Packages changed: ImageMagick (7.1.2.32 -> 7.1.2.33) alsa aurorae6 (6.7.5 -> 6.8.0) bash bluedevil6 (6.7.5 -> 6.8.0) breeze6 (6.7.5 -> 6.8.0) breeze6-gtk (6.7.5 -> 6.8.0) chromaprint (1.6.0 -> 1.6.2) curl (8.22.0 -> 8.23.0) discover6 (6.7.5 -> 6.8.0) drkonqi6 (6.7.5 -> 6.8.0) flatpak-kcm6 (6.7.5 -> 6.8.0) heaptrack (1.5.0 -> 1.6.0~pre20260904) kactivitymanagerd6 (6.7.5 -> 6.8.0) kde-cli-tools6 (6.7.5 -> 6.8.0) kde-gtk-config6 (6.7.5 -> 6.8.0) kdecoration6 (6.7.5 -> 6.8.0) kdeplasma6-addons (6.7.5 -> 6.8.0) kglobalacceld6 (6.7.5 -> 6.8.0) kinfocenter6 (6.7.5 -> 6.8.0) kmenuedit6 (6.7.5 -> 6.8.0) knighttime6 (6.7.5 -> 6.8.0) kpipewire6 (6.7.5 -> 6.8.0) kscreen6 (6.7.5 -> 6.8.0) kscreenlocker6 (6.7.5 -> 6.8.0) ksshaskpass6 (6.7.5 -> 6.8.0) ksystemstats6 (6.7.5 -> 6.8.0) kwayland-integration6 (6.7.5 -> 6.8.0) kwayland6 (6.7.5 -> 6.8.0) kwin6 (6.7.5 -> 6.8.0) layer-shell-qt6 (6.7.5 -> 6.8.0) libXi libXtst libeconf (0.8.5 -> 0.8.6) libheif (1.23.5 -> 1.23.6) libid3tag (0.16.3 -> 0.16.4) libkscreen6 (6.7.5 -> 6.8.0) libksysguard6 (6.7.5 -> 6.8.0) libplasma6 (6.7.5 -> 6.8.0) libsndfile libstorage-ng (4.5.362 -> 4.5.363) live555 (2026.08.25 -> 2026.10.13) microos-tools (4.0+git29 -> 4.0+git31) milou6 (6.7.5 -> 6.8.0) oath-toolkit (2.6.14 -> 2.6.15) ocean-sound-theme6 (6.7.5 -> 6.8.0) openSUSE-release (20261014 -> 20261016) pam_kwallet6 (6.7.5 -> 6.8.0) plasma5support6 (6.7.5 -> 6.8.0) plasma6-activities (6.7.5 -> 6.8.0) plasma6-activities-stats (6.7.5 -> 6.8.0) plasma6-browser-integration (6.7.5 -> 6.8.0) plasma6-desktop (6.7.5 -> 6.8.0) plasma6-disks (6.7.5 -> 6.8.0) plasma6-integration (6.7.5 -> 6.8.0) plasma6-nm (6.7.5 -> 6.8.0) plasma6-openSUSE plasma6-pa (6.7.5 -> 6.8.0) plasma6-print-manager (6.7.5 -> 6.8.0) plasma6-systemmonitor (6.7.5 -> 6.8.0) plasma6-thunderbolt (6.7.5 -> 6.8.0) plasma6-workspace (6.7.5 -> 6.8.0) polkit-kde-agent-6 (6.7.5 -> 6.8.0) poppler (26.09.0 -> 26.10.0) poppler-qt6 (26.09.0 -> 26.10.0) postfix powerdevil6 (6.7.5 -> 6.8.0) python-gssapi (1.11.1 -> 1.12.0) python-urllib3 qqc2-breeze-style6 (6.7.5 -> 6.8.0) sddm-kcm6 (6.7.5 -> 6.8.0) sdl2-compat selinux-policy (20261006 -> 20261014) spectacle (6.7.5 -> 6.8.0) systemsettings6 (6.7.5 -> 6.8.0) vlc xdg-desktop-portal-kde6 (6.7.5 -> 6.8.0) === Details === ==== ImageMagick ==== Version update (7.1.2.32 -> 7.1.2.33) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.2.33 * track adjacent objects when merging connected components #8978 * Use a hash table to find palette entries when writing PNG #8977 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p6q-wfrv-ffhh 09b961e * eliminate compiler exception 7656865 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c2qq-jqw7-q4mx 68168e6 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h9g3-4qvr-rx8h 24095b7 * block PDF 33660b8 * Fix memory leak when SimilarityImage fails (GHSA-m938-565c-h9qf) 8980924 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jf2-9gcp-q234 d8d635e * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r5g-p7ff-jgcp 9108482 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vm77-q83h-5fhg e87c97d * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3 eef3af5 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3 fb8842f * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8ghq-p369-g395 33d16f3 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h 3882fd7 * Added missing cleanup in error path of the MAT decoder (GHSA-83w9-w85j-h9jc) 62c7876 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-83w9-w85j-h9jc af510e9 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w 63dde0c * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8w9c-hj38-8pf9 a63bdd2 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v9q4-cm37-q2jm b41a6bc * Keep the directory when mogrify -format reads a compressed file #8988 * Limit C2PA manifest resource use #8980 * cosmetic f9da83e * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj cf40ce9 * Preserve Ultra HDR JPEG gain maps for scale operator #8986 * add pipes security policy 85bd7d6 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v5f5-4v9x-p3f2 d4069fe * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j657-rmv3-4m94 64645a7 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qq8x-fq3x-43h4 59071d5 * eliminate compiler warning 90bf73e * revert for now 1636184 * Fix inverted opacity in one-bit PAM images #8993 * JXL: fix decoding of boxes/animations, metadata, ICC, CMYK, FLOAT16, tps and define errors #8992 * restore until we redesign a879b23 * Scale neighborhood contrast to the quantum range #8996 * https://github.com/ImageMagick/ImageMagick/issues/8994 91dd680 * Correct exception that is thrown. fa30495 * Added missing check for the return value. 9bb2cb6 * build(deps): bump ubuntu from `9559ceb` to `da6fc2b` in /.devcontainer #8982 * build(deps): bump the codeql-action group across 1 directory with 3 updates #8989 * add dmr.h to header list bfb6109 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2wwj-grp2-3fp5 8aeb8e6 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997 5b3c9dd * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vj7g-384h-64fv 06aa743 * Avoid font metrics for montages without text #8998 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4wfv-467j-fqh9 a75aab2 * cosmetic b270ee4 * fix undefined variable f1fb5d1 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997 c73f791 * increase area limit 89a61e1 * clarify comments b3fb0fb * Replace _wrename with MoveFileExW so an existing file will be overwritten. fbc276e * Revert changes from #8986 until we have a better way of doing this. defd675 * Moved shared logic to a skip a doctype or comment inside xml-tree.c ca98804 * Moved SubstituteXMLEntities so we don't duplicate the method. 223fccf * cosmetic 2b0db48 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x258-xjqf-6j3f 8911876 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fp46-842c-2v83 3d96f30 * Improved skipping of comments and return a failure when comments or doctype are not terminated. 504231b * Fix memory leak when policy parsing stops before append ba65fcd * Stop configuration parsing when an included file fails. a3b8df6 * Deny authorization when policy configuration fails to load. aaf5e8d * Add dng:read-thumbnails to read embedded thumbnails as images. 46389fe * Clean up includes. 4cca289 * Fix duplicate post-processing in redirected image reads (#9000). 046b7a9 * Honor explicit TIFF selection when reading DNG-tagged files #9001 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5222-mhv9-26rg 5690b36 * eliminate compiler warning f5f1a82 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h3qx-937j-245g d1402c2 * Fix LCH hue parsing and conversion of non-RGB fill colors #9003 * Try reading the file as a DNG after the TIFF is read so we can still return the tiff when DNG reading fails (#9001). f841c59 * build(deps): bump msys2/setup-msys2 from 2.32.0 to 2.33.0 #9002 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rm4p-xqw3-f45f e47e203 * coders/xps: add missing list-length resource guard in ReadXPSImage #9006 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-528x-2384-jmxp 453568d * don't skip shell characters 37a213e * account for backticks 5aa7761 * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j2rp-5r6m-f7x8 93117bc * https://github.com/ImageMagick/ImageMagick/issues/9009 98989e5 * https://github.com/ImageMagick/ImageMagick/issues/9010 4df1cf0 * https://github.com/ImageMagick/ImageMagick/issues/9010 57a8384 * account for shell escape a003c02 * https://github.com/ImageMagick/ImageMagick/issues/9008 ad24de5 * correct error metrics 3896daa * Updated the dependencies. cc80e2b * set client name 4bab3bc - modified patches * ImageMagick-configuration-SUSE.patch (refreshed) * ImageMagick-library-installable-in-parallel.patch (refreshed) * ImageMagick_policy_etc.patch (refreshed) - Fix URL to source tarball: /archives only contains the latets