel count * rtspsrc: + Fix handling of missing control attribute with multiple media sections + SIGSEGV in gst_rtspsrc_setup_streams_start() when an SDP media section has no a=control attribute * v4l2: + fix guint overflow in calculate_max_sizeimage + object: Don't corrupt the caller's filter caps when probing - Migrate to xz compression and manual service run ==== gstreamer-plugins-libav ==== Version update (1.28.7 -> 1.28.8) - Update to version 1.28.8: * avaudenc: Fix endless drain of encoders that support flushing * avcodecmap: Take the dual mono case into account * avenc_tta: Allow up to 16 channels and use that in the 16 channel test * Disable OMX encoders and decoders - Update version dependencies according to meson.build - Drop leftover doc subpackage from spec, not built for many years - Migrate to xz compression and manual service run ==== gstreamer-plugins-rs ==== Version update (1.28.7 -> 1.28.8) - Update to version 1.28.8: * fmp4mux: Fix racy test_large_gop_split_at_fragment_boundary_chunked test * gifdec: + error out if a frameless GIF is somehow supplied + error out if a frameless GIF is somehow supplied, try 2 * HLS sink improvements * isobmff: Fix NTP seconds roll-over past 2036 * raptorq: Downgrade to 2.0.0 again * reqwesthttpsrc: Handle empty response chunks * rtspsrc2: Fix handling of scheme and parameter parsing * Reapply "Switch to aws-lc-rs" * Update dependencies * meson: Skip validate-plugins if gstreamer-validate-1.0 is missing - Update version dependencies according to meson.build. - Migrate to xz compression and manual service run ==== gstreamer-plugins-ugly ==== Version update (1.28.7 -> 1.28.8) - Update to version 1.28.8: * asfdemux: + Explicitly set packet to zero if seek_time is zero + Clamp simple index entry count against the available data size * rtpasfdepay: Ignore zero-length ASF packets - Migrate to xz compression and manual service run ==== gwenview ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== harfbuzz ==== Version update (14.5.1 -> 14.6.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 14.6.0: * Fix shaping failures caused by out-of-range glyph IDs, a regression from * Update experimental beyond-64k support to the final ISO Open Font Format 5th edition. This support remains disabled by default. * Add support for the `DMAP` table. * Support `FeatureVariations` 1.1 lookup variations, including subsetting and instancing. * Update `VARC` to the revised variation-store format. The new format is incompatible with the previous one. * Various `VARC` fixes. * Fix background color and stride handling in the experimental raster library. * Improve the experimental Rust shaper (HarfRust) and font functions (`fontations`), and update HarfRust to 0.14. * Various subsetting fixes and improvements. * Various fixes for malformed fonts. * Various build and CI fixes. ==== highway ==== - Disable LTO for aarch64 as a Workaround for "error: this operation requires the SVE ISA extension" - Add upstream patch to fix build on aarch64 with gcc16: * gcc16-aarch64.patch ==== incidenceeditor ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6IncidenceEditor6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Fix LSAN failure in conflictresolvertest ==== kaccounts-integration ==== Version update (26.08.1 -> 26.08.2) Subpackages: libkaccounts6-2 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * CI: Remove Qt5 build ==== kaccounts-providers ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kaddressbook ==== Version update (26.08.1 -> 26.08.2) Subpackages: kaddressbook-doc libKPim6AddressbookImportExport6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kalgebra ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kamera ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kanagram ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kapptemplate ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kate ==== Version update (26.08.1 -> 26.08.2) Subpackages: kate-plugins - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * it makes no sense to detach if we are not in a terminal (kde#525600) ==== kbruch ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kcachegrind ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kcalc ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Use more KDE mirrors of GNU software * Use KDE mirror of MPFR to avoid reliability issues with GNU infrastructure ==== kcalutils ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6CalendarUtils6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kcharselect ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kcolorchooser ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kde-dev-utils ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kdeedu-data ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kdegraphics-mobipocket ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kdegraphics-thumbnailers ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * gscreator: Return early if img allocation failed ==== kdenetwork-filesharing ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kdepim-addons ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Fix Qt 6.12 build ==== kdepim-runtime ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kdevelop ==== Version update (26.08.1 -> 26.08.2) Subpackages: kdevplatform libkdevplatform66 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kdialog ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kf6-attica ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Attica6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-baloo ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-baloo-file kf6-baloo-imports kf6-baloo-kioslaves kf6-baloo-tools libKF6Baloo6 libKF6Baloo6-lang libKF6BalooEngine6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * [Codecs] Replace some pointers with references * [Codecs] Fix varint helper const correctness * kinotify: handle gracefully event overflow * [Codecs] Drop the undefined const overload of getVarint32Ptr * [Term] Remove unused Term(const QString&) constructor * Change internal AdvancedQueryParser class to QueryParser namespace * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-bluez-qt ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-bluez-qt-imports libKF6BluezQt6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-breeze-icons ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6BreezeIcons6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Centre the 64px mimetype icons in their canvas (kde#508535) * Centre the 32px mimetype icons in their canvas * Use ECMInstalledLibraryCheck * Add a tab-close icon instead of linking to window-close * Add audio-speakers-bluetooth, and the other names PipeWire asks for * Draw audio-speakers at 22 * Add Zeal tray icon to status * Update version to 6.31.0 ==== kf6-frameworkintegration ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-frameworkintegration-plugin libKF6Style6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Update version to 6.31.0 ==== kf6-karchive ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Archive6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * k7zip: fix integer promotion when decoding numbers * Use ECMInstalledLibraryCheck * Fix leak of rootDir in KArchive * Update version to 6.31.0 ==== kf6-kauth ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kauth-lang libKF6AuthCore6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kbookmarks ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Bookmarks6 libKF6BookmarksWidgets6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kcalendarcore ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Android platform calendar plugin: drop no longer needed version check * Use ECMInstalledLibraryCheck * Enable LSAN in CI * Fix memory leaks with libical 4 * Copy xCal element names during parsing * Update version to 6.31.0 ==== kf6-kcmutils ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kcmutils-imports libKF6KCMUtils6 libKF6KCMUtilsCore6 libKF6KCMUtilsQuick6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Fix margins of QML kcms * qml: rework separator API, deprecate extraFooterTopPadding * Use ECMInstalledLibraryCheck * kpluginproxymodel: return value is a boolean not an int * Remove unimplemented methods * Update version to 6.31.0 ==== kf6-kcodecs ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Codecs6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Too many changes to list here. ==== kf6-kcolorscheme ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6ColorScheme6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * KColorSchemeManager: drop code variant for Qt < 6.10 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kcompletion ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Completion6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * [mem