Packages changed: MicroOS-release (20260630 -> 20260702) NetworkManager SDL3 (3.4.10 -> 3.4.12) aardvark-dns (1.17.1 -> 2.0.0) at-spi2-core (2.60.4 -> 2.60.5) attr (2.5.2 -> 2.6.0) aurorae6 (6.7.1 -> 6.7.2) baloo-widgets (26.04.2 -> 26.04.3) bluedevil6 (6.7.1 -> 6.7.2) breeze6 (6.7.1 -> 6.7.2) breeze6-gtk (6.7.1 -> 6.7.2) container-selinux (2.249.0 -> 2.250.0) discover6 (6.7.1 -> 6.7.2) dolphin (26.04.2 -> 26.04.3) falkon (26.04.2 -> 26.04.3) ffmpegthumbs (26.04.2 -> 26.04.3) flatpak-kcm6 (6.7.1 -> 6.7.2) fwupd (2.1.5 -> 2.1.6) gdk-pixbuf (2.44.6 -> 2.44.7) glibmm2_4 (2.66.8 -> 2.66.9) grub2 gtk3 gzip kaccounts-integration (26.04.2 -> 26.04.3) kaccounts-providers (26.04.2 -> 26.04.3) kactivitymanagerd6 (6.7.1 -> 6.7.2) kate (26.04.2 -> 26.04.3) kde-cli-tools6 (6.7.1 -> 6.7.2) kde-gtk-config6 (6.7.1 -> 6.7.2) kdecoration6 (6.7.1 -> 6.7.2) kdegraphics-mobipocket (26.04.2 -> 26.04.3) kdegraphics-thumbnailers (26.04.2 -> 26.04.3) kdenetwork-filesharing (26.04.2 -> 26.04.3) kdeplasma6-addons (6.7.1 -> 6.7.2) kdialog (26.04.2 -> 26.04.3) kernel-source (7.0.12 -> 7.1.2) kgamma6 (6.7.1 -> 6.7.2) kglobalacceld6 (6.7.1 -> 6.7.2) kinfocenter6 (6.7.1 -> 6.7.2) kio-extras (26.04.2 -> 26.04.3) kio-gdrive (26.04.2 -> 26.04.3) kmenuedit6 (6.7.1 -> 6.7.2) knighttime6 (6.7.1 -> 6.7.2) konsole (26.04.2 -> 26.04.3) kpipewire6 (6.7.1 -> 6.7.2) kpmcore (26.04.2 -> 26.04.3) krb5 kscreen6 (6.7.1 -> 6.7.2) kscreenlocker6 (6.7.1 -> 6.7.2) ksshaskpass6 (6.7.1 -> 6.7.2) ksystemstats6 (6.7.1 -> 6.7.2) kwalletmanager (26.04.2 -> 26.04.3) kwayland-integration6 (6.7.1 -> 6.7.2) kwayland6 (6.7.1 -> 6.7.2) kwin6 (6.7.1 -> 6.7.2) layer-shell-qt6 (6.7.1 -> 6.7.2) libjansson (2.15.0 -> 2.15.1) libkdcraw (26.04.2 -> 26.04.3) libkexiv2-qt6 (26.04.2 -> 26.04.3) libkgapi6 (26.04.2 -> 26.04.3) libkscreen6 (6.7.1 -> 6.7.2) libksysguard6 (6.7.1 -> 6.7.2) libplasma6 (6.7.1 -> 6.7.2) libvpl (2.16.0 -> 2.17.0) milou6 (6.7.1 -> 6.7.2) netavark (1.17.2 -> 2.0.0) partitionmanager (26.04.2 -> 26.04.3) plasma5support6 (6.7.1 -> 6.7.2) plasma6-activities (6.7.1 -> 6.7.2) plasma6-activities-stats (6.7.1 -> 6.7.2) plasma6-browser-integration (6.7.1 -> 6.7.2) plasma6-desktop (6.7.1 -> 6.7.2) plasma6-integration (6.7.1 -> 6.7.2) plasma6-nm (6.7.1 -> 6.7.2) plasma6-openSUSE plasma6-pa (6.7.1 -> 6.7.2) plasma6-print-manager (6.7.1 -> 6.7.2) plasma6-systemmonitor (6.7.1 -> 6.7.2) plasma6-workspace (6.7.1 -> 6.7.2) polkit-kde-agent-6 (6.7.1 -> 6.7.2) powerdevil6 (6.7.1 -> 6.7.2) python-alembic (1.18.4 -> 1.18.5) qqc2-breeze-style6 (6.7.1 -> 6.7.2) qrca (26.04.2 -> 26.04.3) sddm-kcm6 (6.7.1 -> 6.7.2) setools (4.6.0 -> 4.7.0) signon-kwallet-extension (26.04.2 -> 26.04.3) spectacle (6.7.1 -> 6.7.2) systemd (260.2 -> 260.3) systemsettings6 (6.7.1 -> 6.7.2) tbb (2022.3.0 -> 2023.0.0) xdg-desktop-portal-kde6 (6.7.1 -> 6.7.2) xdg-user-dirs === Details === ==== MicroOS-release ==== Version update (20260630 -> 20260702) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Modify nfs: Exit gracefully if /etc/fstab is missing (bsc#1185815). ==== SDL3 ==== Version update (3.4.10 -> 3.4.12) - Update to release 3.4.12 * Improved support for external surfaces under Wayland * Fixed visual artifacts when switching render targets with the Vulkan renderer * Fixed crash rendering YUV textures on NVIDIA drivers with the Vulkan renderer * Added SDL_HINT_ENABLE_STEAM_SCREEN_KEYBOARD to customize behavior on Steam Deck and Steam Machine * Added hotplug detection support when using libusb for HIDAPI controllers * Fixed truncated long text input sequences when using sdl2-compat ==== aardvark-dns ==== Version update (1.17.1 -> 2.0.0) - Update to version 2.0.0: * This is major release to keep the version aligned with netavark, however it brings no breaking changes * The MSRV has been bumped to v1.88 * Dependency updates ==== at-spi2-core ==== Version update (2.60.4 -> 2.60.5) Subpackages: libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Update to version 2.60.5: + Fix a possible crash in atk_bridge_adaptor_cleanup. + Attempt to fix event listeners still being wrongly deregistered in some cases. ==== attr ==== Version update (2.5.2 -> 2.6.0) Subpackages: libattr1 - Update to 2.6.0: Major Issues Fixed: - The libacl library functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() take a pathname argument and follow symbolic links. When a privileged user calls one of those functions, an attacker that controls a pathname component can replace a file or directory with a symbolic link and redirect the operation to a different file. This can lead to local privilege escalation. The library functions cannot be fixed without breaking compatibility; the described behaviour is by design. Instead, version 2.4.0 of the acl package introduces the additional functions acl_get_file_at(), acl_set_file_at(), acl_extended_file_at(), and acl_delete_def_file_at(). These functions each take a dirfd file descriptor argument and an at_flags argument and accept the AT_SYMLINK_NOFOLLOW and AT_EMPTY_PATH flags. Use these functions to control when to follow symbolic links. In addition, the libacl functions acl_get_fd(), acl_set_fd(), and acl_extended_fd() functions always operate on the access ACL; the library previously did not offer a way to operate on the default ACL of a directory file descriptor. The new functions remove that restriction. It will be up to each individual program to start using these new library functions where appropriate. - When walking directory trees, the getfacl, setfacl, chacl, and getfattr utilities constructed the full pathname of each file in the tree and use that pathname to access the file. When a privileged user used those utilities, an attacker that controlled a pathname component could replace a directory with a symbolic link and redirect the operation to a different file, leading to a local privilege escalation. This is fixed by using directory file descriptors and operating relative to those directory file descriptors. - When resolving the final pathname component, the getfacl, setfacl, chacl, getfattr, and setfattr utilities in some cases used functions that resolve symbolic links. This includes the above mentioned libacl functions, but also stat(), chmod(), and chown(). This is fixed by using symlink-safe functions throughout the code. - When restoring a backup, the setfacl and setfattr utilities read the full pathnames of files from the backup. When those pathnames were resolved, pathname components that are symbolic links were traversed. An attacker that controlled a pathname component could replace it with a symbolic link, causing a privileged user to operate on a file other than the one intended. This could lead to the same kind of local privilege escalation as discussed before. This is fixed by using openat2(RESOLVE_NO_SYMLINKS) to resolve the directory components of a pathname, but see Compatibility Notes below for the details. Minor Issues Fixed: - When a symbolic link was specified on the command line but symbolic link traversal was disabled using option -P (--physical), the getfacl and setfacl utilities previously silently ignored the symlink. Now, an ELOOP ("Too many levels of symbolic links") error will result instead. - acl_delete_entry() now verifies that the specified entry belongs to the specified acl. - Numeric uids and gids that cannot be represented in types uid_t and gid_t are checked more carefully and invalid numbers are rejected. - Functions acl_get_file(), acl_get_file_at(), and acl_get_fd() will retry several times when the size of an ACL grows unexpectedly; previously, they only grew the allocated buffer once before giving up. - When passed a directory file descriptor, function perm_copy_fd() didn't copy the default ACL from one directory to the other. It now does. - setfacl --restore accidentally ignored leading whitespace in filenames. It no longer does. - setfacl --restore accidentally called chmod() when in --test mode. It no longer does. - When the setfattr --restore option was used multiple times, a buffer was accessed after being freed. This no longer happens. - When the setfattr -h (--no-dereference) option was given after --restore, it was ignored. Now, the options can be passed in any order. - The -h (--no-dereference) option of getfattr prevented getfattr from recursing into "symbolic link directories". This is wrong. When dirlink is a symbolic link that refers to a directory, "getfattr -Rh dirlink" will now visit that directory. The -P (--physical) option can be used