Packages changed: AppStream (1.0.3 -> 1.0.4) AppStream-qt6 (1.0.3 -> 1.0.4) Mesa Mesa-drivers MicroOS-release (20241218 -> 20250105) aaa_base (84.87+git20240906.742565b -> 84.87+git20250102.c08e614) bash bluedevil6 (6.2.4 -> 6.2.5) breeze6 (6.2.4 -> 6.2.5) breeze6-gtk (6.2.4 -> 6.2.5) c-ares (1.30.0 -> 1.34.4) ca-certificates-mozilla (2.68 -> 2.72) dbus-broker desktop-file-utils discover6 (6.2.4 -> 6.2.5) dolphin flatpak-kcm6 (6.2.4 -> 6.2.5) geoclue2 gnome-branding-Aeon gnome-shell-extensions grilo harfbuzz kactivitymanagerd6 (6.2.4 -> 6.2.5) kate kde-cli-tools6 (6.2.4 -> 6.2.5) kde-gtk-config6 (6.2.4 -> 6.2.5) kdecoration6 (6.2.4 -> 6.2.5) kdeplasma6-addons (6.2.4 -> 6.2.5) kernel-source (6.11.8 -> 6.12.8) kexec-tools (2.0.29 -> 2.0.30) kgamma6 (6.2.4 -> 6.2.5) kglobalacceld6 (6.2.4 -> 6.2.5) kinfocenter6 (6.2.4 -> 6.2.5) kmenuedit6 (6.2.4 -> 6.2.5) kpipewire6 (6.2.4 -> 6.2.5) kscreen6 (6.2.4 -> 6.2.5) kscreenlocker6 (6.2.4 -> 6.2.5) ksshaskpass6 (6.2.4 -> 6.2.5) ksystemstats6 (6.2.4 -> 6.2.5) kwayland-integration6 (6.2.4 -> 6.2.5) kwayland6 (6.2.4 -> 6.2.5) kwin6 (6.2.4 -> 6.2.5) kwrited6 (6.2.4 -> 6.2.5) layer-shell-qt6 (6.2.4 -> 6.2.5) less (661 -> 668) libcanberra (0.30 -> 0.30+2) libdrm libkscreen6 (6.2.4 -> 6.2.5) libksysguard6 (6.2.4 -> 6.2.5) libnice libostree (2024.9 -> 2024.10) libplasma6 (6.2.4 -> 6.2.5) libportal (0.8.1 -> 0.9.0) libshout libwebp (1.4.0 -> 1.5.0) libxcrypt (4.4.36 -> 4.4.37) libzypp (17.35.15 -> 17.35.16) llvm19 (19.1.5 -> 19.1.6) milou6 (6.2.4 -> 6.2.5) oniguruma (6.9.9 -> 6.9.10) openjpeg2 (2.5.2 -> 2.5.3) openssl-3 openvpn patterns-base pcr-oracle pcsc-lite (2.3.0 -> 2.3.1) plasma5support6 (6.2.4 -> 6.2.5) plasma6-activities (6.2.4 -> 6.2.5) plasma6-activities-stats (6.2.4 -> 6.2.5) plasma6-browser-integration (6.2.4 -> 6.2.5) plasma6-desktop (6.2.4 -> 6.2.5) plasma6-integration (6.2.4 -> 6.2.5) plasma6-nm (6.2.4 -> 6.2.5) plasma6-openSUSE plasma6-pa (6.2.4 -> 6.2.5) plasma6-print-manager (6.2.4 -> 6.2.5) plasma6-systemmonitor (6.2.4 -> 6.2.5) plasma6-workspace (6.2.4 -> 6.2.5) polkit-kde-agent-6 (6.2.4 -> 6.2.5) poppler (24.07.0 -> 24.12.0) poppler-qt6 (24.07.0 -> 24.12.0) powerdevil6 (6.2.4 -> 6.2.5) procps (4.0.4 -> 4.0.5) python-Jinja2 (3.1.4 -> 3.1.5) python-maturin (1.7.4 -> 1.7.8) python-notify2 python-urllib3 qemu (9.1.2 -> 9.2.0) qqc2-breeze-style6 (6.2.4 -> 6.2.5) qt6-webengine samba (4.21.1+git.372.cb50f2d0a68 -> 4.21.2+git.382.df546a2d31b) sddm-kcm6 (6.2.4 -> 6.2.5) shaderc (2024.3 -> 2024.4) shadow (4.16.0 -> 4.17.1) srt (1.5.3 -> 1.5.4) systemd (256.9 -> 256.10) systemsettings6 (6.2.4 -> 6.2.5) sysuser-tools tbb (2021.12.0 -> 2022.0.0) transactional-update-notifier (1.1.0.2 -> 1.1.1) vulkan-loader (1.3.296 -> 1.4.304) vulkan-tools (1.3.296 -> 1.4.304) webkit2gtk3 (2.46.4 -> 2.46.5) webkit2gtk4 (2.46.4 -> 2.46.5) xdg-desktop-portal (1.18.4 -> 1.19.0) xdg-desktop-portal-gnome xdg-desktop-portal-kde6 (6.2.4 -> 6.2.5) xxhash (0.8.2 -> 0.8.3) === Details === ==== AppStream ==== Version update (1.0.3 -> 1.0.4) - Update to 1.0.4 Features: * bundle: Add AS_BUNDLE_KIND_SYSUPDATE * desktop-style-ids: Add dark support for Plasma * desktop-style-ids: add pantheon:dark * qt: Expose branding color * sysinfo: Add memory size detection support for Illumos and Solaris * sysinfo: Add memory size detection support for GNU/Hurd * validator: Don't fail validation if a snapshot release is missing a time Specification: * docs: Note that support for some legacy path was dropped in 1.0 * docs: Update fd.o spec URLs * docs: Better explain desktop applications * Update ESRA website URL Bugfixes: * validator: Make sure we read an initialised variable * qt: Specify utc as the dates' timezone * tests: Ignore some tests on Windows * sysinfo: make uname() usage POSIX compliant * Only emit legacy compat tag developer_name for catalog data * compose: Allow file discovery even in symlinked directories * Avoid a race condition when loading GResource data * validator: Mention length limit in summary length warning message * utils: Explicitly set permissions on installed metadata files * as-vercmp: Fix gtkdoc to not start with '>' Miscellaneous: * desktop-style-ids: Remove Endless * ci: Fix FreeBSD build (update `py-gi-docgen`) * ci: Update to Ubuntu 24.04 for Debian Testing builds * utils: Assume 64px as size when installing an icon tarball of unknown size ==== AppStream-qt6 ==== Version update (1.0.3 -> 1.0.4) - Update to 1.0.4 Features: * bundle: Add AS_BUNDLE_KIND_SYSUPDATE * desktop-style-ids: Add dark support for Plasma * desktop-style-ids: add pantheon:dark * qt: Expose branding color * sysinfo: Add memory size detection support for Illumos and Solaris * sysinfo: Add memory size detection support for GNU/Hurd * validator: Don't fail validation if a snapshot release is missing a time Specification: * docs: Note that support for some legacy path was dropped in 1.0 * docs: Update fd.o spec URLs * docs: Better explain desktop applications * Update ESRA website URL Bugfixes: * validator: Make sure we read an initialised variable * qt: Specify utc as the dates' timezone * tests: Ignore some tests on Windows * sysinfo: make uname() usage POSIX compliant * Only emit legacy compat tag developer_name for catalog data * compose: Allow file discovery even in symlinked directories * Avoid a race condition when loading GResource data * validator: Mention length limit in summary length warning message * utils: Explicitly set permissions on installed metadata files * as-vercmp: Fix gtkdoc to not start with '>' Miscellaneous: * desktop-style-ids: Remove Endless * ci: Fix FreeBSD build (update `py-gi-docgen`) * ci: Update to Ubuntu 24.04 for Debian Testing builds * utils: Assume 64px as size when installing an icon tarball of unknown size ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - require llvm19/clang19 on sle15 >= sp6 ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium - require llvm19/clang19 on sle15 >= sp6 ==== MicroOS-release ==== Version update (20241218 -> 20250105) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== aaa_base ==== Version update (84.87+git20240906.742565b -> 84.87+git20250102.c08e614) - Update to version 84.87+git20250102.c08e614: * Load distrobox_profile.sh ==== bash ==== Subpackages: bash-sh - Remove bash-4.3-winch.dif as this is the (current) default ==== bluedevil6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== breeze6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-wallpapers - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== breeze6-gtk ==== Version update (6.2.4 -> 6.2.5) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== c-ares ==== Version update (1.30.0 -> 1.34.4) - c-ares 1.34.4 This is a bugfix release. Changes: QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938 