Packages changed: AppStream (1.2.1 -> 1.2.2) MicroOS-release (20261105 -> 20261108) baloo-widgets (26.08.2 -> 26.08.3) compat-usrmerge ddcutil (2.2.7 -> 3.0.2) dolphin (26.08.2 -> 26.08.3) e2fsprogs falkon (26.08.2 -> 26.08.3) ffmpegthumbs (26.08.2 -> 26.08.3) gcc16 (16.2.1+git9713 -> 16.2.1+git9901) kaccounts-integration (26.08.2 -> 26.08.3) kaccounts-providers (26.08.2 -> 26.08.3) kate (26.08.2 -> 26.08.3) kdegraphics-mobipocket (26.08.2 -> 26.08.3) kdegraphics-thumbnailers (26.08.2 -> 26.08.3) kdenetwork-filesharing (26.08.2 -> 26.08.3) kdialog (26.08.2 -> 26.08.3) kernel-firmware-amdgpu (20260926 -> 20261031) kernel-firmware-ath10k (20260926 -> 20261022) kernel-firmware-ath11k (20260926 -> 20261031) kernel-firmware-ath12k (20260926 -> 20261009) kernel-firmware-bluetooth (20260929 -> 20261104) kernel-firmware-i915 (20260806 -> 20261031) kernel-firmware-intel (20260916 -> 20261104) kernel-firmware-media (20260926 -> 20261031) kernel-firmware-mediatek (20260825 -> 20261031) kernel-firmware-network (20260813 -> 20261031) kernel-firmware-nvidia (20260610 -> 20261014) kernel-firmware-platform (20260717 -> 20261026) kernel-firmware-qcom (20260929 -> 20261031) kernel-firmware-realtek (20260915 -> 20261104) kernel-firmware-serial kernel-firmware-sound (20260926 -> 20261022) kernel-firmware-usb-network (20260610 -> 20261012) kio-extras (26.08.2 -> 26.08.3) kio-gdrive (26.08.2 -> 26.08.3) konsole (26.08.2 -> 26.08.3) kpmcore (26.08.2 -> 26.08.3) kwalletmanager (26.08.2 -> 26.08.3) libblockdev libkdcraw (26.08.2 -> 26.08.3) libkexiv2-qt6 (26.08.2 -> 26.08.3) libkgapi6 (26.08.2 -> 26.08.3) libpisp (1.7.0 -> 1.8.0) libsndfile libupnp (22.1.10 -> 22.2.0) liburing lvm2 (2.03.43 -> 2.03.44) lvm2-device-mapper (2.03.43_1.02.217 -> 2.03.44_1.02.218) mozilla-nss (3.130 -> 3.132) openssh (10.6p1 -> 10.6p2) partitionmanager (26.08.2 -> 26.08.3) python-configobj python-psutil python-pyasn1 (0.6.4 -> 0.6.5) qemu (11.1.2 -> 11.1.3) qrca (26.08.2 -> 26.08.3) sddm-qt6 signon-kwallet-extension (26.08.2 -> 26.08.3) skopeo sqlite3 === Details === ==== AppStream ==== Version update (1.2.1 -> 1.2.2) Subpackages: libAppStreamQt3 libappstream5 - Add upstream change: * 0001-bundle-Add-back-support-for-Limba.patch - Update to version 1.2.2: * Features: + Content-rating: Add attribute titles and group descriptions + Pool: Allow adding extra data locations with explicit scope and origin + Ascli: sysinfo: Print some more information about the OS, like its support period + Bundle: Drop Limba, add Manifold * Bugfixes: + Cli: Fail YAML validation for missing input + Compose: Fix build on a newer kernel with an old glibc + Pool: Work around all Flatpak origins having the same name + Pool: Include scope in metadata cache keys for Flatpak + Apt: Don't hang when tar emits lots of stderr output + Its: Support MetaInfo files that use the specification's namespace + System-info: Don't prefix an OS ID that already is rDNS + Sysinfo: Also replace `-` with `_` at `dns_to_rdns` function - Update version dependencies according to meson.build. ==== MicroOS-release ==== Version update (20261105 -> 20261108) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== baloo-widgets ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== compat-usrmerge ==== - Install usrmerge.attr non-executable, it is a fileattr definition and not a script - Fix typo in the main package description - Build the build subpackage as noarch, its fileattr script and bin/sbin dependency data are architecture-independent - Replace unbounded strcpy/stpcpy calls in usrmergecheck with snprintf - Run spec-cleaner in full mode ==== ddcutil ==== Version update (2.2.7 -> 3.0.2) - Fix i586 %check failure in test_string_util: fail str_to_long() on strtol ERANGE overflow instead of clamping to LONG_MAX/MIN, which made str_to_int() wrongly succeed for out-of-range input on ILP32 (ddcutil-strtol-erange.patch). - Update to version 3.0.2 (3.0.0 and 3.0.1 had severe reliability and performance issues, skip them): * Reworked display connect/disconnect handling for performance and reliability; Plasma users should update * 3.0.1: reverted to serial i2c examination (parallel checks crashed AMD Navi / Plasma wouldn't start) * 3.0.2: dropped the single multi-message EDID ioctl (severe slowdowns without EDID, possible amdgpu crash); built-in Valve Index HMD ignore list * The i2c GROUP udev rule now ships commented out per upstream packaging-policy note (boo#1277442) * No SONAME change (libddcutil.so.5) * Align BuildRequires floors with configure.ac: glib-2.0 >= 2.40, jansson >= 2.0, libdrm >= 2.4.67, libusb-1.0 >= 1.0.15 - Drop Group: tags ==== dolphin ==== Version update (26.08.2 -> 26.08.3) Subpackages: dolphin-part libdolphinvcs6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * kfileitemmodel: apply the refresh of an item that setData() renamed (kde#527059) * KStandardItemListWidget: respect DPR when creating a drag pixmap in Details view * dolphinview: drop the frame of the view where the style draws one (kde#527201) * dolphinviewcontainer: name the view properties after the url the view shows (kde#526398) * dolphinmainwindow: pass the folder of the custom command as one argument (CVE-2026-110236, boo#1285432) * CI: Comment flatpak job ==== e2fsprogs ==== Subpackages: libcom_err2 libext2fs2 - Fix mke2fs creating wrongly sized orphan files since 1.47.4: the kernel refused to mount e.g. a 1G filesystem made with 1k blocks ("orphan file too big"), and filesystems with 2097152 blocks or more (8G with the default 4k blocks) only got a 2 block