leak] action and qactiongroup parent to this. * Update version to 6.31.0 ==== kf6-kconfig ==== Version update (6.30.0 -> 6.31.0) Subpackages: kconf_update6 kf6-kconfig-imports libKF6ConfigCore6 libKF6ConfigGui6 libKF6ConfigQml6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * KConfigSourceGenerator: Add explicit moc include when we use macros that need moc generation * Use ECMInstalledLibraryCheck * Fix writing empty path entries (kde#487212) * 'Open' should have CTRL(O) * kstandardshortcut: refactor internal shortcut handling * KStandardShortcut: Fix using a null key sequence for removed shortcuts (kde#518683) * Update version to 6.31.0 ==== kf6-kconfigwidgets ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6ConfigWidgets6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * KLanguageButton: fix repainting issues * KLanguageButton: fix the language menu overflow (kde#471293) * Use ECMInstalledLibraryCheck * kstandardaction remove whatsthis for ShowMenubar action. Deduplicate "show" "menubar" text * Fix test to work with Qt 6.12 * Update version to 6.31.0 ==== kf6-kcontacts ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Contacts6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kcoreaddons ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kcoreaddons-imports libKF6CoreAddons6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * about: Prefer AppStream data from the same prefix * Use ECMInstalledLibraryCheck * kjob: Expose type as QML * Introducing KSafeStringError * Properly support Format::LongMode in formatTime() * CMake config file: ensure ECM's UDev/LibMount find modules w/ static builds * Update version to 6.31.0 ==== kf6-kcrash ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Crash6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kdav ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6DAV6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Fix documentation formatting * Add DavPushUnregisterJob for unsubscribing dav push notifications * Add davpushregistrationjob for subscribing DavPush notifications * Add DavItemsSyncJob that fetches only changed items using sync-token * Add detection of sync-tag property in collection fetch * Add DavPushDontNotify to item and collection operations * Use ECMInstalledLibraryCheck * Fix CI tests by closing conncetions after each requests * Fix since version * Update version to 6.31.0 ==== kf6-kdbusaddons ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kdbusaddons-tools libKF6DBusAddons6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kdeclarative ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kdeclarative-imports libKF6CalendarEvents6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kded ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Fix ordering on Plasma 6.8 (kde#525764) * Update version to 6.31.0 ==== kf6-kdesu ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Su6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kdnssd ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kdoctools ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6DocTools6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * kde-include-common.xsl.cmake fix build warning "failed to load" "pt-BR.xml" * Update version to 6.31.0 ==== kf6-kfilemetadata ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6FileMetaData3 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Fix abort in malformed file * Use ECMInstalledLibraryCheck * FFmpegExtractor: Extract Apple-proprietary metadata * FFmpegExtractor: Extract GPS latitude and longitude * FFmpegExtractor: Extract creation time * Fix exception crash on malformed files * Update version to 6.31.0 ==== kf6-kglobalaccel ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6GlobalAccel6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kguiaddons ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kguiaddons-imports libKF6GuiAddons6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * CMake config file: update wayland dep checks w/ static builds * Update version to 6.31.0 ==== kf6-kholidays ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kholidays-imports libKF6Holidays6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update Belgian (French-speaking) holidays * Update version to 6.31.0 ==== kf6-ki18n ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-ki18n-imports libKF6I18n6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * KF6I18nQml: list Qt6::QmlIntegration in public link interface * Use ECMInstalledLibraryCheck * The old URL stopped being valid * Update version to 6.31.0 ==== kf6-kiconthemes ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kiconthemes-imports libKF6IconThemes6 libKF6IconWidgets6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Deprecate KIconLoader::loadScaledIcon overload with int type size arg * KIconLoader::loadIcon/loadScaledIcon(): forward directly to implementation * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kidletime ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kidletime-plugins libKF6IdleTime6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kimageformats ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Enable LSAN in CI * EXR: store of "adobe_rsrc" attribute with XMP/EXIF/Resolution data * EXR: support for metadata saved by Photoshop * ANIHandler::nextImageDelay: Protect against overflow * autotests: add AVIF image-grid image to read test * ossfuzz: update libaom to 3.15.0 * EXR: fix alpha channel imperpretation * EXR: RGB / YC subtype support * Update version to 6.31.0 ==== kf6-kio ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6KIO6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Too many changes since 6.30.0, only listing bugfixes: * KCoreDirLister: update search results when a file is deleted or renamed (kde#392456) * KNewFileMenu: resolve symlink targets when creating a new link (kde#525084) * workers/ftp: implement proper file modification timestamps using RFC3659 (kde#510976) * kdirlister: keep entries that share a name but not a url (kde#524791) * KFileItem: detect locally mounted remote filesystems in isSlow() (kde#460127) * trash: Watch physical trash directories for changes (kde#465581) ==== kf6-kirigami ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kirigami-imports libKirigamiPlatform6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Too many changes since 6.30.0, only listing bugfixes: * columnview: Fix rapid touch taps not working by fasttracking anim (kde#523866) * ActionsMenu: Tie loader's visibility to its action's visibility (kde#525225) * ActionsMenu: Tie separator's visibility to its action's visibility (kde#525225) * PlatformTheme: Insert frameContrast to the data (kde#525364) * Revert "Add textFormat property to other delegates" (kde#525837) ==== kf6-kitemmodels ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kitemmodels-imports libKF6ItemModels6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Add more missing doc for QML interfaces * ksortfilterproxymodel: Improve documentation * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kitemviews ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6ItemViews6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kjobwidgets ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6JobWidgets6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kmime ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Mime6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-knewstuff ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-knewstuff-imports libKF6NewStuffCore6 libKF6NewStuffWidgets6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-knotifications ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-knotifications-imports libKF6Notifications6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Fix handling of deleted audio notifications (kde#525380) * Use ECMInstalledLibraryCheck * CMake config file: ensure ECM's Canberra find module w/ static builds * Merge audio plugin into other plugins * Update version to 6.31.0 ==== kf6-knotifyconfig ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6NotifyConfig6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kpackage ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Package6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kparts ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Parts6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kplotting ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kpty ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Pty6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kquickcharts ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * LegendDelegate: Force name to be plain text * Update version to 6.31.0 ==== kf6-krunner ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Runner6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * AbstractRunnerTest: Utilize std::make_unique rather than calling .reset * Port away from deprecated QSortFilterProxyModel::invalidateFilter * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kservice ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Service6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Keep the shortest inheritance level when merging duplicate offers * Update version to 6.31.0 ==== kf6-kstatusnotifieritem ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6StatusNotifierItem6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Remove unimplemented method + not existing forward declaration * Update version to 6.31.0 ==== kf6-ksvg ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-ksvg-imports libKF6Svg6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-ktexteditor ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6TextEditor6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * autotests: Verify when opening test files * vi-mode: Allow numpad digits to be used as count * .kde-ci.yml - use run-installed-library-check-on with platform list * keep m_cursor & m_displayCursor better in sync (kde#525170) * a11y: Fix text boundary offsets (kde#523883) * vi-mode: Add binary format to addition commands * vi-mode: Fix behavior of operation commands on numbers * vi-mode: Implement addition/substraction commands for visual modes * ensure we do some initial reload if we just enabled auto reload in the prompt (kde#524241) * move color theme selector to 'View' as that is view local (kde#518920) * Use ECMInstalledLibraryCheck * vi-mode: Fix motion for the backspace key * KateIconBorder: Fill the blank area at the end * Escape file path before using it as error text * Add missing include * Update version to 6.31.0 ==== kf6-ktexttemplate ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6TextTemplate6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-ktextwidgets ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kunitconversion ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6UnitConversion6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * CMake config file: add missing dep checks for static builds * Fix typos * Update version to 6.31.0 ==== kf6-kuserfeedback ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kuserfeedback-imports kf6-kuserfeedback-lang libKF6UserFeedbackCore6 libKF6UserFeedbackWidgets6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kwallet ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kwallet-tools kwalletd6 libKF6Wallet6 libKF6WalletBackend6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * ksecretd: Rename setter for clarity * Use enum instead of int in function signature * ksecretd: Drop unused entryUpdated signal * ksecretd: Don't call emitEntryUpdated in writePassword * ksecretd: Drop redundant writeEntry function * ksecretd: Preserve entry type in setLabel * ksecretd: Remove unneeded null check in internalClose * ksecretd: Use find_if in KSecretD::findWallet * ksecretd: Simplify destruction * ksecretd: Drop KWalletTransaction::OpenFail * ksecretd: Manage KWalletTransaction as move-only type * ksecretd: Use QScopedValueRollback * ksecretd: Remove empty KWalletTransaction dtor definition * ksecretd: Drop Unknown transaction type * ksecretd: Drop dead code in transaction handling * ksecretd: Use QFuture for changing password * ksecretd: Use QFuture for opening the wallet * Update version to 6.31.0 ==== kf6-kwidgetsaddons ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6WidgetsAddons6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * KActionMenuTest::testActionMenu: fix leaking util widget instance * KDatePickerTest/KDateComboBoxTest: use QTest's static initMain() utility * Use ECMInstalledLibraryCheck * KCharSelectData::openDataFile: Check open succeeds * Update version to 6.31.0 ==== kf6-kwindowsystem ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-kwindowsystem-imports libKF6WindowSystem6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-kxmlgui ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6XmlGui6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * kxmlguiwindow: don't hardcode bug report address * Only add noMerge to the menu if we're really saving a merged menu * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-modemmanager-qt ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6ModemManagerQt6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Fix since version in documentation * Update manager interface to latest MM API * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-networkmanager-qt ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-networkmanager-qt-imports libKF6NetworkManagerQt6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-prison ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-prison-imports libKF6Prison6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Add separate CMake config file for KF6PrisonScanner * Update version to 6.31.0 ==== kf6-purpose ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-purpose-services libKF6Purpose6 libKF6PurposeWidgets6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * JobDialog: Fix translation call when cancelling * Use ECMInstalledLibraryCheck * plugins/bluetooth: Escape html * Update version to 6.31.0 ==== kf6-qqc2-desktop-style ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * add DoubleSpinBox (kde#526008) * Update version to 6.31.0 ==== kf6-solid ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-solid-tools libKF6Solid6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Always check that we don't pass a nullptr to CFRelease * Update version to 6.31.0 ==== kf6-sonnet ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-sonnet-imports libKF6SonnetCore6 libKF6SonnetUi6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * core/Settings: Make a few functions invokable * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-syndication ==== Version update (6.30.0 -> 6.31.0) Subpackages: libKF6Syndication6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kf6-syntax-highlighting ==== Version update (6.30.0 -> 6.31.0) Subpackages: kf6-syntax-highlighting-imports libKF6SyntaxHighlighting6 - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Perl: Missing operators, fix END section, operators style, heredoc languages, POD fix * systemd unit: update to systemd v262 * Use ECMInstalledLibraryCheck * Zsh: prefer 'Parameter Expansion Operator' to 'Control' for ',' in subscript (i.e. $foo[1,2]) * Zsh: remove identical contexts or replaces rules with * Zsh: fix some forms of floating number using separator * Zsh: use Base style for anything that refers to base change and BaseN for associated numbers * Zsh: use 'Replacement String' style in ${foo/patt/rep} * Zsh: glob: enclosed characters: fix ']', '-' and '!' at the beginning of the pattern * Zsh: replace ' &tab;' with '&ws;' entity * Zsh: fix subscripting expansion followed by modifier (i.e. ${s:1:4:h}) * Zsh: glob modifier: add :f, :F, :w and :W ; :s behaves like with brace parameter * Zsh: add f, F, w and W modifiers with variable when braces are absent * Zsh: remove :x and :& modifier with variable when braces are absent * Zsh: fix :s modifier with variable when braces are absent * Zsh: fix subscript chain with variable when braces are absent, the second and subsequent ones are patterns * Zsh: remove VarNameParam+ context and replace its use with VarNameSubstLen * Zsh: add brace command substitution of zsh-5.10: `${ cmd }`, `${|cmd}` and `${{param} cmd}` * Zsh: add `$[...]` equivalent to arithmetic expansion `$((...))` * Zsh: fix subscript and variable substring * Zsh: fix glob subscript after modifier when braces are absent (i.e. $x:h[...]) * Zsh: fix digits after modifiers h and t when braces are absent (i.e. $foo:h3) * Zsh: fix value of character in arithmetic context (i.e. ##c and #word) * use offscreen plugin for the one UI test * Add LRC Lyrics syntax highlighting * Update version to 6.31.0 ==== kf6-threadweaver ==== Version update (6.30.0 -> 6.31.0) - Update to 6.31.