Bugfixes: Empty TXT records were not being preserved. PR #922 docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910 license: some files weren't properly updated. PR #920 Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935 CMake: set policy version to prevent deprecation warnings. PR #932 CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933 Update to latest autoconf archive macros for enhanced system compatibility. PR #936 In version 1.34.3 This is a bugfix release. Changes: Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906 Bugfixes: Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911 TSAN warns on missing lock, but lock isn't actually necessary. PR #915 ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558 ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7 Fix typos in man pages. PR #905 - skip-test.patch: fix failing tests - c-ares 1.34.2 Features: * adig: read arguments from adigrc. [PR #856] * Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857] * New function `ares_process_fds()`. [PR #875] * Failed servers should be probed rather than redirecting queries which could cause unexpected latency. [PR #877] * adig: rework command line arguments to mimic dig from bind. [PR #890] * Add new method for overriding network functions `ares_set_socket_function_ex()` to properly support all new functionality. [PR #894] * Fix regression with custom socket callbacks due to DNS cookie support. [PR #895] * ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets [PR #887] * URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). [PR #882] Changes: * Connection handling modularization. [PR #857], [PR #876] * Expose library/utility functions to tools. [PR #860] * Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872] Bugfixes: * fix: potential WIN32_LEAN_AND_MEAN redefinition. [PR #869] * Fix googletest v1.15 compatibility. [PR #874] * Fix pkgconfig thread dependencies. [PR #884] Features in 1.33.0: * Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache poisoning attacks. [PR #833] * Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT on supported systems. [PR #840] Changes: * Reorganize source tree. [PR #822] * Refactoring of connection handling to prevent code duplication. [PR #839] * New dynamic array data structure to prevent simple logic flaws in array handling in various code paths. [PR #841] Bugfixes: * `ares_destroy()` race condition during shutdown due to missing lock. [PR #831] Features in 1.32: * Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled by specifying `ARES_FLAG_DNS0x20`. Disabled by default. [PR #800] * Rework query timeout logic to automatically adjust timeouts based on network conditions. The timeout specified now is only used as a hint until there is enough history to calculate a more valid timeout. [PR #794] Changes: * DNS RR TXT strings should not be automatically concatenated as there are use cases outside of RFC 7208. In order to maintain ABI compliance, the ability to retrieve TXT strings concatenated is retained as well as a new API to retrieve the individual strings. This restores behavior from c-ares 1.20.0. [PR #801] * Clean up header inclusion logic to make hacking on code easier. [PR #797] * GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee] Bugfixes: * Tests: Fix thread race condition in test cases for EventThread. [PR #803] * Thread Saftey: `ares_timeout()` was missing lock. [74a64e4] - c-ares 1.31.0 Changes: * Enable Query Cache by default. [PR #786] Bugfixes: * Enhance Windows DNS configuration change detection to also detect manual DNS configuration changes. [PR #785] * Various legacy MacOS Build fixes. [Issue #782] * Ndots value of zero in resolv.conf was not being honored. [852a60a] * Watt-32 build support had been broken for some time. [PR #781] * Distribute `ares_dns_rec_type_tostr` manpage. [PR #778] ==== ca-certificates-mozilla ==== Version update (2.68 -> 2.72) - Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798) Removed: - SecureSign RootCA11 - Security Communication RootCA3 Added: - TWCA CYBER Root CA - TWCA Global Root CA G2 - SecureSign Root CA12 - SecureSign Root CA14 - SecureSign Root CA15 ==== dbus-broker ==== Subpackages: dbus-broker-block-restart - Requires(pre): systemd >= 253.6 to ensure scripts in %post are run correctly, (bsc#1234697) Thanks to Thorsten for the detailed report. ==== desktop-file-utils ==== - suse-update-mime-defaults: * support drop in files in $r/etc/_defaults.conf.d which take priority over the distribution provided $r/etc/_defaults.conf * extend syntax of _defaults.conf, prefixing a directive with a "-" removes an otherwise identical earlier directive ==== discover6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-notifier - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * UpdatesPage: Fix update description box overlapping with its text (kde#491821) * update version for new release ==== dolphin ==== Subpackages: dolphin-part libdolphinvcs6 - fix super user mode in right click menu - Add upstream fixes: * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch (kde#497021) * 0001-dolphinview-Update-thumbnail-on-filename-change.patch (kde#497555) * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch (kde#495878) - Fix Desktopfile to start in super user mode as dbus-launch is no longer part of the basesystem (boo#1234692) ==== flatpak-kcm6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - No code changes since 6.2.4 ==== geoclue2 ==== Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Use BeaconDB as a drop-in replacement for defunct MLS WiFi geolocation, and contribute to coverage () - Add 0001-ichnaea-include-ssid.patch: * MLS/Ichnaea: Include SSID for geolocate and submission requests - Add 0002-ichnaea-replace-user-agent.patch: * MLS/Ichnaea: Replace rather than append User-Agent - Add 0003-user-agent-os-info.patch: * Set User-Agent on Soup Session Construction * Add OS Info to user-agent ==== gnome-branding-Aeon ==== - Correctly populate custom-keybindings gschema structure - A more modern choice of applications in aeon-firstboot - evince -> papers; celluloid -> showtime; vlc -> celluloid ==== gnome-shell-extensions ==== Subpackages: gnome-shell-classic gnome-shell-extensions-common - Update gnome-shell-add-app-to-desktop.patch: (bsc#1234648). ==== grilo ==== Subpackages: libgrilo-0_3-0 libgrlpls-0_3-0 - Increase test timeout on s390x. lib-net test can be slow and sometimes times out in our builds. ==== harfbuzz ==== Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Add harfbuzz-CVE-2024-56732.patch: guard hb_cairo_glyphs_from_buffer() against bad UTF-8 (CVE-2024-56732). ==== kactivitymanagerd6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kate ==== Subpackages: kate-plugins - new Qt