orphan file. Add two upstream patches: * Revert-libext2fs-fix-orphan-file-size-kernel-limit.patch (reverts the faulty orphan file sizing change of 1.47.4) * libext2fs-cap-orphan-file-size-at-kernel-limit.patch (limits an explicitly requested orphan file size to the kernel limit of 512 blocks) ==== falkon ==== Version update (26.08.2 -> 26.08.3) Subpackages: falkon-kde - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== ffmpegthumbs ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== gcc16 ==== Version update (16.2.1+git9713 -> 16.2.1+git9901) Subpackages: cpp16 libgcc_s1 libgomp1 libstdc++6 - Update to gcc-16 branch head, git9901 * pulls fix for stack corruption in std::bitset stream extraction [bsc#1289549] [gcc#124370] (CVE-2026-115455) * pulls fix for std::from_chars to not read past end of input [bsc#1289550] [gcc#127666] (CVE-2026-115456) * pulls fix for buffer overrun in __gnu_parallel search [bsc#1288775] (CVE-2026-114690) * pulls fix for overflow in std::vector constructors [bsc#1288774] (CVE-2026-114691) ==== kaccounts-integration ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkaccounts6-2 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kaccounts-providers ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kate ==== Version update (26.08.2 -> 26.08.3) Subpackages: kate-plugins - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Do not capture params in lambda slot * Fix not using built PATH on macos * Fix the locals view tooltips * Don't request members of variables that have none anymore * Fix stale variables in collapsed scopes after stepping * Fix crash on a late variables response after clearing the locals view * Fix structs and arrays not expandable in the locals view (kde#526140) * Fix crash when restoring a sidebar with missing tool views * Fix incorrect discard/remove text * Fix "Open At Head" action * Fix reading incorrect config key * Delete all views when closing a split that shows a widget * Fix duplicate tabs and crash after changing the tab limit * Skip skip-worktree files when loading files from git * Return widgets without a tab from KateViewSpace::widgets() * Fix registration of new documents in project * tests with ASAN on FreeBSD are very slow * try to fix latex test on windows * git-blame: ignore the configured revs file when it is missing ==== kdegraphics-mobipocket ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdegraphics-thumbnailers ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdenetwork-filesharing ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdialog ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kernel-firmware-amdgpu ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * amdgpu: DMCUB updates for various ASICs - Update to version 20261026 (git commit 98b55c84e8da): * amdgpu: DMCUB updates for DCN42 - Update to version 20261017 (git commit a2dcb924f089): * Revert "amdgpu: update GC 11.0.0 firmware" * amdgpu: update vangogh firmware * amdgpu: update VPE 6.1.1 firmware * amdgpu: update VCN 4.0.6 firmware * amdgpu: update PSP 14.0.1 firmware * amdgpu: update GC 11.5.1 firmware * amdgpu: update VCN 4.0.5 firmware * amdgpu: update PSP 14.0.0 firmware * amdgpu: update GC 11.5.0 firmware * amdgpu: update renoir firmware * amdgpu: update yellow carp firmware * amdgpu: update raven2 firmware * amdgpu: update raven firmware * amdgpu: update VCN 3.1.2 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update picasso firmware * amdgpu: update PSP 13.0.11 firmware * amdgpu: update GC 11.0.4 firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update VCN 5.0.0 firmware * amdgpu: update PSP 14.0.3 firmware * amdgpu: update GC 12.0.1 firmware * amdgpu: update PSP 14.0.2 firmware * amdgpu: update GC 12.0.0 firmware * amdgpu: update VCN 4.0.4 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update beige goby firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update navy flounder firmware * amdgpu: update sienna cichlid firmware * amdgpu: update navi14 firmware * amdgpu: update navi12 firmware * amdgpu: update navi10 firmware * amdgpu: update VCN 5.0.1 firmware * amdgpu: update GC 9.4.4 firmware * amdgpu: update PSP 15.0.9 firmware * amdgpu: update GC 11.7.1 firmware * amdgpu: update VCN 5.3.0 firmware * amdgpu: update PSP 15.0.0 firmware * amdgpu: update PSP 14.0.5 firmware * amdgpu: update GC 11.5.3 firmware * amdgpu: update PSP 14.0.4 firmware * amdgpu: update GC 11.5.2 firmware * amdgpu: update green sardine firmware * amdgpu: update VCN 4.0.3 firmware * amdgpu: update PSP 13.0.6 firmware * amdgpu: update GC 9.4.3 firmware * amdgpu: DMCUB updates for various ASICs - Update to version 20261012 (git commit b9df1a1aa45b): * amdgpu: DMCUB updates for various ASICs * amdgpu: update gc 11.0.1 and 11.0.4 firmware ==== kernel-firmware-ath10k ==== Version update (20260926 -> 20261022) - Update to version 20261022 (git commit 412eb7861d40): * ath10k: WCN3990: hw1.0: update shikra/wlanmdsp.mbn to WLAN.HL.3.3.7.c5-00226 ==== kernel-firmware-ath11k ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * ath11k: QCA2066 hw2.1@nfa725: add to WLAN.HSP.1.1.c6-00302-QCAHSPSWPL_V1_V2_SILICONZ_LITE-1 * ath11k: QCA2066 hw2.1: update board-2.bin ==== kernel-firmware-ath12k ==== Version update (20260926 -> 20261009) - Update to version 20261009 (git commit 8f9cd8ebb163): * ath12k: WCN7850 hw2.0: update board-2.bin ==== kernel-firmware-bluetooth ==== Version update (20260929 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * linux-firmware: Update firmware file for Intel Scorpius2 