Packages changed: MicroOS-release (20261028 -> 20261030) aaa_base accountsservice (23.13.9 -> 26.27.3) at-spi2-core (2.60.7 -> 2.62.1) aurorae6 (6.8.1 -> 6.8.2) bluedevil6 (6.8.1 -> 6.8.2) bluez breeze6 (6.8.1 -> 6.8.2) breeze6-gtk (6.8.1 -> 6.8.2) containerd (2.3.3 -> 2.4.2) dconf (0.49.0 -> 51.0) discover6 (6.8.1 -> 6.8.2) firewalld flatpak-kcm6 (6.8.1 -> 6.8.2) gdk-pixbuf (2.44.7 -> 2.44.8) glib-networking (2.80.1 -> 2.90.1) glib2 (2.88.4 -> 2.90.1) glycin-loaders (2.1.5 -> 2.2.5) gsettings-desktop-schemas (50.1 -> 51.0) gvfs (1.60.3 -> 1.62.0) kactivitymanagerd6 (6.8.1 -> 6.8.2) kde-cli-tools6 (6.8.1 -> 6.8.2) kde-gtk-config6 (6.8.1 -> 6.8.2) kdecoration6 (6.8.1 -> 6.8.2) kdeplasma6-addons (6.8.1 -> 6.8.2) kglobalacceld6 (6.8.1 -> 6.8.2) kinfocenter6 (6.8.1 -> 6.8.2) kmenuedit6 (6.8.1 -> 6.8.2) knighttime6 (6.8.1 -> 6.8.2) kpipewire6 (6.8.1 -> 6.8.2) krb5 kscreen6 (6.8.1 -> 6.8.2) kscreenlocker6 (6.8.1 -> 6.8.2) ksshaskpass6 (6.8.1 -> 6.8.2) ksystemstats6 (6.8.1 -> 6.8.2) kwayland-integration6 (6.8.1 -> 6.8.2) kwayland6 (6.8.1 -> 6.8.2) kwin6 (6.8.1 -> 6.8.2) layer-shell-qt6 (6.8.1 -> 6.8.2) libarchive (3.8.9 -> 3.8.10) libglycin (2.1.5 -> 2.2.5) libkscreen6 (6.8.1 -> 6.8.2) libksysguard6 (6.8.1 -> 6.8.2) libostree (2026.4 -> 2026.5) libplasma6 (6.8.1 -> 6.8.2) libqaccessibilityclient-qt6 librsvg (2.62.4 -> 2.63.4) libsoup (3.6.6 -> 3.8.1) milou6 (6.8.1 -> 6.8.2) oxygen6-sounds (6.6.3 -> 6.8.2) patterns-base pcsc-lite pipewire (1.6.10 -> 1.6.11) plasma5support6 (6.8.1 -> 6.8.2) plasma6-activities (6.8.1 -> 6.8.2) plasma6-activities-stats (6.8.1 -> 6.8.2) plasma6-browser-integration (6.8.1 -> 6.8.2) plasma6-desktop (6.8.1 -> 6.8.2) plasma6-integration (6.8.1 -> 6.8.2) plasma6-nm (6.8.1 -> 6.8.2) plasma6-openSUSE plasma6-pa (6.8.1 -> 6.8.2) plasma6-print-manager (6.8.1 -> 6.8.2) plasma6-systemmonitor (6.8.1 -> 6.8.2) plasma6-workspace (6.8.1 -> 6.8.2) podman (6.1.2 -> 6.1.4) polkit-kde-agent-6 (6.8.1 -> 6.8.2) powerdevil6 (6.8.1 -> 6.8.2) python-gobject (3.56.3 -> 3.58.1) qqc2-breeze-style6 (6.8.1 -> 6.8.2) qt6-declarative rebootmgr (4.0+git20261008.76d8ee7 -> 4.3) sddm-kcm6 (6.8.1 -> 6.8.2) sensors snowball (3.0.1 -> 3.1.1) spectacle (6.8.1 -> 6.8.2) systemsettings6 (6.8.1 -> 6.8.2) tevent union6 (6.8.1 -> 6.8.2) xdg-desktop-portal-kde6 (6.8.1 -> 6.8.2) zypp-boot-plugin (0.0.13 -> 0.0.14) === Details === ==== MicroOS-release ==== Version update (20261028 -> 20261030) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== aaa_base ==== - Remove the /etc/init.d/boot.local and /etc/init.d/after.local ghost placeholders; nothing has executed these files since the sysvinit era and the spec already recorded the intent to drop them. This resolves the executable-marked-as-config-file errors on the pair - Build the text-only subpackages extras, malloccheck, wsl and yama-enable-ptrace as noarch - Drop the legacy aaa_base:/etc/DIR_COLORS provides from aaa_base-extras; nothing in Tumbleweed requires it - Fix a typo in the yama-enable-ptrace description and wrap the main description line - Drop the Group tags from all package sections - Rework aaa_base-rpmlintrc: drop the filters whose targets no longer exist in the package (the wtmp log file group, the restricted hostname symlink and the deprecated init script filters for the removed .local files) and add reasoned filters for the remaining deliberate warnings (the nsswitch.conf backup copy in %post, the skel dotfiles, /var/adm and the sysconfig fillup templates) ==== accountsservice ==== Version update (23.13.9 -> 26.27.3) - Update to version 26.27.3: + release notes are at https://gitlab.freedesktop.org/accountsservice/accountsservice - Rebase accountsservice-sysconfig.patch and harden_accounts-daemon.service.patch. - Drop accountsservice-mocklib-gcc14.patch and remove patched mocklib: fixed upstream. - Add json-c to BuildRequires: new dependency. - Rename libaccountsservice package to account for new sover. - Make vala package noarch. It doesn't contain any binaries. ==== at-spi2-core ==== Version update (2.60.7 -> 2.62.1) Subpackages: libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Update to version 2.62.1: * Fix baseline race in direct connection test. * Fix typecasting macros in atspi-application.h. * At-spi-bus-launcher: Clean up dbus-daemon when terminating from signals other than SIGTERM. - Update version dependencies according to meson.build. - Update to version 2.62.0.1: + This is functionally equivalent to 2.62.0, but the tag for 2.62.0 was not signed. ==== aurorae6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== bluedevil6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== bluez ==== Subpackages: bluez-cups libbluetooth3 - Own zsh-completion dirs. ==== breeze6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-style-qt5 breeze6-wallpapers - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== breeze6-gtk ==== Version update (6.8.1 -> 6.8.2) Subpackages: gtk3-metatheme-breeze6 metatheme-breeze6-common - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== containerd ==== Version update (2.3.3 -> 2.4.2) - Update to v2.4.2 [CVE-2026-84304, bsc#1279217, CVE-2026-53495, bsc#1280007, CVE-2026-23493, bsc#1282669, CVE-2026-95838, bsc#1285124] * https://github.com/containerd/containerd/releases/tag/v2.4.2 * https://github.com/containerd/containerd/releases/tag/v2.4.0 * https://github.com/containerd/containerd/releases/tag/v2.3.7 * https://github.com/containerd/containerd/releases/tag/v2.3.6 * https://github.com/containerd/containerd/releases/tag/v2.3.5 * https://github.com/containerd/containerd/releases/tag/v2.3.4 - Rebase patches: * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch ==== dconf ==== Version update (0.49.0 -> 51.0) Subpackages: libdconf1 - Update version dependencies according to meson.build. - Update to version 51.0: + No changes since 51.rc. - Update to version 51.rc: + Update overview regarding safe writer. - Update to version 51.beta: + Implement safe GVDB writer and use it by default for homes on NFS + docs: - Describe DBDIR argument in man page - Fix a typo ==== discover6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-notifier - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Update version for new release 6.8.2 * fwupd: Do not pass the FwupdBackend object to the connect thread * AppsModel: Remove dup'd stream class * UpdateModel: React when resources disappear * Set X-KDE-AliasFor for Discover's hidden desktop entries (kde#511886) ==== firewalld ==== Subpackages: python313-firewall - Add zsh BuildRequires: Needed due to zsh-completion dirs. ==== flatpak-kcm6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - No code change since 6.8.1 ==== gdk-pixbuf ==== Version update (2.44.7 -> 2.44.8) Subpackages: gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Update to version 2.44.8: + glycin: Support x-/y-dpi options for png, tiff and jpeg + Updated translations. ==== glib-networking ==== Version update (2.80.1 -> 2.90.1) - Update to version 2.90.1: * Bugs fixed: + CVE-2026-103963: Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service + CVE-2026-112963: glib-networking macOS OpenSSL backend incorrectly trusts non-SSL policy certificates as TLS anchors + CVE-2026-113624: glib-networking TLS client session cache key not rebuilt after certificate property change, allowing stale session resumption + CVE-2026-113622: glib-networking: Missing TLS purpose validation in glib-networking OpenSSL backend allows Extended Key Usage bypass + CVE-2026-113623: glib-networking: Unbounded memory growth in glib- networking GnuTLS backend application data buffer during TLS handshake allows remote denial of service + openssl: consult errno on syscall failure * Updated translations. - Update version dependencies according to meson.build. - Update to version 2.90.0: + Bugs fixed: - meson: Remove version checks that are always true + Updated translations. - Update to version 2.90.alpha: + Bugs fixed: - test fails with openssl 3.4.x - (CVE-2025-60018) (#YWH-PGM9867-106) Out of Bond Reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" due to Incorrect BIO_write Return Value Validation in Certificate PEM Export - (CVE-2026-2574) (#YWH-PGM9867-150) OOB Read on glib-networking through tls/openssl/gtlsclientconnection-openssl.c via g_tls_client_connection_openssl_get_property() - (CVE-2026-10028) (#YWH-PGM9867-278) Infinite loop in certification path building - meson: Introduce option for enable/disable tests - openssl: check return value of g_tls_bio_alloc() and BIO_new() - openssl: delete support for OCSP stapling - Fix file database and PKCS11 test failures and update CI! - Fix miscellaneous safety issues reported by bug hunters - Delete gtlshttp - Fix connection test reusing a GError - openssl: fix error code confusion - ci: add catch for reporting stack traces - Require OpenSSL 1.1.1 or newer - Some fixes found with kiro - Fix various memory leaks - openssl: refactor error handling code - openssl: use ERR_clear_error() all over the place - gnutls: always notify accepted-cas property after handshake + Updated translations. - Drop CVE-2026-10028.patch: Fixed upstream. ==== glib2 ==== Version update (2.88.4 -> 2.90.1) Subpackages: glib2-tools libgio-2_0-0 libgirepository-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 typelib-1_0-GLib-2_0 typelib-1_0-GLibUnix-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - Update to version 2.90.1: * Bugs fixed: + Add address and thread sanitizer scheduled CI job + inotify: cancelling monitor through symlink alias removes watch used by still-active monitors + g_file_trash() returns FALSE without setting the GError when trashing a non-empty directory for `DT_UNKNOWN` nodes + tools: Add another variant of an existing suppression to glib.supp + giochannel: Fix strncmp() off the end of the buffer + gvariant: Handle get_data_as_bytes() for corrupted variants + utils: Add missing ENUMERATOR_AVAILABLE_IN + rcbox: Turn assertion into error + gdbusauthmechanismsha1: Don't split into too many tokens + logging: Don't stack overflow with too many fields + regex: Handle empty matches at end + unicode: - Fix error handling in normalization - Don't read past limits - Prevent overflow in normalization + gmarkup: Be careful in error paths + gresource: Avoid underflow + gcharsetconverter: Avoid closing invalid iconv descriptors + gregex: Fix some trivial typos in the docs + gfileenumerator: Reformat docs to fully use gi-docgen and match style guide + fileutils: Check the mode before creating the file + Clarify various inconsistencies with g_socket_address_new_from_native() + tests: Avoid a ubsan warning about passing NULL to strncmp() + glib.supp: Mark a TLS variable as not really a leak * Updated translations. - Drop gsettings.zsh (_gsettings completion) as source, no longer needed as zsh ships its own gsettings completions (boo#1284142). - Update to version 2.90.0: + Bugs fixed: - G_DEFINE_TYPE parent_class variable trips clang 23's `-Wunused-but-set-global` - `-Wtypedef-redefinition` warnings from `GDBusActionGroup` when building 2.89.4 with clang - fix: handle long filenames in trash by truncating from front - tests: allocate an adequate alternate signal stack - gtestutils: Mark a TLS variable as not really a leak - goutputstream: Fix an unused-variable warning with G_DISABLE_ASSERT + Updated translations. - Update to version 2.89.4 (Unstable): + Improve support for nanosecond source timeouts + Fix installed service file containing build path + Support clicking notification icons on Windows + Improve stream splice performance by increasing buffer size + Updated translations. - Update to version 2.89.3 (Unstable): + Support systemd-style UAPI file masking and drop-ins for `GKeyFile` + Add some string and date convenience API, `g_string_free_deep()` and `g_set_date_time()` + Add some convenience API to `GUnixFDList` + Bugs fixed: - Support UAPI file masking and drop-ins in GKeyFile - gio/tests: iptosmessage does not compile on Solaris - fd leak in `g_file_set_contents_full()` on error? - gio-tool: crash (assertion failed) when running 'gio help help' - Add g_string_free_deep - datetime: Add g_set_date_time - giostream: Clarify is_closed() method docs for streams - gunixfdlist: Add g_unix_fd_list_append_take, g_unix_fd_list_peek, g_unix_fd_list_lookup, g_unix_fd_list_lookup_peek - gtestutils: Fix a minor typo in a documentation comment - tests: Minor compiler warning fixes for GCC16 - build: Fix a deprecation warning from Meson 1.12 - docs: Use dedicated docblocks for new enum members - docs: Annotate callbacks rather than user_data - Add finer accuracy g_timeout APIs - gdbusnameowning: Don't print any logs when connection is closed - Avoid reserved identifiers in public macros - Update to version 2.89.2 (Unstable): + Fix potential miscompilation with GCC 17 with `G_GNUC_CONST` on `get_type()` functions + Update toolchain requirement to C11; previously this was just strongly recommended + Various bugs fixed. + Updated translations. - Update to version 2.89.1 (Unstable): + g_thread_yield() may not yield control to another thread as expected on Linux. + gio: gmemorymonitordbus: Fix fallback backends can't be properly loaded + gregex: Remove "array length" annotations + win32-build.md: Update Visual Studio build info + Don't use slow content type for icons when only fast content is queried + Performance improvements to GVariant/GDBusMessage + docs: fix wrong reference to gint16 for gint32 types in glib/types.md + Add missing finish-func annotations + gregex: g_match_info_fetch_pos() and g_match_info_fetch_all() will now work after partial matches as well ... changelog too long, skipping 27 lines ... https://gitlab.gnome.org/GNOME/glib ==== glycin-loaders ==== Version update (2.1.5 -> 2.2.5) - Update to version 2.2.5: * This release contains the following new component versions: + Glycin-core 4.0.5 + Glycin 4.0.5 + Glycin-builtin 4.0.5 + Glycin-external 4.0.5 + Libglycin 2.2.5 + Libglycin-gtk4 2.2.5 * Fixed: + Require gufo-exif 0.5.5 to avoid reading exif values from incorrect positions in some images. + Libglycin: Don't panic when trying to lookup an infinite pixel density. Instead, don't return any pixel density. + Meson/thumbnailer: Ensure that libglycin is built before glycin-thumbnailer. - Pass libglycin=true to meson setup in glycin-loaders.spec.inc following upstream changes. - Update to version 2.2.4: * This release contains the following new component versions: + Glycin-core 4.0.4 + Glycin-image-rs 2.2.4 + Glycin 4.0.4 + Glycin-builtin 4.0.4 + Glycin-external 4.0.4 + Libglycin 2.2.4 + Libglycin-gtk4 2.2.4 * Fixed: + Require gufo-exif 0.5.4 to avoid a panic in exif lookup for certain images. + Glycin: Longer magic byte strings in config identifiers now have a higher priority. This fixes cursors being sometimes identified as TGAs. - Update to version 2.2.3: * This release contains the following new component versions: + Glycin-core 4.0.3 + Glycin-image-rs 2.2.3 + Glycin 4.0.3 + Glycin-builtin 4.0.3 + Glycin-external 4.0.3 + Libglycin 2.2.3 + Libglycin-gtk4 2.2.3 * Fixed: + Require gufo-exif 0.5.3 which fixes parsing issues with non-Canon MakerNote entries. This can cause images not to be rotated according to the Orientation tag. + Image-rs/animation: Drop thread after the Image.done D-Bus method is called. + Image-rs: Prevent channel with animation frames from filling up, causing a effective memory leak. + Libglycin: Don't block main thead in `get_mime_types`. * Changed: Glycin: Canonicalize paths of "Exec" keys when loading configs. - Update to version 2.2.2: * This release contains the following new component versions: + Glycin-core 4.0.2 + Glycin 4.0.2 + Glycin-builtin 4.0.2 + Glycin-external 4.0.2 + Libglycin 2.2.2 + Libglycin-gtk4 2.2.2 * Fixed: Set the unix socket sending the image data to the loader to non-blocking. Otherwise, small socket send buffer configurations might lead to infinite blocking. - Update to version 2.2.1: + This release contains the following new component versions: - glycin-utils 5.0.1 + Fixed: Don't mmap already write sealed memfds as shared. This is only supported since Linux 6.7 . - Update to version 2.2.0: + This release contains the following new component versions: - glycin-common 2.0.0 - glycin-core 4.0.0 - glycin-heif 2.2.0 - glycin-image-rs 2.2.0 - glycin-jxl 2.2.0 - glycin-raw 2.2.0 - glycin-svg 2.2.0 - glycin-test 2.2.0 - glycin-thumbnailer 2.2.0 - glycin-utils 5.0.0 - glycin 4.0.0 - glycin-builtin 4.0.0 - glycin-external 4.0.0 - libglycin-gtk4-rebind 0.2.0 - libglycin-gtk4-rebind-sys 0.2.0 - libglycin-rebind 0.2.0 - libglycin-rebind-sys 0.2.0 - libglycin 2.2.0 - libglycin-gtk4 2.2.0 + Fixed: - glycin/sandbox: Fix compilation on 32 bit architectures - Update to version 2.2.beta.1: + This release contains the following new component versions: - glycin-core 4.0.0-beta.1 - glycin-heif 2.2.0-beta.1 - glycin-image-rs 2.2.0-beta.1 - glycin-jxl 2.2.0-beta.1 - glycin-raw 2.2.0-beta.1 - glycin-svg 2.2.0-beta.1 - glycin-test 2.2.0-beta.1 ... changelog too long, skipping 157 lines ... + Changed: svg: Don't limit the size of elements in the SVG ==== gsettings-desktop-schemas ==== Version update (50.1 -> 51.0) - Update to version 51.0: + Updated translations. - Update to version 51.rc: + Added setting for custom pointer acceleration profile + Remove gconf schema migration files + Updated translations. - Update to version 51.beta: + Add setting to configure the focus ring visibility timeout + Add 'orientation-lock' setting to take over the g-s-d setting + Updated translations. - Update to version 51.alpha: + Add scroll speed setting for touchpads + Add the ability to enable button scrolling on a mouse + Increase default maximum thumbnail cache from 512MB to 2GB + Updated translations. ==== gvfs ==== Version update (1.60.3 -> 1.62.0) Subpackages: gvfs-backends - Update version dependencies according to meson.build. ==== kactivitymanagerd6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kde-cli-tools6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kde-gtk-config6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kde-gtk-config6-gtk3 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kdecoration6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libkdecorations3-6 libkdecorations3private2 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kdeplasma6-addons ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * wallpapers/tiled: Animate animated images again (kde#516541) * applets/webbrowser: Apply the fixed zoom factor after each page load (kde#485583) * wallpapers/potd: Make the preview match Scaled, Centered and Tiled (kde#505690) * applets/webbrowser: Allow pages to read and write to the clipboard (kde#523381) * applets/mediaframe: fix adding files/folders ==== kglobalacceld6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libKGlobalAccelD6-0 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kinfocenter6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * kcms/energy: Don't read properties of a null battery ==== kmenuedit6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== knighttime6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libKNightTime0 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kpipewire6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWireDmaBuf6 libKPipeWireMonitor6 libKPipeWireRecord6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * libx264encoder: Tell libx264 the stream's frame rate (kde#526931) * PipeWireBaseEncodedStream: Apply a requested size set before starting ==== krb5 ==== - Package /var/log/krb5 in krb5-server (mode 0700, as created by krb5-log.tmpfiles) so the directory the krb5-server logrotate config rotates is owned by a package, and move krb5-log.conf (the tmpfiles entry creating it) and its %tmpfiles_create call from the main package to krb5-server, where both belong; client-only installs no longer create the server log directory - Mark the LDAP schema templates (kerberos.schema, kerberos.ldif) %config(noreplace) like the package's other config files - Annotate the /var/lib/kerberos/krb5 and .../user %ghost state directories with their real mode (0755, per krb5.tmpfiles) - Drop the duplicated kinit/klist entries from %files client - Drop three dead rpmlintrc filters (files-duplicate for css and png files and shlib-policy-missing-suffix); nothing in the current file lists matches them ==== kscreen6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kscreenlocker6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kscreenlocker6-imports libKScreenLocker6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== ksshaskpass6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== ksystemstats6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kwayland-integration6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kwayland6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libKWaylandClient6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kwin6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libkwin6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Too many changes since 6.8.1, only listing bugfixes: * keyboard_layout: Keep an application's layout after its last window closes (kde#476831, kde#452445) * backends/drm: move direct scanout device check to the compositor (kde#527544) * wayland/pointerconstraints_v1: fix state being overwritten (kde#527675) * backends/drm: disable post-blend offloading if color pipelines aren't supported (kde#527628) * multigpuswapchain: more correctly check the buffer type (kde#527591) * multigpuswapchain: fix synchronization with EGL copy (kde#527591) * Lower pip surfaces in the stack (kde#527648) * plugins/stickykeys: Latch and lock modifiers on key release (kde#509714) * plugins/slidingnotifications: Fix instant animation speed handling (kde#527478) * backends/drm: don't allow post-blend offloading with legacy (kde#527421) * plugins/startupfeedback: Fix icon sizing (kde#527308) * inputmethod: Fix visible in virtual keyboard dbus API (kde#527067) * outputconfigurationstore: allow generating a completely new config (kde#527401) * qpa: Guard against resizes in EGLPlatformContext::swapBuffers() (kde#527269) ==== layer-shell-qt6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libLayerShellQtInterface6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== libarchive ==== Version update (3.8.9 -> 3.8.10) - Update to 3.8.10 (security, bugfix and minor feature release): * 7z: add Delta, RISCV, ARMTHUMB and IA64 filters for non-lzma archives * Support message digests via nettle 4 and mbedtls 3 * tar: add --mode option for GNU tar compatibility * Hardening fixes: iso9660 boot-image block count overflow, two reader use-after-free paths, compress flush 1-byte heap overflow, bsdunzip use-after-free, rar5 integer overflow, integer conversion hardening in lha and iso9660 * No soname change: libarchive.so.13 unchanged - Drop obsolete Group: tags; encode upstream libxml2 >= 2.7.3 floor. ==== libglycin ==== Version update (2.1.5 -> 2.2.5) - Update to version 2.2.5: * This release contains the following new component versions: + Glycin-core 4.0.5 + Glycin 4.0.5 + Glycin-builtin 4.0.5 + Glycin-external 4.0.5 + Libglycin 2.2.5 + Libglycin-gtk4 2.2.5 * Fixed: + Require gufo-exif 0.5.5 to avoid reading exif values from incorrect positions in some images. + Libglycin: Don't panic when trying to lookup an infinite pixel density. Instead, don't return any pixel density. + Meson/thumbnailer: Ensure that libglycin is built before glycin-thumbnailer. - Pass libglycin=true to meson setup in glycin-loaders.spec.inc following upstream changes. - Update to version 2.2.4: * This release contains the following new component versions: + Glycin-core 4.0.4 + Glycin-image-rs 2.2.4 + Glycin 4.0.4 + Glycin-builtin 4.0.4 + Glycin-external 4.0.4 + Libglycin 2.2.4 + Libglycin-gtk4 2.2.4 * Fixed: + Require gufo-exif 0.5.4 to avoid a panic in exif lookup for certain images. + Glycin: Longer magic byte strings in config identifiers now have a higher priority. This fixes cursors being sometimes identified as TGAs. - Update to version 2.2.3: * This release contains the following new component versions: + Glycin-core 4.0.3 + Glycin-image-rs 2.2.3 + Glycin 4.0.3 + Glycin-builtin 4.0.3 + Glycin-external 4.0.3 + Libglycin 2.2.3 + Libglycin-gtk4 2.2.3 * Fixed: + Require gufo-exif 0.5.3 which fixes parsing issues with non-Canon MakerNote entries. This can cause images not to be rotated according to the Orientation tag. + Image-rs/animation: Drop thread after the Image.done D-Bus method is called. + Image-rs: Prevent channel with animation frames from filling up, causing a