keychain dependency to re-enable SQL plugin build ==== kde-cli-tools6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kde-gtk-config6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: kde-gtk-config6-gtk3 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * Don't try to create buttons when the factory failed to load * update version for new release ==== kdecoration6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libkdecorations2-6 libkdecorations2private11 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kdeplasma6-addons ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * Fixed issue that title was Info. And Author was not correct when a more than one () around text were used. * applets/userswitcher: Fit dialog height to content * update version for new release ==== kernel-source ==== Version update (6.11.8 -> 6.12.8) Subpackages: kernel-64kb kernel-default - Linux 6.12.8 (bsc#1012628). - ALSA: sh: Fix wrong argument order for copy_from_iter() (bsc#1012628). - ALSA: ump: Shut up truncated string warning (bsc#1012628). - Bluetooth: btusb: mediatek: change the conditions for ISO interface (bsc#1012628). - Bluetooth: btusb: mediatek: add intf release flow when usb disconnect (bsc#1012628). - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (bsc#1012628). - Bluetooth: btusb: mediatek: move Bluetooth power off command position (bsc#1012628). - btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1012628). - btrfs: check folio mapping after unlock in put_file_data() (bsc#1012628). - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1012628). - btrfs: sysfs: fix direct super block member reads (bsc#1012628). - btrfs: fix transaction atomicity bug when enabling simple quotas (bsc#1012628). - btrfs: fix swap file activation failure due to extents that used to be shared (bsc#1012628). - btrfs: avoid monopolizing a core when activating a swap file (bsc#1012628). - btrfs: fix race with memory mapped writes when activating swap file (bsc#1012628). - power: supply: gpio-charger: Fix set charge current limits (bsc#1012628). - power: supply: cros_charge-control: hide start threshold on v2 cmd (bsc#1012628). - power: supply: cros_charge-control: allow start_threshold == end_threshold (bsc#1012628). - power: supply: cros_charge-control: add mutex for driver data (bsc#1012628). - perf/x86/intel/ds: Add PEBS format 6 (bsc#1012628). - i2c: microchip-core: fix "ghost" detections (bsc#1012628). - i2c: imx: add imx7d compatible string for applying erratum ERR007805 (bsc#1012628). - perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC (bsc#1012628). - PCI/MSI: Handle lack of irqdomain gracefully (bsc#1012628). - virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1012628). - x86/fred: Clear WFE in missing-ENDBRANCH #CPs (bsc#1012628). - i2c: microchip-core: actually use repeated sends (bsc#1012628). - io_uring/sqpoll: fix sqpoll error handling races (bsc#1012628). - rtla/timerlat: Fix histogram ALL for zero samples (bsc#1012628). - tracing: Prevent bad count for tracing_cpumask_write (bsc#1012628). - tracing: Constify string literal data member in struct trace_event_call (bsc#1012628). - perf/x86/intel/uncore: Add Clearwater Forest support (bsc#1012628). - dmaengine: loongson2-apb: Change GENMASK to GENMASK_ULL (bsc#1012628). - freezer, sched: Report frozen tasks as 'D' instead of 'R' (bsc#1012628). - objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns (bsc#1012628). - drm/xe: Move the coredump registration to the worker thread (bsc#1012628). - drm/xe: Take PM ref in delayed snapshot capture worker (bsc#1012628). - ublk: detach gendisk from ublk device if add_disk() fails (bsc#1012628). - wifi: iwlwifi: be less noisy if the NIC is dead in S3 (bsc#1012628). - blk-mq: register cpuhp callback after hctx is added to xarray table (bsc#1012628). - virtio-blk: don't keep queue frozen during system suspend (bsc#1012628). - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1012628). - spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled() (bsc#1012628). - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (bsc#1012628). - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (bsc#1012628). - scsi: mpi3mr: Handling of fault code for insufficient power (bsc#1012628). - scsi: mpi3mr: Start controller indexing from 0 (bsc#1012628). - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1012628). - scsi: mpi3mr: Synchronize access to ioctl data buffer (bsc#1012628). - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (bsc#1012628). - spi: intel: Add Panther Lake SPI controller support (bsc#1012628). - bpf: Zero index arg error string for dynptr and iter (bsc#1012628). - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (bsc#1012628). - LoongArch: BPF: Adjust the parameter of emit_jirl() (bsc#1012628). - LoongArch: Fix reserving screen info memory for above-4G firmware (bsc#1012628). ... changelog too long, skipping 3420 lines ... - commit ea994cc ==== kexec-tools ==== Version update (2.0.29 -> 2.0.30) - update to 2.0.30: * arm64: Support UKI image format * bug fixes ==== kgamma6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kglobalacceld6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libKGlobalAccelD6-0 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kinfocenter6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kmenuedit6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kpipewire6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * Flush encoder queue when streaming doesn't provide an update * update version for new release ==== kscreen6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kscreenlocker6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libKScreenLocker6 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * x11locker: lower m_background when hiding * update version for new release ==== ksshaskpass6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== ksystemstats6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kwayland-integration6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kwayland6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libKWaylandClient6 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== kwin6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libkwin6 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * plugins/krunnner-integration: don't trust inputs from the dbus call * CMake: do not expand variables beforehand * plugins/krunner-integration: Fix crash * plugins/screencast: take scaling into account for window sources (kde#497571) * opengl: Fix cached size check in GLTexture::render() * plugins/shakecursor: don't trigger for warp events * backends/drm: fix the incorrect use of std::optional * Do not call ScreenLocker::KSldApp::unlocked when it