to prevent that. - Similarly, when a symbolic link referring to a directory was specified on the getfacl or setfacl command line, the -R option did not cause that directory to be visited. This has been fixed so that those directories will now be visited. The -P (--physical) option can be used to prevent that. ==== aurorae6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== baloo-widgets ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * tagsfileitemaction: fix crash on empty selection (kde#521325) ==== bluedevil6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== breeze6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-wallpapers - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== breeze6-gtk ==== Version update (6.7.1 -> 6.7.2) Subpackages: gtk3-metatheme-breeze6 metatheme-breeze6-common - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== container-selinux ==== Version update (2.249.0 -> 2.250.0) - Update to version 2.250.0: * Allow rpmdb to manage files on mounted container filesystems * Add the container_runtime_signull() interface * give container_domain perms on container_file_t fifo_files * Suppress mmap_zero denials for container_runtime_t * rpm: Require policycoreutils >= 3.10 for policydb version 24 support * Add the container_spc_signull() interface * Allow spc_t execstack and execmem (bsc#1268490) - Drop allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch: included upstream - Introduce container_can_execstack boolean for older Java applications and allow execmem (bsc#1268490) - Add patch: allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch ==== discover6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-notifier - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== dolphin ==== Version update (26.04.2 -> 26.04.3) Subpackages: dolphin-part libdolphinvcs6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * search/chip: Draw chip with QStyle instead of hardcoding Breeze * viewproperties: ensure not to remove defaults view properties ==== falkon ==== Version update (26.04.2 -> 26.04.3) Subpackages: falkon-kde - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Drop QTEST_DISABLE_KEYPAD_NAVIGATION from tests ==== ffmpegthumbs ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== flatpak-kcm6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - No code changes since 6.7.1 ==== fwupd ==== Version update (2.1.5 -> 2.1.6) Subpackages: libfwupd3 typelib-1_0-Fwupd-2_0 - Update to version 2.1.6: + This release adds the following features: - Add --filter-protocol to fwupdmgr and fwupdtool - Add a new HSI attribute for coreboot verified boot - Add hashes for the latest DBX for offline machines - Allow parsing Hayden Bridge Thunderbolt firmware - Handle HPE Redfish reset-required updates - Ignore efivar free space on VMWare, GCE and EC2 VMs - Prevent FwupdClient from downloading the same file multiple times - Split UEFI Memory Protection HSI from NX Compat + This release fixes the following bugs: - Avoid an integer overflow in the ifwi-cpd manifest length check - Avoid truncating the AMD Kria FRU board area offset - Block dbx updates on ASUSTeK GL553VD - Check SMEE hardware bit directly for AMD SME detection - Create the ESP OS directory if not found - Detect the BCR device on Celeron LPC SPI controllers - Fall back to a binary firmware when no specific MTD image type is set - Fix AI table clear behavior of the elantp boot code. - Fix errors with fwupd-refresh service not working properly - Fix Genesys GL32xx device locker crash due to argument mismatch - Fix installing KEK updates when using snapd by sending the correct blob - Fix integer underflow when Elan firmware is smaller than one page - Fix possible NULL pointer dereference when updating SteelSeries firmware - Fix the display of the HP UEFI db certificate - Improved usi-dock progress reporting behavior - Increase the parser item limit from 100 to 1000 for large KEKs - Log out of the Redfish session when required on HPE hardware - Only show 'authenticating' after a short delay - Re-process the device metadata when required after all devices are added - Require sealed memfd input to prevent possible TOCTOU attacks - Sanitise the Jabra GNP device version in a more secure