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.31.0 - Changes since 6.30.0: * Update dependency version to 6.31.0 * Use ECMInstalledLibraryCheck * Update version to 6.31.0 ==== kgeography ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== khangman ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== khelpcenter ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kidentitymanagement ==== Version update (26.08.1 -> 26.08.2) Subpackages: kidentitymanagement-lang libKPim6IdentityManagementCore6 libKPim6IdentityManagementWidgets6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kig ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kimap ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6IMAP6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kio-extras ==== Version update (26.08.1 -> 26.08.2) Subpackages: libkioarchive6-6 trash_kcm - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Thumbnail worker: fix unneeded scaling of folder pixmaps and sub thumbs ==== kio_audiocd ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kiten ==== Version update (26.08.1 -> 26.08.2) Subpackages: fonts-KanjiStrokeOrders - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kitinerary ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6Itinerary6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Fix SBB QR code matching pattern to cover current Bern Tickets * Add Snållåget PDF ticket extractor script * Adapt Entur extractor to a new/alternative ticket PDF layout * Fix reading date values from JSON with Qt 6.13 * accor: Prefer checkin/out dates from JSON-LD data * feat: support Spanish bus tickets from ALSA * Add extractor for Delta Air Lines emails * Add extractor for Frontier Airlines emails * Support "English" Ouigo tickets ==== kldap ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6LdapCore6 libKPim6LdapWidgets6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kleopatra ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kmag ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kmahjongg ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kmail ==== Version update (26.08.1 -> 26.08.2) Subpackages: kmail-application-icons ktnef - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Fix mem leak here * Avoid mem leak in autotest. We need to get menu * Fix icon name: "emblem-information" not "emblem-informations" ==== kmail-account-wizard ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kmailtransport ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6MailTransport6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kmbox ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6Mbox6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kmines ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kmousetool ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kmplot ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kompare ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== konsole ==== Version update (26.08.1 -> 26.08.2) Subpackages: konsole-part konsole-part-lang - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Fix creation of graphics while scrolling ==== kontact ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kontactinterface ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6KontactInterface6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== konversation ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== korganizer ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * cppcheck-suppressions.xml - suppress constParameterCallback ==== kpat ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kpimtextedit ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6TextEdit6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kpkpass ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6PkPass6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kqtquickcharts ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kreversi ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== ksanecore ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== ksmtp ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6SMTP6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== ksudoku ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== ktextaddons ==== Version update (2.1.2 -> 2.2.0) Subpackages: libKF6TextAddons1 - Update to 2.2.0 * Added Kokoro text-to-speech plugin and helper script * Added Whisper speech-to-text plugin and helper script * Added new AI/LLM text generation and MCP protocol plugins/libraries * Split Kokoro TTS and Whisper STT components into dedicated subpackages (ktextaddons-tts-kokoro and ktextaddons-stt-whisper) * Added KF6TextAutoCorrectionCore library and development files ==== ktnef ==== Version update (26.08.1 -> 26.08.2) Subpackages: ktnef-debug-categories libKPim6Tnef6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Fix reading MAPI string values lacking null termination (kde#525967) ==== ktouch ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== kwalletmanager ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * src/konfigurator: fix Tab focus (kde#526104) ==== kwordquiz ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libeconf ==== Version update (0.8.4 -> 0.8.5) - Update to version 0.8.5: * Fix a crash if sections are empty (#249) ==== libgexiv2 ==== Version update (0.14.6 -> 0.14.7) Subpackages: libgexiv2-2 typelib-1_0-GExiv2-0_10 - Update to version 0.14.7: * Fix crash when opening a file without preview images after one with preview images. - Update version dependencies according to meson.build. ==== libgravatar ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6Gravatar6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkcddb-qt6 ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKCddb5 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Fix error signal connection ==== libkdcraw ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKDcrawQt6-5 libkdcraw-qt6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkdegames ==== Version update (26.08.1 -> 26.08.2) Subpackages: kdegames-carddecks-default libKDEGames6 libkdegames-imports - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkdepim ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6Libkdepim6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkeduvocdocument ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkexiv2-qt6 ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKExiv2Qt6-0 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkgapi6 ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6GAPICalendar6 libKPim6GAPICore6 libKPim6GAPIPeople6 libKPim6GAPITasks6 libkgapi6-lang libkgapi6-sasl2-kdexoauth2 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkleo ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6libkleo6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkmahjongg ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKMahjongg6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libkomparediff2 ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libksane ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKSaneWidgets6 libksane-icons libksane-lang - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libksieve ==== Version update (26.08.1 -> 26.08.2) Subpackages: libksieve6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== libstorage-ng ==== Version update (4.5.360 -> 4.5.362) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#1099 - record json output of lsscsi (since version 0.33) - 4.5.362 - merge gh#openSUSE/libstorage-ng#1098 - improved readability of testsuite data - 4.5.361 ==== libvirt ==== Version update (12.7.0 -> 12.8.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-libs - Update to libvirt 12.8.0 - bsc#1201510 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v12-8-0-2026-10-01 ==== libvpx ==== Version update (1.16.0 -> 1.17.0) - Update to 1.17.0 "Yellowbilled Duck": * ABI compatible with 1.16.0, SONAME stays at 12 * VP9 high bitdepth input is now validated by default; out of range values return VPX_CODEC_INVALID_PARAM. Disable with the new VP9E_SET_VALIDATE_HBD_INPUT control or vpxenc --validate-hbd-input=0 * VP9 now reports the actual image width and height instead of the stride and aligned height, a behaviour change for callers relying on the old values * SVC is now rejected for 2-pass encoding * Stricter API validation: vpx_img_alloc()/vpx_img_wrap() check the image format, encoders reject unequal U and V strides, the external rate control API and VP9 SVC spatial layer ids are validated * ISO C11 is now enforced for C sources * New Neon DotProd and AVX2/AVX512 paths, new --disable-x86-asm * Heap and integer overflow fixes in vp9_postproc, vpx_setup_noise, vp9_change_config, vp8_sixtap_predict, vp9-svc and others, plus decoder crash and hang fixes for corrupt input * Fixed a heap buffer overflow from a missing buffer full check in write_superframe_index() (CVE-2026-2447, boo#1258388) - Drop -std=gnu99 from --extra-cflags: it came after configure's own - std=gnu11 and won, so the C11 static_assert in vp8/common/common.h failed to compile - Drop the obsolete Group tags - Add _service: the tar and recompress buildtime services are what turn the checked in obscpio into the Source0 tarball. Without it %prep dies on a missing libvpx-%{version}.tar.xz, which is why this package was red on every arch in the devel project - switch to RemoteAsset to prepare git switch - pbuild-ai generated update ==== lokalize ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== mailcommon ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6MailCommon6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== mailimporter ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6MailImporter6 libKPim6MailImporterAkonadi6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Disable upstream SECURITY_HARDENED (would append -fstack-protector basic, downgrading -fstack-protector-strong from distro optflags; optflags already provide -fPIE/-pie, -z relro/now and - D_FORTIFY_SOURCE=3). ==== markdownpart ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== mbox-importer ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== messagelib ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Update expected results for GpgME 2.2.0 and GnuPG 2.5.22 * Fix bug 525868: Kmail crashes when sending signed email (kde#525868) ==== mimetreeparser ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6MimeTreeParserCore6 libKPim6MimeTreeParserWidgets6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== mozilla-nss ==== Version update (3.128 -> 3.129) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.129 * bmo#2068788 - emit static library names during static build. * bmo#2067434 - avoid building libcrux twice in makefile builds. * bmo#2068010 - fix non-linux arm64 makefile builds. * bmo#2017322 - set CKA_NSS_SERVER_DISTRUST_AFTER for CN=Izenpe.com. * bmo#2057185 - Document ./mach try and its Mercurial-only caveat in CLAUDE.md. * bmo#2056793 - Add tests for concurrent channel info queries during session replacement. * bmo#2056793 - take the session cache lock when reading ss->sec.ci.sid. * bmo#2066046 - Fix a race in STAN_GetNSSCertificate. * bmo#2066591 - Remove write-only blLib and libraryName statics from freebl's lowhash_vector. * bmo#2025246 - fix unknown key error type in ssl_SetAuthKeyBits. * bmo#2065879 - re-vendor HACL* and simplify run_hacl.sh. * bmo#2065879 - stop clang-formatting the vendored HACL* code. * bmo#2068191 - add --dry-run to mach try to print job list. * bmo#2029288 - avoid integer overflow in PK11_BlockData. * bmo#2066960 - fix UB in ecperf.c. * bmo#2067239 - Old coverity issues. * bmo#2067237 - MLKEM mechinfo needs keys sizes. * bmo#2066900 - pin NSPR 4.40 in CI. * bmo#2066266 - ML-KEM-1024 incorrectly allows an explicit encapsulation seed. * bmo#2066265 - Support for ML-KEM-512 in freebl and softoken. * bmo#2060316 - remove support for pre-standard Kyber. * bmo#2065423 - Build NSPR out of tree, into the dist directory. * bmo#2065423 - Write a machine-readable summary.json for each test run. * bmo#2065423 - Fail test runs on UBSan errors and on core dumps in debug builds. * bmo#2065423 - Link tests_results/latest at the newest test run. * bmo#2065423 - Resolve ssl_gtest_db.sh against QADIR. * bmo#2065423 - Generate nss.pc and nss-config into the dist directory. * bmo#2065423 - Add a --dist option to build.sh. * bmo#2065219 - Update Cryptofuzz version. * bmo#2056790 - Use PK11 digest contexts for explicit hashing in cryptohi. - rebased add-relro-linker-option.patch and nss-fips-constructor-self-tests.patch ==== mutter ==== - Add 5370.patch: wayland: Allow changing selections with the same serial (boo#1284143). ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - fix weird unset/rm -rf typo and a few spelling errors ==== okular ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * JS: Ensure interval timers dont outlive the app * JS: Scope interval timer lifetime more narrow * JS: move interval timers to document scope * JS: move field cache to document scope * JS: Make all bridge-object cppowned * JS: Ensure global objects are c++ owned * JS: Ensure timers dont outlive the app * Wrap some pdf specific javascript console functions to console.log * Drop custom non-functioning console logger; just debug dump things * Memory-safety: Dont let raw pointers out * Small executeScriptEvent refactor * Check action is of type Script before static casting to it * Adapt to newer clang-format * add Arabic Percent Sign to parseZoomString() * Fix signature panel crash on document refresh (kde#525809) ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0 - Update to version 2.1.13.suse+4.dc2446a1: * iscsid: honor REPORT LUNS DATA HAS CHANGED again (#557) * Convert shell scripts to POSIX sh (#552) * Preparing for version 2.1.13 * iscsiuio: fix incorrect comparison of IPv6 subnet mask * usr: verify IPC peer credentials before sending data * login: fix infinite redirect loops with configurable limits * iscsiuio: strengthen IPv6 payload length validation in uip_process() * iscsiuio: strengthen DHCPv6 option parsing loop bound check * iscsiuio: validate DHCPv6 IA_NA option lengths to prevent OOB reads * usr: network code ioctl handling improvements * fix typo in user-facing error message in verify_mode_params() (#548) * gitignore: ignore generated build artifacts (#550) * iscsiadm: handle getopt errors directly (#551) * Fix iscsi_conn_iface_has_ip error handling (#531) * Fix reopen log freq change (#542) * iscsi_net_util: fix broken VLAN support in find_vlan_dev (#545) * Fixes for CVEs CVE-2026-18724 - CVE-2026-18728 (#544) * usr: fix "-Wdiscarded-qualifiers" warning in auth.c (#539) * usr: Fix -Wdiscarded-qualifiers warning in iqn_name_valid (#537) * iscsiuio: Fix -Waddress-of-packed-member (#534) * Fixes CVEs: + bsc#1275171/CVE-2026-18724 + bsc#1275258/CVE-2026-18725 + bsc#1275260/CVE-2026-18726 + bsc#1275261/CVE-2026-18727 + bsc#1275262/CVE-2026-18728 ==== openSUSE-release ==== Version update (20261007 -> 20261011) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== parley ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== parted ==== Subpackages: libparted-fs-resize0 libparted2 - fix description ==== pim-data-exporter ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== pim-sieve-editor ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== pimcommon ==== Version update (26.08.1 -> 26.08.2) Subpackages: libKPim6PimCommon6 libKPim6PimCommonAkonadi6 - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add conditional aptx for Tumbleweed, libfreeaptx now awailable. ==== polkit-default-privs ==== Version update (1550+20260928.d1c0e7e -> 1550+20261009.03465cb) - Update to version 1550+20261009.03465cb: * profiles: whitelist Flatpak downgrade actions (bsc#1283013) - Update to version 1550+20261007.d5bf5b4: * profiles: add gnome-remote-desktop use-grd-pcscd action (bsc#1276523) ==== python-dnspython ==== Version update (2.8.0 -> 2.9.0) - Update to version 2.9.0 * dnspython dns.name.from_wire_parser() excessive CPU use A maliciously crafted DNS message may cause dns.name.from_wire_parser() to use excessive CPU for DNS name decompression. Applications which process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required. * Fix GHSA-45c3-73f7-pv4m Decompression chain length is limited to 16. Prior to this change, a maliciously crafted DNS message could cause dns.name.from_wire_parser() to use excessive CPU for DNS name decompression. Applications which processed untrusted DNS wire form messages with dnspython could be degraded or DoS’d by the extra CPU use required. * Httpx2 has replaced httpx for HTTPS TCP connections. * The minimum supported Python version is now 3.11. * DNSSEC now supports ML-DSA-44, a post-quantum signature algorithm. * The NSEC3 Next Hashed Owner Name in presentation format is now decoded as base32hex (RFC 5155 Section 1.3, RFC 4648 Extended Hex Alphabet). The letters W, X, Y, and Z are not in that alphabet; they used to be accepted and silently decoded to a different owner name, so to_text of the result did not match the input. They are now rejected. * The NID and L64 node/locator ids in presentation format are now rejected when a group contains anything other than hex digits. A sign or underscore, which int() silently accepts, produced a record whose text form did not parse back the same way (RFC 6742). * Rdata of a known type in the generic \# syntax, such as an NS record in a zone file, no longer fails to parse when it contains a name under the origin. Its names are relativized as in the type’s own text form. * The SVCB and HTTPS ech parameter value must now be an ECHConfigList with a correct length prefix and at least 4 octets of content (RFC 9848, RFC 9849). The individual ECHConfig structures are not checked. * SVCB and HTTPS SvcParamKeys in presentation format, including those listed in mandatory, must now be spelled as RFC 9460 requires: 1-63 lowercase letters, digits, or hyphens. Uppercase keys such as ALPN and keys with underscores such as no_default_alpn are rejected. * SVCB and HTTPS presentation format parsing now follows the escaping rules of RFC 9460. SvcParamKeys may not contain escapes (e.g. \097lpn=h2), and in comma-separated values (alpn, docpath) only \, and \\ are valid escapes after character-string decoding (e.g. alpn="h2\\x" is