core * linux-firmware: Update firmware file for Intel Scorpius2 core - Update aliases from 7.4-rc1 - Update to version 20261022 (git commit 412eb7861d40): * QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00680 - Update to version 20261012 (git commit b9df1a1aa45b): * aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware - Update to version 20261009 (git commit 8f9cd8ebb163): * linux-firmware: Update firmware file for Intel Solar core * linux-firmware: Update firmware file for Intel Magnetar core * linux-firmware: Update firmware file for Intel BlazaruHrpGfp core * linux-firmware: Update firmware file for Intel BlazariGfp core * linux-firmware: Update firmware file for Intel BlazarUFmPArl core * linux-firmware: Update firmware file for Intel BlazarI core * linux-firmware: Update firmware file for Intel BlazariFmp core * linux-firmware: Update firmware file for Intel BlazarU core * linux-firmware: Update firmware file for Intel ScorpiusGfp core * linux-firmware: Update firmware file for Intel Scorpius core ==== kernel-firmware-i915 ==== Version update (20260806 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * xe: Add GSC 108.0.0.1211 for NVL - Update aliases from 7.3-rc1 ==== kernel-firmware-intel ==== Version update (20260916 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * Linux-firmware: Add Dell ISH firmware 582.7822.0 for Intel Nova Lake-H systems. * intel-ipu6: Add firmware binary for IPU8 * intel-ipu6: Support IPU 7 and later as well - Update to version 20261009 (git commit 8f9cd8ebb163): * linux-firmware: Add ISH firmware files for Intel Nova Lake-H/S platforms ==== kernel-firmware-media ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * qcom: vpu: Update video firmware binary for Kaanapali ==== kernel-firmware-mediatek ==== Version update (20260825 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * mediatek MT7922: update bluetooth firmware to 20261027203403 * linux-firmware: update firmware for MT7922 WiFi device - Update to version 20261021 (git commit 084e837ec47f): * mediatek MT7925: update bluetooth firmware to 20261016233221 * linux-firmware: update firmware for MT7925 WiFi device ==== kernel-firmware-network ==== Version update (20260813 -> 20261031) - Update aliases from 7.4-rc1 - Update to version 20261031 (git commit bda6eccc3a8f): * wilc1000: update WILC1000/WILC3000 firmware to v16.5.2 ==== kernel-firmware-nvidia ==== Version update (20260610 -> 20261014) - Update aliases from 7.4-rc1 - Update to version 20261014 (git commit d5455717ead0): * nvidia: Update and add missing firmware files for Tegra SoCs ==== kernel-firmware-platform ==== Version update (20260717 -> 20261026) - Update aliases from 7.4-rc1 - Update to version 20261026 (git commit 98b55c84e8da): * linux-firmware: nxpwifi: add firmware for IW610 WiFi device - Update to version 20261017 (git commit a2dcb924f089): * rockchip: add PCIe3 PHY firmware for snps-pcie3 - Update to version 20261014 (git commit d5455717ead0): * wfx: update to firmware 3.18 - Update to version 20261009 (git commit 8f9cd8ebb163): * panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU ==== kernel-firmware-qcom ==== Version update (20260929 -> 20261031) - Update aliases from 7.4-rc1 - Update to version 20261031 (git commit bda6eccc3a8f): * qcom: update LPAICP firmware for shikra platform * qcom: update Rubik Pi 3 ADSP firmware * qcom: update CDSP firmware for shikra platform - Update to version 20261022 (git commit 412eb7861d40): * qcom: Add gpu firmwares for Nord chipset - Update to version 20261021 (git commit 084e837ec47f): * qcom:x1e80100: Support for Lenovo Yoga Slim7 Snapdragon platform CDSP - Update to version 20261017 (git commit a2dcb924f089): * Update ADSP firmware for Qualcomm qcs615 platform. - Update to version 20261014 (git commit d5455717ead0): * qcom:Update qdsp6sw firmware for shikra platform - Update to version 20261012 (git commit b9df1a1aa45b): * qcom: update HPASS firmware for nord platform - Update to version 20261009 (git commit 8f9cd8ebb163): * qcom: update LPAICP firmware for shikra platform * qcom: update ADSP firmware for glymur platform * qcom: fix qcs8300 gpdspr.jsn symlink target * qcom: update ADSP firmware for x1e80100 platform * qcom: add ADSP firmware for eliza platform ==== kernel-firmware-realtek ==== Version update (20260915 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * rtw89: 8852c: update fw to v0.27.138.1 - Update to version 20261014 (git commit d5455717ead0): * rtw89: init board_elm.bin with stuffs for board ID 1 * rtw89: 8922d: update fw 0.35.119.3 with format suffix -1 * rtw89: 8922d: update fw 0.35.115.2 ==== kernel-firmware-serial ==== - Update aliases from 7.4-rc1 ==== kernel-firmware-sound ==== Version update (20260926 -> 20261022) - Update aliases from 7.4-rc1 - Update to version 20261022 (git commit 412eb7861d40): * linux-firmware: qcom: sync audioreach firmwares from v1.0.5 build - Update to version 20261009 (git commit 8f9cd8ebb163): * cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops * cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops * cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops * cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops * cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop * cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6 ==== kernel-firmware-usb-network ==== Version update (20260610 -> 20261012) - Update to version 20261012 (git commit b9df1a1aa45b): * aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware ==== kio-extras ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkioarchive6-6 trash_kcm - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * smb: use the saved login of a share whose url names no user ==== kio-gdrive ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== konsole ==== Version update (26.08.2 -> 26.08.3) Subpackages: konsole-part - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Vt102: Only accept cursor commands ==== kpmcore ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkpmcore13 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Partition length should not be cached in ResizeFileSystemJob because partition is expanded just before ::run(), and we need live data, not old cached data. * Fix ResizeFileSystemJob to cache partition() properties that might change. * Make sure queued move is using partition boundaries at creation time, not runtime. (kde#527047) ==== kwalletmanager ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libblockdev ==== Subpackages: libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_smart3 libbd_swap3 libbd_utils3 libblockdev3 - Add libblockdev-CVE-2026-111581.patch: CVE-2026-111581: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method (bsc#1286323) ==== libkdcraw ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKDcrawQt6-5 libkdcraw-qt6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkexiv2-qt6 ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKExiv2Qt6-0 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkgapi6 ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6GAPICore6 libKPim6GAPIDrive6 libkgapi6-sasl2-kdexoauth2 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libpisp ==== Version update (1.7.0 -> 1.8.0) - Fix build for Leap 16.1 - Update to version 1.8.0 * gst: Always set the smart resize and crop when configuring. * helpers: buffer: Add the missing include. ==== libsndfile ==== - Fix information disclosure via uninitialized variable use in WAV parsing (CVE-2026-109828, bsc#1285421): libsndfile-CVE-2026-109828.patch ==== libupnp ==== Version update (22.1.10 -> 22.2.0) Subpackages: libixml22 libupnp22 - Update to release 22.2 * Cast input to ctype calls to unsigned char ==== liburing ==== - add 0001-test-waitid-accept-ETIME-for-a-fired-linked-timeout.patch to fix tests for kernel 7.4 - add to excludes * connect.t: flaky on 16.1 + 7.3 * sqpoll-exec.t, thread-exit.t: flaky on 7.3 ==== lvm2 ==== Version update (2.03.43 -> 2.03.44) Subpackages: liblvm2cmd2_03 - lvm2.changes * Amend entries from me@jacobbaungard.com and tomas.chvatal@gmail.com - lvm2.spec * reorder patches - Update patches for btrfs fsadm support due to commit 2575c7d9079e: * fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch * fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch - Update to version 2.03.44 * Round non-power-of-two VDO slab size up to a power of two in lvcreate. * Make pthread_setname_np optional for older pthread libraries. * Fix blkio invalidation of held or dirty blocks and interrupted waits. * Report synchronous I/O failures through the blkio completion path. * Release the label scan before forking the polldaemon. * Add configure --with/out-libaio to control async engine support. * Add configure --with/out-liburing to control io_uring support. * Add optional io_uring io engine (requires liburing, kernel 5.1+). * Default the I/O engine to iouring, then threads, then libaio, then sync. * Add pthread-based I/O engine to eliminate libaio io_destroy penalty. * Deprecate use_aio; use_aio=0 still selects sync I/O. * Add io_engine config to select the I/O engine. * Warn and use sync I/O when the requested I/O engine is unavailable. * Zero fill the tail of a short io engine read at the end of a device. * Drain in-flight libaio on io engine destroy. * Remove orphaned pvmove LV when force-removing a RAID LV locked for pvmove. * Preserve committed metadata when pv_write updates an existing PV. * Use mdadm-compatible CRC-32 when detecting DDF metadata. * Detect NVMe multipath devices and handle uncached primary devices. * Use the VDO pool data LV size for VDO memory checks. * Warn about RAID reshape data corruption on kernels older than 6.11. * Suggest remedies when duplicate PV devices block VG updates or activation. * Improve documentation about PVs layered on top of LVs. * Reject cache pool resize with a clear error instead of failing internally. * Preserve RAID1 recovery state and rebuild markers when reducing images. * Accept transient or incomplete dm-raid status during repair and reduction. * Report the dead-primary RAID repair advice instead of refusing a rebuild. * Fix out-of-bounds read when parsing short dmeventd client messages. * Reject malformed numeric fields in dmeventd client registration messages. * Reject dmeventd registrations without a plugin or device name. * Use non-blocking dmeventd FIFO I/O and timeouts for stalled clients. * Fix dmeventd timeout thread spin when no timeout is scheduled. * Fix dmeventd monitor thread list when a thread fails before linking. * Unregister dmeventd devices from plugins if monitoring stops early. * Do not reuse dmeventd grace-period threads when the device inode is unknown. * Reset dmeventd pending SIGALRM without changing signal disposition. * Warn when parent directories of dmeventd FIFO paths are not secure. * Validate systemd-activated dmeventd FIFOs and use non-blocking I/O. * Fix dmeventd info when the running daemon returns no status reply data. * Run build-tree binaries against build libraries, not installed copies. * Avoid spurious