way - Validate raydium-tp buffer size before direct index access - Validate that Lenovo dock device-reported program sizes are valid + This release adds support for the following hardware: - Lenovo dual-bank accessory dongle and paired peripherals ==== gdk-pixbuf ==== Version update (2.44.6 -> 2.44.7) Subpackages: gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Update to version 2.44.7: + xpm: Fix loading the xpm module if built-in + glycin: - Fix the build on 32bit - Use fwrite to avoid problems with saving - Add signature for webp - Make filename tricks work in pid namespaces + Updated translations. ==== glibmm2_4 ==== Version update (2.66.8 -> 2.66.9) - Update to version 2.66.9: + Documentation: - Remove obsolete FSF (Free Software Foundation) address - README.win32.md: Mention Visual Studio 2026, update build info - NMake Makefiles: Update build info again + Build: - Meson build: Make Visual Studio 2026 builds distinct - NMake Makefiles: . Make Visual Studio 2026 builds distinct . Reorganize, fix, and clean up a bit . Make m4 detection more flexible and robust . Make build process more robust . More consolidations . Update gmmproc install location . NMake Makefiles: Build generate_defs_[glib|gio] - Meson build: Don't require the 'dot' command when creating documentation with Doxygen. ==== grub2 ==== Subpackages: grub2-common grub2-i386-efi grub2-i386-efi-bls grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi grub2-x86_64-efi-bls - grub2.spec: Use unnumbered patch tag https://rpm.org/docs/4.20.x/manual/spec.html#patch ==== gtk3 ==== Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Add gtk3-fix-xi2-xatom.patch: Fix wrong display when handling xi2 xatom. (bsc#1269225, glgo#GNOME/gtk!10105) ==== gzip ==== - Add CVE-2026-41991.patch: fix insecure temporary file handling in the gzexe utility (and zdiff) when the mktemp utility is not available in the user's PATH. Backport of upstream commit 4e6f8b24ab823146ab8776f0b7fe486ab34d4269. (CVE-2026-41991, bsc#1269622) ==== kaccounts-integration ==== Version update (26.04.2 -> 26.04.3) Subpackages: libkaccounts6-2 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kaccounts-providers ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kactivitymanagerd6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kate ==== Version update (26.04.2 -> 26.04.3) Subpackages: kate-plugins - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kde-cli-tools6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * kstart: Unset desktop file name (kde#521679) * Update version for new release 6.7.2 ==== kde-gtk-config6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: kde-gtk-config6-gtk3 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kdecoration6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libkdecorations3-6 libkdecorations3private2 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kdegraphics-mobipocket ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdegraphics-thumbnailers ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdenetwork-filesharing ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kdeplasma6-addons ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * [Vietnamese Lunar Calendar] Fix midnight JDE rounding in getLocalDayIndex (kde#522099) * applets/colorpicker: Fix sizing * Update version for new release 6.7.2 - Enable Kameleon QMK integration, got whitelisted ==== kdialog ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kernel-source ==== Version update (7.0.12 -> 7.1.2) - Update patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch (bsc#1012628 CVE-2026-53354). - Update patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch (bsc#1012628 CVE-2026-53325 bsc#1269726). suse-add-cves - commit 992f18c - KVM: x86/tdx: Do not print error message on non-present feature (bsc#1270053). - commit 15c3ef6 - Update patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch (bsc#1012628 CVE-2026-52946 bsc#1269113). - commit 9476022 - Linux 7.1.2 (bsc#1012628). - virtiofs: fix UAF on submount umount (bsc#1012628). - media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (bsc#1012628). - ksmbd: reject non-VALID session in compound request branch (bsc#1012628). - drivers/base/memory: set