rejected). * SVCB and HTTPS parameters whose value must not be empty (mandatory, alpn, port, ipv4hint, ech, ipv6hint) are now rejected when empty in text form (e.g. alpn="" or key1=""), in wire form, and in the Python API. Per RFC 9460, an omitted value is the same as an empty one. This also rejects an empty ech value, which RFC 9848 does not allow. * A relative $ORIGIN in a zone file is now relative to the current origin, as RFC 1035 requires. Previously records after it were silently dropped. * dns.zone.Zone.verify_digest() now makes the two RFC 8976 section 4 checks it was missing: a ZONEMD RR only verifies the zone if its serial matches the zone’s SOA serial (step 5.1), and a ZONEMD RR whose scheme and hash algorithm are shared with another ZONEMD RR in the RRset does not verify the zone at all (step 4). * dns.reversename.to_address() now rejects IPv6 reverse-map names without exactly 32 single-character labels, instead of padding missing nibbles or accepting multiple nibbles in a label. * A "transaction setup" callable may be specified when reading a zone from a file, a string, or an inbound zone transfer. It is called just after the transaction is created. A Transaction- Limiter setup is available to limit the size of the zone. * Name and rdata "to text" is now done with the to_styled_text() method, allowing much greater control over text output. Application code that uses to_text() continues to work as before, but any custom Rdata implementations need to be updated to support to_styled_text(). * The socket type parameter to socket.getaddrinfo used to be called "socktype2 in Python 2, but was renamed to "type" in Python 3. We applied this change on the python3 branch almost a decade ago, but it was lost in the "single code base, only Python 3" update, also quite some time ago. It is now renamed to "type" (again) so it matches the Python 3 code it is overriding. * dns.flags.to_text() and dns.flags.edns_to_text() no longer silently drop set bits that have no named flag. Such bits are now rendered as FLAGn, where n is the bit position, and dns.flags.from_text() / edns_from_text() parse that form back, so the conversions round-trip. See issue #1264. * dns.ttl.from_text() now raises dns.ttl.BadTTL, rather than leaking a bare ValueError, when the text contains a non-decimal Unicode "digit" (e.g. the superscript \u00b2). Such characters are accepted by str.isdigit() but rejected by int(), so they previously escaped the parser’s validation. This also makes zone files with such a TTL fail with a clean dns.exception.SyntaxError. * The zone file reader no longer treats a quoted string as a directive. A line starting with "$TTL" was processed as if it were $TTL, because only the token’s value was tested and not its type; a directive must now be an unquoted identifier. This also fixes a crash: a line beginning with an empty token (e.g. an empty quoted string) made the reader raise a bare ... changelog too long, skipping 158 lines ... - The minimum supported version of Python is 3.11. ==== python313-setuptools ==== Version update (80.9.0 -> 84.0.0) - Update to 84.0.0: [#]# Features * Newline-separated keywords and platforms, which are invalid and corrupt the generated metadata, are now handled forgivingly: each line is treated as a separate item and a deprecation warning is emitted. * Extension is now a dataclass, exposing type annotations for its constructor arguments so subclasses can inherit them without redeclaring each parameter. * The C compiler modules now emit log messages through their own compilers.C.* loggers instead of the distutils root logger, part of decoupling the compilers package from distutils. * The C compilers gained a Compiler.call method – a thin wrapper over subprocess.check_call that is the modern replacement for Compiler.spawn. * The compilers no longer depend on distutils.util, distutils.version, distutils.compat, or distutils._macos_compat. * The compilers now read their build configuration from the standard library's sysconfig instead of distutils.sysconfig. * Require Python 3.10 or later. * Remove post-release tags on setuptools’ own build. [#]# Bugfixes * copy_file now preserves the full precision of the source's modification time, so a copy is no longer considered older than its source on filesystems with sub-second timestamp resolution. * Setuptools wheels no longer bundled the project’s own test modules. * MANIFEST.in matching (via FileList) is now insensitive to Unicode normalization form. * Fix the loading of launcher manifest.xml file. * Replaced deprecated json.__version__ with fixture in tests. [#]# Deprecations and Removals * Compiler.spawn is deprecated in favor of the new Compiler.call. call raises native subprocess exceptions; spawn remains as a shim that emits a DeprecationWarning and translates them to DistutilsExecError. * The compilers now define their own exception vocabulary instead of borrowing distutils' framework errors. * customize_compiler now asserts that the compiler-related config variables (CC, CXX, CFLAGS, etc.) resolve to strings, raising AssertionError if any are unexpectedly None rather than failing later with a less clear error. * pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources and importlib.metadata projects. * Removed support for the –dry-run parameter to setup.py. ==== qemu ==== Version update (11.1.1 -> 11.1.2) Subpackages: qemu-arm qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ksm qemu-pr-helper qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios - Update to latest stable release (11.1.2) Full backport list here: https://lore.kernel.org/qemu-devel/20260929144512.126747-1-mjt@tls.msk.ru/ A selection of them is reported here below: target/sh4: Replace TB_FLAG_GUSA_EXCLUSIVE with CF_STEP_ATOMIC accel/tcg: Set CF_NOIRQ during cpu_exec_step_atomic linux-user/sh4: align the vdso sigreturn trampolines linux-user/sh4: fix vdso CFA for rt_sigreturn frames linux-user/sh4: use the kernel's sigreturn trampoline sequence in the vdso target/i386: Mark MOVNTI as not valid with prefixes 0x66, 0xF2, 0xF3 target/i386: Update FPU tag word for FXCH target/i386: Update FPU tag word for FSTP target/i386: Update FPU tag word for FXTRACT's old ST(0) target/i386: Fix FXCH to unconditionally clear C1 target/ppc: Stop vCPU thread before calling parent_unrealize tests/qtest/usb-hcd-xhci: test isoch endpoint type mismatch tests/qtest/usb-hcd-xhci: test isoch pacing with MFINDEX above 2^32 hw/usb/hcd-xhci: don't assert on NAK when retrying an isoch transfer hw/usb/hcd-xhci: fix interval alignment after MFINDEX passes 2^32 hw/usb/hcd-xhci: Set reentrancy guard in timer functions (CVE-2026-17588) tcg/riscv64: Set vtype before whole-register vector loads tests/tcg/s390x: Add regression test for #4449 tcg/optimize: Fix expansion/simplification of deposit tests/tcg/arm: Add regression test for #4448 tcg/optimize: Fix fold_multiply2 vs 1 accel/tcg: Fix TLB_MMIO check in tlb_plugin_lookup() accel/tcg: Use TLB_FORCE_SLOW not TLB_MMIO for system plugins hw/9pfs: mutate FID path from main thread only (CVE-2026-93834) s390x/pci: fix DMA slot leak on I/O TLB entry replacement hw/s390x/ipl: Fix incorrect PCI IPL block lengths linux-user/loongarch64: Detect vector stores in host_signal_write() linux-user: implement mlock2(2) syscall linux-user/riscv: honor zicntrúlse for base counterCSRs system/ram-discard-manager: fix offset_within_address_space in replay_by_populated_state() igvm: mark qigvm_find_param_entry as static igvm: validate and honor byte_offset in parameter directives hw/uefi: add missing uefi_str_is_valid check to uefi_vars_mm_lock_variable target/loongarch: Fix data race in CSR_ESTAT hw/riscv/virt.c: fix aclint soc/mtimer nodename target/arm/hvf: implement MDCCSR_EL0 as RAZ target/arm/whpx: fix whpx-arm post-reset CPU state target/arm/whpx: incorrect ENCODE_AA64_CP_REG parameter order target/arm/whpx: Don't try to sync ARM_CP_CONST registers hw/intc/bcm2835_ic: reject out-of-range FIQ source values qga: Change effective user/group ID in guest-ssh-* commands vhost-user-gpu: validate command buffer size in submit_3d ui/cursor: make the cursor refcount atomic hw/display/qxl: hold ssd.lock while replacing ssd.cursor hw/cxl: fix the CDAT DOE overlapping the Flex Bus DVSEC when sn= is set virtio-scsi: set dataplane_started to false upon failure virtio-balloon: fix free-page BH teardown on unrealize hw/virtio: reject inverted virtio-iommu IOVA ranges hw/net/virtio-net: strip trailing padding when caching RSC segment hw/net/virtio-net: check packet size before VLAN tag access in receive_filter() qapi/misc: Fix missed query-iothreads items hw/cxl: Fix guest-triggerable QEMU exit on reserved interleave ways virtio-gpu: clear res->blob on mapping cleanup ==== qrca ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== signon-kwallet-extension ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== skanlite ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== soxr ==== - Add -lm for %{arm} to fix build - Re-enable LTO for %{arm} since boo#1155011 is fixed ==== step ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== svgpart ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - No code change since 26.08.1 ==== umbrello ==== Version update (26.08.1 -> 26.08.2) - Update to 26.