tarball, /releases contains the hitory. ==== alsa ==== Subpackages: libasound2 libatopology2 - Fix integer overflow in topology control code (CVE-2026-96674, bsc#1282564): 0003-topology-fix-uint32_t-overflow-in-control-decoder-si.patch - Fix binding index validations in multi plugin (CVE-2026-96675, bsc#1282563): 0004-pcm-replace-multi-plugin-binding-asserts-with-EINVAL.patch ==== aurorae6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: aurorae6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * v2: Visualize checked state * Refresh decoration geometry when maximized state changes without resizing * CI: Require all tests to pass * v2: Fix rendering with scale factors less than 100% (kde#520272) * Update version for new release 6.7.80 ==== bash ==== Subpackages: bash-lang bash-loadables bash-sh - Add temporary patch bash-5.3.19-workaround.patch from mailing list * Patch 19 (commit 549639c) changed legal_variable_starter() in general.h to index sh_syntaxtab[] directly, but without the (unsigned char) cast that the sibling macros in syntax.h use (shellmeta, shellbreak, shellquote). ==== bluedevil6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: bluedevil6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * wizard: always start our own discovery session (kde#526178) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Escape html in device name - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Move configure button from hamburger menu (kde#516134) * i18n: Fix dialog translation for Forget Device * applet: inherit icon from action * Install kcfg files * Add smoke test for applet * kded: Drop KX11Extras usage * Skip kcm_smoketest with kcmutils < 6.27.0 * Update version for new release 6.7.80 ==== breeze6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-style-lang breeze6-style-qt5 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * kdecoration: Remove corner radius when tiled (kde#490716) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * kdecoration: updateButtonsGeometry() when borders change - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Replace Waterfall wallpaper with Hanabi * Use font metrics to only inset where the text can spare it (kde#523118) * Use ubuntu image for Qt5 CI * Remove warning (found by cmake --warn-uninitialized -Werror=dev ) * Install kcfg files * kdecoration: Add support for shadow only decorations * kdecoration: Change the way top corners are rounded when titlebar is hidden * breezehelper: Fix asymmetric separators on immutable tabs * kdecoration: add 'resize' margin for top border * Fix crash in WindowManager::registerQuickItem (kde#491000) * BreezeStyle: Fix ViewItemDecoration/Indicator adjustment on RTL style (kde#518835,kde#518837) * BreezeHelper: Use brush instead of color for renderFocusRect * CI: Require passing tests * Move old wallpaper, add new one, update previews * Skip kcm smoke tests with kcmutils < 6.27.0 * Update version for new release 6.7.80 ==== breeze6-gtk ==== Version update (6.7.5 -> 6.8.0) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * gtk4/window_decorations: fix buttons overflow * gtk4/window_decorations: remove radius for non-csd * gtk4/menu: fix menu shadow and menu item highlight * gtk2: remove unsupported "direction" keyword from entry theme (kde#465279) * Enable LSAN in CI * _sidebar: fix color for the sidebar line separator (kde#484383) * CI: Require all tests to pass * Update version for new release 6.7.80 ==== chromaprint ==== Version update (1.6.0 -> 1.6.2) - Update to version 1.6.2: * Fixed a crash in fpcalc when the channel layout changes mid-stream (e.g. AC-3 files switching between 5.1 and stereo) * Fixed decoding of audio with more than 8 planar channels in fpcalc * Fingerprint decoding now rejects invalid input that previously caused undefined behaviour (shifting past 32 bits) * The C API encoding/decoding functions now return an error for a negative size, a NULL buffer with a nonzero size, and, when encoding, more items than the fingerprint header can hold (previously silently truncated) - Update to version 1.6.1: * Fixed a heap buffer overflow when decoding a fingerprint that has extra data after the encoded values. Applications that decode fingerprints from untrusted sources should update. * Fixed building against FFmpeg 4.x, which had not compiled since the channel layout API changed in 5.1 * Audio can now be fed in buffers that do not end on a frame boundary; previously a partial frame at the end of a call was dropped * Fixed an implicit integer conversion warning on LLVM * Fixed installing to absolute paths * Build fpcalc against the system FFmpeg in CI ==== curl ==== Version update (8.22.0 -> 8.23.0) Subpackages: curl-zsh-completion libcurl4 - Update to 8.23.0: * Security fixes: - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016) - CVE-2026-92389: TFTP direction confusion (bsc#1285015) - CVE-2026-87866: wolfSSL public-key pinning bypass (bsc#1285019) - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023) - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024) - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021) - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022) - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030) - CVE-2026-87865: knownhost callback mismatches key as missing (bsc#1285020) - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017) - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018) - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028) - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027) - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026) - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012) - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010) - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013) - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014) - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008) - CVE-2026-107928: info leak uploading over WebSockets with GnuTLS (bsc#1285009) - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011) - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031) - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029) * Changes: - lib: CURL_GLOBAL_WIN32 -> CURL_GLOBAL_WINSOCK - SMB: drop support - tool_cb_wrt: inject the no-clobber number before the extension - tool_cb_wrt: try up to .9999 when no-clobbering * Bugfixes: - conncache: never discard a connection still in use - curl-openssl.m4: sync LibreSSL detection method with rest of forks - cw-out: avoid O(n^2) work while buffering paused output - cw-pause: fix O(N^2) list traversal in cw_pause_flush - DEPRECATE: Common Name support in TLS certificates for OpenSSL - ftp: require TLS on the data connection for implicit FTPS - ftp: tighten use_ssl check for conn reuse - global_init: tidy up, simplify, fix issues - GnuTLS: remove our own OCSP signature verification - gtls: no early return on verify fail - headers: avoid O(n^2) rescans in curl_easy_nextheader() - hsts: cap max-age to two years - HTTP-CONNECT: do not react to 401 responses - http2: don't send a CURLE_SEND_ERROR after a valid http2 response - http2: fix reset after 1xx response - http2: initialize URL handle for server pushes - http2: limit trailers and headers count - http: abide to close-rules when transfer-encoding off - http: ignore Proxy-Authenticate unless the response comes from a proxy - http: only enable Negotiate/NTLM to allowed origins - http: reject empty header names - http: reject resumed uploads - http_aws_sigv4: fix the s3express service name - if2ip: check interface name case sensitive - imap: compare selected mailbox names case-sensitively - libssh2: match hashed known_hosts entries by host - libssh2: skip repeat checkp() for already-absent hashed key types - libssh: work with empty priv_key - openssl/gtls: reject CRLfile with native CA store, matching rustls - openssl: fix OpenSSL v4.1 no-deprecated build - openssl: support