dmeventd unregister errors when removing monitored snapshots. * Run mirror repair from dmeventd when mirror reports in-sync with failed legs. * Fix out-of-bounds access on an unterminated mda_header raw_locns (BZ2510937). * Log open failures at debug for devices excluded after scan I/O errors. * Fix blkdeactivate to exit 0 when devices stay mounted by policy. * Fix blkdeactivate -l wholevg when another LV in the VG stays mounted. * Fix blkdeactivate exit status on failed deactivation or mpath queueing. * Fix blkdeactivate umount for paths with spaces or lsblk hex escapes. * Update lvmdump for lvmlockd; add -A; drop lvmetad collection. * Harden fsadm size parsing and use mktemp for temporary mount dirs. * Ignore _FSADM_YES from the environment; pass --yes only from the CLI. * Fix fsadm fsck exit codes and mount detection via /proc/self/mountinfo. * Harden lvm_import_vdo YAML and stat parsing against shell injection. * Use mktemp in lvm_import_vdo; validate TMPDIR and tool binary overrides. * Harden lvresize_fs_helper temp mounts, signal cleanup, and TMPDIR checks. * Validate lvresize_fs_helper resize sizes and value-taking options. * Fix lvresize_fs_helper btrfs, e2fsck handling, and --fsextend/--fsreduce. * Prevent redundant device access after scan I/O errors (DEV_SCAN_NOT_READ). * Apply lvmlockd --lockopt force to all lock requests. * Keep PR state after failed start. * Apply PTPL when extending VG to ensure persistence when power cycling devs. * Allow vgextend before any host starts PR on new devs. * Fix pvscan autoactivation when DEVLINKS symlinks are not yet created. - rebase fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch to match with new version. - remove bug-1288220_pvscan-preserve-preferred-device-name-when-importing.patch ==== lvm2-device-mapper ==== Version update (2.03.43_1.02.217 -> 2.03.44_1.02.218) Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - lvm2.changes * Amend entries from me@jacobbaungard.com and tomas.chvatal@gmail.com - lvm2.spec * reorder patches - Update patches for btrfs fsadm support due to commit 2575c7d9079e: * fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch * fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch - Update to version 2.03.44 * Round non-power-of-two VDO slab size up to a power of two in lvcreate. * Make pthread_setname_np optional for older pthread libraries. * Fix blkio invalidation of held or dirty blocks and interrupted waits. * Report synchronous I/O failures through the blkio completion path. * Release the label scan before forking the polldaemon. * Add configure --with/out-libaio to control async engine support. * Add configure --with/out-liburing to control io_uring support. * Add optional io_uring io engine (requires liburing, kernel 5.1+). * Default the I/O engine to iouring, then threads, then libaio, then sync. * Add pthread-based I/O engine to eliminate libaio io_destroy penalty. * Deprecate use_aio; use_aio=0 still selects sync I/O. * Add io_engine config to select the I/O engine. * Warn and use sync I/O when the requested I/O engine is unavailable. * Zero fill the tail of a short io engine read at the end of a device. * Drain in-flight libaio on io engine destroy. * Remove orphaned pvmove LV when force-removing a RAID LV locked for pvmove. * Preserve committed metadata when pv_write updates an existing PV. * Use mdadm-compatible CRC-32 when detecting DDF metadata. * Detect NVMe multipath devices and handle uncached primary devices. * Use the VDO pool data LV size for VDO memory checks. * Warn about RAID reshape data corruption on kernels older than 6.11. * Suggest remedies when duplicate PV devices block VG updates or activation. * Improve documentation about PVs layered on top of LVs. * Reject cache pool resize with a clear error instead of failing internally. * Preserve RAID1 recovery state and rebuild markers when reducing images. * Accept transient or incomplete dm-raid status during repair and reduction. * Report the dead-primary RAID repair advice instead of refusing a rebuild. * Fix out-of-bounds read when parsing short dmeventd client messages. * Reject malformed numeric fields in dmeventd client registration messages. * Reject dmeventd registrations without a plugin or device name. * Use non-blocking dmeventd FIFO I/O and timeouts for stalled clients. * Fix dmeventd timeout thread spin when no timeout is scheduled. * Fix dmeventd monitor thread list when a thread fails before linking. * Unregister dmeventd devices from plugins if monitoring stops early. * Do not reuse dmeventd grace-period threads when the device inode is unknown. * Reset dmeventd pending SIGALRM without changing signal disposition. * Warn when parent directories of dmeventd FIFO paths are not secure. * Validate systemd-activated dmeventd FIFOs and use non-blocking I/O. * Fix dmeventd info when the running daemon returns no status reply data. * Run build-tree binaries against build libraries, not installed copies. * Avoid spurious dmeventd unregister errors when removing monitored snapshots. * Run mirror repair from dmeventd when mirror reports in-sync with failed legs. * Fix out-of-bounds access on an unterminated mda_header raw_locns (BZ2510937). * Log open failures at debug for devices excluded after scan I/O errors. * Fix blkdeactivate to exit 0 when devices stay mounted by policy. * Fix blkdeactivate -l wholevg when another LV in the VG stays mounted. * Fix blkdeactivate exit status on failed deactivation or mpath queueing. * Fix blkdeactivate umount for paths with spaces or lsblk