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.2/ - Changes since 26.08.1: * Add the missing icon for the “Code Viewer” tab in the “Settings” dialog (kde#525932) * Fix bug not been able to resize a selected message widget (kde#502790) * Fix parenting of modal dialogs * Fix 'the activity button icon in the activity diagram is corrupted' (kde#525552) * Coverity check CID 268365: unsafe_xml_parse_config (UNSAFE_XML_PARSE_CONFIG) * Fix bug that newly created fork and joins widgets are not rectangles * Coverity check CID 268381: Use after free (USE_AFTER_FREE) * Fix bug that activies does not have rounded corners (kde#525283) ==== unzip ==== Subpackages: unzip-doc - Drop obsolete -fstack-protector from RPM_OPT_FLAGS (predates distro -fstack-protector-strong in optflags; the trailing basic flag silently downgraded strong to basic) ==== util-linux ==== Version update (2.42.3 -> 2.42.4) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Update to version 2.42.4 (bsc#1274864, PED-16740): This release enhances previously released security fixes and adds protection against symlink attacks in the legacy mount(2)-based code in libmount. * lib/fileutils: * add safe FD-path and no-symlink helpers * fix RESOLVE_NO_SYMLINKS fallback value * libmount: * add mnt_fs_fetch_ids() and populate uniq_id for utab * use fchmodat2() for X-mount.mode= * restore the original namespace on error paths * secure the idmapped mount replacement * pin the legacy mount target and bind/move source * harden restricted mount targets and post-mount handling * fix X-mount.idmap ID names in code and man page * nsenter: close cgroup.procs fd after join to prevent authority leak [CVE-2026-78408, bsc#1278348] - Add two upstream follow-up fixes (util-linux-libcanonicalize-newline.patch, util-linux-wall-off-by-one.patch). - Fix uuidd tmpfiles installation path (bsc#1283294). - Mark two check known as failing in chroot environment. ==== util-linux-systemd ==== Version update (2.42.3 -> 2.42.4) Subpackages: lastlog2 liblastlog2-2 - Update to version 2.42.4 (bsc#1274864, PED-16740): This release enhances previously released security fixes and adds protection against symlink attacks in the legacy mount(2)-based code in libmount. * lib/fileutils: * add safe FD-path and no-symlink helpers * fix RESOLVE_NO_SYMLINKS fallback value * libmount: * add mnt_fs_fetch_ids() and populate uniq_id for utab * use fchmodat2() for X-mount.mode= * restore the original namespace on error paths * secure the idmapped mount replacement * pin the legacy mount target and bind/move source * harden restricted mount targets and post-mount handling * fix X-mount.idmap ID names in code and man page * nsenter: close cgroup.procs fd after join to prevent authority leak [CVE-2026-78408, bsc#1278348] - Add two upstream follow-up fixes (util-linux-libcanonicalize-newline.patch, util-linux-wall-off-by-one.patch). - Fix uuidd tmpfiles installation path (bsc#1283294). - Mark two check known as failing in chroot environment. ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-noX vlc-qt - Require vlc from vlc-devel: whereas the desktop app is not exactly needed when building against the libraries, many consumers expect the full stack to be present. - Drop schroedinger-devel BuildRequires: Not needed, nor used. Upstream removed support in 3.0.24 - Rework subpackaging * Split the desktop output plugins out of the main vlc package, for use on headless systems * Installing vlc-noX and vlc-plugins-desktop will now give a fully functional CLI installation, without pulling in the graphical frontend * Main 'vlc' package will now pull in all components for desktop GUI interface ==== webkitgtk3 ==== Version update (2.52.6 -> 2.54.1) Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add 30 gigs of memory constraint for aarch64 and x86_64. - riscv-platformenable.patch: Fix build for riscv64 - Update to version 2.54.1: + What's new in WebKitGTK 2.54.1?: - Allow pasting in-memory image data from clipboard. - Add User-Agent quirk for Amazon Luna. - Align the filter surface with the device pixel grid. - Fix rendering of scaled or transformed no-repeat background images. - Fix rendering of preserve-3d layers when a layer crosses the camera plane. - Fix SkiaCompositingLayer filter rendering under transforms. - Do not rasterize the part of a tile that the clip drops. - Skip non-composited frames when damage is empty. - Fix text deleted by input method delete-surrounding in contenteditable. - Fix several crashes and rendering issues. - Drop 5d013e57c4c4e2674e28399fc162afa3adf25283.patch and webkitgtk-main-thread.patch: fixed upstream. - Add webkitgtk-skia-s390x.patch: fix skia build on s390x. - Add webkitgtk-main-thread.patch: RELEASE_ASSERT in initializeMainThread aborts Eclipse/SWT applications (bwo#322394). - No longer disable skia for ppc64le. - Add upstream patch: bmalloc installs mimalloc as a system library fix bwo#324458 - 5d013e57c4c4e2674e28399fc162afa3adf25283.patch - Update to version 2.54.0: + Switch web process compositor to use Skia instead of TextureMapper. + Improved damage handling that is now also used during the composition to limit the composited areas. + Implement GPU atlas creation and replay substitution for batched raster image uploads. + Media capability reporting is more accurate. + Video decoding limits are now respected in media capabilities queries. + Add new improved API for page favicons. + Add magnification property to WebKitWebView to handle visual scaling. + Add new API to allow setting a per-navigation custom User-Agent to WebKitWebsitePolicies. + Remove the option to use cairo for 2D rendering. - Update to version 2.53.91 (Unstable): + Handle video orientation in skia compositor. + Do not use cached credentials when Authorization header is present. + Fix scrollbar rendering issues due to incorrect damage. + Add log fallback when journald is not reachable. + Fix several crashes and rendering issues. - Drop webkitgtk-ppc64le-build-fix.patch: Fixed upstream. - Update to version 2.53.4 (Unstable): + Implemented batched painting in skia compositor, which improves performance when there are many layers that can be painted in the same operation. + Avoid unnecessary clips when possible in skia compositor. + Fix synchronization issues between main, scrolling and compositing threads causing glitches while scrolling in some cases. + Limit the damage region of the scrollbar to the region actually painted. + Add support for image/webp to canvas.toDataURL(). + Expose search inputs as WEBKIT_INPUT_PURPOSE_SEARCH. + Add User-Agent quirk for HBO Max. + Fix several crashes and rendering issues. - Changes from version 2.53.3: + Switch web process compositor to use Skia instead of TextureMapper. + Fix missing glyph before ZWJ/ZWNJ if no font is found for the cluster. + Add support for half width fonts. + Support time zone change notifications on linux. + Fix several crashes and rendering issues. - Changes from version 2.53.2: + Only use DMA-BUF mapping for writing to the GPU atlas when possible. + Do not resolve ‘-apple-system’ font to default system font. + Set real time limits when not using the portal. + Report support for supported non-AAC mp4a codecs. + Fix several crashes and rendering issues. - Changes from version 2.53.1: + Remove the option to use cairo for 2D rendering. + Implement GPU atlas creation and replay substitution for batched raster image uploads. + Improved non accelerated composited mode by using the same buffer sharing implementation as accelerated mode. + The on-demand hardware acceleration policy is now deprecated in GTK3 API. + Add new improved API for page favicons. + Add webkit_feature_list_find() to public API. + Support PGO features in regular CMake builds. + Fix several crashes and rendering issues. - Drop riscv-platformenable.patch: fixed upstream. - Rebase webkitgtk-ppc64le-build-fix.patch with quilt. ==== webkitgtk4 ==== Version update (2.52.6 -> 2.54.1) Subpackages: libjavascriptcoregtk-6_0-1 libwebkitgtk-6_0-4 typelib-1_0-JavaScriptCore-6_0 typelib-1_0-WebKit-6_0 webkitgtk-6_0-injected-bundles - Add 30 gigs of memory constraint for aarch64 and x86_64. - riscv-platformenable.patch: Fix build for riscv64 - Update to version 2.54.1: + What's new in WebKitGTK 2.54.1?: - Allow pasting in-memory image data from clipboard. - Add User-Agent quirk for Amazon Luna. - Align the filter surface