Packages changed: AppStream (1.2.1 -> 1.2.2) akonadi (26.08.2 -> 26.08.3) akonadi-calendar (26.08.2 -> 26.08.3) akonadi-calendar-tools (26.08.2 -> 26.08.3) akonadi-contacts (26.08.2 -> 26.08.3) akonadi-import-wizard (26.08.2 -> 26.08.3) akonadi-mime (26.08.2 -> 26.08.3) akonadi-search (26.08.2 -> 26.08.3) akregator (26.08.2 -> 26.08.3) analitza (26.08.2 -> 26.08.3) ark (26.08.2 -> 26.08.3) baloo-widgets (26.08.2 -> 26.08.3) binutils blinken (26.08.2 -> 26.08.3) calendarsupport (26.08.2 -> 26.08.3) compat-usrmerge ddcutil (2.2.7 -> 3.0.2) dolphin (26.08.2 -> 26.08.3) e2fsprogs eventviews (26.08.2 -> 26.08.3) ffmpegthumbs (26.08.2 -> 26.08.3) gcc16 (16.2.1+git9713 -> 16.2.1+git9901) gdb (16.3 -> 17.2) grantleetheme (26.08.2 -> 26.08.3) gstreamer-plugins-rs (1.28.8 -> 1.28.9) gwenview (26.08.2 -> 26.08.3) incidenceeditor (26.08.2 -> 26.08.3) kaccounts-integration (26.08.2 -> 26.08.3) kaccounts-providers (26.08.2 -> 26.08.3) kaddressbook (26.08.2 -> 26.08.3) kalgebra (26.08.2 -> 26.08.3) kamera (26.08.2 -> 26.08.3) kanagram (26.08.2 -> 26.08.3) kapptemplate (26.08.2 -> 26.08.3) kate (26.08.2 -> 26.08.3) kbruch (26.08.2 -> 26.08.3) kcachegrind (26.08.2 -> 26.08.3) kcalc (26.08.2 -> 26.08.3) kcalutils (26.08.2 -> 26.08.3) kcharselect (26.08.2 -> 26.08.3) kcolorchooser (26.08.2 -> 26.08.3) kde-dev-utils (26.08.2 -> 26.08.3) kdeedu-data (26.08.2 -> 26.08.3) kdegraphics-mobipocket (26.08.2 -> 26.08.3) kdegraphics-thumbnailers (26.08.2 -> 26.08.3) kdenetwork-filesharing (26.08.2 -> 26.08.3) kdepim-addons (26.08.2 -> 26.08.3) kdepim-runtime (26.08.2 -> 26.08.3) kdialog (26.08.2 -> 26.08.3) kernel-firmware-amdgpu (20260926 -> 20261031) kernel-firmware-ath10k (20260926 -> 20261022) kernel-firmware-ath11k (20260926 -> 20261031) kernel-firmware-ath12k (20260926 -> 20261009) kernel-firmware-bluetooth (20260929 -> 20261104) kernel-firmware-i915 (20260806 -> 20261031) kernel-firmware-intel (20260916 -> 20261104) kernel-firmware-media (20260926 -> 20261031) kernel-firmware-mediatek (20260825 -> 20261031) kernel-firmware-network (20260813 -> 20261031) kernel-firmware-nvidia (20260610 -> 20261014) kernel-firmware-platform (20260717 -> 20261026) kernel-firmware-qcom (20260929 -> 20261031) kernel-firmware-realtek (20260915 -> 20261104) kernel-firmware-serial kernel-firmware-sound (20260926 -> 20261022) kernel-firmware-usb-network (20260610 -> 20261012) kgeography (26.08.2 -> 26.08.3) khangman (26.08.2 -> 26.08.3) khelpcenter (26.08.2 -> 26.08.3) kidentitymanagement (26.08.2 -> 26.08.3) kig (26.08.2 -> 26.08.3) kimap (26.08.2 -> 26.08.3) kio-extras (26.08.2 -> 26.08.3) kio_audiocd (26.08.2 -> 26.08.3) kiten (26.08.2 -> 26.08.3) kitinerary (26.08.2 -> 26.08.3) kldap (26.08.2 -> 26.08.3) kleopatra (26.08.2 -> 26.08.3) kmag (26.08.2 -> 26.08.3) kmahjongg (26.08.2 -> 26.08.3) kmail (26.08.2 -> 26.08.3) kmail-account-wizard (26.08.2 -> 26.08.3) kmailtransport (26.08.2 -> 26.08.3) kmbox (26.08.2 -> 26.08.3) kmines (26.08.2 -> 26.08.3) kmousetool (26.08.2 -> 26.08.3) kmplot (26.08.2 -> 26.08.3) kompare (26.08.2 -> 26.08.3) konsole (26.08.2 -> 26.08.3) kontact (26.08.2 -> 26.08.3) kontactinterface (26.08.2 -> 26.08.3) konversation (26.08.2 -> 26.08.3) korganizer (26.08.2 -> 26.08.3) kpat (26.08.2 -> 26.08.3) kpimtextedit (26.08.2 -> 26.08.3) kpkpass (26.08.2 -> 26.08.3) kqtquickcharts (26.08.2 -> 26.08.3) kreversi (26.08.2 -> 26.08.3) ksanecore (26.08.2 -> 26.08.3) ksmtp (26.08.2 -> 26.08.3) ksudoku (26.08.2 -> 26.08.3) ktextaddons ktnef (26.08.2 -> 26.08.3) ktouch (26.08.2 -> 26.08.3) kwalletmanager (26.08.2 -> 26.08.3) kwordquiz (26.08.2 -> 26.08.3) libblockdev libfreehand (0.1.2 -> 0.1.4) libgravatar (26.08.2 -> 26.08.3) libkcddb (26.08.2 -> 26.08.3) libkdcraw (26.08.2 -> 26.08.3) libkdegames (26.08.2 -> 26.08.3) libkdepim (26.08.2 -> 26.08.3) libkeduvocdocument (26.08.2 -> 26.08.3) libkexiv2-qt6 (26.08.2 -> 26.08.3) libkgapi6 (26.08.2 -> 26.08.3) libkleo (26.08.2 -> 26.08.3) libkmahjongg (26.08.2 -> 26.08.3) libkomparediff2 (26.08.2 -> 26.08.3) libksane (26.08.2 -> 26.08.3) libksieve (26.08.2 -> 26.08.3) libpisp (1.7.0 -> 1.8.0) libsndfile libupnp (22.1.10 -> 22.2.0) liburing lokalize (26.08.2 -> 26.08.3) lvm2 (2.03.43 -> 2.03.44) lvm2-device-mapper (2.03.43_1.02.217 -> 2.03.44_1.02.218) mailcommon (26.08.2 -> 26.08.3) mailimporter (26.08.2 -> 26.08.3) markdownpart (26.08.2 -> 26.08.3) mbox-importer (26.08.2 -> 26.08.3) messagelib (26.08.2 -> 26.08.3) mimetreeparser (26.08.2 -> 26.08.3) mozilla-nss (3.130 -> 3.132) nvidia-open-driver-G07-signed (595.112.07_k7.3.1_1 -> 620.70.06_k7.3.1_1) nvidia-open-driver-G07-signed-cuda (615.71.09_k7.3.1_1 -> 620.70.06_k7.3.1_1) okular (26.08.2 -> 26.08.3) openSUSE-release (20261105 -> 20261108) openssh (10.6p1 -> 10.6p2) parley (26.08.2 -> 26.08.3) perl-CGI (4.720.0 -> 5.20.0) perl-HTML-Parser (3.850.0 -> 3.860.0) perl-Mail-AuthenticationResults (2.20260216 -> 2.20261029) pim-data-exporter (26.08.2 -> 26.08.3) pim-sieve-editor (26.08.2 -> 26.08.3) pimcommon (26.08.2 -> 26.08.3) python-configobj python-psutil python-pyasn1 (0.6.4 -> 0.6.5) qemu (11.1.2 -> 11.1.3) qrca (26.08.2 -> 26.08.3) rubygem-nokogiri (1.19.4 -> 1.19.7) sddm sddm-qt6 shotwell (33.1 -> 33.2) signon-kwallet-extension (26.08.2 -> 26.08.3) skanlite (26.08.2 -> 26.08.3) sqlite3 step (26.08.2 -> 26.08.3) svgpart (26.08.2 -> 26.08.3) umbrello (26.08.2 -> 26.08.3) vsftpd x11-tools === Details === ==== AppStream ==== Version update (1.2.1 -> 1.2.2) Subpackages: libAppStreamQt3 libappstream5 - Add upstream change: * 0001-bundle-Add-back-support-for-Limba.patch - Update to version 1.2.2: * Features: + Content-rating: Add attribute titles and group descriptions + Pool: Allow adding extra data locations with explicit scope and origin + Ascli: sysinfo: Print some more information about the OS, like its support period + Bundle: Drop Limba, add Manifold * Bugfixes: + Cli: Fail YAML validation for missing input + Compose: Fix build on a newer kernel with an old glibc + Pool: Work around all Flatpak origins having the same name + Pool: Include scope in metadata cache keys for Flatpak + Apt: Don't hang when tar emits lots of stderr output + Its: Support MetaInfo files that use the specification's namespace + System-info: Don't prefix an OS ID that already is rDNS + Sysinfo: Also replace `-` with `_` at `dns_to_rdns` function - Update version dependencies according to meson.build. ==== akonadi ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6AkonadiAgentBase6 libKPim6AkonadiAgentWidgetBase6 libKPim6AkonadiCore6 libKPim6AkonadiPrivate6 libKPim6AkonadiWidgets6 libKPim6AkonadiXml6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Do not crash if the tracer is unknown (kde#528012) * specialcollectionsrequestjob - return if Resource id's don't match (kde#526767) ==== akonadi-calendar ==== Version update (26.08.2 -> 26.08.3) Subpackages: akonadi-plugin-calendar kalendarac libKPim6AkonadiCalendar6 libKPim6AkonadiCalendarCore6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * suspenddialog.cpp - use a QTextBrowser for the text (not a QLabel) ==== akonadi-calendar-tools ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== akonadi-contacts ==== Version update (26.08.2 -> 26.08.3) Subpackages: akonadi-plugin-contacts libKPim6AkonadiContactCore6 libKPim6AkonadiContactWidgets6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== akonadi-import-wizard ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6ImportWizard6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== akonadi-mime ==== Version update (26.08.2 -> 26.08.3) Subpackages: akonadi-plugin-mime libKPim6AkonadiMime6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== akonadi-search ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6AkonadiSearch6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== akregator ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== analitza ==== Version update (26.08.2 -> 26.08.3) Subpackages: libAnalitza9 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== ark ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkerfuffle26 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Add -- to separate arguments and file names when dealing with CLI apps ==== baloo-widgets ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== binutils ==== Subpackages: libctf-nobfd0 libctf0 libsframe3 - Add %license to %files. ==== blinken ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== calendarsupport ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6CalendarSupport6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== compat-usrmerge ==== - Install usrmerge.attr non-executable, it is a fileattr definition and not a script - Fix typo in the main package description - Build the build subpackage as noarch, its fileattr script and bin/sbin dependency data are architecture-independent - Replace unbounded strcpy/stpcpy calls in usrmergecheck with snprintf - Run spec-cleaner in full mode ==== ddcutil ==== Version update (2.2.7 -> 3.0.2) Subpackages: ddcutil-i2c-udev-rules libddcutil5 - Fix i586 %check failure in test_string_util: fail str_to_long() on strtol ERANGE overflow instead of clamping to LONG_MAX/MIN, which made str_to_int() wrongly succeed for out-of-range input on ILP32 (ddcutil-strtol-erange.patch). - Update to version 3.0.2 (3.0.0 and 3.0.1 had severe reliability and performance issues, skip them): * Reworked display connect/disconnect handling for performance and reliability; Plasma users should update * 3.0.1: reverted to serial i2c examination (parallel checks crashed AMD Navi / Plasma wouldn't start) * 3.0.2: dropped the single multi-message EDID ioctl (severe slowdowns without EDID, possible amdgpu crash); built-in Valve Index HMD ignore list * The i2c GROUP udev rule now ships commented out per upstream packaging-policy note (boo#1277442) * No SONAME change (libddcutil.so.5) * Align BuildRequires floors with configure.ac: glib-2.0 >= 2.40, jansson >= 2.0, libdrm >= 2.4.67, libusb-1.0 >= 1.0.15 - Drop Group: tags ==== dolphin ==== Version update (26.08.2 -> 26.08.3) Subpackages: dolphin-part libdolphinvcs6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * kfileitemmodel: apply the refresh of an item that setData() renamed (kde#527059) * KStandardItemListWidget: respect DPR when creating a drag pixmap in Details view * dolphinview: drop the frame of the view where the style draws one (kde#527201) * dolphinviewcontainer: name the view properties after the url the view shows (kde#526398) * dolphinmainwindow: pass the folder of the custom command as one argument (CVE-2026-110236, boo#1285432) * CI: Comment flatpak job ==== e2fsprogs ==== Subpackages: libcom_err2 libext2fs2 - Fix mke2fs creating wrongly sized orphan files since 1.47.4: the kernel refused to mount e.g. a 1G filesystem made with 1k blocks ("orphan file too big"), and filesystems with 2097152 blocks or more (8G with the default 4k blocks) only got a 2 block orphan file. Add two upstream patches: * Revert-libext2fs-fix-orphan-file-size-kernel-limit.patch (reverts the faulty orphan file sizing change of 1.47.4) * libext2fs-cap-orphan-file-size-at-kernel-limit.patch (limits an explicitly requested orphan file size to the kernel limit of 512 blocks) ==== eventviews ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6EventViews6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * .kde-ci.yml - no longer require cppcheck-clean ==== ffmpegthumbs ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== gcc16 ==== Version update (16.2.1+git9713 -> 16.2.1+git9901) Subpackages: cpp16 libasan8 libatomic1 libgcc_s1 libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libstdc++6 libstdc++6-pp libtsan2 libubsan1 - Update to gcc-16 branch head, git9901 * pulls fix for stack corruption in std::bitset stream extraction [bsc#1289549] [gcc#124370] (CVE-2026-115455) * pulls fix for std::from_chars to not read past end of input [bsc#1289550] [gcc#127666] (CVE-2026-115456) * pulls fix for buffer overrun in __gnu_parallel search [bsc#1288775] (CVE-2026-114690) * pulls fix for overflow in std::vector constructors [bsc#1288774] (CVE-2026-114691) ==== gdb ==== Version update (16.3 -> 17.2) - Patches added (testsuite): * gdb-testsuite-fix-timeout-in-gdb.threads-vfork-multi.patch * gdb-testsuite-handle-help-timeout-in-gdb.python-pyth.patch * gdb-testsuite-fix-fail-in-gdb.server-multi-ui-errors.patch - Patches added (testsuite): * gdb-testsuite-fix-timeout-in-gdb.base-async-shell.ex.patch * gdb-testsuite-fix-timeout-in-gdb.base-foll-fork-sysc.patch - Add a libipt- -> processor-trace- symlink to make quilt setup work. - Mention changes in GDB 17: * Debugging Linux programs that use x86-64 or x86-64 with 32-bit pointer size (X32) Shadow Stacks are now supported. * Support for the shadow stack pointer register on x86-64 or x86-64 with 32-bit pointer size (X32) GNU/Linux. * Debug Adapter Protocol changes: * GDB now supports the "completions" request. * The attach request now accepts the coreFile parameter. * "set style" commands now support numeric format for basic colors from 0 to 255 and #RRGGBB format for TrueColor. * New built-in convenience variable $_colorsupport provides a comma-separated list of color space names supported by the terminal. Each color space name is one of monochrome, ansi_8color, aixterm_16color, xterm_256color or rgb_24bit. It is handy for conditionally using styling colors based on terminal features. * Linux checkpoint code has been updated to work with multiple inferiors. * The gcore and gdb-add-index scripts now have a -v or --version option, which prints the version number, and then exits. As well as a -h or --help option, which prints each option and a brief description. * On systems that support linker namespaces, the output of the command "info sharedlibraries" may add one more column, NS, which identifies the namespace into which the library was loaded, if more than one namespace is active. * New built-in convenience variables $_linker_namespace_count and $_linker_namespace. These show the number of active linker namespaces, and the namespace to which the current location belongs. In systems that don't support linker namespaces, or if the inferior hasn't started yet, these always return the integer 0. * Add record full support for rv64gc architectures. * Debugging Linux programs that use AArch64 Guarded Control Stacks is now supported. * GDB now adds all type symbols to the .gdb_index section. The index version number has not increased as a consequence of this change. This fixes an issue where GDB could fail to find a type when relying on the index. Any existing indexes should be regenerated. * New commands: * maintenance check psymtabs Renamed from maintenance check-psymtabs * maintenance check symtabs Renamed from maintenance check-symtabs * maintenance canonicalize Show the canonical form of a C++ name. * set riscv numeric-register-names on|off show riscv numeric-register-names Controls whether GDB refers to RISC-V registers by their numeric names (e.g. 'x1') or their ABI names (e.g. 'ra'). Defaults to 'off', matching the old behaviour (ABI names). * set style emoji on|off|auto show style emoji Controls whether GDB can display emoji. The default is "auto", which means emoji will be displayed in some situations when the host charset is UTF-8. * set style warning-prefix STRING set style error-prefix STRING These commands control the prefix that is printed before warnings and errors, respectively. This functionality is intended for use with emoji display, and so the prefixes are only displayed if emoji styling is enabled. * info linker-namespaces * info linker-namespaces [[N]] Print information about the given linker namespace (identified as N), or about all the namespaces if no argument is given. * Changed commands: * info sharedlibrary On Linux and FreeBSD, the addresses shown in the output of this command are now for the full memory range allocated to the shared library. * info threads [-gid] [-stopped] [-running] [ID]... If no threads match the given ID(s) or filter options, GDB now prints "No threads matched." without printing the provided arguments. The newly added '-stopped' option makes GDB list the stopped threads only. Similarly, '-running' makes GDB list the running threads only. If both options are given together, both stopped and running threads are listed. These new flags can be useful to get a reduced list when there is a large number of threads. * GDB-internal Thread Local Storage (TLS) support: * Linux targets for the x86_64, aarch64, ppc64, s390x, and riscv architectures now have GDB-internal support for TLS address lookup in addition to that traditionally provided by the libthread_db library. This internal support works for programs linked against either the GLIBC or MUSL C libraries. For programs linked against MUSL, this new internal support provides new debug functionality, allowing access to TLS ... changelog too long, skipping 263 lines ... %{primary_python}, respectively. ==== grantleetheme ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6GrantleeTheme6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== gstreamer-plugins-rs ==== Version update (1.28.8 -> 1.28.9) - Update to version 1.28.9: * aws: Update BehaviorVersion * aws: putobjectsink: Fix missing content/header properties on the request * awskvssignaller: fix missing Tokio runtime in start() * basedepay: fix off-by-one two-byte extension parsing * deepgram, spotify, webrtc: update webpki-roots to 1.0.10 * gtk4paintablesink: Mark EGL display as foreign to not terminate it * hlsbasesink: Fix incorrect PDT values with system as PDT reference * hlssink3: Fix stream write regression for CMAF and WebVTT sinks * isobmff: Fix NTP seconds roll-over past 2036 * isobmff: elst box must be inside an edts box * livesync: Avoid subtle timing problems around repeating buffers * rtpbin2: Couple of minor fixes * rtspsrc2: Fix UDP receive timeouts * rtspsrc2: Update mykey * rtspsrc2: Various SDP related fixes * transcriberbin: Support older errorignore element * webrtcsink: add support of mpph264enc (rockchip) * webrtcsrc: fix deadlock when the ICE connection fails * update mp4-atom to 0.17 * meson build: Enable cross-compilation with sysroot ==== gwenview ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * FITSData::debayer: Check ds1394_height is valid * FITSData::loadFITS: Fix crash due to overflow in calculations * timeutils: read the offset from UTC of the exif date * historymodel: check the recent folders for existence in a thread (kde#526858) ==== incidenceeditor ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6IncidenceEditor6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * incidencedialog.cpp - Don't prompt for a journal default calendar * We need to compare to button as for other check * QStandardPaths::writableLocation(QStandardPaths::GenericDataLocation) * .kde-ci.yml - no longer require cppcheck-clean * Fix LSAN failure in conflictresolvertest ==== kaccounts-integration ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkaccounts6-2 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kaccounts-providers ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kaddressbook ==== Version update (26.08.2 -> 26.08.3) Subpackages: kaddressbook-doc libKPim6AddressbookImportExport6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kalgebra ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kamera ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kanagram ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kapptemplate ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kate ==== Version update (26.08.2 -> 26.08.3) Subpackages: kate-plugins - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Do not capture params in lambda slot * Fix not using built PATH on macos * Fix the locals view tooltips * Don't request members