effective memory leak. + Libglycin: Don't block main thead in `get_mime_types`. * Changed: Glycin: Canonicalize paths of "Exec" keys when loading configs. - Update to version 2.2.2: * This release contains the following new component versions: + Glycin-core 4.0.2 + Glycin 4.0.2 + Glycin-builtin 4.0.2 + Glycin-external 4.0.2 + Libglycin 2.2.2 + Libglycin-gtk4 2.2.2 * Fixed: Set the unix socket sending the image data to the loader to non-blocking. Otherwise, small socket send buffer configurations might lead to infinite blocking. - Update to version 2.2.1: + This release contains the following new component versions: - glycin-utils 5.0.1 + Fixed: Don't mmap already write sealed memfds as shared. This is only supported since Linux 6.7 . - Update to version 2.2.0: + This release contains the following new component versions: - glycin-common 2.0.0 - glycin-core 4.0.0 - glycin-heif 2.2.0 - glycin-image-rs 2.2.0 - glycin-jxl 2.2.0 - glycin-raw 2.2.0 - glycin-svg 2.2.0 - glycin-test 2.2.0 - glycin-thumbnailer 2.2.0 - glycin-utils 5.0.0 - glycin 4.0.0 - glycin-builtin 4.0.0 - glycin-external 4.0.0 - libglycin-gtk4-rebind 0.2.0 - libglycin-gtk4-rebind-sys 0.2.0 - libglycin-rebind 0.2.0 - libglycin-rebind-sys 0.2.0 - libglycin 2.2.0 - libglycin-gtk4 2.2.0 + Fixed: - glycin/sandbox: Fix compilation on 32 bit architectures - Update to version 2.2.beta.1: + This release contains the following new component versions: - glycin-core 4.0.0-beta.1 - glycin-heif 2.2.0-beta.1 - glycin-image-rs 2.2.0-beta.1 - glycin-jxl 2.2.0-beta.1 - glycin-raw 2.2.0-beta.1 - glycin-svg 2.2.0-beta.1 - glycin-test 2.2.0-beta.1 ... changelog too long, skipping 157 lines ... + Changed: svg: Don't limit the size of elements in the SVG ==== libkscreen6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libKF6Screen8 libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== libksysguard6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Only show 2000 data points in Line Chart applet (kde#527627) - Drop patch: * 0001-Drop-org.kde.ksysguard.processlisthelper.applyschedu.patch ==== libostree ==== Version update (2026.4 -> 2026.5) Subpackages: libostree-1-1 - Update to version 2026.5: * static-delta: validate bspatch payload offset and length * min-free-space: Use min(3%, 1GB) as default * docs: drop parameters that are no longer in the signatures * ostree-repo: Change argument name in header to match implementation * generator: Skip boot.mount if /etc/fstab has a /boot entry by * static-delta: validate on-disk checksum names when listing deltas * static-delta: bound mode and xattr dict offsets * bin/prune: Keep recent unreferenced commits * prepare-root: Tolerate an existing /sysroot.tmp in the static path * prepare-root: Guard against short digest in load_variant * lib: Validate commit tree checksum length on read * fetcher-curl: Bound header value copies to buffer length * ostree-gpg-verify-result: Strictly match subkeys if suffixed with ! * otcore: Treat only 1 from EVP_DigestVerify as valid * lib: Parse content object header as untrusted * man: Document signed-delta and sign-verify behaviour * core: Throw an error for short ostree.sizes entries * static-delta: Avoid copying bspatch output * static-delta: Simplify mapped content allocation * Two security-related fixes reported ==== libplasma6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libPlasma8 libplasma6-components libplasma6-desktoptheme - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * PlasmaCore.ToolTipArea: don't lower label opacity when there is no heading present ==== libqaccessibilityclient-qt6 ==== Subpackages: libqaccessibilityclient-qt6-0 - Drop the Qt 5 flavor ==== librsvg ==== Version update (2.62.4 -> 2.63.4) - Update to version 2.63.4: * Handle EXIF orientation in images, and handle the image-orientation property. Note that the only values supported for this property are 'from-image' (the default) and 'none'. Note that this will change the rendering of SVG documents which assume the images with EXIF orientation data are not auto-oriented correctly. In this case, please add the following attribute to the corresponding image elemnts: style="image-orientation: none;" - Update to version 2.63.3: * Librsvg-rebind crate version 0.3.0: * Let the image-rs crate enforce its default limit of 512 MB for allocated memory for each decoded image. The `--unlimited` flag in rsvg-convert (or the corresponding flags in the C and Rust APIs) now control whether the limits are enforced or not. * Fix panic when a feConvolveMatrix declaration has an invalid size. * When fuzzing, don't decode raster images from data: URIs to avoid sinking fuzz time in the image-rs crate. - Update version dependencies according to meson.build. - Update to version 2.63.2 (RUSTSEC-2026-0305 / CVE-2026-96889): + librsvg crate version 2.63.2 + librsvg-rebind crate version 0.3.0 + Fix use-after-free when there are duplicate XML entities in nested Xinclude documents. - Changes from version 2.63.1: + This version is to be considered non-working; the chacha20 0.10.1 crate was yanked from crates.io. - Update to version 2.63.0: + librsvg crate version 2.63.0 + librsvg-rebind crate version 0.3.0 + Limit the depth of files that reference other files, via XML XInclude, inter-document references, and CSS includes. The Rust API has a new ImplementationLimit::MaximumFileNestingDepthExceeded error variant to surface this to the loading functions. + Fix blurry embeded SVG images by rasterizing them at device resolution. + Remove loading limits from image-rs. This means that raster images, when embedded in SVG documents, have no limits for their size or memory consumption. The idea, for now, is that security-sensitive applications that use librsvg should do their own sandboxing if they want to impose memory limits. + Raise the maximum nesting depth of layers for glibc systems. The maximum on glibc is now 500 nested layers; the maximum for musl systems remains at 50 layers. This is due to the amount of stack space required, since musl has a reduced default stack compared to glibc. Please see the comments in that bug if you would like to help with the musl situation. - Disable