X509 store caching when CApath is configured - openssl: use non-deprecated API for MD5/MD4 - ossl_verifyhost: remove assumption of null-termination of ASN1_STRING. - peer: compare zoneid case sensitive - peer: parsing a zoneid as number fix - peer: preserve ipv6 props from "connect-to" - pingpong: schedule server response timeouts for the socket API - rtsp: do not send a learned session id to another origin - rustls: break recv loop on empty plain text - rustls: consume CURLOPT_SSLCERT_BLOB / CURLOPT_SSLKEY_BLOB - schannel: retain close_notify records across send retries - socks: support CURLAUTH_ONLY in CURLOPT_SOCKS5_AUTH - socks: track SOCKS5 authentication per socket, not per connection - sws: fix connection-monitor for connections closed before a request - telnet: make it work through proxy tunnels - tool: (re)set SSL verification in --libcurl output - tool_getparam: restore --socks5-gssapi-service - url: match connections without force reuse and candidates - url: ntlm/negotiate, prohibit connection reuse on follows - vtls_scache: remember lock state locally * Remove now unrecognized option: --disable-tls-srp * Rebase libcurl-ocloexec.patch ==== discover6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-lang discover6-notifier - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Prepare ResourcesUpdatesModel before running headless updates (kde#519082) * Update version for new release 6.8.0 * DiscoverDrawer: Set selected state on busy icon * Fix updates progress bar alignment on mobile (kde#526718) * Make the distro error message selectable and fix the "Report this issue" link (kde#518350) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here - Refresh 0001-Warning-for-FlatHub.patch ==== drkonqi6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: drkonqi6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * bugreportaddress: drop unused functions * globals: drop * bugreportaddress: throw away moot inlining * bugreportaddress: add warning when dealing with non-kde addresses * bugreportaddress: make KDE detection more flexible * globals: trim - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== flatpak-kcm6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: flatpak-kcm6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - No code changes since 6.7.91 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Show settings for host apps if permission is set - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Add missing Qt::Qml link * KCM: Port the permissions page to the new Forms * ui/FlatpakPermissions: make env var label and textfield equal width * ui/FlatpakComponent: fix ListView Accessible.description * kcm_app-permissions.json: fix BugReportUrl * Remove xcb session warning * CI: Require all tests to pass * Skip kcm_smoketest with kcmutils < 6.27.0 ==== heaptrack ==== Version update (1.5.0 -> 1.6.0~pre20260904) Subpackages: heaptrack-gui heaptrack-lang - Switch to a pre-release build of the 1.6 branch: * Support for Qt 6 - Drop patches, now upstream: * 0001-cmake-Fix-C-compatibility-of-libunwind-probes.patch - Replace 0001-Use-system-robin-map.patch with upstream 0001-Allow-to-use-system-robin-map-instead-of-bundled.patch - Replace 0001-CMake-Make-the-boost-system-component-optional.patch with upstream patches: 0002-Fix-build-with-boost-1.89.patch 0003-Raise-Boost-minimum-version-to-1.70.patch ==== kactivitymanagerd6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kactivitymanagerd6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * plugins/sqlite: don't drop "applications:" when unlinking * StatsPlugin: escape backslashes in LIKE patterns * Don't concatenate strings when generating SQL for removing resources * Fix URI sanitization * No need to reconnect the timer every time config changes * No need to send the ActivityRemoved signal twice * QSet is not ordered, use contains instead of binary_search * StatsPlugin: Do not crash with wrong dbus calls * Remove warning (found by cmake --warn-uninitialized -Werror=dev ) * Activities: Jump to next activity if it's the current before removing one (kde#521124) * StatsPlugin: fix url-filters breaking with glob patterns * StatsPlugin: Don't try to log events in limbo state (kde#520595) * Update version for new release 6.7.80 ==== kde-cli-tools6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kde-cli-tools6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Remove settings specific to konqueror * Remove warning (found by cmake --warn-uninitialized -Werror=dev ) * kstart: Unset desktop file name (kde#521679) * Force file extensions to be LtR (kde#518909) * Update version for new release 6.7.80 ==== kde-gtk-config6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kde-gtk-config6-gtk3 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * preview3: drop unused XEmbed feature * Improve GTK 2 dark theme detection * Drop forceFontDPI handling * CI: Require all tests to pass * Update version for new release 6.7.80 ==== kdecoration6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: libkdecorations3-6 libkdecorations3-6-lang libkdecorations3private2 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Remove warning (found by cmake --warn-uninitialized -Werror=dev ) * Mark unused parameter in MockWindow::requestShowWindowMenu * Add support for shadow-only decorations * CI: Require all tests to pass * Fix spaceship operator * Update version for new release 6.7.80 ==== kdeplasma6-addons ==== Version update (6.7.5 -> 6.8.0) Subpackages: kdeplasma6-addons-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * applets/weather: remove wetter.com ion * wallpapers/potd: remove epod (kde#526633) * applets/weather: show tooltip if no data available * applets/weather: finish envcan forecast request on lookup failure * applets/weather: fix crash in EnvCan when forecast file is missing (kde#512054) * applets/dict: make it look more plasma-style * applets/comic: avoid infinite reload loop (kde#525856) * applets/mediaframe, dictionary: add separators around config views - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * applets/dict: fix desktop widget at minimum sizes * applets/weather: fix Wetter.com forecast timestamps (kde#520315) * applets/weather: fix bbcukmet location search cancellation - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here - Update vendor.tar.zst ==== kglobalacceld6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: libKGlobalAccelD6-0 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Drop obsolete KF6WindowSystem dependency - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Implement setInverseShortcutActions D-Bus method and config storage * kglobalaccel_version_header is never defined * Dissolve KGlobalAccelInterface * Drop PACKAGE_INCLUDE_QCHTARGETS from CMake config * Drop desktop file * Remove Qt6Widgets from config file * Normalize various empty shortcut formats to empty set * Normalize Backtab to Shift+Tab * Improve GlobalShortcut lookups * Fix normalization of modifier-only shortcuts * Drop plugin loading * Drop GlobalShortcutsRegistry::setDBusPath * Drop KGlobalAccelInterface::grabKey() * Drop Xorg bits * CI: Require all tests to pass * Make actionList report information about GlobalShortcut with the smallest serial * Port GlobalShortcut away from GlobalShortcutsRegistry::getShortcutByKey() * Make GlobalShortcutsRegistry::getShortcutsByKey() report all matching shortcuts * Refactor how Component objects are created at runtime * Fix loading settings from null KConfigGroup * Update version for new release 6.7.80 * Workaround kglobalacceld not grabbing some modifier-only combinations (kde#520100) ==== kinfocenter6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kinfocenter6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * CommandOutputKCM: Fix wrapping (kde#523197) * Add a tad more info to libva-utils's set_package_properties - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== kmenuedit6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kmenuedit6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * guard m_desktopFile (kde#525598) - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * update version for new release * menufile: Replace deprecated QDomDocument::setContent * Increase KDE_COMPILERSETTINGS_LEVEL to 6.13 * Replace Qt's deprecated foreach / Q_FOREACH * Use nulltpr instead of 0 * Use Q_EMIT instead of emit * update version for new release * Remove frames around qgroupbox elements * update version for new release * treeview: don't create desktop file names with invalid characters * CI: Require all tests to pass * Update version for new release 6.7.80 ==== knighttime6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: libKNightTime0 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * CI: Require all tests to pass * Update version for new release 6.7.80 ==== kpipewire6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWire6-lang libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Fix compile with clang and KPIPEWIRE_DEPRECATED - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== kscreen6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kscreen6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * fix info button for sRGB color intensity (kde#525540) * Force StackLayout the same height as the hint of the current item (kde#525718) - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== kscreenlocker6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kscreenlocker6-lang libKScreenLocker6 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * Remove attemptCount in KSldApp::lock() * Always send DBus replies immediately (kde#525900) * Fix screenlocker showing up when switching users (kde#525765) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Adding "Switch to Last-Used Keyboard Layout" to the shortcut exceptions list. * greeter: allow dumping when debugging is enabled * prctls: set dumpable as long * prctls: drop unused include * worker: set dumpable prctl * cmake: drop unused header checks * greeter: use new prctls.h and make it a namespace * diewithparent: rename to prctls * greeter: tighten fingerprint setup conditions * worker: break apart main a bit * diewithparent: change conditions around * worker: use out_ptr * worker: harden against unexpected stdin problems * worker: exit if we are orphaned at startup * worker: exit if dieWithParent doesn't work * Drop obsolete Wayland dependencies - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== ksshaskpass6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: ksshaskpass6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Consider password incorrect when same SSH process asks the same prompt again * Delete password when remember is unchecked * Add custom ClearText dialog (kde#343562) * Drop window title * Don't offer to remember password without identifier * Handle when unknown host prompt has no period after the finger print * Handle unknown host when key is known for someone else * Support ssh-keygen (kde#485418) * Support unknown RSA when it has a colon (kde#444862) * Add autotest * Split prompt into its own static library * Add BSD-3-Clause license * prompt: Fix password change prompts * CI: Require all tests to pass * Update version for new release 6.7.80 ==== ksystemstats6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: ksystemstats6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Remove unused variable in Xe Plugin - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Fix i915 PMU path for discrete Intel GPUs (kde#517334) * osinfo: Provide some fallbacks for the version property (kde#523727) * Fix crashes in KSysGuard::SensorObject::id() * CMake: Provide explicit WITH_NM option for KF6NetworkManagerQt dep * Updated variable naming to be correct! * Add VRAM percentage sensors. * Guard ksystemstats_intel_helper against path traversal * Enable LSAN in CI * CI: Require all tests to pass * Harden Xe GPU plugin and adapt to PCI-based GPU enumeration * Address David's review feedback on Xe GPU support * Add fan, VRAM temperature, and power sensors for Xe GPUs * Move VRAM querying from Xe helper to LinuxXeGpu * Add Intel Xe GPU driver support (kde#512866) * Update version for new release 6.7.80 ==== kwayland-integration6 ==== Version update (6.7.5 -> 6.8.0) - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Enable LSAN in CI * CI: Require all tests to pass * Drop FreeBSD CI * Update version for new release 6.7.80 ==== kwayland6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: libKWaylandClient6 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * cmake: bump plasma-wayland-protocols dep to 1.22.0 * Update version for new release 6.7.90 * Bump required libwayland version * Add support for wl_fixes.ack_global_remove * Fix cmake using --warn-uninitialized -Werror=dev * Remove obsolete doxygen file * Enable LSAN in CI * CI: Require all tests to pass * Update version for new release 6.7.80 * Does not build without PlasmaWaylandProtocols 1.21.0 ==== kwin6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: kwin6-lang libkwin6 - Add patch to fix some alpha compositing issues: * 0001-opengl-gltexture-use-swizzles-to-ignore-non-existent.patch - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * wayland/seat: actually update the effective pointer focus surface * wayland/seat: fix implicit pointer grabs on subsurfaces * autotests/integration: add test cases for implicit pointer grabs * plugins/slowkeys: Remove unused KF6::WindowSystem dependency * plugins/slowkeys: Cleanup includes * plugins/slowkeys: Fix sending the released events (kde#523419) * plugins/slowkeys: Use Q_UNREACHABLE_RETURN * wayland/pointerconstraints_v1: don't require a commit for locking or unlocking (kde#526010) * autotests/integration: add an autotest for pointer warping with pointer locks * Add KWIN_WAYLAND_SUPPORT_COMMIT_TIMING_V1 environment variable * Update version for new release 6.8.0 * xwayland: Ensure that we always reset Selection::m_waylandSource * wayland/pointerwarp: also set the locked pointer position to the warp request (kde#524804) * plugins/screencast: Fix crash in OutputScreenCastSource::render() and RegionScreenCastSource::render() * plugins/screenshot: Make opengl context current in ScreenshotLayer::beginFrame() * plugins/screenshot: Fix a crash in CaptureScreen() * utils/svgcursorreader: Render at device resolution to avoid blurry filtered cursors (kde#526691) * backends/drm: don't use 3x4 Matrix for YUV conversions yet * backends/drm: fix BT2020 fixed matrix enum strings * backends/drm: add support for YCbCr->RGB conversion in color pipelines * helpers/dialoghelper: Fix build without XCB * helpers/killer: Fix build without XCB * Remove xcb/xcb.h include in shadow.h (kde#526689) * qpa: use a single persistent OpenGL context for Qt (kde#522424) * screencast: Avoid plasmashell windows from being hidden * Remove stray xcb/xcb.h include (kde#526250) * core/udmabufallocator: pad buffer sizes to 64 pixels * effectloader: Warn when an effect was built for another KWin version * opengl/eglbackend: don't limit format+modifiers of the main GPU to Vulkan * Fix QTP0004 warnings * Port away from JSON_ keywords in ecm_setup_qtplugin_macro_names() * Use QT_NO_PLUGIN with ecm_add_qml_module() * Set CMP0127 policy * Fix leaking EI events * helpers/wayland_wrapper: skip wayland-0 * xkb: Manage compose table using unique_ptr * xkb: Use unique_ptr to manage state * xkb: Use unique_ptr to manage keymaps * wayland: Implement kde-output-device-v2 v26 (kde#525314) * plugins/screenshot: make the context current after prePaint (kde#524840) * Revert "Enable ASAN" * plugins/screencast: don't hide the portal's windows from the screencast * opengl/eglcontext: request realtime priority when possible * Revert "backends/drm,virtual: don't render on virtual outputs for screencasts" * Revert "wayland: destroy