of variables that have none anymore * Fix stale variables in collapsed scopes after stepping * Fix crash on a late variables response after clearing the locals view * Fix structs and arrays not expandable in the locals view (kde#526140) * Fix crash when restoring a sidebar with missing tool views * Fix incorrect discard/remove text * Fix "Open At Head" action * Fix reading incorrect config key * Delete all views when closing a split that shows a widget * Fix duplicate tabs and crash after changing the tab limit * Skip skip-worktree files when loading files from git * Return widgets without a tab from KateViewSpace::widgets() * Fix registration of new documents in project * tests with ASAN on FreeBSD are very slow * try to fix latex test on windows * git-blame: ignore the configured revs file when it is missing ==== kbruch ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kcachegrind ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kcalc ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kcalutils ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6CalendarUtils6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kcharselect ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kcolorchooser ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kde-dev-utils ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdeedu-data ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdegraphics-mobipocket ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdegraphics-thumbnailers ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdenetwork-filesharing ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdepim-addons ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdepim-runtime ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdialog ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kernel-firmware-amdgpu ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * amdgpu: DMCUB updates for various ASICs - Update to version 20261026 (git commit 98b55c84e8da): * amdgpu: DMCUB updates for DCN42 - Update to version 20261017 (git commit a2dcb924f089): * Revert "amdgpu: update GC 11.0.0 firmware" * amdgpu: update vangogh firmware * amdgpu: update VPE 6.1.1 firmware * amdgpu: update VCN 4.0.6 firmware * amdgpu: update PSP 14.0.1 firmware * amdgpu: update GC 11.5.1 firmware * amdgpu: update VCN 4.0.5 firmware * amdgpu: update PSP 14.0.0 firmware * amdgpu: update GC 11.5.0 firmware * amdgpu: update renoir firmware * amdgpu: update yellow carp firmware * amdgpu: update raven2 firmware * amdgpu: update raven firmware * amdgpu: update VCN 3.1.2 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update picasso firmware * amdgpu: update PSP 13.0.11 firmware * amdgpu: update GC 11.0.4 firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update VCN 5.0.0 firmware * amdgpu: update PSP 14.0.3 firmware * amdgpu: update GC 12.0.1 firmware * amdgpu: update PSP 14.0.2 firmware * amdgpu: update GC 12.0.0 firmware * amdgpu: update VCN 4.0.4 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update beige goby firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update navy flounder firmware * amdgpu: update sienna cichlid firmware * amdgpu: update navi14 firmware * amdgpu: update navi12 firmware * amdgpu: update navi10 firmware * amdgpu: update VCN 5.0.1 firmware * amdgpu: update GC 9.4.4 firmware * amdgpu: update PSP 15.0.9 firmware * amdgpu: update GC 11.7.1 firmware * amdgpu: update VCN 5.3.0 firmware * amdgpu: update PSP 15.0.0 firmware * amdgpu: update PSP 14.0.5 firmware * amdgpu: update GC 11.5.3 firmware * amdgpu: update PSP 14.0.4 firmware * amdgpu: update GC 11.5.2 firmware * amdgpu: update green sardine firmware * amdgpu: update VCN 4.0.3 firmware * amdgpu: update PSP 13.0.6 firmware * amdgpu: update GC 9.4.3 firmware * amdgpu: DMCUB updates for various ASICs - Update to version 20261012 (git commit b9df1a1aa45b): * amdgpu: DMCUB updates for various ASICs * amdgpu: update gc 11.0.1 and 11.0.4 firmware ==== kernel-firmware-ath10k ==== Version update (20260926 -> 20261022) - Update to version 20261022 (git commit 412eb7861d40): * ath10k: WCN3990: hw1.0: update shikra/wlanmdsp.mbn to WLAN.HL.3.3.7.c5-00226 ==== kernel-firmware-ath11k ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * ath11k: QCA2066 hw2.1@nfa725: add to WLAN.HSP.1.1.c6-00302-QCAHSPSWPL_V1_V2_SILICONZ_LITE-1 * ath11k: QCA2066 hw2.1: update board-2.bin ==== kernel-firmware-ath12k ==== Version update (20260926 -> 20261009) - Update to version 20261009 (git commit 8f9cd8ebb163): * ath12k: WCN7850 hw2.0: update board-2.bin ==== kernel-firmware-bluetooth ==== Version update (20260929 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * linux-firmware: Update firmware file for Intel Scorpius2 core * linux-firmware: Update firmware file for Intel Scorpius2 core - Update aliases from 7.4-rc1 - Update to version 20261022 (git commit 412eb7861d40): * QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00680 - Update to version 20261012 (git commit b9df1a1aa45b): * aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware - Update to version 20261009 (git commit 8f9cd8ebb163): * linux-firmware: Update firmware file for Intel Solar core * linux-firmware: Update firmware file for Intel Magnetar core * linux-firmware: Update firmware file for Intel BlazaruHrpGfp core * linux-firmware: Update firmware file for Intel BlazariGfp core * linux-firmware: Update firmware file for Intel BlazarUFmPArl core * linux-firmware: Update firmware file for Intel BlazarI core * linux-firmware: Update firmware file for Intel BlazariFmp core * linux-firmware: Update firmware file for Intel BlazarU core * linux-firmware: Update firmware file for Intel ScorpiusGfp core * linux-firmware: Update firmware file for Intel Scorpius core ==== kernel-firmware-i915 ==== Version update (20260806 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * xe: Add GSC 108.0.0.1211 for NVL - Update aliases from 7.3-rc1 ==== kernel-firmware-intel ==== Version update (20260916 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * Linux-firmware: Add Dell ISH firmware 582.7822.0 for Intel Nova Lake-H systems. * intel-ipu6: Add firmware binary for IPU8 * intel-ipu6: Support IPU 7 and later as well - Update to version 20261009 (git commit 8f9cd8ebb163): * linux-firmware: Add ISH firmware files for Intel Nova Lake-H/S platforms ==== kernel-firmware-media ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * qcom: vpu: Update video firmware binary for Kaanapali ==== kernel-firmware-mediatek ==== Version update (20260825 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * mediatek MT7922: update bluetooth firmware to 20261027203403 * linux-firmware: update firmware for MT7922 WiFi device - Update to version 20261021 (git commit 084e837ec47f): * mediatek MT7925: update bluetooth firmware to 20261016233221 * linux-firmware: update firmware for MT7925 WiFi device ==== kernel-firmware-network ==== Version update (20260813 -> 20261031) - Update aliases from 7.4-rc1 - Update to version 20261031 (git commit bda6eccc3a8f): * wilc1000: update WILC1000/WILC3000 firmware to v16.5.2 ==== kernel-firmware-nvidia ==== Version update (20260610 -> 20261014) - Update aliases from 7.4-rc1 - Update to version 20261014 (git commit d5455717ead0): * nvidia: Update and add missing firmware files for Tegra SoCs ==== kernel-firmware-platform ==== Version update (20260717 -> 20261026) - Update aliases from 7.4-rc1 - Update to version 20261026 (git commit 98b55c84e8da): * linux-firmware: nxpwifi: add firmware for IW610 WiFi device - Update to version 20261017 (git commit a2dcb924f089): * rockchip: add PCIe3 PHY firmware for snps-pcie3 - Update to version 20261014 (git commit d5455717ead0): * wfx: update to firmware 3.18 - Update to version 20261009 (git commit 8f9cd8ebb163): * panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU ==== kernel-firmware-qcom ==== Version update (20260929 -> 20261031) - Update aliases from 7.4-rc1 - Update to version 20261031 (git commit bda6eccc3a8f): * qcom: update LPAICP firmware for shikra platform * qcom: update Rubik Pi 3 ADSP firmware * qcom: update CDSP firmware for shikra platform - Update to version 20261022 (git commit 412eb7861d40): * qcom: Add gpu firmwares for Nord chipset - Update to version 20261021 (git commit 084e837ec47f): * qcom:x1e80100: Support for Lenovo Yoga Slim7 Snapdragon platform CDSP - Update to version 20261017 (git commit a2dcb924f089): * Update ADSP firmware for Qualcomm qcs615 platform. - Update to version 20261014 (git commit d5455717ead0): * qcom:Update qdsp6sw firmware for shikra platform - Update to version 20261012 (git commit b9df1a1aa45b): * qcom: update HPASS firmware for nord platform - Update to version 20261009 (git commit 8f9cd8ebb163): * qcom: update LPAICP firmware for shikra platform * qcom: update ADSP firmware for glymur platform * qcom: fix qcs8300 gpdspr.jsn symlink target * qcom: update ADSP firmware for x1e80100 platform * qcom: add ADSP firmware for eliza platform ==== kernel-firmware-realtek ==== Version update (20260915 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * rtw89: 8852c: update fw to v0.27.138.1 - Update to version 20261014 (git commit d5455717ead0): * rtw89: init board_elm.bin with stuffs for board ID 1 * rtw89: 8922d: update fw 0.35.119.3 with format suffix -1 * rtw89: 8922d: update fw 0.35.115.2 ==== kernel-firmware-serial ==== - Update aliases from 7.4-rc1 ==== kernel-firmware-sound ==== Version update (20260926 -> 20261022) - Update aliases from 7.4-rc1 - Update to version 20261022 (git commit 412eb7861d40): * linux-firmware: qcom: sync audioreach firmwares from v1.0.5 build - Update to version 20261009 (git commit 8f9cd8ebb163): * cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops * cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops * cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops * cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops * cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop * cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6 ==== kernel-firmware-usb-network ==== Version update (20260610 -> 20261012) - Update to version 20261012 (git commit b9df1a1aa45b): * aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware ==== kgeography ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== khangman ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== khelpcenter ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kidentitymanagement ==== Version update (26.08.2 -> 26.08.3) Subpackages: kidentitymanagement-lang libKPim6IdentityManagementCore6 libKPim6IdentityManagementWidgets6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kig ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kimap ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6IMAP6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kio-extras ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkioarchive6-6 trash_kcm - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * smb: use the saved login of a share whose url names no user ==== kio_audiocd ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Don't indicate unsaved changes after reset/apply (kde#502029) ==== kiten ==== Version update (26.08.2 -> 26.08.3) Subpackages: fonts-KanjiStrokeOrders - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kitinerary ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6Itinerary6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Fix extracting arrival times for overnight Lufthansa flights * Fix flight to train conversion in generic pkpass extraction * Extract Lufthansa pkpass boarding passes for Deutsche Bahn * lufthansa extractor: Allow a space before the slash * Add extractor script for easyTable * Consider literal prefixes at the start of an address line optional * Extract Finnair PDF boarding passes in mobile layout * Fix extracting LTG Link pkpasses using string-based date/time values * fix ltglink PDF extractor for non-reservations ==== kldap ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6LdapCore6 libKPim6LdapWidgets6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kleopatra ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Fix crash if no keyserver configured and no keys are updated via WKD ==== kmag ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kmahjongg ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kmail ==== Version update (26.08.2 -> 26.08.3) Subpackages: kmail-application-icons ktnef - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Honor global external content in separate readers * Fix mem leak here * Avoid mem leak in autotest. We need to get menu ==== kmail-account-wizard ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * ManualConfigurationPage: Use binding and onActivated signal * kolab resource was removed * Fix socket types for pop3 resource creation * Validate e-mail address on first screen * Hide previous action in the last screen It duplicates the created resource after hitting next again * PersonalDataPage: Use trigger function instead of signal * SetupManager: emit signal when name or email change * Add some tests for setting the incoming port/security * accountconfiguration: Call setIncomingSecurityProtocol * Fix port range * Fix mem leak * Fix default IMAP port * Cleanup transports before createResource account configuration auto test * Fix value in shouldHaveDefaultValues account configuration auto test * Do not enable server side subscription by default * ManualConfigurationPage: Fix enum values ==== kmailtransport ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6MailTransport6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kmbox ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6Mbox6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kmines ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kmousetool ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kmplot ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kompare ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== konsole ==== Version update (26.08.2 -> 26.08.3) Subpackages: konsole-part konsole-part-lang - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Vt102: Only accept cursor commands ==== kontact ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kontactinterface ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6KontactInterface6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== konversation ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== korganizer ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Use static method * conf_datetime is not defined on windows => avoid to assign nullptr * We need to assign once parshiotNames, Previously when we called findParshaName we fill again this QStringList * "buffer + i18n(" Omer");" was never assigned * Fix potential mem leak * Add buttonbox after widget * Fix KMessageBox api. Second argument is message not title * cppcheck-suppressions.xml - suppress constParameterCallback ==== kpat ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kpimtextedit ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6TextEdit6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kpkpass ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6PkPass6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kqtquickcharts ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kreversi ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== ksanecore ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== ksmtp ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6SMTP6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== ksudoku ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== ktextaddons ==== - Add patch to prevent runtime breakages: * 0001-Bump-soversion-for-each-release.patch ==== ktnef ==== Version update (26.08.2 -> 26.08.3) Subpackages: ktnef-debug-categories libKPim6Tnef6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Further harden MAPI string parsing ==== ktouch ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kwalletmanager ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kwordquiz ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libblockdev ==== Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_smart3 libbd_swap3 libbd_utils3 libblockdev3 - Add libblockdev-CVE-2026-111581.patch: CVE-2026-111581: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method (bsc#1286323) ==== libfreehand ==== Version update (0.1.2 -> 0.1.4) - Update to 0.1.4 * Memory safety fixes (0.1.3 and 0.1.4) - Remove icu-build-fix.patch, the fix is in upstream commit af3197f - Mark COPYING as %license in the tools subpackage, remove the COPYING copy from the devel doc dir - Add libfreehand-0.1.4-doxygen-cfg.patch: remove 14 obsolete tags, fix the PAPER_TYPE value, and add the inc directory to INPUT in docs/doxygen/doxygen.cfg for doxygen 1.18 - List the fh2raw, fh2svg, and fh2text binaries explicitly in the tools subpackage instead of a bindir glob - Require pkgconfig(icu-uc) instead of pkgconfig(icu-i18n), matching the icu-uc module checked by configure - Drop the redundant --disable-werror configure flag, the upstream default is no since 0.1.4 ==== libgravatar ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6Gravatar6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkcddb ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKCddb5 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkdcraw ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKDcrawQt6-5 libkdcraw-qt6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkdegames ==== Version update (26.08.2 -> 26.08.3) Subpackages: kdegames-carddecks-default libKDEGames6 libkdegames-imports - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkdepim ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6Libkdepim6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkeduvocdocument ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkexiv2-qt6 ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKExiv2Qt6-0 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkgapi6 ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6GAPICalendar6 libKPim6GAPICore6 libKPim6GAPIPeople6 libKPim6GAPITasks6 libkgapi6-lang libkgapi6-sasl2-kdexoauth2 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkleo ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6libkleo6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkmahjongg ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKMahjongg6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkomparediff2 ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libksane ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKSaneWidgets6 libksane-icons libksane-lang - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libksieve ==== Version update (26.08.2 -> 26.08.3) Subpackages: libksieve6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libpisp ==== Version update (1.7.0 -> 1.8.0) - Fix build for Leap 16.1 - Update to version 1.8.0 * gst: Always set the smart resize and crop when configuring. * helpers: buffer: Add the missing include. ==== libsndfile ==== - Fix information disclosure via uninitialized variable use in WAV parsing (CVE-2026-109828, bsc#1285421): libsndfile-CVE-2026-109828.patch ==== libupnp ==== Version update (22.1.10 -> 22.2.0) Subpackages: libixml22 libupnp22 - Update to release 22.2 * Cast input to ctype calls to unsigned char ==== liburing ==== - add 0001-test-waitid-accept-ETIME-for-a-fired-linked-timeout.patch to fix tests for kernel 7.4 - add to excludes * connect.t: flaky on 16.1 + 7.3 * sqpoll-exec.t, thread-exit.t: flaky on 7.3 ==== lokalize ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Delete m_transUnitsView before m_catalog (kde#527607) ==== lvm2 ==== Version update (2.03.43 -> 2.03.44) Subpackages: liblvm2cmd2_03 - lvm2.changes * Amend entries from me@jacobbaungard.com and tomas.chvatal@gmail.com - lvm2.spec * reorder patches - Update patches for btrfs fsadm support due to commit 2575c7d9079e: * fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch * fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch - Update to version 2.03.44 * Round non-power-of-two VDO slab size up to a power of two in lvcreate. * Make pthread_setname_np optional for older pthread libraries. * Fix blkio invalidation of held or dirty blocks and interrupted waits. * Report synchronous I/O failures through the blkio completion path. * Release the label scan before forking the polldaemon. * Add configure --with/out-libaio to control async engine support. * Add configure --with/out-liburing to control io_uring support. * Add optional io_uring io engine (requires liburing, kernel 5.1+). * Default the I/O engine to iouring, then threads, then libaio, then sync. * Add pthread-based I/O engine to eliminate libaio io_destroy penalty. * Deprecate use_aio; use_aio=0 still selects sync I/O. * Add io_engine config to select the I/O engine. * Warn and use sync I/O when the requested I/O engine is unavailable. * Zero fill the tail of a short io engine read at the end of a device. * Drain in-flight libaio on io engine destroy. * Remove orphaned pvmove LV when force-removing a RAID LV locked for pvmove. * Preserve committed metadata when pv_write updates an existing PV. * Use mdadm-compatible CRC-32 when detecting DDF metadata. * Detect NVMe multipath devices and handle uncached primary devices. * Use the VDO pool data LV size for VDO memory checks. * Warn about RAID reshape data corruption on kernels older than 6.11. * Suggest remedies when duplicate PV devices block VG updates or activation. * Improve documentation about PVs layered on top of LVs. * Reject cache pool resize with a clear error instead of failing internally. * Preserve RAID1 recovery state and rebuild markers when reducing images. * Accept transient or incomplete dm-raid status during repair and reduction. * Report the dead-primary RAID repair advice instead of refusing a rebuild. * Fix out-of-bounds read when parsing short dmeventd client messages. * Reject malformed numeric fields in dmeventd client registration messages. * Reject dmeventd registrations without a plugin or device name. * Use non-blocking dmeventd FIFO I/O and timeouts for stalled clients. * Fix dmeventd timeout thread spin when no timeout is scheduled. * Fix dmeventd monitor thread list when a thread fails before linking. * Unregister dmeventd devices from plugins if monitoring stops early. * Do not reuse dmeventd grace-period threads when the device inode is unknown. * Reset dmeventd pending SIGALRM without changing signal disposition. * Warn when parent directories of dmeventd FIFO paths are not secure. * Validate systemd-activated dmeventd FIFOs and use non-blocking I/O. * Fix dmeventd info when the running daemon returns no status reply data. * Run build-tree binaries against build libraries, not installed copies. * Avoid spurious dmeventd unregister errors when removing monitored snapshots. * Run mirror repair from dmeventd when mirror reports in-sync with failed legs. * Fix out-of-bounds access on an unterminated mda_header raw_locns (BZ2510937). * Log open failures at debug for devices excluded after scan I/O errors. * Fix blkdeactivate to exit 0 when devices stay mounted by policy. * Fix blkdeactivate -l wholevg when another LV in the VG stays mounted. * Fix blkdeactivate exit status on failed deactivation or mpath queueing. * Fix blkdeactivate umount for paths with spaces or lsblk hex escapes. * Update lvmdump for lvmlockd; add -A; drop lvmetad collection. * Harden fsadm size parsing and use mktemp for temporary mount dirs. * Ignore _FSADM_YES from the environment; pass --yes only from the CLI. * Fix fsadm fsck exit codes and mount detection via /proc/self/mountinfo. * Harden lvm_import_vdo YAML and stat parsing against shell injection. * Use mktemp in lvm_import_vdo; validate TMPDIR and tool binary overrides. * Harden lvresize_fs_helper temp mounts, signal cleanup, and TMPDIR checks. * Validate lvresize_fs_helper resize sizes and value-taking options. * Fix lvresize_fs_helper btrfs, e2fsck handling, and --fsextend/--fsreduce. * Prevent redundant device access after scan I/O errors (DEV_SCAN_NOT_READ). * Apply lvmlockd --lockopt force to all lock requests. * Keep PR state after failed start. * Apply PTPL when extending VG to ensure persistence when power cycling devs. * Allow vgextend before any host starts PR on new devs. * Fix pvscan autoactivation when DEVLINKS symlinks are not yet created. - rebase fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch to match with new version. - remove bug-1288220_pvscan-preserve-preferred-device-name-when-importing.patch ==== lvm2-device-mapper ==== Version update (2.03.43_1.02.217 -> 2.03.44_1.02.218) Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - lvm2.changes * Amend entries from me@jacobbaungard.com and tomas.chvatal@gmail.com - lvm2.spec * reorder patches - Update patches for btrfs fsadm support due to commit 2575c7d9079e: * fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch * fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch - Update to version 2.03.44 * Round non-power-of-two VDO slab size up to a power of two in lvcreate. * Make pthread_setname_np optional for older pthread libraries. * Fix blkio invalidation of held or dirty blocks and interrupted waits. * Report synchronous I/O failures through the blkio completion path. * Release the label scan before forking the polldaemon. * Add configure --with/out-libaio to control async engine support. * Add configure --with/out-liburing to control io_uring support. * Add optional io_uring io engine (requires liburing, kernel 5.1+). * Default the I/O engine to iouring, then threads, then libaio, then sync. * Add pthread-based I/O engine to eliminate libaio io_destroy penalty. * Deprecate use_aio; use_aio=0 still selects sync I/O. * Add io_engine config to select the I/O engine. * Warn and use sync I/O when the requested I/O engine is unavailable. * Zero fill the tail of a short io engine read at the end of a device. * Drain in-flight libaio on io engine destroy. * Remove orphaned pvmove LV when force-removing a RAID LV locked for pvmove. * Preserve committed metadata when pv_write updates an existing PV. * Use mdadm-compatible CRC-32 when detecting DDF metadata. * Detect NVMe multipath devices and handle uncached primary devices. * Use the VDO pool data LV size for VDO memory checks. * Warn about RAID reshape data corruption on kernels older than 6.11. * Suggest remedies when duplicate PV devices block VG updates or activation. * Improve documentation about PVs layered on top of LVs. * Reject cache pool resize with a clear error instead of failing internally. * Preserve RAID1 recovery state and rebuild markers when reducing images. * Accept transient or incomplete dm-raid status during repair and reduction. * Report the dead-primary RAID repair advice instead of refusing a rebuild. * Fix out-of-bounds read when parsing short dmeventd client messages. * Reject malformed numeric fields in dmeventd client registration messages. * Reject dmeventd registrations without a plugin or device name. * Use non-blocking dmeventd FIFO I/O and timeouts for stalled clients. * Fix dmeventd timeout thread spin when no timeout is scheduled. * Fix dmeventd monitor thread list when a thread fails before linking. * Unregister dmeventd devices from plugins if monitoring stops early. * Do not reuse dmeventd grace-period threads when the device inode is unknown. * Reset dmeventd pending SIGALRM without changing signal disposition. * Warn when parent directories of dmeventd FIFO paths are not secure. * Validate systemd-activated dmeventd FIFOs and use non-blocking I/O. * Fix dmeventd info when the running daemon returns no status reply data. * Run build-tree binaries against build libraries, not installed copies. * Avoid spurious dmeventd unregister errors when removing monitored snapshots. * Run mirror repair from dmeventd when mirror reports in-sync with failed legs. * Fix out-of-bounds access on an unterminated mda_header raw_locns (BZ2510937). * Log open failures at debug for devices excluded after scan I/O errors. * Fix blkdeactivate to exit 0 when devices stay mounted by policy. * Fix blkdeactivate -l wholevg when another LV in the VG stays mounted. * Fix blkdeactivate exit status on failed deactivation or mpath queueing. * Fix blkdeactivate umount for paths with spaces or lsblk hex escapes. * Update lvmdump for lvmlockd; add -A; drop lvmetad collection. * Harden fsadm size parsing and use mktemp for temporary mount dirs. * Ignore _FSADM_YES from the environment; pass --yes only from the CLI. * Fix fsadm fsck exit codes and mount detection via /proc/self/mountinfo. * Harden lvm_import_vdo YAML and stat parsing against shell injection. * Use mktemp in lvm_import_vdo; validate TMPDIR and tool binary overrides. * Harden lvresize_fs_helper temp mounts, signal cleanup, and TMPDIR checks. * Validate lvresize_fs_helper resize sizes and value-taking options. * Fix lvresize_fs_helper btrfs, e2fsck handling, and --fsextend/--fsreduce. * Prevent redundant device access after scan I/O errors (DEV_SCAN_NOT_READ). * Apply lvmlockd --lockopt force to all lock requests. * Keep PR state after failed start. * Apply PTPL when extending VG to ensure persistence when power cycling devs. * Allow vgextend before any host starts PR on new devs. * Fix pvscan autoactivation when DEVLINKS symlinks are not yet created. - rebase fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch to match with new version. - remove bug-1288220_pvscan-preserve-preferred-device-name-when-importing.patch ==== mailcommon ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6MailCommon6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== mailimporter ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6MailImporter6 libKPim6MailImporterAkonadi6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== markdownpart ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== mbox-importer ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== messagelib ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== mimetreeparser ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6MimeTreeParserCore6 libKPim6MimeTreeParserWidgets6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== mozilla-nss ==== Version update (3.130 -> 3.132) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - Update to version 3.132: * bmo#2084101 - Remove eMudhra emSign Root CA - G3 from NSS. * bmo#2083709 - Remove eMudhra emSign Root CA - C1 and emSign ECC Root CA - C3 from NSS. * bmo#2056777 - fix build failures. * bmo#2056777 - secasn1d: propagate end-of-contents flag to enclosing construct. * bmo#2056777 - additional secasn1d tests for end of contents handling. * bmo#2056777 - Changing the end_of_content for BER encoding. * bmo#2064148 - run the FIPS-mode SSL tests in CI. * bmo#2064148 - run fips.sh in CI. * bmo#2064148 - run gtests in FIPS mode. * bmo#2082675 - do not force-import an empty symmetric key. * bmo#2082671 - allow unwrapping an EC private key without a public point. * bmo#2064426 - DTLS1.3 must not use EndOfEarlyData (per RFC 9147 Section 5.6). * bmo#2081444 - make clang-cl the default compiler for Windows in CI. * bmo#2081444 - add option to build with clang-cl in CI. * bmo#2075015 - prefer the seed format for wrapped ML-KEM and ML-DSA private keys. * bmo#2074404 - Encode ML-DSA private keys in PK11_ExportPrivKeyInfo. * bmo#2074404 - Encode ML-KEM private keys in PK11_ExportPrivKeyInfo. * bmo#2081440 - use nspr4 branch tip for CI runs. * bmo#2082406 - Read p7env and p7verify input in binary mode on Windows. * bmo#2082407 - p7verify, p7content: exit non-zero on invalid signatures; fix p7verify SHA-384/512 digests. * bmo#2050941 - libpkix http default client tests. * bmo#2079860 - clear held back early data byte when 0rtt is rejected. * bmo#2030245 - add Windows ARM64 CI jobs. * bmo#2079416 - Update the wycheproof testvectors README. * bmo#2079416 - Update ML-KEM wycheproof testvectors. * bmo#2079416 - Update ML-DSA wycheproof testvectors. * bmo#2079416 - Update DSA wycheproof testvectors. * bmo#2079416 - Update RSA PKCS#1 v1.5 signature wycheproof testvectors. * bmo#2079416 - Update RSA-PSS wycheproof testvectors. * bmo#2079416 - Update RSA PKCS#1 v1.5 decryption wycheproof testvectors. * bmo#2079416 - Update RSA-OAEP wycheproof testvectors. * bmo#2079416 - Update EdDSA wycheproof testvectors. * bmo#2079416 - Update ChaCha20-Poly1305 wycheproof testvectors. * bmo#2079416 - Update ECDSA wycheproof testvectors. * bmo#2079416 - Update ECDH wycheproof testvectors. * bmo#2079416 - Update X25519 wycheproof testvectors. * bmo#2079416 - Update HMAC wycheproof testvectors. * bmo#2079416 - Update AES-CMAC wycheproof testvectors. * bmo#2079416 - Update AES-CBC wycheproof testvectors. * bmo#2079402 - read JSON directly for all wycheproof tests. * bmo#2079457 - explicitly reject RSA PKCS#1 v1.5 ciphertexts that are not less than the modulus. * bmo#2075179 - finalize the PRAGMA table_info statement on error paths in sdb_init. * bmo#2076062 - Limit nesting depth in PKCS#12 safeContents decoder. * bmo#2072757 - use encoded serial number to look up trust in fill_CERTCertificateFields. * bmo#2077359 - remove unused SEC_ASN1_MKSUB from secsign.c. * bmo#1961826 - Run NSS_Shutdown at exit in SMIME fuzzer. * bmo#1961826 - Add streaming decoder pass to SMIME fuzzer. * bmo#1961826 - Verify SignerInfos in SMIME fuzzer. * bmo#1961826 - Regenerate test certs for SMIME fuzzer. * bmo#1961826 - Add EC cert for ECDH and decrypt key callback to SMIME fuzzer * bmo#1961826 - Extend the SMIME fuzzer to cover more functions. * bmo#390374 - return NULL for deprecated PBE functions. * bmo#2061403 - Keep sigd->digests parallel to sigd->digestAlgorithms. * bmo#2076696 - guard against integer overflow in PK11_HPKE_Seal and PK11_HPKE_Open. * bmo#2076037 - ensure chacha20-poly1305 tag buffer is 16 bytes in PK11_AEADOp. * bmo#2077359 - remove more unused functions from NSS. * bmo#1960284 - Don't report epoch exhaustion through FatalError. - Changes from version 3.131.1: * This release removes trust in the following root certificates: + bmo#2083709 - emSign Root CA - C1 + bmo#2083709 - emSign ECC Root CA - C3 + bmo#2084101 - emSign ECC Root CA - G3 - Changes from version 3.131: * bmo#2078438 - remove unused private pkcs12, pkcs7, and smime functions. * bmo#2070738 - Fix generating nss.pc with system-nspr. * bmo#2066048 - replace sslSecurityInfo peerCert with peerCertDER. * bmo#2067244 - remove support for inherited DSA parameters in libssl. * bmo#2017995 - Fix issues with Unwrapping keys using tokens in FIPS mode. * bmo#2069886 - remove Windows-only AES-CTR implementation. * bmo#2069887 - improve algorithm policy enforcement for ML-DSA. * bmo#2064512 - reject non-RFC 8410 curve OIDs when encoding an X25519 or Ed25519 SubjectPublicKeyInfo. * bmo#2076212 - Clear freed CMS members in the destructors. * bmo#2076212 - Release the previous signer certificate when re-verifying a PKCS#7 signature. * bmo#2076212 - Make SEC_PKCS7DecoderAbort fail the decode. * bmo#2076212 - Fail closed after an incomplete PKCS#12 decode. * bmo#2076240 - remove unused NSSCryptoContext and NSSTrustDomain functions. * bmo#1993638 - can’t import eddsa .p12 from OpenSSL. * bmo#2055638 - fix clang format. * bmo#2072045 - pk12util fails to import private key into SoftHSM token despite initialized slot and valid PKCS#12 file. * bmo#2075580 - p7content: open output file in binary mode. * bmo#2068388 - fix msvc build error. * bmo#2072416 - use SEC_ASN1_GET for SEC_OctetStringTemplate in der_gtest. * bmo#2074663 - remove unused and unexported CERT_ functions. * bmo#2072416 - fix leak when decoding nested indefinite length octet strings with null arena. ... changelog too long, skipping 19 lines ... * bmo#2074968 - stub out DER_Lengths. ==== nvidia-open-driver-G07-signed ==== Version update (595.112.07_k7.3.1_1 -> 620.70.06_k7.3.1_1) Subpackages: nvidia-open-driver-G07-signed-kmp-64kb nvidia-open-driver-G07-signed-kmp-default - update non-CUDA and CUDA variant to 620.70.06 (boo#1289478) - supersedes the following patches: * kernel-7.3.0-opengpu-615.71.09.patch * supersedes Fixing-build-against-SLE16.1-Kernel.patch ==== nvidia-open-driver-G07-signed-cuda ==== Version update (615.71.09_k7.3.1_1 -> 620.70.06_k7.3.1_1) Subpackages: nvidia-open-driver-G07-signed-cuda-kmp-64kb nvidia-open-driver-G07-signed-cuda-kmp-default - update non-CUDA and CUDA variant to 620.70.06 (boo#1289478) - supersedes the following patches: * kernel-7.3.0-opengpu-615.71.09.patch * supersedes Fixing-build-against-SLE16.1-Kernel.patch ==== okular ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== openSUSE-release ==== Version update (20261105 -> 20261108) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssh ==== Version update (10.6p1 -> 10.6p2) Subpackages: openssh-clients openssh-common openssh-server - Update to openssh 10.6p2: This release contains a critical security workaround that affects Linux systems that use the musl libc and PAM disabled. This release also includes a number of bugfixes that had already been committed on the portable OpenSSH V_10_6 stable branch. = Future deprecation notice * scp(1): begin deprecating the -R flag, which is used to perform a remote-to-remote copy by executing scp on a remote host. This option is a fragile optimisation that is difficult to use because it requires credentials on the remote host. It also creates security risks if the shell quoting rules on the remote system where the copy is performed differ from the client's expectations. From OpenSSH 10.6, this option will continue to work but will cause a deprecation warning to be emitted to standard error. In a future release, the option will be ignored and will leave in place the default remote-to-remote copy behaviour (copy via the host running scp). * sshd(8): support for platforms that do not allow file descriptor passing and that also require root privilege for PTY allocation will be removed in a future release. Affected platforms are known to include SCO OpenServer 5 and QNX 6 but may include other similarly old operating systems. This deprecation can be avoided if the user community for these platforms is able to assist us in building alternatives, such as avoiding the need for root in PTY allocation. = Security * sshd(8): avoid password authentication bypass that is exploitable through sshd(8) that affects some Linux systems when built and run with PAM support disabled. We consider the root cause of this bug to be outside sshd, but it is exploitable via sshd and can be avoided there. This bug was reported by Özgün Kültekin of Wakefield (wakefield.co) = Bugfixes * sshd(8), ssh(1): enable the post-quantum hybris signature scheme ssh-mldsa44-ed25519 as an allowed CA signature algorithm. * ssh(1), sshd(8): fix <1 second CPU spin if ChannelTimeout was in use. = Portability * sshd(8): fix compilation on (old) platforms that set SKIP_PRIVDROP * ssh(1), sshd(8): fix detection of Azerbaijani locales * sshd(8), ssh-agent(1): fix creation of agent sockets on platforms without the openat(2) syscall. * ssh(1), ssh-add(1), ssh-keygen(1): fix some strange behaviour if SIGINT/SIGQUIT was received while reading a passphrase. * sshd(8): allow restart_syscall(2) in seccomp sandbox; bz4036 ==== parley ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== perl-CGI ==== Version update (4.720.0 -> 5.20.0) - updated to 5.20.0 (5.02) see /usr/share/doc/packages/perl-CGI/Changes 5.02 2026-11-03 [ RELEASE NOTES ] - this is a security release fixing a