mem->altmap after successful device registration (bsc#1012628). - serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1012628). - serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero (bsc#1012628). - vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1012628). - crypto: qat - remove unused character device and IOCTLs (bsc#1012628). - iio: adc: ti-ads1298: add bounds check to pga_settings index (bsc#1012628). - iio: light: veml6075: add bounds check to veml6075_it_ms index (bsc#1012628). - agp/amd64: Fix broken error propagation in agp_amd64_probe() (bsc#1012628). - Revert "NFSD: Defer sub-object cleanup in export put callbacks" (bsc#1012628). - fuse: re-lock request before replacing page cache folio (bsc#1012628). - io_uring/net: Avoid msghdr on op_connect/op_bind async data (bsc#1012628). - commit 8d2f9d1 - Update config files. Enable PSI measurement (jsc#PED-15418). Align with upstream default and allow simpler usage of PSI data. - commit 1f56042 - Refresh patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch. - Refresh patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch. - Refresh patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch. - Refresh patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch. Update upstream status by: ./scripts/series_sort -u - commit 594ea34 - Refresh patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch. Update upstream status. - commit c4d22cc - selftests/bpf: Tolerate missing files during install (poo#202224). - selftests/bpf: Provide weak definitions for cross-test functions (poo#202224). - selftests/bpf: Tolerate benchmark build failures (poo#202224). - selftests/bpf: Allow test_progs to link with a partial object set (poo#202224). - selftests/bpf: Skip tests whose objects were not built (poo#202224). - selftests/bpf: Tolerate test file compilation failures (poo#202224). - selftests/bpf: Make skeleton headers order-only prerequisites of .test.d (poo#202224). - selftests/bpf: Avoid rebuilds when running emit_tests (poo#202224). - selftests/bpf: Tolerate BPF and skeleton generation failures (poo#202224). - selftests/bpf: Fix test_kmods KDIR to honor O= and distro kernels (poo#202224). - selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224). - commit 58110d9 - ACPICA: Unbreak tools build after switching over to strscpy_pad() (bsc#1268472). - Delete patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch. Replace by a v2 -- the revert was dropped upstream. - commit 37bbff8 - Linux 7.1.1 (bsc#1012628). - fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1012628). - driver core: faux: fix root device registration (bsc#1012628). - driver core: reject devices with unregistered buses (bsc#1012628). - arm64: cputype: Add C1-Ultra definitions (bsc#1012628). - arm64: cputype: Add C1-Premium definitions (bsc#1012628). - arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1012628). ... changelog too long, skipping 98 lines ... - commit 3512c44 ==== kgamma6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kglobalacceld6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKGlobalAccelD6-0 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kinfocenter6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 * about: prevent loading more than 2 devices on nvidia (kde#521295) * Update version for new release 6.7.2 ==== kio-extras ==== Version update (26.04.2 -> 26.04.3) Subpackages: libkioarchive6-6 trash_kcm - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kio-gdrive ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kmenuedit6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== knighttime6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKNightTime0 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== konsole ==== Version update (26.04.2 -> 26.04.3) Subpackages: konsole-part - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - Changes since 26.04.2: * Fix warnings from PreviewJob ==== kpipewire6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kpmcore ==== Version update (26.04.2 -> 26.04.3) Subpackages: libkpmcore13 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== krb5 ==== - Prevent read overrun in kdb-ldap: * CVE-2026-11850, bsc#1268131 - Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch ==== kscreen6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kscreenlocker6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKScreenLocker6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== ksshaskpass6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== ksystemstats6 ==== Version update (6.7.1 -> 6.7.2) - Prepare for CAP_PERFMON on ksystemstats_intel_helper - Add patch for hardening (boo#1262779): * 0001-Guard-ksystemstats_intel_helper-against-path-travers.patch - Remove workaroud for Leap 16, works meanwhile - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kwalletmanager ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== kwayland-integration6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kwayland6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKWaylandClient6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== kwin6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libkwin6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * backends/drm: disable hardware rotation on older AMD GPUs (kde#521764) * backends/drm: fix SDR MHC2 profiles with a calibration matrix (kde#522301) * multigpuswapchain: force linear target buffers for AMD multi-gpu copies * Move "mouse to focus" and "mouse to center" shortcuts to kwin core (kde#522070) * backends/drm: correctly transform damage to buffer-local (kde#521878) * Optimize querying X window shape (kde#522005) * scene/workspacescene: don't ignore forced software cursor for direct scanout (kde#521953) * wayland/outputdevice: delay done event until the output has a UUID (kde#521826) * backends/drm: use the native colorimetry again (kde#521759) * kcm_*: fix BugReportUrl * plugins/eis: Do not send events from release warp to capture (kde#521486) * backends/drm: disable unused objects even when the last output is removed * scene: Properly crop opaque region of subsurfaces * backends/drm: pre-emptively filter out udev events for non-KMS nodes * scene/surfaceitem_wayland: immediately update the release point of the texture (kde#521687,kde#521960) * Update version for new release 6.7.2 ==== layer-shell-qt6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libLayerShellQtInterface6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== libjansson ==== Version update (2.15.0 -> 2.15.1) - Update to 2.15.1: * Include the object key or array index in unpack type mismatch error messages (@cwalther in #731) * Reject negative string length in the json_pack s# and +# formats (@akheron in #740) * Limit recursion depth in dump, equal and deep copy to prevent stack overflow (@akheron in #741) ==== libkdcraw ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKDcrawQt6-5 libkdcraw-qt6 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkexiv2-qt6 ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKExiv2Qt6-0 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkgapi6 ==== Version update (26.04.2 -> 26.04.3) Subpackages: libKPim6GAPICore6 libKPim6GAPIDrive6 libkgapi6-sasl2-kdexoauth2 - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== libkscreen6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libKF6Screen8 libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== libksysguard6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== libplasma6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libPlasma7 libplasma6-components libplasma6-desktoptheme - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== libvpl ==== Version update (2.16.0 -> 2.17.0) - update to 2.17.0: * Intel® VPL API 2.17 support, including new APIs for reporting decoder capabilities, accessing bitstream buffers in video memory, configuring encoder pre-processing, and documentation updates ==== milou6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== netavark ==== Version update (1.17.2 -> 2.0.0) - Update to version 2.0.0: * This version is required for podman 6.0 and buildah 1.44 and only supported to be used together with them * Removed iptables support * The bridge network driver now defaults to strict isolation mode; this means different networks can no longer talk to each by default. To restore the previous behavior the network must set the `isolate=false` option. * The macvlan network driver