mode resources when the output device resource is released" * Enable ASAN - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Too many changes to list here - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== layer-shell-qt6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: libLayerShellQtInterface6 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * CI: Require all tests to pass * Update version for new release 6.7.80 ==== libXi ==== - boo1285084_CVE-2026-109089_XGetDeviceControl-require-reply-control-to-match-the.patch * XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084, CVE-2026-109089) - boo1285085_CVE-2026-109090_XGetDeviceControl-size-DEVICE_ENABLE-replies-for-XDe.patch * XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085, CVE-2026-109090) ==== libXtst ==== - boo1285083_CVE-2026-109088_parse_reply_call_callback-reject-zero-progress-RECOR.patch * libXtst RECORD EnableContext Reply Endless Loop (boo#1285083, CVE-2026-109088) ==== libeconf ==== Version update (0.8.5 -> 0.8.6) Subpackages: libeconf0 libeconf0-32bit - Update to version 0.8.6: * Add new option DEFAULT_QUOTES for econf_newKeyFile_with_options. * NEW API calls: econf_hasQuotes, econf_setQuotes ==== libheif ==== Version update (1.23.5 -> 1.23.6) Subpackages: gdk-pixbuf-loader-libheif libheif-aom libheif-dav1d libheif-ffmpeg libheif-jpeg libheif-openh264 libheif-openjpeg libheif-rav1e libheif-svtenc libheif1 - description typo fixes - Add optional vvenc plugin - Update to version 1.23.6: * Security fixes: + (GHSA-h4h8-qgvc-m7r2) Memory exhaustion in the OpenJPEG decoder plugin through the tile and component counts of a JPEG 2000 codestream. + (GHSA-fcmw-5764-7rq8) Memory exhaustion in the uncompressed (unci) decoder with generic compression. + (GHSA-6fqc-p7r8-2g36) CPU exhaustion in the unci decoder with generic compression. + (GHSA-q7mw-2fmm-5q94) Heap out-of-bounds read in libsharpyuv through sample values above the bit depth of an image. + (GHSA-vv35-6hxg-95x8) The bit depth that an image handle reports could differ from the bit depth of the decoded image, so that an application reading the planes with the bit depth of the handle read out of bounds. + (GHSA-8p2c-9wv4-rx4p) Null pointer dereference when decoding an image sequence in which a chunk of a visual track references a non-visual sample entry. + (GHSA-86ch-j429-fpr2) With the FFmpeg decoder plugin, the image size limit was not reliably applied before an HEVC bitstream reached FFmpeg, so a file could make the decoder allocate buffers for a much larger picture than its ispe property declares. + (GHSA-3gwx-cjv4-jr74) Reachable assertion when decoding a grid image whose tiles have an alpha plane of more than 16 bits, which unci tiles can have since v1.22.0. + (GHSA-hqpw-h8p6-22q9) Heap out-of-bounds read of up to 6 bytes in the FFmpeg decoder plugin. + (GHSA-hvwh-xpj6-ph5x) Use after free of an error message in the WebP (since v1.22.1) and raw (since v1.22.0) input loaders of heif-enc. + (GHSA-v5rj-g4wv-j5w3) Decoded images could contain sample values above their declared bit depth. * For hardening, bug fixes and behavior changes, please see: https://github.com/strukturag/libheif/releases/tag/v1.23.6 - fix typo ==== libid3tag ==== Version update (0.16.3 -> 0.16.4) - Update to version 0.16.4: * Changes: + id3_tag_parse() now returns the number of frames parsed so far after encountering a bad frame rather than discarding the whole tag. + Some source files are now generated when the build system is being generated. Consequently, libid3tag now needs gperf installed at build time. This was done to help reduce the maintenance burden on maintaining gperf-generated files. + The source tree has been reorganized to be a lot cleaner and easier to understand. + To allow building with CMake 4.0 and later, along with fixing a deprecation warning, the minimum required version of CMake to build libid3tag is now 3.10 + Refactor some code and fix some warnings. + Files greater than 2 GiB are now properly supported on 32-bit UNIX-based/UNIX-like systems (64-bit builds remain unaffected). + libid3tag can now be properly built without a C++ toolchain again. + ID3v1 Genre list changes: - libid3tag now supports genres found in Winamp 5.60. This originates from a FreeBSD patch. - The genre list code is now automatically generated by CMake at build-time and no longer needs to be manually regenerated. - Introduce "Afro-Punk" to replace its previous offensively-named counterpart. * Fixes: + Applied some patches from Audio::Scan: - Improved iTunes compatibility. - Fix PIC frame support. + Fix MIME type for ID3v2.2 PIC frames. + Fix mojibake issues with UTF-16LE encoded ID3v2 tags without a BOM. - Use autosetup and ldconfig_scriptlets macros. ==== libkscreen6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: libKF6Screen8 libKF6Screen8-lang libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * test: Give config operation time to finish * backends/kwayland: Implement kde_output_device_mode_v2 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Remove XcbDpmsHelper and XCB::DPMS dependency * Make XCB a required dependency * Drop obsolete libxcb-randr dependency - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== libksysguard6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-lang libksysguard6-plugins - Add patch to disable one-shot rescheduling for now, security review not complete yet (boo#1281596): * 0001-Drop-org.kde.ksysguard.processlisthelper.applyschedu.patch - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * processcore/gpu: don't include GTT memory as GPU memory * processcore/gpu: don't double count GPU memory total/resident/memory drm keys (kde#525481) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Elide text in Choices header (kde#525825) * GroupedText: Force heading to be plain text - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Add missing include * processcore: add ProcessController::applyScheduling for one-shot rescheduling * systemstats: don't keep dangling SensorObject pointers in SensorContainer (kde#523562) * Remove obsolete doxygen file * processcore: add functionality to set CPU affinity (kde#429151) * Fix precision for doubles passed as strings (kde#521041) * processcore: Do not return unformatted data for formatted data in ProcessSensor * Update version for new release 6.7.80 ==== libplasma6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: libPlasma6-lang libplasma6-components libplasma6-desktoptheme - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * plasmaextracomponents: use tooltipdelay in ActionTextField * EdgeEventForwarder: Avoid potential recursion (kde#501289) * declarativeimports/core: allow keeping tooltip open when clicked * declarativeimports/plasmaextracomponents: PasswordField a11y/tooltip (kde#525790) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * declarative/plasmacomponents: make focused TabButton less linky * Corona: add a signal when isUiReady changes for any containment - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== libsndfile ==== - Add another fix for CVE-2022-33065: libsndfile-CVE-2022-33065-2.patch - Fix misaligned memory access issue in psf_binheader_readf() (bsc#1282670, CVE-2026-88386) libsndfile-CVE-2026-88386.patch ==== libstorage-ng ==== Version update (4.5.362 -> 4.5.363) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#1100 - avoid strange characters - 4.5.363 ==== live555 ==== Version update (2026.08.25 -> 2026.10.13) Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock33 libliveMedia120 - Update to version 2026.10.13: * Updated the "H263plusVideoRTPSource" code to protect against a malicious series of incoming packets possibly overflowing a buffer. ==== microos-tools ==== Version update (4.0+git29 -> 4.0+git31) - Update to version 4.0+git31: * Make sure $ROOT_SELINUX/etc is read-write * import-pubring: use temp dir and kill agents afterwards ==== milou6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: milou6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * lib/ResultDelegate: explicitly pass unhandled Tab presses (kde#387951) * plasmoid: also reset currentItem on open, and clean up a bit * plasmoid: allow going back to search field using arrow keys * lib/ResultsView: don't accept edge arrows without keyNavigationWraps - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * plasmoid: add BugReportUrl * lib/ResultsView: consider all data changes results (kde#521598) * Enable LSAN in CI * Update version for new release 6.7.80 ==== oath-toolkit ==== Version update (2.6.14 -> 2.6.15) - Update to version 2.6.15 * oathtool: Add --hex which correspond to the long-time default behaviour. * oathtool: Reject --hotp --totp instead of treating it as --totp. * oathtool: Reject further nonsense parameter combinations. Combining --hotp with --time-step-size, --start-time, or --now does not make sense. Combining --totp with --counter does not make sense. All these are now rejected as user errors. * libpskc: Fix PSKC signature verification bypass. See https://oath-toolkit.codeberg.page/CVE-2026-109117.html ==== ocean-sound-theme6 ==== Version update (6.7.5 -> 6.8.0) - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Enable LSAN in CI * CI: Require all tests to pass * Update version for new release 6.7.80 ==== openSUSE-release ==== Version update (20261014 -> 20261016) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pam_kwallet6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: pam_kwallet6-32bit pam_kwallet6-common - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * Pass the environment to ksecretd unquoted with coreutils >= 9.12 (kde#525805) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Enable LSAN in CI * Update version for new release 6.7.80 ==== plasma5support6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: libPlasma5Support6 libPlasma5Support6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * weather/bbcukmet: Fix malformed validation string for BBC Weather source * Fix screen power management inhibition never being re-acquirable (kde#523605) * Remove warning (found by cmake --warn-uninitialized -Werror=dev ) * Replace declaration with include * mouse dataengine: Drop obsolete X11 support (CursorNotificationHandler) * Enable LSAN in CI * Enforce passing tests * Make PluginTest work * Update version for new release 6.7.80 ==== plasma6-activities ==== Version update (6.7.5 -> 6.8.0) Subpackages: libPlasmaActivities7 plasma6-activities-imports - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Enable LSAN in CI * CI: Require all tests to pass * Update version for new release 6.7.80 ==== plasma6-activities-stats ==== Version update (6.7.5 -> 6.8.0) Subpackages: libPlasmaActivitiesStats1 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Enable LSAN in CI * Update version for new release 6.7.80 ==== plasma6-browser-integration ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-browser-integration-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * purpose: Disallow purpose share for inactive tab or window * Add support for Micrsoft Edge flatpak (kde#521109) * Remove unneeded QOverload::of for connecting to QProcess:finished signal * Update version for new release 6.7.80 ==== plasma6-desktop ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-desktop-emojier plasma6-desktop-lang plasma6-kimpanel-ibus - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * kcms/tablet: Clean up canberra context * Update version for new release 6.8.0 * kcms/dateandtime: Auth manually before issuing calls to timedate1 * kcms/dateandtime: Calculate timeDiff before doing blocking things * Positioner: Fix off by one when checking whether an item fits * panel: Factor in vkbd state for floating panel state * applets/taskmanager: avoid ReleaseWithinBounds for TapHandler * kcms/tablet: Minor fixups to other refreshInputSequence calls * kcms/tablet: fix setting of stylus and pad buttons * Ask for bash in 50-krunner-activate-typing.sh * containments/desktop: Watch for KRunner with QDBusServiceWatcher * kcms/touchpad: Load name and sysName properties (kde#521800) * fix systemsettings ui font color * applets/taskManager: don't hide tooltip when mute clicked * applets/window-list: qualify parent names * applets/window-list: simplify delegate keyboard activation * applets/window-list: explicitly unset focus after click * applets/window-list: remove MenuButton mnemonic * applets/window-list: fix glitch when closing - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Emojier: Fix incorrect buttons/placeholder when search gives no results * kcm_keys: fix layouting issues (kde#525725) * desktopppackage/configuration: fix GridViewKCM detection * lockscreenui: only show prompt when authenticator needs it * applets/kicker: don't set anchors.fill on PlasmoidItem * Panel: take into account the add widgets button for minimum width (kde#525826) * Containments/FolderView: fix isUiReady never going true * RenameEditor: Match text color to the custom background (kde#525319) * Revert "Port lockscreen/SDDM footer to a reuseable component" * Revert "lockscreen: pass new footer to WallpaperFader" - Drop patches, now upstream: * 0001-Revert-lockscreen-pass-new-footer-to-WallpaperFader.patch * 0002-Revert-Port-lockscreen-SDDM-footer-to-a-reuseable-co.patch - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here - Add patches to fix login with SDDM: * 0001-Revert-lockscreen-pass-new-footer-to-WallpaperFader.patch * 0002-Revert-Port-lockscreen-SDDM-footer-to-a-reuseable-co.patch - Add patch to fix virtual keyboard behaviour in SDDM: * 0001-Revert-sddm-theme-drop-vkb-wrapper-use-KWinVirtualKe.patch ==== plasma6-disks ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-disks-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Add missing Qt::Qml link * Add missing qqml.h include * CI: Require all tests to pass * Skip kcm_smoketest with kcmutils < 6.27.0 * Update version for new release 6.7.80 ==== plasma6-integration ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-integration-plugin plasma6-integration-plugin-lang plasma6-integration-plugin-qt5 - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * KDEPlatformTheme: don't automatically turn Union on by default * qt5: Fix build with WITH_X11=FALSE - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Remove linux (Qt5) CI * MessageDialogHelper: don't set WA_DeleteOnClose (kde#523039) * Use explicit WITH_X11 build option instead of relying on HAVE_X11 automagic * qt6: Skip loading palettes when widget style changes * kdeplatformtheme: Don't return a color dialog for a font dialog * Provide native color dialog backed by QColorDialog (kde#520987) * Message dialogs: Fix standard button codes for custom buttons * Create CMake find modules for fonts * Fix wrong return code when exec'ing our implementation of QMessageDialog (kde#520747) * KDEPlatformTheme: Set Union quick style enabled if Union widgets style is set * Clean up icon engines in tests * Delete QPA in test * Set theme name to lower and compare it * messagedialoghelper: Play sound for message box * Update version for new release 6.7.80 * kde-ci.yml: Update dependencies after 186ae66 * Drop unused dependencies ==== plasma6-nm ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-nm-lang plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * NetworkModel: don't leak devices via the statistics lambdas - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * KCM: Layout fixes (kde#443553) * HTML-escape connection details - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.8.0 - Update to 6.7.91 - Update to 6.7.90 ==== plasma6-pa ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-pa-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * VolumeFeedback: overlap chiming instead of hard-cancelling * KCM: Silence spurious warnings in Rename Devices