unlocked in the meantime * backends/x11: Fix a crash in KWin::X11WindowedEglPrimaryLayer::present() * autotests/integration: add a color management test * wayland/xx color management: fix max > lum luminance checks * wayland: Fix XdgToplevelWindow::moveResizeInternal() committing geometry with fractional client size * wayland: Fix sending wl_pointer.leave event to Xwayland during dnd * opengl/eglnativefence: fix file descriptor leak * effects/overview: Animate if the thumbnail is dropped in an heap (kde#496646) * update version for new release ==== kwrited6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== layer-shell-qt6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libLayerShellQtInterface6 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== less ==== Version update (661 -> 668) - Update to 668 * Fix crash when using --header on command line * Fix possible crash when scrolling left/right or toggling -S * Fix bug when using #stop in a lesskey file * Fix bug when using --shift or --match-shift on command line with a parameter starting with '.' * Fix bug in R command when file size changes * Fix bug using --header when file does not fill screen * Fix ^X bug when output is not a terminal * Fix bug where ^Z is not handled immediately * Fix bug where first byte from a LESSOPEN filter is deleted if it is greater than 0x7F * Fix uninitialized variable in edit_ifile * Fix incorrect handling of UTF-8 chars in prompts - Add reproducible.patch to override build date (boo#1047218) ==== libcanberra ==== Version update (0.30 -> 0.30+2) Subpackages: canberra-gtk-play libcanberra-gtk3-0 libcanberra0 - Update to version v0.30+2: + gtk: Don't assume all GdkDisplays are GdkX11Displays. - Migrate package to obs_scm: we don't expect changes in git to happen anymore, but it's the line used across all GNOME packages. - Call autogen.sh in build section: the git checkout is not bootstrapped. - Drop libcanberra-broadway-fix.patch: part of the upstream git tree. - Pass --with-systemdunitdir=no to configure: dbus-broker newly pulls in systemd, but we have been running without those service files for like ever. With libcanberra being in maintenance only mode, there seems to be no justification to change this now. - Do not package documentation: building them requires lynx, which seems a bit exaggerated. ==== libdrm ==== Subpackages: libdrm2 libdrm_amdgpu1 libdrm_radeon1 - adjusted patches * n_libdrm-drop-valgrind-dep-generic.patch * n_libdrm-drop-valgrind-dep-intel.patch ==== libkscreen6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libKF6Screen8 libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== libksysguard6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== libnice ==== - Increase test timeout on s390x. test-send-recv can be slow and sometimes times out in our builds. - Add 37eeeb1a750bf2dd6d5769d759069e95dd1b8493.patch: test-new-trickle: Remove cancellable as a wakeup mechanism. - Add c47a7ea6289187857a38e0118bd8528cab9171c9.patch meson: Add glib debug, assert and check options. ==== libostree ==== Version update (2024.9 -> 2024.10) Subpackages: libostree-1-1 - Update to version 2024.10: + composefs: Ensure buffer is suitably aligned for struct fsverity_digest + core: Always sort incoming xattrs + sign-ed25519: Fix error message of validate_length + rofiles-fuse: when fuse execution fails, rofiles-fuse still returns exit code 0 + libostree/deploy: enable composefs by default + documentation updates ==== libplasma6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libPlasma6 libplasma6-components libplasma6-desktoptheme - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * Fix wallpaper templates * Always ensure setDestroyed propagates to all children applets * AppletQuickItem: Better handle missing mainScript * update version for new release ==== libportal ==== Version update (0.8.1 -> 0.9.0) Subpackages: libportal-gtk4-1 libportal1 - Update to version 0.9.0: + Features: Introduce support for the Notification v2 portal version. + Bug fixes: - Fix a file descriptor leak in the Mail portal code - Fix some minor memory leaks ==== libshout ==== - Build with openssl support enabled ==== libwebp ==== Version update (1.4.0 -> 1.5.0) Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3 - Update to release 1.5.0 * API changes: `cross_color_transform_bits` added to WebPAuxStats * Minor lossless encoder speed and compression improvements * Lossless encoding does not use floats anymore * Additional ARM optimizations for lossy & lossless + general code generation improvements * Tool updates: * gif2webp: added -sharp_yuv & -near_lossless * img2webp: added -exact & -noexact * Exit codes normalized; running an example program with no arguments will output its help and exit with an error. ==== libxcrypt ==== Version update (4.4.36 -> 4.4.37) - Update to 4.4.37 * Several fixes to the manpages (issue #185). * Only test the needed makecontext signature during configure (issue #178). * Fix -Werror=strict-overflow in lib/crypt-bcrypt.c, which is seen by GCC 4.8.5 (issue #197). - Symlink duplicated manpages ==== libzypp ==== Version update (17.35.15 -> 17.35.16) - Url: queryparams without value should not have a trailing "=". - version 17.35.16 (35) ==== llvm19 ==== Version update (19.1.5 -> 19.1.6) - Update to version 19.1.6. * This release contains bug-fixes for the LLVM 19.1.0 release. This release is API and ABI compatible with 19.1.0. - Rebase llvm-do-not-install-static-libraries.patch. ==== milou6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== oniguruma ==== Version update (6.9.9 -> 6.9.10) - Update to 6.9.10 - Update Unicode version 16.0 - Add new operator (*SKIP) - Fixed: ONIG_SYN_CONTEXT_INDEP_REPEAT_OPS not working for ^* pattern (Issue #292) ==== openjpeg2 ==== Version update (2.5.2 -> 2.5.3) - Update to 2.5.3: * No API/ABI break compared to v2.5.2 New Features: * Use TLM (Tile Length Marker) segments to optimize decoding #1538 * Add AVX2 and AVX512 optimization #1552 * Support setting enumcs for CMYK and EYCC color space #1529 Bug fixes: * Do not turn on 'TPsot==TNsot detection fix' when TNsot==1, and add a OPJ_DPARAMETERS_DISABLE_TPSOT_FIX flag to disable it #1560 * opj_j2k_setup_encoder(): set numgbits = 1 for Cinema2K #1559 * fix: when EPH markers are specified, they are required. #1547 * sycc422_to_rgb(): fix out-of-bounds read accesses when 2 * width_component_1_or_2 + 1 == with_component_0 #1566 * Avoid heap-buffer-overflow read on corrupted image in non-strict mode #1536 * opj_j2k_read_sod(): validate opj_stream_read_data() return to avoid potential later heap-buffer-overflow in in opj_t1_decode_cblk when disabling strict mode #1534 * fix integer Overflow at j2k.c:9614 #1530 * Memory leak fixes in error code path of opj_compress #1567 * opj_j2k_decode_tiles(): avoid use of uninitialized l_current_tile_no variable #1528 * Do not allow header length to be zero in non-zero length packet #1526 * Fix building on OpenBSD big endian hosts #1520 Changes in third party components: * thirdparty/libz: update to zlib-1.3.1 #1542 * thirdparty/libpng: update to libpng-1.6.43 #1541 * thirdparty/libtiff: update to libtiff 4.6.0 #1540 ==== openssl-3 ==== Subpackages: libopenssl3 - Add support for userspace livepatching on ppc64le (jsc#PED-11850). - Use gcc-13 for ppc64le. - Fix evp_properties section in the openssl.cnf file [bsc#1234647] * Rebase patches: - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch - openssl-TESTS-Disable-default-provider-crypto-policies.patch ==== openvpn ==== Subpackages: openvpn-auth-pam-plugin - Set %_buildshell because of bashisms in build recipe - Replace over-the-top `find -exec rm` by just -delete ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - base: suggest tar to avoid busybox-tar in default installs ==== pcr-oracle ==== - Add fix-event-reshash-for-cryptouuid.patch to detect the crypto device with the 'cryptouuid' prefix ==== pcsc-lite ==== Version update (2.3.0 -> 2.3.1) - version 2.3.1 * Install a default /etc/default/pcscd file * auth.c: implement polkit support for FreeBSD * meson: . also build static version of libpcsclite . add options to disable polkit and libsystemd . add "filter_names" in features when needed * Doxygen: document dwCurrentState use for "\\?PnP?\Notification" * Some other minor improvements ==== plasma5support6 ==== Version update (6.2.4 -> 6.2.5) Subpackages: libPlasma5Support6 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== plasma6-activities ==== Version update (6.2.4 -> 6.2.5) Subpackages: libPlasmaActivities6 plasma6-activities-imports - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== plasma6-activities-stats ==== Version update (6.2.4 -> 6.2.5) Subpackages: libPlasmaActivitiesStats1 - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== plasma6-browser-integration ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== plasma6-desktop ==== Version update (6.2.4 -> 6.2.5) Subpackages: plasma6-desktop-emojier - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * applets/taskmanager: Don't try to find service for application/octet-stream * appiumtests: skip test_6_sentry_3516_load_layout in CI * appiumtests: click Cancel to close file dialog * [kcms/mouse] Handle missing backend more gracefully * [kcm/access] Fix description of what locking sticky keys does * [kcms/mouse] Don't emit needsSaveChanged when adding device (kde#495231) * update version for new release ==== plasma6-integration ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== plasma6-nm ==== Version update (6.2.4 -> 6.2.5) Subpackages: plasma6-nm-openconnect plasma6-nm-openvpn - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * Fix saving keepalive interval for WireGuard (kde#461319) * Revert "Fix the connection speed tab remaining visible after disconnecting" * update version for new release ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.2.5 ==== plasma6-pa ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== plasma6-print-manager ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== plasma6-systemmonitor ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * page: Fix rowSpacing for EditablePage contents * page: Replace EditablePage's OpacityAnimator with NumberAnimation * page: Hide new pages by default (kde#496875) * update version for new release ==== plasma6-workspace ==== Version update (6.2.4 -> 6.2.5) Subpackages: plasma6-session plasma6-workspace-libs - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * components/dbus: fix invalid variant type since Qt 6.8.1 * applets/systemtray: fix busy indicator position for hidden items (kde#496910) * libtaskmanager: use QDateTime instead of QTime for lastActivated (kde#493724) * appmenu: Avoid repositioning the menu on wayland (kde#495787) * libtaskmanager: Fix transient losing needs attention state * notifications: Expose copied file through desktop portal * Fix DelegateChoice import with Qt 6.9 (kde#496900) * krunner: Clear faded completion text when prior search exists * systray: Clean up leaking systrays * applets/appmenu: Workaround global menu getting dismissed unexpectedly (kde#494635) * update version for new release ==== polkit-kde-agent-6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== poppler ==== Version update (24.07.0 -> 24.12.0) Subpackages: libpoppler-cpp1 libpoppler-glib8 - security update - added patches fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc + poppler-CVE-2024-56378.patch - Update to version 24.12.0: + core: - cairo: . Fix rendering of JPX images with transparency . Fix JPX transparency regression - Override encoding for Zapf Dingbats - Improve Signature appearance generation code - Improve Stamp appearance generation code - Mark certificates that can do qualified signing - Internal code improvements + qt6: Mark certificates that can do qualified signing + glib: Add free text annotations support + utils: pdfsig: Improve man page + build system: - Install some more internal headers - Fix build with in-tree build - For changes between 24.07 and this release, please see NEWS file. - Bump sover following upstream changes. - Rebase patches with quilt. ==== poppler-qt6 ==== Version update (24.07.0 -> 24.12.0) - security update - added patches fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc + poppler-CVE-2024-56378.patch - Update to version 24.12.0: + core: - cairo: . Fix rendering of JPX images with transparency . Fix JPX transparency regression - Override encoding for Zapf Dingbats - Improve Signature appearance generation code - Improve Stamp appearance generation code - Mark certificates that can do qualified signing - Internal code improvements + qt6: Mark certificates that can do qualified signing + glib: Add free text annotations support + utils: pdfsig: Improve man page + build system: - Install some more internal headers - Fix build with in-tree build - For changes between 24.07 and this release, please see NEWS file. - Bump sover following upstream changes. - Rebase patches with quilt. ==== powerdevil6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * daemon: Don't crash in PowerDevil::Core::unloadAllActiveActions() (kde#492349) * update version for new release ==== procps ==== Version update (4.0.4 -> 4.0.5) - Update to procps-ng-4.0.5 * library increment current, revision and age to 0: 1:0:0 internal: days/users when value is 0 issue #303 internal: dont print 60s but increment minute issue #302 internal: stat api fixed remaining cpu distortions issue #321 internal: only count user sessions internal: Recover from meminfo seek using LXC Debian #1072831 internal: stat api no longer counts guest tics twice issue #339 external: zswap & zswapped added to meminfo api external: schedule class added to pids api external: disk sleep added to pids api, sleep revised issue #265 external: docker containers added to pids api external: procps_users new exported function external: procps_uptime_snprint uses given upseconds external: procps_container_uptime external: meminfo api adds SecPageTables, Unaccepted external: pids api now provides open file descriptors external: 'info' parm removed from all 'VAL' macros issue #332 external: Add procps_sigmask_names external: Add procps_capability_names external: Add PIDS_CAP__PRM Permitted Capabilities * build-sys: Added --disable-pidwait and fixed logic issue #352 * kill: Correctly parse negative pids issue #354 * pgrep: select process by environment variable issue #167 * pgrep: Rework pidfile reading to include stdin issue #318 * pmap: Don't escape correct UTF-8 characters * ps: Add environ field * ps: Add htprv and htshr fields for HugeTables * ps: restore lost tasks for options --sort with -H issue #304 * ps: add 'docker' containers field, similar to 'lxc' * ps: Restore AIX free-format issue #323 * ps: can display open file descriptors for each task * ps: Fix signames scanning issue #341 * ps: Add -o pcap,pcaps to show permitted capabilities * ps: Zombies show in the commandname issue #355 * ps: Use quick mode if possible merge #239 * slabtop: Add --human option for slab size * snice: Minor fix for help screen Debian #1086441 * sysctl: Add glob excludes merge #206 * sysctl: --all skips stat_refresh Debian #978688 * top: added a 'CLS' scheduling class field, like ps * top: exploit library addition of 'disk sleep' issue #265 * top: add 'docker' containers field, similar to 'lxc' * top: provides additional control over colors * top: can display open file descriptors for each task * top: corrected cpu % for hosts with qemu processes issue #339 * top: remains functional if /proc mounted subset=pid * top: can display a task's permitted capabilities (^A) * uptime: Add container uptime option issue #300 * vmstat: Add page allocation to --stats * vmstat.8: si/so are changed by --unit Debian #1061944 * w: Don't segfault with -s option issue #301 * w: Cache pids list issue #305 * w: Add container uptime option * w.1: Note utmp is for non-systemd Debian #1080333 * watch: use clock_gettime issue #295 * watch.1: --chgexit only works for visible changes Debian #729569 * hugetop: a new utility to show huge page information merge #214 - Remove patches now upstream or fixed * 79042e07.patch * procps-ng-4.0.4-idletime-no-tty.patch * procps-ng-4.0.4-w-array-bounds.patch - Port patches * procps-ng-3.3.10-errno.patch * procps-ng-3.3.10-slab.patch * procps-ng-3.3.10-xen.dif * procps-ng-3.3.11-pmap4suse.patch * procps-ng-3.3.8-ignore-scan_unevictable_pages.patch * procps-ng-3.3.8-petabytes.patch * procps-ng-3.3.8-readeof.patch * procps-ng-3.3.8-tinfo.dif * procps-ng-3.3.8-vmstat-terabyte.dif * procps-ng-3.3.9-w-notruncate.diff * procps-ng-4.0.0-floats.dif * procps-ng-4.0.0-integer-overflow.patch * procps-ng-4.0.4-ignore-sysctl_conf.patch * procps-v3.3.3-columns.dif * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff ==== python-Jinja2 ==== Version update (3.1.4 -> 3.1.5) - Update to 3.1.5: * The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h * Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699 * Sandbox does not allow clear and pop on known mutable sequence types. #2032 * Calling sync render for an async template uses asyncio.run. #1952 * Avoid unclosed auto_aiter warnings. #1960 * Return an aclose-able AsyncGenerator from Template.generate_async. #1960 * Avoid leaving root_render_func() unclosed in Template.generate_async. #1960 * Avoid leaving async generators unclosed in blocks, includes and extends. #1960 * The runtime uses the correct concat function for the current environment when calling block references. #1701 * Make |unique async-aware, allowing it to be used after another async-aware filter. #1781 * |int filter handles OverflowError from scientific notation. #1921 * Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021 * Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025 * Fix copy/pickle support for the internal missing object. #2027 * Environment.overlay(enable_async) is applied correctly. #2061 * The error message from FileSystemLoader includes the paths that were searched. #1661 * PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705 * Improve annotations for methods returning copies. #1880 * urlize does not add mailto: to values like @a@b. #1870 * Tests decorated with @pass_context can be used with the |select filter. #1624 * Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413 * Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253 - drop fix-ftbfs-with-python313.patch, merged upstream ==== python-maturin ==== Version update (1.7.4 -> 1.7.8) - Update to 1.7.8 * Fix aarch64 Windows cross compilation by @messense in #2359 - Release 1.7.7 * fix abi3 interpreter discovery on Windows by @davidhewitt in [#2333] * fix: remove extra indent in generated CI by @jsstevenson in [#2340] * Upgrade cargo-xwin to unify rustls versions by @kornelski in [#2222] * Normalize python source directory path by @messense in #2343 * Enable fat LTO for maturin release workflow by @messense in [#2344] * Use different binding dirs for different uniffi modules by @messense in #2348 * Update minimal Python minor version for pyo3 0.23 by @messense in #2350 * Limit minimal PyPy version based on bindings crate version by @messense in #2351 * Remove hard coded pip show in fix_direct_url by @mbway in #2352 * Do not use xwin to compile on Windows when MSVC compiler can build for the target by @messense in #2353 - Release 1.7.6 * allow -i 3.13t by @davidhewitt in #2324 * propagate abiflags to wheel name on Windows by @davidhewitt in [#2325] * Add free-threaded wheel build to generate-ci by default by @messense in #2329 * Bump metadata version to 2.4 to fix license bug by @konstin in [#2332] - Release 1.7.5 * Auto detect Python 3.13 by @messense in #2248 * feat: add skip attestation option to maturin ci github by @moldhouse in #2254 * generate-ci: use macos-13 runner for x86_64 build job by @messense in #2255 * Improve wheel reproducibility by sorting libs by @ycongal-smile in #2261 * Fix inverted workspace inclusions by @konstin in #2262 * Fix broken links to PyO3 building docs by @laurentS in #2270 * Update goblin to 0.9 by @musicinmybrain in #2284 * Don't resolve python interpreter when building sdist only by @messense in #2292 * include timestamps in the suggested log format by @mbway in [#2304] * Add support for