Packages changed: aaa_base accountsservice (23.13.9 -> 26.27.3) adwaita-icon-theme (50.0+2 -> 51.0) at-spi2-core (2.60.7 -> 2.62.1) aurorae6 (6.8.1 -> 6.8.2) bluedevil6 (6.8.1 -> 6.8.2) bluez breeze6 (6.8.1 -> 6.8.2) breeze6-gtk (6.8.1 -> 6.8.2) dconf (0.49.0 -> 51.0) discover6 (6.8.1 -> 6.8.2) drkonqi6 (6.8.1 -> 6.8.2) emacs-vterm enchant (2.8.19 -> 2.8.21) evince evolution (3.60.2 -> 3.62.1) evolution-data-server (3.60.2 -> 3.62.1) evolution-ews (3.60.2 -> 3.62.1) firewalld flatpak-kcm6 (6.8.1 -> 6.8.2) fltk gdk-pixbuf (2.44.7 -> 2.44.8) gdm (50.3 -> 51.1.1) gjs (1.88.1 -> 1.90.1) glib-networking (2.80.1 -> 2.90.1) glib2 (2.88.4 -> 2.90.1) glibmm2 (2.88.1 -> 2.90.0) glycin-loaders (2.1.5 -> 2.2.5) gnome-autoar (0.4.5 -> 0.5.2) gnome-calculator (50.0+16 -> 51.1) gnome-characters (50.0 -> 51.0) gnome-chess (50.0 -> 50.1) gnome-clocks (50.0 -> 51.0) gnome-connections (50.0 -> 51.0) gnome-console (50.0 -> 51.0) gnome-contacts (50.0 -> 51.0) gnome-control-center (50.4 -> 51.1) gnome-desktop (44.5 -> 51.0) gnome-keyring (50.0 -> 51.1) gnome-mahjongg (49.1.1 -> 51.1) gnome-maps (50.5 -> 51.2) gnome-remote-desktop (50.2 -> 51.0) gnome-session (50.1 -> 51.0) gnome-settings-daemon (50.1+6 -> 51.1) gnome-shell (50.5 -> 51.1) gnome-software (50.4 -> 51.1) gnome-sudoku (50.4 -> 51.0.1) gnome-system-monitor (50.0 -> 51.1) gnome-text-editor (50.1 -> 51.0) gsettings-desktop-schemas (50.1 -> 51.0) gtk4 (4.22.5 -> 4.24.1) gtkmm4 (4.22.0 -> 4.24.0) gtksourceview5 (5.20.0 -> 5.22.0) gvfs (1.60.3 -> 1.62.0) ibus (1.5.34 -> 1.5.35~rc1) ibus_gtk4 (1.5.34 -> 1.5.35~rc1) java-25-openjdk kactivitymanagerd6 (6.8.1 -> 6.8.2) kde-cli-tools6 (6.8.1 -> 6.8.2) kde-gtk-config6 (6.8.1 -> 6.8.2) kdecoration6 (6.8.1 -> 6.8.2) kdeplasma6-addons (6.8.1 -> 6.8.2) kglobalacceld6 (6.8.1 -> 6.8.2) kinfocenter6 (6.8.1 -> 6.8.2) kmenuedit6 (6.8.1 -> 6.8.2) knighttime6 (6.8.1 -> 6.8.2) kpipewire6 (6.8.1 -> 6.8.2) krb5 kscreen6 (6.8.1 -> 6.8.2) kscreenlocker6 (6.8.1 -> 6.8.2) ksshaskpass6 (6.8.1 -> 6.8.2) ksystemstats6 (6.8.1 -> 6.8.2) kwayland-integration6 (6.8.1 -> 6.8.2) kwayland6 (6.8.1 -> 6.8.2) kwin6 (6.8.1 -> 6.8.2) layer-shell-qt6 (6.8.1 -> 6.8.2) libHX (5.4 -> 5.5) libadwaita (1.9.4 -> 1.10.0) libarchive (3.8.9 -> 3.8.10) libglycin (2.1.5 -> 2.2.5) libglycin-gtk4 (2.1.5 -> 2.2.5) libkscreen6 (6.8.1 -> 6.8.2) libksysguard6 (6.8.1 -> 6.8.2) libnice (0.1.23 -> 0.1.24) libostree (2026.4 -> 2026.5) libplasma6 (6.8.1 -> 6.8.2) libqaccessibilityclient-qt6 librsvg (2.62.4 -> 2.63.4) libshumate (1.6.3 -> 1.7.0) libsoup (3.6.6 -> 3.8.1) localsearch (3.11.2 -> 3.12.0) loupe (50.0 -> 51.1) milou6 (6.8.1 -> 6.8.2) mutter (50.5 -> 51.1) nautilus (50.4 -> 51.1) nvidia-settings (580.159.03 -> 580.196.07) ocean-sound-theme6 (6.8.1 -> 6.8.2) openSUSE-release (20261028 -> 20261030) orca (50.3 -> 51.1) pam_kwallet6 (6.8.1 -> 6.8.2) pangomm (2.56.2 -> 2.58.0) patterns-base pcsc-lite perl-MIME-tools (5.518.0 -> 5.522.0) phodav (3.0 -> 3.2) pipewire (1.6.10 -> 1.6.11) plasma5support6 (6.8.1 -> 6.8.2) plasma6-activities (6.8.1 -> 6.8.2) plasma6-activities-stats (6.8.1 -> 6.8.2) plasma6-browser-integration (6.8.1 -> 6.8.2) plasma6-desktop (6.8.1 -> 6.8.2) plasma6-disks (6.8.1 -> 6.8.2) plasma6-integration (6.8.1 -> 6.8.2) plasma6-nm (6.8.1 -> 6.8.2) plasma6-openSUSE plasma6-pa (6.8.1 -> 6.8.2) plasma6-print-manager (6.8.1 -> 6.8.2) plasma6-systemmonitor (6.8.1 -> 6.8.2) plasma6-thunderbolt (6.8.1 -> 6.8.2) plasma6-workspace (6.8.1 -> 6.8.2) polkit-kde-agent-6 (6.8.1 -> 6.8.2) powerdevil6 (6.8.1 -> 6.8.2) python-gobject (3.56.3 -> 3.58.1) python-msgpack (1.2.3 -> 1.2.4) qqc2-breeze-style6 (6.8.1 -> 6.8.2) qt6-declarative quadrapassel (50.2 -> 51.1) rdma-core (63.0 -> 65.0) ruby4.0 screen (4.9.1 -> 5.0.2) sddm-kcm6 (6.8.1 -> 6.8.2) sensors simdutf (9.3.2 -> 9.3.3) snapshot (50.0 -> 51.0) snowball (3.0.1 -> 3.1.1) spectacle (6.8.1 -> 6.8.2) sushi (50.0 -> 51.2) systemsettings6 (6.8.1 -> 6.8.2) tecla-keyboard-layout-viewer (50.0 -> 51.0) tevent tinysparql (3.11.1 -> 3.12.0) totem union6 (6.8.1 -> 6.8.2) xdg-desktop-portal-gnome (50.0 -> 51.0) xdg-desktop-portal-kde6 (6.8.1 -> 6.8.2) === Details === ==== aaa_base ==== Subpackages: aaa_base-extras - Remove the /etc/init.d/boot.local and /etc/init.d/after.local ghost placeholders; nothing has executed these files since the sysvinit era and the spec already recorded the intent to drop them. This resolves the executable-marked-as-config-file errors on the pair - Build the text-only subpackages extras, malloccheck, wsl and yama-enable-ptrace as noarch - Drop the legacy aaa_base:/etc/DIR_COLORS provides from aaa_base-extras; nothing in Tumbleweed requires it - Fix a typo in the yama-enable-ptrace description and wrap the main description line - Drop the Group tags from all package sections - Rework aaa_base-rpmlintrc: drop the filters whose targets no longer exist in the package (the wtmp log file group, the restricted hostname symlink and the deprecated init script filters for the removed .local files) and add reasoned filters for the remaining deliberate warnings (the nsswitch.conf backup copy in %post, the skel dotfiles, /var/adm and the sysconfig fillup templates) ==== accountsservice ==== Version update (23.13.9 -> 26.27.3) Subpackages: accountsservice-lang typelib-1_0-AccountsService-1_0 - Update to version 26.27.3: + release notes are at https://gitlab.freedesktop.org/accountsservice/accountsservice - Rebase accountsservice-sysconfig.patch and harden_accounts-daemon.service.patch. - Drop accountsservice-mocklib-gcc14.patch and remove patched mocklib: fixed upstream. - Add json-c to BuildRequires: new dependency. - Rename libaccountsservice package to account for new sover. - Make vala package noarch. It doesn't contain any binaries. ==== adwaita-icon-theme ==== Version update (50.0+2 -> 51.0) - Update to version 51.0: + No changes, stable bump only. - Update to version 51.beta: + XDG Projects folder. ==== at-spi2-core ==== Version update (2.60.7 -> 2.62.1) Subpackages: at-spi2-core-lang libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Update to version 2.62.1: * Fix baseline race in direct connection test. * Fix typecasting macros in atspi-application.h. * At-spi-bus-launcher: Clean up dbus-daemon when terminating from signals other than SIGTERM. - Update version dependencies according to meson.build. - Update to version 2.62.0.1: + This is functionally equivalent to 2.62.0, but the tag for 2.62.0 was not signed. ==== aurorae6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: aurorae6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== bluedevil6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: bluedevil6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== bluez ==== Subpackages: bluez-auto-enable-devices bluez-cups bluez-obexd bluez-zsh-completion libbluetooth3 - Own zsh-completion dirs. ==== breeze6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-style-lang breeze6-style-qt5 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== breeze6-gtk ==== Version update (6.8.1 -> 6.8.2) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== dconf ==== Version update (0.49.0 -> 51.0) Subpackages: gsettings-backend-dconf libdconf1 - Update version dependencies according to meson.build. - Update to version 51.0: + No changes since 51.rc. - Update