dialog * kcm: Also make rename delegate for source items fill width * kcm: keep the Rename Devices Save Button visible while disabled (kde# 508211) * Initialize preferred audio devices on construction (kde#500828,kde#521973) * Improve presentation of PulseAudio errors and their translations * applet: set a sensible default size * Use the source's native sample rate for the microphone test (kde#523693) * microphoneindicator: Show correct information in OSD when using to toggle mute (kde#472107) * Install kcfg file * Fix use of active port when there are no ports at all. * Port to declarative type registration * Update version for new release 6.7.80 * Fix kirigami-addons cmake find call ==== plasma6-print-manager ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-print-manager-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Don't report server as unavailable until it's actually known * tests: Add proper color attributes to mock printer configs * kded: Notify when a print job is sent to a printer that is offline (kde#362143) * Remove some X11 bits * Remove warning (found by cmake --warn-uninitialized -Werror=dev ) * libkcups: Refactor constructor/helpers for public use * kded: Rename class MarkerLevelChecker to CupsWatcher * libkcups/kded: Consolidate marker level helpers into KCupsPrinter * Remove unused Plasma::Plasma linkage * libkcups,apps: Update icon logic for printer type * libkcups/plasmoid: Add a timer to reload the job queue when not empty (kde#512442) * configure-printer: Store window size in state config * configure-printer: Fix restoring window size * Clean up state from old print-queue app * [print-queue] Elide job processing message * kcm: Use Kirigami.StyleHints.showFramedBackground for ScrollView * set selected: property on ItemDelegates's contentItem stuff * Add missing qqml.h include * Fix most qmllint warnings * Mark missing QML module dependencies * Enable qmllint in CI * Skip kcm_smoketest with kcmutils < 6.27.0 * Update version for new release 6.7.80 ==== plasma6-systemmonitor ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-systemmonitor-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * page/EditablePage: round heightForContent down * Fix cache clean up with ComponentCacheModel (kde#525978) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Fix process termination when used in RtL language (kde#522233) * Fix type name in kcfg file * Install kcfg file * Add UI to set CPU affinity * table: Set focus to search field of ColumnConfigurationDialog * table: Change ColumnConfigDialog search filter to filter on text edit * table: Port ColumnConfigurationDialog from Dialog to Window (kde#517723) * processtable: Remove unnecessary separator * table: Hide the icon for processes in tree mode if it is empty (kde#442095) * table: Do nothing if data() functions are passed an invalid index * table: Make sure to cleanup sorted columns when using "hide column" on table * table: Explicitly remove duplicate entries from sortedColumns in ColumnSFModel (kde#518073) * Replace "applications-all" with "applications-all-symbolic" * Use similar capitalization as sibling menu items for "Edit or Remove Pages…" * Fix initial page from commandline * Enable LSAN in CI * Framework 'Kquickcharts' is required for graphs to work * CI: Require all tests to pass * Update version for new release 6.7.80 ==== plasma6-thunderbolt ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-thunderbolt-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - No code changes since 6.7.91 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - No code changes since 6.7.90 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * kcm: Add missing Qt::Qml link * CMakeLists.txt: Use COMPONENTS syntax for Qt6/KF6 find_package() * Add missing qqml.h include * CI: Require all tests to pass ==== plasma6-workspace ==== Version update (6.7.5 -> 6.8.0) Subpackages: plasma6-session plasma6-workspace-lang plasma6-workspace-libs sddm-qt6-branding-openSUSE - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * klipper/declarative: better starting listview position * klipper/declarative: handle arrow nav w/o starred items better * Klipper: Block hover after keyboard navigation * klipper/declarative: always show full delegate with arrow nav * component/containmentlayoutmanager: avoid startup completion checks * krunner/RunCommand: rotate expander when expanded * krunner/RunCommand: fix break tab navigation with non-default history * krunner: allow switching to "Enable suggestions" during runtime * krunner/RunCommand: close on Escape even from buttons * krunner/RunCommand: allow arrow key navigation to buttons * krunner/RunCommand: allow arrow navigation from list to SearchField * libnotificationmanager: Add parent to NotificationFilterProxyModel * applets/kicker: fix ComputerModel system apps (kde#526297) * Klipper: Unset default shortcut instead of deleting its action * Klipper: Remember who gets actions on selection * applets/notifications: explicitly allow copy/link actions (kde#508520) * devicenotifications: Don't notify when all screens go away or reappear * libnotificationmanager: When processed items is zero, only show total * Klipper: Do not set minimum config window size (kde#457837) * Klipper: Keep the buttons of tall entries at the top again * applets/systemtray: Fix plasmoids not appearing in system tray model * kcms/region_language: explain the "C" locale * devicenotifications: Add support for kde-output-device-mode-v2 v26 * Klipper: Restore the action popup for copied files * applets/systemtray: Refine click feedback * devicenotifications: Don't notify for internal screen being removed * Fix the window mapping again (kde#506562) * klipper/declarative: don't switch tabs without tabs (kde#526385) * cmake: use correct version for union * Klipper: Fix search behaviour (kde#452176) * Klipper: Guard against characters with high surrogates at 100th position (kde#508224) * Klipper: Use in-code function instead of kconf_update * kfontinst: Fix finished message being cut off * applets/systemtray: Handle applets without a configure action * notificationmanager: fix typo in property name * plasma-shutdown: Guard against concurrent logout/reboot/shutdown requests (kde#525911) * klipper: Set barcode as drag pixmap * klipper: Port away from nested event loops (kde#526007) * Fix compilation with qtbase >= 1a000288b81a57fcd380522b6a0497674dbe91bb (kde#526210) * klipper/declarative: always go to first entry from TabBar - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * geotimezoned: Don't show time zone OSD when clock didn't actually change * runners/services: Truncate to fit in assigned bitap space (kde#525983,kde#[numberofthebugreport]) * Fix translation in virtualkeyboard to loginlockscreen * systemtray: Port away from Animator (kde#487699) * systemtray: Fix potential crash * systemtray: drop X11 leftovers * shell: Disable Qt RHI pipeline cache * When the map is initiallised the map items are initialise at the given zoom level and visible map in the window. When the window is enlarged the items are not resized so they only fill the original area. * geotimezoned: Remember connection when time zone did not change * klipper/configdialog: Add i18n context * ShellCorona: track uiReady in a more robust way (kde#525327) * Klipper: Make the applet icon show in a panel thicker than 105 pixels * 🍒components/loginlockscreen: Make the virtual keyboard button follow HIG - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here - Refresh 0001-Use-qdbus6.patch - Add patch to fix Virtual Keyboard in SDDM: * 0001-Revert-lookandfeel-Drop-VirtualKeyboardLoader.patch ==== polkit-kde-agent-6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: polkit-kde-agent-6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * port dialog to bigscreen * add Kirigami to CMakeLists.txt and .kde-ci.yml * Drop X11 support via KX11Extras * Enable LSAN in CI * CI: Require all tests to pass * Update version for new release 6.7.80 ==== poppler ==== Version update (26.09.0 -> 26.10.0) Subpackages: libpoppler-cpp3 libpoppler-glib8 poppler-tools - Update to version 26.10.0: core: * Support for eidas (cades-b) signatures * Enable font subsetting when using the windows font backend * Enable brotli streams * NSS-signatures-backend: Be a bit more lenient on what we consider valid cert usage * NSS-signatures-backend: Mark hardware keys as such * NSS-signatures-backend: Reuse password callback for token PIN prompts * PSOutputDev: fix rendering of files when using -preload * Fix rendering of some Forms * Improve code a bit when finding fonts fails * Fix dest dict to name tree fallback when resolving named destination. Issue #1788 * Internal code improvements * Fix crashes in malformed documents utils: * pdfsig: Write some error message if signing fails * pdfsig: Replace -etsi with -etsi-cades-b and support it with -add-signature qt5: * Deprecate CertificateInfo::publicKey() * Map the annotation rules flags a bit closer to the spec qt6: * Deprecate CertificateInfo::publicKey() * Map the annotation rules flags a bit closer to the spec * Add API to query and select CAdES-B / S/MIME signature type build system: * libbrotlidec is now required for brotli stream support * Find libharfbuzz via pkgconfig * Conditionalise test builds and test dependencies based on enabled frontends * Fix intermittent glib API docs build failure * Don't scan for c++ modules * oss-fuzz build updates - fixes CVE-2026-107705 [bsc#1284844] ==== poppler-qt6 ==== Version update (26.09.0 -> 26.10.0) - Update to version 26.10.0: core: * Support for eidas (cades-b) signatures * Enable font subsetting when using the windows font backend * Enable brotli streams * NSS-signatures-backend: Be a bit more lenient on what we consider valid cert usage * NSS-signatures-backend: Mark hardware keys as such * NSS-signatures-backend: Reuse password callback for token PIN prompts * PSOutputDev: fix rendering of files when using -preload * Fix rendering of some Forms * Improve code a bit when finding fonts fails * Fix dest dict to name tree fallback when resolving named destination. Issue #1788 * Internal code improvements * Fix crashes in malformed documents utils: * pdfsig: Write some error message if signing fails * pdfsig: Replace -etsi with -etsi-cades-b and support it with -add-signature qt5: * Deprecate CertificateInfo::publicKey() * Map the annotation rules flags a bit closer to the spec qt6: * Deprecate CertificateInfo::publicKey() * Map the annotation rules flags a bit closer to the spec * Add API to query and select CAdES-B / S/MIME signature type build system: * libbrotlidec is now required for brotli stream support * Find libharfbuzz via pkgconfig * Conditionalise test builds and test dependencies based on enabled frontends * Fix intermittent glib API docs build failure * Don't scan for c++ modules * oss-fuzz build updates - fixes CVE-2026-107705 [bsc#1284844] ==== postfix ==== - (bsc#1284216) postfix.service prints a warning if SELinux is not installed * Test if /sbin/restorecon does exist. ==== powerdevil6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: powerdevil6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * daemon: Treat a keyboard backlight maximum of 0 as unsupported (kde#525916) * applets/brightness: Don't query kameleon when it isn't installed * applets/brightness: improve screen reader a11y (kde#519226,kde#508485) * applets/brightness: improve keyboard navigation - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * applets/brightness: fix Slider binding issues (kde#523281) * Brightness Applet: avoid binding loops (kde#525216) * applets/brightness: Fix displaying transition times when night light is always on - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== python-gssapi ==== Version update (1.11.1 -> 1.12.0) - update to 1.12.0: * Build and test CPython 3.15 * Includes build requirement update of `Cython == 3.3.0` ==== python-urllib3 ==== - add gzip-tests.patch and ssl-test.patch to fix tests ==== qqc2-breeze-style6 ==== Version update (6.7.5 -> 6.8.0) - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * CursorHandle: Fix typo * CursorDelegate: Fix lag when scrolling while text field is focused - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Fix horizontal padding when full-width glyph is unavailable * Implement ComboBox implicitContentWidthPolicy sizing * Remove warning (found by cmake --warn-uninitialized -Werror=dev ) * CI: Require all tests to pass * Update version for new release 6.7.80 ==== sddm-kcm6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: sddm-kcm6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * Fix misuse of QByteArray::data on a temporal - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * Add missing Qt::Qml link * Add missing qqml.h include * CI: Require all tests to pass * Update version for new release 6.7.80 ==== sdl2-compat ==== - Rewrite special SDL3 require to do without an architecture list [boo#1285523] ==== selinux-policy ==== Version update (20261006 -> 20261014) Subpackages: selinux-policy-targeted - Update to version 20261014: * Allow account-utils domains to getattr/setattr their sockets (bsc#1284992) * Allow wtmpdb to getattr/setattr its sockets (bsc#1284992) * Allow rebootmgr send over varlink to systemd_report_t (bsc#1284659) * Introduce systemd_report_t domain (bsc#1284659) * Extend CI for SLE 16.1 ==== spectacle ==== Version update (6.7.5 -> 6.8.0) Subpackages: spectacle-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * Prevent premature exit during recording startup (kde#516848) * Fix sharing images (kde#525413) - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 * Remove message shown after image is shared - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here ==== systemsettings6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: systemsettings6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Changes since 6.7.5: * Update version for new release 6.7.90 * runner: remove soft hyphens in keywords used for searching * runner: support for translated keywords * Fix loadModule not resetting subCategoryModel parent for modules w/o a submenu (kde#524340,kde#514006) * Use KConfigXT for settings * systemsettings.desktop: add Plasma 7 TODO notice for kcm_powerdevil * SettingsBase: add an exception for external kcms * chore: add default merge request template * Don't call activateWindow() from the constructor * CI: Require all tests to pass * Update version for new release 6.7.80 * ci: depend on @same plasma-activities version ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-plugins-desktop vlc-qt - Switch to qt6: * Drop libQt5Gui-private-headers-devel, pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Svg), pkgconfig(Qt5Widgets) and pkgconfig(Qt5X11Extras). Further: disable pkgconfig(libprojectM) and drop outright conditional pkgconfig(libprojectM-qt5). * Add qt6-base-private-devel, qt6-gui-private-devel, pkgconfig(Qt6Core), pkgconfig(Qt6Gui), pkgconfig(Qt6Svg) and pkgconfig(Qt6Widgets). - Drop vlc-projectM-qt5.patch: Obsolete for all currently supported versions of openSUSE. ==== xdg-desktop-portal-kde6 ==== Version update (6.7.5 -> 6.8.0) Subpackages: xdg-desktop-portal-kde6-lang - Update to 6.8.0: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.8.0 - Changes since 6.7.91: * Update version for new release 6.8.0 * Add a fallback to std::function when std::move_only_function is not available * Add a test for the settingsportal * Introduce x-d-p-kde-internal library * settings: Fix ReadAll and ReadOnce corner cases - Update to 6.7.91: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.91 - Changes since 6.7.90: * Update version for new release 6.7.91 - Update to 6.7.90: * New feature release * For more details see https://kde.org/announcements/plasma/6/6.7.90 - Too many changes to list here