with the device pixel grid. - Fix rendering of scaled or transformed no-repeat background images. - Fix rendering of preserve-3d layers when a layer crosses the camera plane. - Fix SkiaCompositingLayer filter rendering under transforms. - Do not rasterize the part of a tile that the clip drops. - Skip non-composited frames when damage is empty. - Fix text deleted by input method delete-surrounding in contenteditable. - Fix several crashes and rendering issues. - Drop 5d013e57c4c4e2674e28399fc162afa3adf25283.patch and webkitgtk-main-thread.patch: fixed upstream. - Add webkitgtk-skia-s390x.patch: fix skia build on s390x. - Add webkitgtk-main-thread.patch: RELEASE_ASSERT in initializeMainThread aborts Eclipse/SWT applications (bwo#322394). - No longer disable skia for ppc64le. - Add upstream patch: bmalloc installs mimalloc as a system library fix bwo#324458 - 5d013e57c4c4e2674e28399fc162afa3adf25283.patch - Update to version 2.54.0: + Switch web process compositor to use Skia instead of TextureMapper. + Improved damage handling that is now also used during the composition to limit the composited areas. + Implement GPU atlas creation and replay substitution for batched raster image uploads. + Media capability reporting is more accurate. + Video decoding limits are now respected in media capabilities queries. + Add new improved API for page favicons. + Add magnification property to WebKitWebView to handle visual scaling. + Add new API to allow setting a per-navigation custom User-Agent to WebKitWebsitePolicies. + Remove the option to use cairo for 2D rendering. - Update to version 2.53.91 (Unstable): + Handle video orientation in skia compositor. + Do not use cached credentials when Authorization header is present. + Fix scrollbar rendering issues due to incorrect damage. + Add log fallback when journald is not reachable. + Fix several crashes and rendering issues. - Drop webkitgtk-ppc64le-build-fix.patch: Fixed upstream. - Update to version 2.53.4 (Unstable): + Implemented batched painting in skia compositor, which improves performance when there are many layers that can be painted in the same operation. + Avoid unnecessary clips when possible in skia compositor. + Fix synchronization issues between main, scrolling and compositing threads causing glitches while scrolling in some cases. + Limit the damage region of the scrollbar to the region actually painted. + Add support for image/webp to canvas.toDataURL(). + Expose search inputs as WEBKIT_INPUT_PURPOSE_SEARCH. + Add User-Agent quirk for HBO Max. + Fix several crashes and rendering issues. - Changes from version 2.53.3: + Switch web process compositor to use Skia instead of TextureMapper. + Fix missing glyph before ZWJ/ZWNJ if no font is found for the cluster. + Add support for half width fonts. + Support time zone change notifications on linux. + Fix several crashes and rendering issues. - Changes from version 2.53.2: + Only use DMA-BUF mapping for writing to the GPU atlas when possible. + Do not resolve ‘-apple-system’ font to default system font. + Set real time limits when not using the portal. + Report support for supported non-AAC mp4a codecs. + Fix several crashes and rendering issues. - Changes from version 2.53.1: + Remove the option to use cairo for 2D rendering. + Implement GPU atlas creation and replay substitution for batched raster image uploads. + Improved non accelerated composited mode by using the same buffer sharing implementation as accelerated mode. + The on-demand hardware acceleration policy is now deprecated in GTK3 API. + Add new improved API for page favicons. + Add webkit_feature_list_find() to public API. + Support PGO features in regular CMake builds. + Fix several crashes and rendering issues. - Drop riscv-platformenable.patch: fixed upstream. - Rebase webkitgtk-ppc64le-build-fix.patch with quilt. ==== wireplumber ==== Subpackages: libwireplumber-0_5-0 wireplumber-bash-completion wireplumber-zsh-completion - fixup fdupes ==== xdg-desktop-portal ==== - Update version dependencies according to meson.build. ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - 0001-xkb-NULL-text-pointer-after-free-in-_CheckSetDoodad-.patch XKB SetGeometry TextDoodad Double Free (bsc#1281213, CVE-2026-88812, ZDI-CAN-31221) - 0002-xkb-allocate-names-keys-to-MAP_LENGTH-in-XkbAllocNam.patch XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236, CVE-2026-93520, ZDI-CAN-31941) - 0003-xkb-widen-size_syms-num_syms-size_acts-num_acts-to-u.patch XKB ResizeKeyType Numeric Truncation (bsc#1281227, CVE-2026-93518, ZDI-CAN-31834) - 0004-xkb-fix-CheckKeySyms-overwriting-request-range-symsP.patch XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242, CVE-2026-93524, ZDI-CAN-32408) - 0005-randr-fix-size-and-offset-in-RRChangeProviderPropert.patch RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238, CVE-2026-93521, ZDI-CAN-31944) - 0006-Xi-validate-modifier-values-in-ProcXIPassiveUngrabDe.patch XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241, CVE-2026-93523, ZDI-CAN-32366) - 0007-glx-validate-dataBytes-against-cmdlen-in-RenderLarge.patch GLX RenderLarge Heap Buffer Overflow (bsc#1281225, CVE-2026-93517, ZDI-CAN-31833) - 0008-present-unlink-notifies-from-window-list-in-present_.patch X.Org Server Present Extension Use-After-Free (bsc#1281218, CVE-2026-93515, ZDI-CAN-31830) - 0009-dix-remove-passive-grabs-referencing-a-device-on-rem.patch X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220, CVE-2026-93516, ZDI-CAN-31832) - 0010-Xi-add-bounds-check-for-barrier-events-in-input_cons.patch XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233, CVE-2026-93519, ZDI-CAN-31938) - 0011-Xi-clean-up-gesture-sprite-traces-in-WindowGone.patch GestureBuildSprite Use-After-Free (bsc#1281244 CVE-2026-93536, ZDI-CAN-32753) ==== xterm ==== Version update (410 -> 411) Subpackages: xterm-bin xterm-resize - update to 411: * add a case for DECSWT in VT520 mode * correct an index computation in VS15/VS16 logic for - emoji_width option * add ich1 to terminfo where appropriate. * drop “GTK_*” from environment filtering * fix a couple of places in terminfo which used BEL rather than ST. * add DECSCUSR 7 for the “power-up” configuration, which can be different from the documented VT520 behavior * correct a limit-check added in patch #399, which resulted in regex-based selections to be limited to the first row of a wrapped line (Redhat #2479962). * add resource brokenCopyArea, using that to control whether XCopyArea is used for indexing and scrolling, as well as inserting or deleting characters and lines. * amend check for validity of C1 controls to check both whether wide-characters have been initialized, as well as whether the current encoding is UTF-8 (Debian #687699). * call Cleanup directly when processing SIGHUP, because the process running in xterm may ignore a killpg sent to the top-level screen's process (Debian #243598). ==== xwayland ==== - 0001-xkb-NULL-text-pointer-after-free-in-_CheckSetDoodad-.patch XKB SetGeometry TextDoodad Double Free (bsc#1281213, CVE-2026-88812, ZDI-CAN-31221) - 0002-xkb-allocate-names-keys-to-MAP_LENGTH-in-XkbAllocNam.patch XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236, CVE-2026-93520, ZDI-CAN-31941) - 0003-xkb-widen-size_syms-num_syms-size_acts-num_acts-to-u.patch XKB ResizeKeyType Numeric Truncation (bsc#1281227, CVE-2026-93518, ZDI-CAN-31834) - 0004-xkb-fix-CheckKeySyms-overwriting-request-range-symsP.patch XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242, CVE-2026-93524, ZDI-CAN-32408) - 0005-randr-fix-size-and-offset-in-RRChangeProviderPropert.patch RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238, CVE-2026-93521, ZDI-CAN-31944) - 0006-Xi-validate-modifier-values-in-ProcXIPassiveUngrabDe.patch XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241, CVE-2026-93523, ZDI-CAN-32366) - 0007-glx-validate-dataBytes-against-cmdlen-in-RenderLarge.patch GLX RenderLarge Heap Buffer Overflow (bsc#1281225, CVE-2026-93517, ZDI-CAN-31833) - 0008-present-unlink-notifies-from-window-list-in-present_.patch X.Org Server Present Extension Use-After-Free (bsc#1281218, CVE-2026-93515, ZDI-CAN-31830) - 0009-dix-remove-passive-grabs-referencing-a-device-on-rem.patch X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220, CVE-2026-93516, ZDI-CAN-31832) - 0010-Xi-add-bounds-check-for-barrier-events-in-input_cons.patch XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233, CVE-2026-93519, ZDI-CAN-31938) - 0011-Xi-clean-up-gesture-sprite-traces-in-WindowGone.patch GestureBuildSprite Use-After-Free (bsc#1281244 CVE-2026-93536, ZDI-CAN-32753) - 0012-glamor-size-tmp_bits-buffer-for-source-coordinate-ra.patch Glamor CopyArea Heap Buffer Overflow (bsc#1281240, CVE-2026-93522, ZDI-CAN-32361) ==== yelp ==== Subpackages: libyelp-1-0 - Update version dependencies according to meson.build.