bug1100_fuzz_layer_nesting_depth test and enable svg1_1_text_text_03_b_svg test again. - Update to version 2.62.91: + librsvg crate version 2.63.0-beta.1 + librsvg-rebind crate version 0.3.0 + Update test suite for change in how Pango renders underline/overline. + Update Rust dependencies. + Update C dependencies in the CI. - No longer disable librsvg --test reference. - Update to version 2.62.90: + librsvg crate version 2.63.0-beta.0 + Limit the depth of files that reference other files, via XML XInclude, inter-document references, and CSS includes. The Rust API has a new ImplementationLimit::MaximumFileNestingDepthExceeded error variant to surface this to the loading functions. + Fix blurry embeded SVG images by rasterizing them at device resolution. + Fix build when gobject-introspection is enabled but gdk-pixbuf is disabled. + Document the crate's feature flags. + Update the Rust dependencies. ==== libsoup ==== Version update (3.6.6 -> 3.8.1) - Update to version 3.8.1: * Limit the size of intermediate (redirect and auth) response bodies * Http2: Fix stalls when the reader is slower than the session timeout, and propagate connection errors to response body streams * Zstd: Support multiple concatenated frames, which previously truncated responses * Cookie-jar: Fix a `SoupConnection` leak when using an HTTP proxy * Logger: Fix undefined behavior found by UBSan * Build: Require brotli >= 1.1.0 for brotli support * Fix building the tests on Windows and update README.msvc * Updated translations. - Add explicit pkgconfig(libbrotlienc) BuildRequires: meson setup checks for it - Update to version 3.8.0: + Harden authentication: - Check `nonce` validity in Digest authentication (CVE-2026-3099) - Do not send cached proxy credentials after a redirect to a different origin + Harden multipart handling: - Fix an out-of-bounds read when less data than the boundary is buffered (CVE-2026-66337) - Limit the length of part headers - Fix a leak of the current part's headers + Prevent request smuggling in the server: - Close the connection after an early response to `Expect: 100-continue` - Reject `Host` headers containing URI delimiters - Require chunk-size to begin with a hex digit + Http2: - Fix skipping over multiple buffered chunks of a response body - Fix a `GCancellable` leak [Michael Catanzaro] + Fix the build on platforms without `dlfcn.h` + Updated translations. - Skip test-suite on non-64-bit architectures (glgo#GNOME/libsoup#556). - Update to version 3.7.3: + Add `soup_message_set_compression_dictionary_id()` and `soup_message_get_compression_dictionary_id()` to send the `Dictionary-ID` header alongside `Available-Dictionary` + Add `soup_websocket_extension_process_incoming_message_with_limit()` so extensions can bound how much they decompress + Harden WebSocket handling: - Bound decompressed message size during inflation (CVE-2026-15709) - Reject oversized control frames (CVE-2026-15711) - Cap incoming frame payloads, message reassembly, and outgoing frames at what the underlying buffer can hold - Bound outgoing permessage-deflate buffer growth - Cap the number of queued unsolicited pongs - Emit `SoupWebsocketConnection::pong` with a `GBytes`, as declared - Store accepted WebSocket extensions per message rather than per handler + Harden authentication and caching: - Do not send `Proxy-Authorization` through an established CONNECT tunnel (CVE-2026-66339) - Scope cached proxy credentials to the proxy they came from (CVE-2026-12547) - Reject caching authenticated responses in shared caches (CVE-2026-15713) + Tighten HTTP parsing and validation: - Reject CRLF injection in the HTTP method (CVE-2026-3633) - Fix `Range` parsing overflows and coalescing cost, and validate `Content-Range` when parsing it - Keep duplicate `Content-Length` headers when they are identical - Fix an out-of-bounds read in case of an excessively long multipart boundary - Do not treat base64 data URI content as a NUL-terminated string + http2: - Never send more body bytes than nghttp2 requested (CVE-2026-85534) - Keep the message alive across `io_run_until()` in `run_until_read()` - Do not assume that `GOAWAY` opaque data is NUL-terminated + server: Report the resource length in 416 responses + session: Do not send a message cancelled while being queued + cookie: Annotate constants' values - Drop libsoup-CVE-2026-85534.patch, - Drop libsoup-CVE-2026-15711.patch, libsoup-CVE-2026-12547.patch, libsoup-CVE-2026-15712.patch, libsoup-CVE-2026-15714.patch, libsoup-CVE-2026-66339.patch: fixed upstream. - Update to version 3.7.2: + Add support for compression dictionaries: - Support the dcb and dcz encodings - Add new `soup_message_set_compression_dictionary_hash()`, `SoupMessage::request-compression-dictionary`, and `SoupCompressionDictionaryRequest` + Remove color codes from http2 debug logs + Add missing autoptr defines for `SoupMessageBody` + http2: - Fix content-sniffer running while message is paused - Consume buffered response body before cancel - Fix requeuing failed messages when connection is not reusable + soup-body-input-stream: Limit buffer read to the received content - Update to version 3.7.1: Use canonical signal names. ... changelog too long, skipping 42 lines ... + libsoup-revert-dep-meson-0.62-shim02-6b34bc58.patch ==== milou6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== oxygen6-sounds ==== Version update (6.6.3 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-hardware patterns-base-minimal_base patterns-base-x11 - Regenerate pattern-definition-32bit.txt from the current spec (pre_checkin.sh), as a follow-up to SR 1392459: the file had not been regenerated for several spec generations, so the 32-bit pattern definitions no longer matched the patterns: drop entries whose packages left the patterns (yast2-apparmor, systemd-sysvinit, nscd, dmraid, ifplugd, setserial, providers, the system-user-*/system-group-* helpers, terminfo-iterm/ - screen, dbus-1-glib, dbus-1-x11, tigervnc and the YaST control-centre packages), follow the renames (terminfo-base, coreutils-systemd, opensuse-welcome-launcher) and the moves between patterns (mailx, zypper, udev-configure-printer), and