large number of vulnerabilities, several of them exploitable by any client against any script. all users should upgrade - to fix them some default behaviour has changed, see BREAKING CHANGES below - most changes only affect malicious or malformed requests, but please read them before upgrading. where a change could reasonably affect a legitimate application an opt out or migration path is given - the minimum *supported* perl version is now 5.10, however the dist will still install for 5.8 (no guarantees about tests passing however) [ SECURITY ] - denial of service: - CVE-2026-120631: CGI::Cookie->parse (and so CGI->cookie) used a client supplied cookie expires value as a regex, so a Cookie header could make it die or backtrack catastrophically bsc#1289321 - CVE-2026-120632: a crafted multipart/related Content-Type header caused cubic regex backtracking (~15s of CPU for an 8KB header, no body needed) bsc#1289352 - CVE-2026-120650: request size, param and upload limits were missing or unenforced: $POST_MAX defaulted to no limit, and was not enforced at all for multipart bodies without a CONTENT_LENGTH (chunked encoding), or for the boundary line of a multipart body without a boundary=; PUTDATA/POSTDATA/PATCHDATA bodies were read into memory in one go; and there was no limit on the number of params or uploads in a request (a 40MB form body took 9s and 1.5GB of memory to parse) - see the new $CGI::MAX_PARAMS and $CGI::MAX_UPLOADS bsc#1289440 - CVE-2026-120651: an infinite loop reading a short PUT/POST/PATCH body when $DISABLE_UPLOADS was set bsc#1289441 - CVE-2026-120645: scrolling_list used submitted values as a regex for optgroups bsc#1289435 - CVE-2026-120646: uploadInfo() dereferenced plain strings as symbolic references, so died when given some, e.g. "0" bsc#1289436 - header injection / response splitting: - CVE-2026-120639: with autoEscape off, header() decoded HTML entities in extra header values after checking them for newlines, so became CRLF; and multipart_start() and CGI::Push::do_push did no newline checks bsc#1289428 - CVE-2026-120644: CGI::Cookie path/domain/expires were not checked, so ";" injected other cookie attributes bsc#1289433 - CVE-2026-120647: the header() -attachment filename did not escape quotes bsc#1289437 - open redirects, and URLs/forms pointing at other hosts: - CVE-2026-120633: url(), self_url(), virtual_host(), virtual_port() trusted the client supplied X-Forwarded-Host header, and an unvalidated Host, affecting the default redirect() location, start_html(-base=>1) and default start_form() actions bsc#1289393 - CVE-2026-120638: redirect() HTML decoded its URL after the application had checked it, e.g. "//evil.example/" became "//evil.example/" bsc#1289427 - CVE-2026-120636: URLs built from the client supplied REQUEST_URI could be protocol relative (//evil.example), absolute-form (http://evil.example/) or have backslashes, and url(-relative=>1) could return e.g. javascript:alert(1) bsc#1289396 - cross site scripting: - CVE-2026-120643: url()/self_url() could contain a raw single quote (URI->canonical decodes %27) bsc#1289432 - CVE-2026-120648: comment() text could end the HTML comment bsc#1289439 - information disclosure: - CVE-2026-120634: CGI::Carp warnings buffered for warningsToBrowser were not reset between requests in persistent environments, so one user's warnings could be shown to another bsc#1289394 - CVE-2026-120635: multipart parsing differentials (fields smuggled past a filtering proxy or WAF that parses per the RFCs): - the boundary was matched anywhere, not only at the start of a line - the boundary was used without its "--" for some User-Agents - Content-Disposition name/filename were found inside other parameters' quoted values - boundaries over the RFC 2046 limit corrupted and merged parts - bsc#1289395 - other: - CVE-2026-120641: client supplied upload filenames could contain a path, allowing path traversal in applications that use them to save the file bsc#1289430 - CVE-2026-120640: clients could set POSTDATA/PUTDATA/PATCHDATA/ XForms:Model through the query string or a form field, indistinguishable from the real body (e.g. a cross site HTML form posting to a JSON endpoint) bsc#1289429 - CVE-2026-120642: under taint mode the upload filename, uploadInfo() values, path_info, Accept(), and some cookie and url_param values were untainted bsc#1289431 - CVE-2026-120637: an unrecognised REQUEST_METHOD (e.g. OPTIONS) made the process' own command line arguments the request params bsc#1289397 [ BREAKING CHANGES ] - X-Forwarded-Host is no longer used by url()/self_url()/virtual_host() /virtual_port(), and Host is only used if it is a valid host[:port]. behind a reverse proxy pass the right Host / SERVER_NAME, or set ... changelog too long, skipping 47 lines ... - tests for all of the above ==== perl-HTML-Parser ==== Version update (3.850.0 -> 3.860.0) - updated to 3.860.0 (3.86) see /usr/share/doc/packages/perl-HTML-Parser/Changes 3.86 2026-09-19 - Expand an entity whose value is the string being decoded to the value that string had when the call began (GH#69) (Paul Johnson) ==== perl-Mail-AuthenticationResults ==== Version update (2.20260216 -> 2.20261029) - updated to 2.20261029 see /usr/share/doc/packages/perl-Mail-AuthenticationResults/Changes 2.20261029 2026-10-29 12:20:51+11:00 Australia/Melbourne - Fix excessive memory and CPU use when parsing a header containing a large number of assertions. Tokens no longer retain a copy of the remaining header, and string, quoted string, and comment tokens are no longer parsed one character at a time. ==== pim-data-exporter ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== pim-sieve-editor ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== pimcommon ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6PimCommon6 libKPim6PimCommonAkonadi6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Fix LSAN failure in Purpose menu test ==== python-configobj ==== - CVE-2026-112300: Avoid ReDOS in section parsing. (bsc#1286097) * Add patch CVE-2026-112300.patch ==== python-psutil ==== - Add rlim_infinity.patch to fix compatibility with Python 3.15 ==== python-pyasn1 ==== Version update (0.6.4 -> 0.6.5) - Update to 0.6.5 (bsc#1288851, CVE-2026-119194) * GHSA-mm57-4v3p-rchx: Decoded binary REAL mantissas in linear time instead of repeatedly shifting a growing integer and slicing the remaining bytes (thanks for reporting, manus-use, manus-pi, ucsurf, adriank31) * GHSA-2qm8-x737-gmw5: Reassembled constructed BIT STRING fragments in linear time while preserving their decoded bit values, including intermediate fragment padding (thanks for reporting, manus-use) * GHSA-9m75-vc3g-4x39: Reassembled constructed OCTET STRING and character-string fragments and indefinite-length ANY content in linear time. Nested constructed OCTET STRING fragments now contribute their decoded octets (thanks for reporting, alimony, manus-pi, adriank31) * GHSA-fm9c-5rcf-2q5p: Bounded schemaless container type tracking after two distinct tag sets to prevent quadratic CPU use from colliding long tag IDs (thanks for reporting, droideck) ==== qemu ==== Version update (11.1.2 -> 11.1.3) Subpackages: qemu-arm qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ksm qemu-pr-helper qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios - Drop libpmem support (bsc#1288103) - [openSUSE] Update to version 11.1.3 Full backport list here: https://lore.kernel.org/qemu-devel/20261029051934.1487878-2-mjt@tls.msk.ru/ A selection of them is reported here below: target/ppc: Name the EBB exceptions hw/intc/exynos4210_combiner: Fix group register range check hw/misc/bcm2835_cprman: Treat invalid clock mux source select as GND hw/usb/hcd-xhci: More reentrancy guard fixes for the XHCI code hw/usb/dev-mtp: Fix heap OOB read in usb_mtp_write_metadata() hw/usb/dev-mtp: Fix assert crash on short CMD_SEND_OBJECT usb-host: delete bottom halves during unrealize usb-host: free request on libusb submit failure tests/qtest/usb-hcd-xhci: test interrupt pacing above 2^32 usb-host: free configuration descriptors on error paths usb-host: validate interface number before indexing altsetting tests/qtest: Cover OHCI endpoint type mismatches hw/usb/hcd-ohci: Fail iso packets sent to non-iso endpoints and vice-versa hw/usb/dev-mtp: Fix assert crash on undersized BULK IN hw/uefi: fix ContentInfo detection in wrap_pkcs7() hw/9pfs: fix dirent stream protection for legacy (9p2000.u) Tread iotests/migrate-bitmaps-postcopy-test: add a bitmap on a second node migration/block-dirty-bitmap: fix postcopy abort with bitmaps on several nodes migration: add QEMU_COUNTED_STRING_SIZE for counted string buffers qemu-img: convert: flush target image after copying block: report flush error during bdrv_close() iotests.py: add filter_qemu() iotests: add test cases for failing flush after qemu-img convert seccomp: really fix blocking of setns/execveat/unshare seccomp: fix blocking of setns/execveat/unshare target/riscv: Check Svnapot PTE before updating A/D bits tests/qtest/bios-tables-test: Update riscv64 virt SPCR golden reference hw/riscv/virt-acpi-build: Fix the UART register width in SPCR tests/qtest/bios-tables-test: Allow changes to riscv64 virt SPCR target/riscv/kvm: Preserve VCSR across migration target/riscv/kvm: Reject migration with a different timer frequency target/riscv/kvm: Preserve FCSR across migration targetriscv: svinval instructions raise virtual instruction exception target/riscv: stop translating after WFI target/riscv: Restore LCOFI handling in interrupt CSRs target/riscv: check G-stage write permission for VS-stage A/D updates hw/intc/arm_gicv5: Make IRS_IDR0 reads return actual value, not 0 tests/tcg/aarch64: Test the TTBR layout with TCR.DS and a 48-bit OA target/arm: Use the 52-bit TTBR base address layout when TCR.DS is set tests/tcg/aarch64: Add a test for a two-entry 52-bit TTBR table target/arm: Clear