GNU/Hurd by @sthibaul in #2306 * Fix __init__ exports when using multiple UniFFI bindings by @Nickersoft in #2305 * Add free-threaded Python support by @messense in #2310 - Fix _service file for cargo_vendor - Update description ==== python-notify2 ==== - add sle15_python_module_pythons ==== python-urllib3 ==== - Skip some flaky tests that fail sometimes in OBS (bsc#1234681) ==== qemu ==== Version update (9.1.2 -> 9.2.0) - Update to latest upstream release, 9.2.0: The full list of changes are available at: https://wiki.qemu.org/ChangeLog/9.2 Highlights include: * virtio-gpu: support for 3D acceleration of Vulkan applications via Venus Vulkan driver in the guest and virglrenderer host library * crypto: GLib crypto backend now supports SHA-384 hashes * migration: QATzip-accelerated compression support while using multiple migration streams * Rust: experimental support for device models written in Rust (for development use only) * ARM: emulation support for FEAT_EBF16, FEAT_CMOW architecture features * ARM: support for two-stage SMMU translation for sbsa-ref and virt boards * ARM: support for CPU Security Extensions for xilinx-zynq-a9 board * ARM: 64GB+ memory support when using HVF acceleration on newer Macs * HPPA: SeaBIOS-hppa v17 firmware with various fixes and enhancements * RISC-V: IOMMU support for virt machine * RISC-V: support for control flow integrity and Svvptc extensions, and support for Bit-Manipulation extension on OpenTitan boards * RISC-V: improved performance for vector unit-stride/whole register ld/st instructions * s390x: support for booting from other devices if the previous ones fail * x86: support for new nitro-enclave machine type that can emulate * AWS Nitro Enclave and can boot from Enclave Image Format files. * x86: KVM support for enabling AVX10, as well as enabling specific AVX10 versions via command-line * and lots more... - Other changes: * Removed deprecated 'cris' support * Removed deprecated virtfs-proxy-helper * (`--enable-rust` not addressed yet) ==== qqc2-breeze-style6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== qt6-webengine ==== Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Add patch to avoid CVE-2024-40896 (boo#1234820) * 0001-Build-system-remove-libxml2-compilation-test.patch ==== samba ==== Version update (4.21.1+git.372.cb50f2d0a68 -> 4.21.2+git.382.df546a2d31b) Subpackages: libldb2 samba-ad-dc-libs samba-client samba-client-libs samba-dcerpc samba-libs - Update shipped /etc/samba/smb.conf to point to smb.conf man page;(bsc#1233880). - Update to 4.21.2 * smbd fails to correctly check sharemode against OVERWRITE dispositions; (bso#15732). * Panic in close_directory; (bso#15754). * winexe no longer works with samba 4.21; (bso#15752). * protocol error - Unclear debug message "pad length mismatch" for invalid bind packet; (bso#14356). * NetrGetLogonCapabilities QueryLevel 2 needs to be implemented; (bso#15425). * gss_accept_sec_context() from Heimdal does not imply GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740). * winbindd should call process_set_title() for locator child; (bso#15749). * Update CTDB to track all TCP connections to public IP addresses; (bso#15320). ==== sddm-kcm6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== shaderc ==== Version update (2024.3 -> 2024.4) - Update to release 2024.4 * Vulkan 1.4 support ==== shadow ==== Version update (4.16.0 -> 4.17.1) Subpackages: libsubid5 login_defs - Update to 4.17.1: * Fix `su -` regression #1163 - Update to 4.17.0: * Fix the lower part of the domain of csrand_uniform() * Fix use of volatile pointer * Use 'dist-hook' to clean up * Use str2[u]l() instead of atoi(3) * Use a2i() in various places * Fix const correctness * Use uid_t for holding UIDs (and GIDs) * Move all sprintf(3)-like APIs to a subdirectory * Move all copying APIs to a subdirectory * Fix forever loop on ENOMEM * Fix REALLOC() nmemb calculation * Remove id(1) * Remove groups(1) * Use local time for human-readable dates * Use %F instead of %Y-%m-%d with strftime(3) * is_valid{user,group}_name(): Set errno to distinguish the reasons * Recommend --badname only if it is useful * Add fmkomstemp() to fix mode of * Fix use-after-free bug in sgetgrent() * Update Catalan translation * Remove references to cppw, cpgr * groupadd, groupmod: Update gshadow file with -U * Added option -a for listing active users only, optimized using if aflg,return * Added information in lastlog man page for new option '-a' * Plenty of code cleanup and clarifications - Update to 4.17.0 RC1: Pre-release without changelog ==== srt ==== Version update (1.5.3 -> 1.5.4) - version update to 1.5.4 * API/ABI: - PR #2967: SRTO_VERSION socket option is read-only. Removed the ability to set a value (srt_setopt(..)). - PR #2849: Removed the possibility to use optlen=-1 in srt_setsockopt. - PR #2683:❗Changed conditions for setting caller and listen callbacks. - PR #2804: Fixed NULL characters handling inside of strings. - PRs #2887, #2918, #2912: Fixed getting some socket options from a group. * Known Issues - #3072: Getting SRTO_STREAMID on an accepted group connection does not return a value (listener side). * New Features and Improvements - PR #2700: Added support for Botan cryptography library. - PR #2940: Added support for building SRT on visionOS. * Thread Safety fixes: - PR #3047: Fixed static variable usage in the crypto module. - PR #3038: Improved mutex protection of the TSBPD. - PR #2998: Fixed a data race on the listener's config. - PR #2990: Fixed a potential data race around m_bGCStatus variable. - PR #2972: Fixed TSBPD thread create/join protection. - PR #2893: Fixed data races and multithreading issues. - PR #2723: Fixed lacking mutex protection of some ACK-related fields. - PR #1884: Fixed a possible socket leak in srt_accept failure. - PR #1824: Fixed some lock-order-inversion and data race problems. * Logging improvements * Encryption - PR #2962: Improved AES GCM encryption, changed GCM IV length to 12 bytes. - PR #2921: Drop unencrypted packets if the receiving KM state is "secured". - PR #2905: Fixed HaiCrypt_Clone() by properly setting up the RX crypto context. - PR #2880: Fixed the PacketFilter (FEC) configuration not counting the AEAD AUTH tag length. * Fixes related to SRT Socket groups. * Statistics fixes * Sample Applications fixes - PR #3002: Fixed verbose log linkage difference. - PR #2848: Added simplified support for RTP input in srt-live-transmit. - PR #2015, #3041: Added URL percent decoding to the URL query string keys and values. * Documentation - PR #2762: Added Rejection Reasons document. - PR #2921: Update the SRT_KM_S_SECURED description. Updated pktRcvUndecrypted description. - PR #2875: Updated the documentation about latency and transmission type. - PR #2820: More explicit description of grpdata_size updates. ==== systemd ==== Version update (256.9 -> 256.10) Subpackages: libsystemd0 libudev1 systemd-boot systemd-experimental udev - Import commit f962392e1e0d5683a2adebf09698b5fda02f9cfc (merge of v256.10) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/290170c8550bf2de4b5085ecdf7f056769944444...f962392e1e0d5683a2adebf09698b5fda02f9cfc - Add 5006-tpm2-util-Also-retry-unsealing-after-policy_pcr-retu.patch Backport of https://github.com/systemd/systemd/pull/35657, which fixes https://github.com/systemd/systemd/issues/35490 (boo#1233752, bsc#1234313). ==== systemsettings6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release ==== sysuser-tools ==== - Directly check return value of systemd-sysusers - Drop SLE15 support and remove disable-systemd-sysusers.patch - sysuser-shadow: remove systemd 238 dependency, this does not work in a single RPM transaction [bsc#1234277]. Call systemd-sysuser instead again without --replace. ==== tbb ==== Version update (2021.12.0 -> 2022.0.0) - Remove use-FORTIFY_SOURCE-from-distribution.patch, as it is now upstreamed - Use _service to download the source tarball - Update to version 2022.0.0: * Extended the Flow Graph receiving nodes with a new try_put_and_wait API that submits a message to the graph and waits for its completion. * Fixed the missed signal for thread request for enqueue operation * Significantly improved scalability of task_group, flow_graph, and parallel_for_each * Removed usage of std::aligned_storage deprecated in C++23 * Fixed the issue where oneapi::tbb::info interfaces might interfere with the process affinity mask on the Windows* OS systems with multiple processor groups. ==== transactional-update-notifier ==== Version update (1.1.0.2 -> 1.1.1) - Update to v1.1.1 * feat: env variable to set notification urgency ==== vulkan-loader ==== Version update (1.3.296 -> 1.4.304) - Update to tag 1.4.304 * Emulate VK_EXT_surface_maintenance1 if not supported by a driver * Add handle checking to test instance & device creation * Add settings test for layer control OFF & VK_INSTANCE_LAYERS * Make Settings file "ON" take priority over disable env-var * Log what caused each layer to be enabled * Log when Filter Env-Vars act when settings file is active * Add more logging when the settings file has invalid members ==== vulkan-tools ==== Version update (1.3.296 -> 1.4.304) - Update to tag 1.4.304 * icd: add support for AV1 encode and QP maps ==== webkit2gtk3 ==== Version update (2.46.4 -> 2.46.5) Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 webkit2gtk-4_1-injected-bundles - Update to version 2.46.5 (boo#1234851): + Fix the build with GBM and release logs disabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505, CVE-2024-54508. ==== webkit2gtk4 ==== Version update (2.46.4 -> 2.46.5) Subpackages: libjavascriptcoregtk-6_0-1 libwebkitgtk-6_0-4 webkitgtk-6_0-injected-bundles - Update to version 2.46.5 (boo#1234851): + Fix the build with GBM and release logs disabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505, CVE-2024-54508. ==== xdg-desktop-portal ==== Version update (1.18.4 -> 1.19.0) - Delete unreproducible Sphinx doctrees (boo#1234334) - Create a doc flavor for building developer documentation. - Update to 1.19.0: + The portals.conf parser is now able to handle fallback backends better, and respects the order of backends in the config file. + Try to use the xdg-desktop-portal-gtk backend as a last resort backend, if everything else fails. + Implement getlk and setlk, and honour O_NOFOLLOW, in the Document portal's FUSE filesystem. + Neutralize the Devices portal. Originally the Devices portal was introduced so that services like PulseAudio or PipeWire could request access to microphones and cameras on the behalf of apps. It was not meant to be used by sandboxed apps directly, which is unusual for a portal. Practically, however, it didn't take off. + Implement PID/TID mapping for host system apps. + Add a new "supported_output_file_formats" option to the Print portal. This can be used by apps like browsers to limit the output file formats presented by the Print portal backend. For example, an app can limit file printing to PDF files. + Add a new "GetHostPaths" method to the Document portal, which allows mapping file descriptors to paths on the host system. This can be used by apps to show more meaningful file paths in the user interface. + Like the new method above, the Document portal sets the "user.document-portal.host-path" xattr on files, pointing to the host system file path. The use case is similar to "GetHostPaths". + Make the Background portal more robust when validating autostart files. + Clarify behavior of the File Chooser portal in the documentation pages. + Improve robustness against deleted o_path fds in the Document portal. + Fix a warning in some systems while trying to load Request D-Bus object properties. + Fix a physical inode leak in the Document portal. + Various improvements to the test suite. Python-based tests now run in parallel and are more careful when setting up the mock D-Bus server. Tests also start dbus-monitor if necessary now. FUSE tests of the Document portal have been made more TAP-alike now. + Memory leak fixes in a variety of portals and services, including the permissions database, the Document portal, the File Transfer portal, the Location portal, the Background portal, tests, and the icon validator. And more. There's a lot of memory leak fixes everywhere, really. + Major refactorings of the icon validator. Icons are now limited to 4MB files. + Update XML specification specifying session handle type to match current actual ABI in GlobalShortcuts, Inhibit, RemoteDesktop, and ScreenCast portals. + New and updated translations. - Adapt BuildRequires for new documentation build process: + Add python3-Sphinx + Add python3-furo + Add python3-sphinxcontrib-copybutton + Add python3-sphinxext-opengraph ==== xdg-desktop-portal-gnome ==== - Add xdg-desktop-portal-gnome-gtk_init.patch: Call gtk_init before opening a display. ==== xdg-desktop-portal-kde6 ==== Version update (6.2.4 -> 6.2.5) - Update to 6.2.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.2.5 - Changes since 6.2.4: * update version for new release * [FileChooser] Don't ignore current_filter parameter with multiple name patterns * ScreenShot: Don't access the result of a cancelled future * Notification: Allow dbus-activating applications that are not running * update version for new release ==== xxhash ==== Version update (0.8.2 -> 0.8.3) - Update to release 0.8.3 * Corrects an edge case in ``XXH3_128bits_withSecretandSeed`` that could generate invalid results. * xxhash now knows command-line arguments ``--filelist``, ``--files-from``.