add the entries added to the patterns since (lvm2, wtmpdb, procps, fwupd, blog-plymouth, supportutils, systemd-coredump, cockpit-packages, myrlyn) - Extend the pre_checkin.sh skip list with kdump, kernel_livepatching, immutable_base and hardware: the spec creates no 32-bit marker files for them ("These packages don't generate a 32bit pattern"), so the generator must not emit sections for them either; this also keeps future regenerations free of the truncated rich-dependency lines the generator produces for those patterns - x11_enhanced pattern: on openSUSE, drop the hard Requires on pattern() = x11. x11_enhanced is session plumbing, not a server, and the default openSUSE session is Wayland (X applications run via Xwayland); the x11 pattern stays the opt-in X session bundle and itself Recommends x11_enhanced, so selecting X still pulls the enhanced plumbing in. The non-openSUSE (SLE / SL Micro) branch keeps the hard requirement unchanged ==== pcsc-lite ==== - Add merge-sysuser.patch: (boo#1287634) This merges our pcsc-lite.sysusers into the upstream sysuser file and also ensures that the pcscd user is also in the scard group as an additional group. ==== pipewire ==== Version update (1.6.10 -> 1.6.11) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.6.11: * This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. * Highlights - Backported a lot of bluetooth fixes. - Fix an issue with draining in the ALSA plugin that could cause lockups in applications. - Some smaller bugfixes and improvements. * PipeWire - Use extra buffer in reliable mode. * Modules - Fail client device export when device can't be started. Together with Wireplumber changes this avoids non-functioning devices in case of errors. - Fix potential crash in adapter. (#5549 (closed)) * SPA - Clean up some SPA_POD_Long arguments to make things work on 32bits. * Bluetooth - Backport some security fixes. - Handle some allocation errors better. - Fix handling of multiple concurrent profile registrations. - Fix BIS latency range checks. - Improve ofono compatibility. - Handle async device and node removal. - Avoid using stale transport or device pointers by using a unique serial instead. * ALSA plugin - Avoid going into XRUN when draining. (#5544 (closed)) ==== plasma5support6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libPlasma5Support6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-activities ==== Version update (6.8.1 -> 6.8.2) Subpackages: libPlasmaActivities7 plasma6-activities-imports - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-activities-stats ==== Version update (6.8.1 -> 6.8.2) Subpackages: libPlasmaActivitiesStats1 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-browser-integration ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-desktop ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-desktop-emojier - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Update version for new release 6.8.2 * applets/kickoff: Tie sidebar item spacing to the compact list style (kde#524003) * applets/taskmanager: wrap labels anywhere (kde#526972) * dwellclicker: fix after click keep open when pinned * applets/kicker: use the containment's screen for the popup size limit (kde#527385) * folder: make row/column arrangement settings match actual behavior (kde#512993) * activitymanager: Crop activity wallpapers instead of stretching them (kde#478784) * applets/pager: Keep desktop labels and window icons bound to the model (kde#522322) * Do not use wallpaper context variable binding as it changes value incorrectly (kde#527569) * applets/kickoff: directly scroll list in ListOfGridsView (kde#526911) * applets/taskmanager: fix highlight effect signal order issue (kde#527229) * Shell package: correct size and position for the activity switcher (kde#527158) * runners/keys: Use KGlobalAccel QKeySequence (de)serialization code * Fix disappearing desktop icons ==== plasma6-integration ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-integration-plugin plasma6-integration-plugin-qt5 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-nm ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-nm-openconnect plasma6-nm-openvpn - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-openSUSE ==== - Update to 6.8.2 ==== plasma6-pa ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Play feedback when increasing/decreasing volume (kde#527775) * volumefeedback: Play the sound from the configured sound theme (kde#525954) ==== plasma6-print-manager ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-systemmonitor ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Ensure SplitView maximumWidth > minimumWidth ==== plasma6-workspace ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-session plasma6-workspace-libs - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * kcms/style: use consistent slider value * applets/digital-clock: Keep the system font's OpenType features for the time (kde#524257) * libnotificationmanager: Accept single-quoted attributes in notification markup (kde#506733) * applets/kicker: port old favoriteId format to new one (kde#527651) * components/timezoneselector: fix margins * components/calendar: Don't navigate to years before year 1 (kde#525980) * shell: Set entered edit mode to false on startup (kde#527738) * libtaskmanager: Re-filter launchers when a window changes screen (kde#527507) * wallpapers/color: Set the accent color from the configured color (kde#513851) * libkmpris: Don't auto-repeat the global play/pause shortcut (kde#521448) * Applets Layout Manager: don't take preferred size into account when restoring (kde#490687) * libtaskmanager: Let the compositor name desktops created from the pager (kde#501808) * libkmpris: Keep non-ASCII characters in the title and album fallbacks (kde#503405) * applets/activitybar: fix tab focus and arrow nav (kde#527235) * Image wallpaper: Make all image packages correctly load (kde#527150) * appmenu: auto focus search field (kde#525569) * launcher tasks model: Guard lookup to serviceMenuById * libtaskmanager: put tasks in place of their launchers (kde#527189) ==== podman ==== Version update (6.1.2 -> 