hex escapes. * Update lvmdump for lvmlockd; add -A; drop lvmetad collection. * Harden fsadm size parsing and use mktemp for temporary mount dirs. * Ignore _FSADM_YES from the environment; pass --yes only from the CLI. * Fix fsadm fsck exit codes and mount detection via /proc/self/mountinfo. * Harden lvm_import_vdo YAML and stat parsing against shell injection. * Use mktemp in lvm_import_vdo; validate TMPDIR and tool binary overrides. * Harden lvresize_fs_helper temp mounts, signal cleanup, and TMPDIR checks. * Validate lvresize_fs_helper resize sizes and value-taking options. * Fix lvresize_fs_helper btrfs, e2fsck handling, and --fsextend/--fsreduce. * Prevent redundant device access after scan I/O errors (DEV_SCAN_NOT_READ). * Apply lvmlockd --lockopt force to all lock requests. * Keep PR state after failed start. * Apply PTPL when extending VG to ensure persistence when power cycling devs. * Allow vgextend before any host starts PR on new devs. * Fix pvscan autoactivation when DEVLINKS symlinks are not yet created. - rebase fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch to match with new version. - remove bug-1288220_pvscan-preserve-preferred-device-name-when-importing.patch ==== mozilla-nss ==== Version update (3.130 -> 3.132) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - Update to version 3.132: * bmo#2084101 - Remove eMudhra emSign Root CA - G3 from NSS. * bmo#2083709 - Remove eMudhra emSign Root CA - C1 and emSign ECC Root CA - C3 from NSS. * bmo#2056777 - fix build failures. * bmo#2056777 - secasn1d: propagate end-of-contents flag to enclosing construct. * bmo#2056777 - additional secasn1d tests for end of contents handling. * bmo#2056777 - Changing the end_of_content for BER encoding. * bmo#2064148 - run the FIPS-mode SSL tests in CI. * bmo#2064148 - run fips.sh in CI. * bmo#2064148 - run gtests in FIPS mode. * bmo#2082675 - do not force-import an empty symmetric key. * bmo#2082671 - allow unwrapping an EC private key without a public point. * bmo#2064426 - DTLS1.3 must not use EndOfEarlyData (per RFC 9147 Section 5.6). * bmo#2081444 - make clang-cl the default compiler for Windows in CI. * bmo#2081444 - add option to build with clang-cl in CI. * bmo#2075015 - prefer the seed format for wrapped ML-KEM and ML-DSA private keys. * bmo#2074404 - Encode ML-DSA private keys in PK11_ExportPrivKeyInfo. * bmo#2074404 - Encode ML-KEM private keys in PK11_ExportPrivKeyInfo. * bmo#2081440 - use nspr4 branch tip for CI runs. * bmo#2082406 - Read p7env and p7verify input in binary mode on Windows. * bmo#2082407 - p7verify, p7content: exit non-zero on invalid signatures; fix p7verify SHA-384/512 digests. * bmo#2050941 - libpkix http default client tests. * bmo#2079860 - clear held back early data byte when 0rtt is rejected. * bmo#2030245 - add Windows ARM64 CI jobs. * bmo#2079416 - Update the wycheproof testvectors README. * bmo#2079416 - Update ML-KEM wycheproof testvectors. * bmo#2079416 - Update ML-DSA wycheproof testvectors. * bmo#2079416 - Update DSA wycheproof testvectors. * bmo#2079416 - Update RSA PKCS#1 v1.5 signature wycheproof testvectors. * bmo#2079416 - Update RSA-PSS wycheproof testvectors. * bmo#2079416 - Update RSA PKCS#1 v1.5 decryption wycheproof testvectors. * bmo#2079416 - Update RSA-OAEP wycheproof testvectors. * bmo#2079416 - Update EdDSA wycheproof testvectors. * bmo#2079416 - Update ChaCha20-Poly1305 wycheproof testvectors. * bmo#2079416 - Update ECDSA wycheproof testvectors. * bmo#2079416 - Update ECDH wycheproof testvectors. * bmo#2079416 - Update X25519 wycheproof testvectors. * bmo#2079416 - Update HMAC wycheproof testvectors. * bmo#2079416 - Update AES-CMAC wycheproof testvectors. * bmo#2079416 - Update AES-CBC wycheproof testvectors. * bmo#2079402 - read JSON directly for all wycheproof tests. * bmo#2079457 - explicitly reject RSA PKCS#1 v1.5 ciphertexts that are not less than the modulus. * bmo#2075179 - finalize the PRAGMA table_info statement on error paths in sdb_init. * bmo#2076062 - Limit nesting depth in PKCS#12 safeContents decoder. * bmo#2072757 - use encoded serial number to look up trust in fill_CERTCertificateFields. * bmo#2077359 - remove unused SEC_ASN1_MKSUB from secsign.c. * bmo#1961826 - Run NSS_Shutdown at exit in SMIME fuzzer. * bmo#1961826 - Add streaming decoder pass to SMIME fuzzer. * bmo#1961826 - Verify SignerInfos in SMIME fuzzer. * bmo#1961826 - Regenerate test certs for SMIME fuzzer. * bmo#1961826 - Add EC cert for ECDH and decrypt key callback to SMIME fuzzer * bmo#1961826 - Extend the SMIME fuzzer to cover more functions. * bmo#390374 - return NULL for deprecated PBE functions. * bmo#2061403 - Keep sigd->digests parallel to sigd->digestAlgorithms. * bmo#2076696 - guard against integer overflow in PK11_HPKE_Seal and PK11_HPKE_Open. * bmo#2076037 - ensure chacha20-poly1305 tag buffer is 16 bytes in PK11_AEADOp. * bmo#2077359 - remove more unused functions from NSS. * bmo#1960284 - Don't report epoch exhaustion through FatalError. - Changes from version 3.131.1: * This release removes trust in the following root certificates: + bmo#2083709 - emSign Root CA - C1 + bmo#2083709 - emSign ECC Root CA - C3 + bmo#2084101 - emSign ECC Root CA - G3 - Changes from version 3.131: * bmo#2078438 - remove unused private pkcs12, pkcs7, and smime functions. * bmo#2070738 - Fix generating nss.pc with system-nspr. * bmo#2066048 - replace sslSecurityInfo peerCert with peerCertDER. * bmo#2067244 - remove support for inherited DSA parameters in libssl. * bmo#2017995 - Fix issues with Unwrapping keys