TTBR[5:0] from a 52-bit table base address tcg/riscv64: Remove vector min/max ops with immediates target/i386: fix immediate stack adjustment for RET and RETF target/i386/tcg: zero FXSAVE FOP and reserved slot bytes tests/tcg: Add tests for sign extension after rotate tcg/optimize: Do not derive s_mask from rotated s_mask hw/display/vga: fix OOB writes after external surface resize hw/tpm: crb: Do not clear internal buffers when backend is busy tpm_emulator: Reject sending commands smaller than the request header io: cork TLS writes to avoid small TLS records block: Remove now redundant bdrv_wait_serialising_requests() calls block: Fix corruption from broken RMW atomicity block: reject a reopen of an unusable node instead of crashing qcow2: do not clear the dirty bit when reopening a read-only node file-posix: add statx(STATX_DIOALIGN) support block: fix bdrv_next() skipping monitor-owned nodes iotests: cover inactivating a read-only node block/throttle-groups: fix crash when enabling I/O limits on a busy disk io: prevent unbounded read of websocket data from client hw/usb: Fix USB MTP Use-After-Free in usb_mtp_deletefn List Iteration target/i386/tcg: ignore VEX.L for unary scalar instructions accel/kvm: coalesced mmio: check lenght of the MMIO write entry accel/kvm: protect kvm_resample_fd_list with a mutex system: fix buffer overflow in tdx_parse_panic_message target/i386: Don't clear C1 for FCOMI/FCOMIP/FUCOMI/FUCOMIP target/i386: clear C1 for all x87 compare instructions target/i386: Migrate error code only with an exception target/i386/tcg: raise #GP(0) on null SS load with RPL != CPL plugins: fix register handle encoding to reserve NULL as invalid hw/nvme: fix memory leak on sr-iov capable nvme controller removal hw/nvme: fix assertion failure on sr-iov capable nvme controller removal block/nbd: clear reply.cookie under receive_mutex block/nbd: never index requests[] with an unchecked cookie block/nbd: clear reply.cookie when the reply is rejected ... - supportconfig: Major update ==== qrca ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== rubygem-nokogiri ==== Version update (1.19.4 -> 1.19.7) - 1.19.7: - [CRuby] Compile against Ruby 4.1.0-preview1, which defines `HAVE_RB_LEN_T` but not `RB_FIX2LEN`. (#3755) @andrewfader For all details see included CHANGELOG.md - 1.19.6: - Jruby only change - 1.19.5 - Security - [CRuby] (Low) Fixed a possible use-after-free when an attribute value is replaced via `Node#[]=` or `Node#lang=` while Ruby objects still reference the attribute's children. See GHSA-3w22-6jfg-527w for more information. - [CRuby] (Low) The HTML5 serializer now escapes text inside `noscript` unless the document was parsed with `parse_noscript_content_as_text: true`, preventing a mutation XSS in applications that allow `noscript` in sanitized HTML. A fragment now parses `noscript` content the same way as its document, and raises `ArgumentError` if given a conflicting `parse_noscript_content_as_text:` value. Comments and raw-text elements inside `noscript` are still serialized unchanged, as the HTML standard requires, so applications that sanitize HTML and allow `noscript` should parse with `parse_noscript_content_as_text: true` or remove `noscript` elements. See GHSA-4p39-36wj-23h4 for more information. - [JRuby] (Low) `NONET` now blocks external DTDs and entities whose systemId uses a short-form IPv4 host such as `127.1`, or is an absolute path in a document parsed from a network URL. Previously Nokogiri fetched them over the network during a parse with `DTDLOAD` or `NOENT`, potentially enabling SSRF. See GHSA-v995-44v6-5fqm for more information. - Improved - [CRuby] The HTML5 parser now has linear performance when parsing many attributes. Previously performance was quadratic due to two hotspots, one in detecting duplicate attributes and one in constructing the libxml2 data structures. (#3393) @flavorjones - [CRuby] Improved XPath argument marshalling performance by using `ALLOCV_N` instead of `rb_gc_register_address`. (#3648) @jhawthorn - Fixed - `Node#namespace=` now declares the namespace on the node when no declaration of its prefix is in scope there. Previously, on CRuby, a node given a namespace and then moved under an element that binds the same prefix, or the default namespace, to a different URI was serialized in that other namespace. On JRuby, the namespace was missing from `Node#namespace_definitions`. (#3459, #3462) @flavorjones - `XML::Reader` is no longer affected by changes made to its source String after the reader is created. Previously, such a change could make the reader parse the changed String on JRuby, or changed or freed memory on CRuby with libxml2 < 2.11. (#3694) @flavorjones - `Node#namespace = false` now raises `TypeError`. Previously it crashed the process on CRuby and raised `ClassCastException` on JRuby. (#3719) @flavorjones - `XML::XPathContext.new` and `XML::XPathContext#node=` raise `TypeError` when the argument is not a `Node`. Previously, on CRuby, most such arguments crashed the process. (#3720) @flavorjones - CSS `an+b` selectors with a zero or negative step now follow the Selectors spec: `:nth-child(0n+3)` matches only the third element (previously nothing), `0n-1` matches nothing instead of raising `ZeroDivisionError`, and `-n+0` / `-2n` match nothing instead of every (or every other) element. @afurm - CSS `#id`, `.class` and attribute selectors whose value contains a quote character, such as `#it\'s` or `[a=\'b\']`, now match that value. Previously they raised `Nokogiri::XML::XPath::SyntaxError` or generated an XPath query with a different meaning. An `#id` selector containing an escaped newline no longer drops the text after it. (#3724, [#3727]) @flavorjones - CSS `:contains()` arguments, custom pseudo-class string arguments, and element names containing a CSS escape, such as `p:contains('it\'s')` or `a\-b`, now match. Previously they raised `Nokogiri::XML::XPath::SyntaxError`. An element name that is not an XML name after unescaping, such as `a\!b`, raises `Nokogiri::CSS::SyntaxError`, except as an unprefixed name in an HTML5 document, where it matches by local name. In ids, classes, attribute values, element names and string arguments, an escape for U+0000, a surrogate, or a code point above U+10FFFF now decodes to U+FFFD, and a vertical tab after a hexadecimal escape is no longer dropped, as CSS Syntax Level 3 requires. (#3728, #3729) @flavorjones - CSS attribute names containing a CSS escape, such as `[a\-b]`, now match. Previously they raised `Nokogiri::XML::XPath::SyntaxError`. An unprefixed attribute name that cannot be written as an XPath name test after unescaping, such as `[\@click]` or `[\:class]`, matches an attribute with that exact name in no namespace. The HTML parsers create such attributes. A prefixed one, such as `[x|a\!b]`, raises `Nokogiri::CSS::SyntaxError`. (#3732, [#3735]) @flavorjones - [CRuby] The HTML5 serializer escapes `<` and `>` in attribute values as `<` and `>`, following [whatwg/html#6362](https://github.com/whatwg/html/pull/6362). Previously they were written literally. (#3529, #3741) @flavorjones - [CRuby] Reparenting removes a node's declaration of a prefix that the new parent binds to the same URI. (#3462) ... changelog too long, skipping 106 lines ... that setup. (#3707) @flavorjones ==== sddm ==== - Require /usr/bin/X: 00-general.conf defines ServerPath=/usr/bin/X (boo#1288770). ==== sddm-qt6 ==== Subpackages: sddm-greeter-qt6 - Require /usr/bin/X: 00-general.conf defines ServerPath=/usr/bin/X (boo#1288770). ==== shotwell ==== Version update (33.1 -> 33.2) - Update to version 33.2: * Fix loading and storing of print settings * Fix a warning about focus handling in the print dialog ==== signon-kwallet-extension ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== skanlite ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== sqlite3 ==== Subpackages: libsqlite3-0 sqlite3-tcl - Add sqlite-3.54.1-fix-waliter-test-64k-pages.patch to fix a test failure in %check on systems with 64KB pages (ppc64le, aarch64). - Add sqlite-3.54.1-fix-fts3corrupt4-test-big-endian.patch to fix a test failure in %check on big-endian platforms (s390x). Upstream check-in 1a888ea60be20a80 made the test's big-endian special case obsolete. - Add sqlite-3.54.1-fix-shell-import-line-count.patch to fix a test failure in %check on 32-bit big-endian platforms (s390): the line count shown by ".import" was printed from a 64-bit value with %d. ==== step ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== svgpart ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== umbrello ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Fix shape of class widgets with templates not matching the actual geometry (kde#527922) * Fix bug not been able to bring synchronous self message to front (kde#527712) * Fix incorrect display of the arrow head for synchronous self messages * Use UML-standard-compliant XMI identifiers in test files (kde#502519) * For synchronous self messages, the call arrow should remain at the top (kde#525933) * Fix 'Cannot resize nested method call in sequence diagrams' (kde#525933) * The properties dialog for a note no longer closes when you click 'Apply' (kde#526973) * Fix an issue where the notes widget rejected changes to the content (kde#526671) ==== vsftpd ==== - Update vsftpd-2.3.4-sqb.patch to use unsigned character range bounds and stop expansion when the counter wraps to zero, preventing a denial of service in LIST pattern matching. [CVE-2025-14242, bsc#1256700] ==== x11-tools ==== - Drop the Provides/Obsoletes pairs for 3ddiag and xf86tools. Both were renamed away in the SuSE 9 era; nothing in Factory references either name and no supported upgrade path reaches this package from a release that shipped them, so the unversioned pairs were inert (self-obsoletion warnings). - Drop the obsolete Group tag. - Remove fillup definition as it is 9 years now