6.1.4) - Own the zsh completion-dirs like we do for fish completion-dirs. - Update to version 6.1.4: * Fixed an issue where Podman would not function when run under WSL 3. * Updated gvproxy to v0.9.0, resolving CVE-2026-107935 (bsc#1284922) * Updated Buildah to v1.45.2 * Updated Storage to v1.64.2 - Update to version 6.1.3: * This release addresses CVE-2026-94603, where a podman run on a checkpoint * image (any image with the io.podman.annotations.checkpoint.runtime.name annotation) could disable all sandboxing, including sandboxing specified by the user, when the container was created. (bsc#1283732) * Removed support for checkpoint images in podman run due to serious security concerns with the different security models of running images and running checkpoints. Checkpoints ignore user-specified security configuration and are very difficult to run safely. ==== polkit-kde-agent-6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== powerdevil6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * applets/batterymonitor: set switch state on first open (kde#527560) * backlightbrightness: Also log error code when executejob fails ==== python-gobject ==== Version update (3.56.3 -> 3.58.1) Subpackages: python313-gobject python313-gobject-Gdk python313-gobject-cairo - Drop glib_version, gi_version, pycairo_version and libffi_version defines: set minimum versions on every (Build)Requires, geckopit handles this for us now. - Update to version 3.58.1: * (backport) Fix GStreamer crash with python-debug - Update version dependencies according to meson.build. - Update to version 3.58.0: + Stable release. - Update to version 3.57.1: + Add extra checks around construction of object destroy notifier + `GLib.Pid` should be a number with a special `close` method + Use `PathLike` objects for `Gtk.Template` + Fast marshalling of `bytearray` to `GBytes` + Prevent crashes where `GValue` is `NULL` - Update to version 3.57.0: + doc: Update tutorial and examples + Fix potential buffer overflow errors where the C API exposes + gio: Support creating `GFile` child with slash operator, similar to `pathlib.Path` + Refactor memory management for marshaller cache + Add missing msg argument to asyncio cancel() + Fix deprecation warning for register_object + Find libraries automatically on Windows + Fix crash when `user_data` is defined before callback + Avoid extraneous deprecation warnings + Support generic annotations on `Async` + fix: Simplify string prefix handling + doc: Use gobject-linter for linting GObject code ==== qqc2-breeze-style6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * MobileTextActionsToolBar: Fix popup not closing after an action is activated * MobileTextActionToolbar: Fix TextArea not showing contextual actions (kde#526591) ==== qt6-declarative ==== Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsPlatform6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsStyleKit6 libQt6LabsSynchronizer6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlDesignSupport6 libQt6QmlLocalStorage6 libQt6QmlMeta6 libQt6QmlModels6 libQt6QmlNetwork6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickVectorImage6 libQt6QuickWidgets6 qt6-declarative-imports - Add upstream change (kde#527720) * 0001-Fix-teardown-hang-with-QuickPixmapReader.patch ==== rebootmgr ==== Version update (4.0+git20261008.76d8ee7 -> 4.3) - Update to version 4.3: * Release version 4.3 * Use logind varlink interface for reboot * rebootmgrd: more error handler fixes - Update to version 4.2: * Release version 4.2 * Fix error handling in case SELinux denies reboot [bsc#1287746] - Update to version 4.1: * Release version 4.1 * Use varlink for reboot, else posix_spawn * Update basics.h * calendarspec: check for error when resetting TZ * Fix URL of github project * supporting time_zones * initialize seed with random value ==== sddm-kcm6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== sensors ==== - Stop using globs in filelist, removes rpmlint warning. - Own zsh-completion dirs, explicitly list files. ==== snowball ==== Version update (3.0.1 -> 3.1.1) - Update to version 3.1.1: + Numerous bug fixes and improvements, see full details in /usr/share/doc/packages/snowball/NEWS. - Rebase patches: + build-options.diff + python-dist.diff + shared-library.diff ==== spectacle ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Delete temporary OCR text file once job is done ==== systemsettings6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== tevent ==== - Convert the package to _multibuild flavors: the man pages are now built from the "man" flavor of tevent.spec instead of a generated tevent-man.spec, so pre_checkin.sh, tevent-man.spec and tevent-man.changes are gone. No need to maintain duplicate files. - Merge the duplicated %if blocks in the spec file and give the man flavor its own summary and description. - Remove use of obsolete %py3* macros, use only the maintained ones from `python-rpm-macros` package. - Drop obsolete spec constructs (BuildRoot, %defattr, PreReq, legacy suse_version conditionals). - Build and install pycache files - fix deps * cmocka (>=1.1.8) ==== union6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * AbstractElement: Set elementQuery at construction * IndicatorElement: Set indicator values at construction * TabElement: set hSpace and vSpace at construction * AbstractElement: Check if we already have this element and update it * output/widgets: scale the widget animation duration with the animation speed (kde#527527) * output/quick: Explicitly set the Style instance for TextArea's background (kde#527455) * input/css/breeze: Only round delegate backgrounds in list when highlighted (kde#527087) * output/quick: Also consider parent for inside-{list,table} hints * input/css/breeze: Use large spacing for menubar item horizontal padding (kde#527213) * output/widgets: Don't dereference potential nullptr value (kde#527459) ==== xdg-desktop-portal-kde6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== zypp-boot-plugin ==== Version update (0.0.13 -> 0.0.14) - Update to version 0.0.14: * added [packages] section in zypp-boot-plugin.conf * fixed tests for s390 * Drop 8.patch