using tokens in FIPS mode. * bmo#2069886 - remove Windows-only AES-CTR implementation. * bmo#2069887 - improve algorithm policy enforcement for ML-DSA. * bmo#2064512 - reject non-RFC 8410 curve OIDs when encoding an X25519 or Ed25519 SubjectPublicKeyInfo. * bmo#2076212 - Clear freed CMS members in the destructors. * bmo#2076212 - Release the previous signer certificate when re-verifying a PKCS#7 signature. * bmo#2076212 - Make SEC_PKCS7DecoderAbort fail the decode. * bmo#2076212 - Fail closed after an incomplete PKCS#12 decode. * bmo#2076240 - remove unused NSSCryptoContext and NSSTrustDomain functions. * bmo#1993638 - can’t import eddsa .p12 from OpenSSL. * bmo#2055638 - fix clang format. * bmo#2072045 - pk12util fails to import private key into SoftHSM token despite initialized slot and valid PKCS#12 file. * bmo#2075580 - p7content: open output file in binary mode. * bmo#2068388 - fix msvc build error. * bmo#2072416 - use SEC_ASN1_GET for SEC_OctetStringTemplate in der_gtest. * bmo#2074663 - remove unused and unexported CERT_ functions. * bmo#2072416 - fix leak when decoding nested indefinite length octet strings with null arena. ... changelog too long, skipping 19 lines ... * bmo#2074968 - stub out DER_Lengths. ==== openssh ==== Version update (10.6p1 -> 10.6p2) Subpackages: openssh-clients openssh-common openssh-server - Update to openssh 10.6p2: This release contains a critical security workaround that affects Linux systems that use the musl libc and PAM disabled. This release also includes a number of bugfixes that had already been committed on the portable OpenSSH V_10_6 stable branch. = Future deprecation notice * scp(1): begin deprecating the -R flag, which is used to perform a remote-to-remote copy by executing scp on a remote host. This option is a fragile optimisation that is difficult to use because it requires credentials on the remote host. It also creates security risks if the shell quoting rules on the remote system where the copy is performed differ from the client's expectations. From OpenSSH 10.6, this option will continue to work but will cause a deprecation warning to be emitted to standard error. In a future release, the option will be ignored and will leave in place the default remote-to-remote copy behaviour (copy via the host running scp). * sshd(8): support for platforms that do not allow file descriptor passing and that also require root privilege for PTY allocation will be removed in a future release. Affected platforms are known to include SCO OpenServer 5 and QNX 6 but may include other similarly old operating systems. This deprecation can be avoided if the user community for these platforms is able to assist us in building alternatives, such as avoiding the need for root in PTY allocation. = Security * sshd(8): avoid password authentication bypass that is exploitable through sshd(8) that affects some Linux systems when built and run with PAM support disabled. We consider the root cause of this bug to be outside sshd, but it is exploitable via sshd and can be avoided there. This bug was reported by Özgün Kültekin of Wakefield (wakefield.co) = Bugfixes * sshd(8), ssh(1): enable the post-quantum hybris signature scheme ssh-mldsa44-ed25519 as an allowed CA signature algorithm. * ssh(1), sshd(8): fix <1 second CPU spin if ChannelTimeout was in use. = Portability * sshd(8): fix compilation on (old) platforms that set SKIP_PRIVDROP * ssh(1), sshd(8): fix detection of Azerbaijani locales * sshd(8), ssh-agent(1): fix creation of agent sockets on platforms without the openat(2) syscall. * ssh(1), ssh-add(1), ssh-keygen(1): fix some strange behaviour if SIGINT/SIGQUIT was received while reading a passphrase. * sshd(8): allow restart_syscall(2) in seccomp sandbox; bz4036 ==== partitionmanager ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== python-configobj ==== - CVE-2026-112300: Avoid ReDOS in section parsing. (bsc#1286097) * Add patch CVE-2026-112300.patch ==== python-psutil ==== - Add rlim_infinity.patch to fix compatibility with Python 3.15 ==== python-pyasn1 ==== Version update (0.6.4 -> 0.6.5) - Update to 0.6.5 (bsc#1288851, CVE-2026-119194) * GHSA-mm57-4v3p-rchx: Decoded binary REAL mantissas in linear time instead of repeatedly shifting a growing integer and slicing the remaining bytes (thanks for reporting, manus-use, manus-pi, ucsurf, adriank31) * GHSA-2qm8-x737-gmw5: Reassembled constructed BIT STRING fragments in linear time while preserving their decoded bit values, including intermediate fragment padding (thanks for reporting, manus-use) * GHSA-9m75-vc3g-4x39: Reassembled constructed OCTET STRING and character-string fragments and indefinite-length ANY content in linear time. Nested constructed OCTET STRING fragments now contribute their decoded octets (thanks for reporting, alimony, manus-pi, adriank31) * GHSA-fm9c-5rcf-2q5p: Bounded schemaless container type tracking after two distinct tag sets to prevent quadratic CPU use from colliding long tag IDs (thanks for reporting, droideck) ==== qemu ==== Version update (11.1.2 -> 11.1.3) - Drop libpmem support (bsc#1288103) - [openSUSE] Update to version 11.1.3 Full backport list here: https://lore.kernel.org/qemu-devel/20261029051934.1487878-2-mjt@tls.msk.ru/ A selection of them is reported here below: target/ppc: Name the EBB exceptions hw/intc/exynos4210_combiner: Fix group register range check hw/misc/bcm2835_cprman: Treat invalid clock mux source select as GND hw/usb/hcd-xhci: More reentrancy guard fixes for the XHCI code hw/usb/dev-mtp: Fix heap OOB