now use a default mtu of 99 * Added network create support, podman now calls netavark create to create a network config. * The bridge network driver now supports the `outbound_addr4` and `outbound_addr6` options to specify the outgoing NAT source address. * Netavark now supports assigning multiple static ip addresses per subnet. * The MSRV has been bumped to v1.88. * Dependency updates. ==== partitionmanager ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== plasma5support6 ==== Version update (6.7.1 -> 6.7.2) Subpackages: libPlasma5Support6 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-activities ==== Version update (6.7.1 -> 6.7.2) Subpackages: libPlasmaActivities7 plasma6-activities-imports - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-activities-stats ==== Version update (6.7.1 -> 6.7.2) Subpackages: libPlasmaActivitiesStats1 - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-browser-integration ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-desktop ==== Version update (6.7.1 -> 6.7.2) Subpackages: plasma6-desktop-emojier - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 * KCMMouse: fix some layout issues (kde#521992) * Don't make warnings fatal in kcm_kded test * Don't import desktoptest in kcm_kded appium test * Drop bug482267 test * FolderView: More robust drop url generation (kde#521713) * WorkspaceOPtions: fix warnings * applets/kickoff: add selection highlight for SectionView (kde#522154) * applets/kickoff: correctly show highlight in the Places page * Update version for new release 6.7.2 ==== plasma6-integration ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-nm ==== Version update (6.7.1 -> 6.7.2) Subpackages: plasma6-nm-openconnect plasma6-nm-openvpn - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Fix overflow in network details (kde#522333) * Bump QtKeychain dependency * vpn/openconnect: Make Connect button more obvious * kded: Do not try to send DBus errors when handling a no reply request * Update version for new release 6.7.2 - Explicitly require QtKeychain >= 0.16.0 ==== plasma6-openSUSE ==== - Update to 6.7.2 ==== plasma6-pa ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== plasma6-print-manager ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 * [print-queue] Elide job processing message * Update version for new release 6.7.2 ==== plasma6-systemmonitor ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 * processtable: Remove unnecessary separator * table: Hide the icon for processes in tree mode if it is empty (kde#442095) * Update version for new release 6.7.2 ==== plasma6-workspace ==== Version update (6.7.1 -> 6.7.2) Subpackages: plasma6-session plasma6-workspace-libs - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * plasma-windowed: Check for SNI being null * applets/devicenotifier: Check StorageAccess being null (kde#522051) * runners/bookmarks: Set minimum letter count to 2 * runners/bookmarks: Recreate cache dir if it was removed before * runners/bookmarks: Load favicon only when match actually matches * Update version for new release 6.7.2 ==== polkit-kde-agent-6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== powerdevil6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== python-alembic ==== Version update (1.18.4 -> 1.18.5) - update to 1.18.5: * **[usecase] [commands]** Added `--splice` support to the `merge()` command. Previously, the merge command would suggest using `--splice` when attempting to merge non-head revisions, but the flag was not actually accepted by the command. * The `splice` parameter is now available in both the command- line interface and the `command.merge()` function, matching the existing support in `command.revision()`. * **[usecase] [environment]** Added `ScriptDirectory.get_heads.consider_depends_on` parameter to `ScriptDirectory.get_heads()`. When set to `True`, head revisions that are also a dependency of another revision via `depends_on` are excluded from the result, matching the effective heads that would be present in the `alembic_version` table after running all upgrades. * producing invalid Python in the generated migration scripts. Column objects within list or tuple values are now correctly rendered as their string column