read in usb_mtp_write_metadata() hw/usb/dev-mtp: Fix assert crash on short CMD_SEND_OBJECT usb-host: delete bottom halves during unrealize usb-host: free request on libusb submit failure tests/qtest/usb-hcd-xhci: test interrupt pacing above 2^32 usb-host: free configuration descriptors on error paths usb-host: validate interface number before indexing altsetting tests/qtest: Cover OHCI endpoint type mismatches hw/usb/hcd-ohci: Fail iso packets sent to non-iso endpoints and vice-versa hw/usb/dev-mtp: Fix assert crash on undersized BULK IN hw/uefi: fix ContentInfo detection in wrap_pkcs7() hw/9pfs: fix dirent stream protection for legacy (9p2000.u) Tread iotests/migrate-bitmaps-postcopy-test: add a bitmap on a second node migration/block-dirty-bitmap: fix postcopy abort with bitmaps on several nodes migration: add QEMU_COUNTED_STRING_SIZE for counted string buffers qemu-img: convert: flush target image after copying block: report flush error during bdrv_close() iotests.py: add filter_qemu() iotests: add test cases for failing flush after qemu-img convert seccomp: really fix blocking of setns/execveat/unshare seccomp: fix blocking of setns/execveat/unshare target/riscv: Check Svnapot PTE before updating A/D bits tests/qtest/bios-tables-test: Update riscv64 virt SPCR golden reference hw/riscv/virt-acpi-build: Fix the UART register width in SPCR tests/qtest/bios-tables-test: Allow changes to riscv64 virt SPCR target/riscv/kvm: Preserve VCSR across migration target/riscv/kvm: Reject migration with a different timer frequency target/riscv/kvm: Preserve FCSR across migration targetriscv: svinval instructions raise virtual instruction exception target/riscv: stop translating after WFI target/riscv: Restore LCOFI handling in interrupt CSRs target/riscv: check G-stage write permission for VS-stage A/D updates hw/intc/arm_gicv5: Make IRS_IDR0 reads return actual value, not 0 tests/tcg/aarch64: Test the TTBR layout with TCR.DS and a 48-bit OA target/arm: Use the 52-bit TTBR base address layout when TCR.DS is set tests/tcg/aarch64: Add a test for a two-entry 52-bit TTBR table target/arm: Clear TTBR[5:0] from a 52-bit table base address tcg/riscv64: Remove vector min/max ops with immediates target/i386: fix immediate stack adjustment for RET and RETF target/i386/tcg: zero FXSAVE FOP and reserved slot bytes tests/tcg: Add tests for sign extension after rotate tcg/optimize: Do not derive s_mask from rotated s_mask hw/display/vga: fix OOB writes after external surface resize hw/tpm: crb: Do not clear internal buffers when backend is busy tpm_emulator: Reject sending commands smaller than the request header io: cork TLS writes to avoid small TLS records block: Remove now redundant bdrv_wait_serialising_requests() calls block: Fix corruption from broken RMW atomicity block: reject a reopen of an unusable node instead of crashing qcow2: do not clear the dirty bit when reopening a read-only node file-posix: add statx(STATX_DIOALIGN) support block: fix bdrv_next() skipping monitor-owned nodes iotests: cover inactivating a read-only node block/throttle-groups: fix crash when enabling I/O limits on a busy disk io: prevent unbounded read of websocket data from client hw/usb: Fix USB MTP Use-After-Free in usb_mtp_deletefn List Iteration target/i386/tcg: ignore VEX.L for unary scalar instructions accel/kvm: coalesced mmio: check lenght of the MMIO write entry accel/kvm: protect kvm_resample_fd_list with a mutex system: fix buffer overflow in tdx_parse_panic_message target/i386: Don't clear C1 for FCOMI/FCOMIP/FUCOMI/FUCOMIP target/i386: clear C1 for all x87 compare instructions target/i386: Migrate error code only with an exception target/i386/tcg: raise #GP(0) on null SS load with RPL != CPL plugins: fix register handle encoding to reserve NULL as invalid hw/nvme: fix memory leak on sr-iov capable nvme controller removal hw/nvme: fix assertion failure on sr-iov capable nvme controller removal block/nbd: clear reply.cookie under receive_mutex block/nbd: never index requests[] with an unchecked cookie block/nbd: clear reply.cookie when the reply is rejected ... - supportconfig: Major update ==== qrca ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== sddm-qt6 ==== Subpackages: sddm-greeter-qt6 - Require /usr/bin/X: 00-general.conf defines ServerPath=/usr/bin/X (boo#1288770). ==== signon-kwallet-extension ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== skopeo ==== - When stripping WhiteoutPrefix, make sure the result is a proper basename CVE-2026-79699, bsc#1280698 + 0001-CVE-2026-79699-archive-When-stripping-WhiteoutPrefix.patch - Don't panic on empty ciphertext CVE-2026-116585, bsc#1288278 + 0002-CVE-2026-116585-cipher-cbc_hmac-don-t-panic-on-empty.patch - limit stack depth CVE-2026-116586, bsc#1288278 + 0003-CVE-2026-116586-json-limit-stack-depth.patch - bound RSA modulus size and reject private keys in JWK/EPK headers CVE-2026-116587, bsc#1288278 + 0004-CVE-2026-116587-jwk-bound-RSA-modulus-size-and-rejec.patch ==== sqlite3 ==== - Add sqlite-3.54.1-fix-waliter-test-64k-pages.patch to fix a test failure in %check on systems with 64KB pages (ppc64le, aarch64). - Add sqlite-3.54.1-fix-fts3corrupt4-test-big-endian.patch to fix a test failure in %check on big-endian platforms (s390x). Upstream check-in 1a888ea60be20a80 made the test's big-endian special case obsolete. - Add sqlite-3.54.1-fix-shell-import-line-count.patch to fix a test failure in %check on 32-bit big-endian platforms (s390): the line count shown by ".import" was printed from a 64-bit value with %d.