names. * **[bug] [mysql]** Implemented type comparison for `ENUM` datatypes on MySQL, which checks that the individual enum values are equivalent. If additional entries are on either side, this generates a diff. Changes of order do not generate a diff. Pull request courtesy Furkan Köykıran. * **[bug] [operations]** Fixed bug where the `inline_references` parameter of `Operations.add_column()` did not include foreign key referential actions such as `ON DELETE`, `ON UPDATE`, `DEFERRABLE`, `INITIALLY`, and `MATCH` when rendering the inline `REFERENCES` clause. ==== qqc2-breeze-style6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== qrca ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== sddm-kcm6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== setools ==== Version update (4.6.0 -> 4.7.0) - Fix setools test package - Update to version 4.7.0: - Add MCP server to provide LLMs the ability to analyze policy. - Internal changes: - The source distribution is now a Python sdist. - The policyrep C extension is cythonized, so cython is an optional build dependency now. Still keeping it in, might be good to still rebuild it ourselves. ==== signon-kwallet-extension ==== Version update (26.04.2 -> 26.04.3) - Update to 26.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.04.3/ - No code change since 26.04.2 ==== spectacle ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== systemd ==== Version update (260.2 -> 260.3) Subpackages: libsystemd0 libudev1 systemd-boot systemd-container udev - Import commit a6ea105861b47842aed56242325ac1f33603c9c6 (merge of v260.3) This update includes the following fix: 91873ca3d7 nss-systemd: avoid ELF TLS for recursion guard (bsc#1254924) - Drop 1001-units-drop-Before-sockets.target-from-networkd-resol.patch and 1002-nss-systemd-avoid-ELF-TLS-for-recursion-guard.patch, both are part of v260.3. ==== systemsettings6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * Update version for new release 6.7.2 ==== tbb ==== Version update (2022.3.0 -> 2023.0.0) - update to 2023.0.0: * [Preview] Introduced ability to wait for a single task in a ``task_group`` instead of waiting for all tasks to finish. This increases reactivity and decreases latency in key user workloads. * [Preview] Introduced ``flow::resource_limited_node`` and ``flow::resource_limiter`` classes. These nodes only execute when they can successfully acquire the necessary resources from the resource limiters associated with the node. This feature is used to guard access to shared resources, while maximizing available parallelism in the graph. * [Preview] Introduced ``task_arena`` core type selector to better support hybrid architectures with several core types. Users use this new flexible API to more tightly constrain execution to set preferences for the specific core types that match their workload. * [Preview] Added global control parameter to set default block time behavior on server HW. This allows developers to revert to older blocking behavior if their applications are not able to fully utilize all cores, thereby reducing idle spinning. * Added new API to create a set of NUMA bound task arenas, simplifying common patterns used to optimize for NUMA architectures. * Extended Flow Graph functional node deduction guides to support non-static member function and member object pointers as a node bodies. * The Flow Graph join_node and indexer_node now support 10 or more input ports. * Explicit deduction guides for ``blocked_nd_range`` are now a fully supported feature. * Added native WASM exception handling support. - tbb-python-setuptools.patch (upstream) ==== xdg-desktop-portal-kde6 ==== Version update (6.7.1 -> 6.7.2) - Update to 6.7.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.2 - Changes since 6.7.1: * screencast: connect stream closed() on m_streams, not the moved-from vector * Update version for new release 6.7.2 ==== xdg-user-dirs ==== - Add drop-x-gnome-autostart.patch: Allow systemd to manage the start of xdg-user-dirs user service. When X-GNOME-Autostart-Phase is set in a .desktop file, systemd ignores it, and since gnome-session stopped handling services, we ended up with it never beeing started. https://gitlab.freedesktop.org/xdg/xdg-user-dirs/-/work_items/52