to version 51.rc: + Update overview regarding safe writer. - Update to version 51.beta: + Implement safe GVDB writer and use it by default for homes on NFS + docs: - Describe DBDIR argument in man page - Fix a typo ==== discover6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-lang discover6-notifier - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Update version for new release 6.8.2 * fwupd: Do not pass the FwupdBackend object to the connect thread * AppsModel: Remove dup'd stream class * UpdateModel: React when resources disappear * Set X-KDE-AliasFor for Discover's hidden desktop entries (kde#511886) ==== drkonqi6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: drkonqi6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== emacs-vterm ==== - Remove the now redundant site-start.d script. boo#1277717 ==== enchant ==== Version update (2.8.19 -> 2.8.21) Subpackages: enchant-2-backend-hunspell enchant-data libenchant-2-2 - Update version dependencies according to configure.ac. - Update to version 2.8.21: + This release fixes two bugs in composite dictionaries: first, if any dictionary creation failed during creation of a composite dictionary, dictionaries already created would be leaked; and secondly, the broker error status could end up indicating an error incorrectly when one provider or language failed and a fallback later succeeded. Thanks to @lpyuu for the report and fixes. - Changes from version 2.8.20: + This release improves the man page for enchant(1), mostly by documenting Ispell command-line options and pipe-mode commands that it ignores. ==== evince ==== Subpackages: evince-lang evince-plugin-pdfdocument libevdocument3-4 libevview3-3 - Update version dependencies according to meson.build. ==== evolution ==== Version update (3.60.2 -> 3.62.1) Subpackages: evolution-plugin-spamassassin - Update to version 3.62.1: * Updated translations. - Update version dependencies according to CMakeLists.txt. - Update to version 3.62.0: + Bug Fixes: - Composer: De-duplicate inline images before send - junk-filters: Do not leak the child stdin pipe into concurrent spawns - Default to not use read-only calendars for reminders and conflict search - EUIParser: Notify about accelerators moved by an action rename - Mail: Validate clickable preview elements are generated by Evolution - Mail: Remove deprecated SHA1 signature algorithm + Miscellaneous: docs: Add API index for newly added symbols in 3.62 for e-util + Updated translations. - Drop pkgconfig(gnome-autoar-gtk-0) BuildRequires: this was vendored back with 3.59.1 and has since been dropped in gnome-autoar. - Own %{_datadir}/GConf and %{_datadir}/GConf/gsettings: legacy migration directories. - Update to version 3.61.3: + Bug Fixes: - Use gnome-shell-calendar-server for Reminders in GNOME - Composer: Add 'Remove Formatting' option - Mail: Do not replace first thread message with the latest - Composer: Remove sender's CSS color styles in HTML reply - EMailFormatter: Error text hard to read in dark theme - EMFolderTree: Cache folder icons for quicker drawing - EActivityProxy: Hide frame shadow - MessageList: Add style option for important mail color - Appointment cannot be saved when an e-mail is attached to it - Composer: Unsetting text color in HTML does not work - Mail: Embed file-based images in saved HTML signatures - Fix signature editor window headerbar - CI: Convert the tests into real CTest tests + Miscellaneous: - flatpak: Return back the libmspack build - e_util_ignore_accel_for_focused: Ignore accels when a button is focused - EMenuBar: Set tooltip on a menu button - SetupBuildFlags.cmake: Add `-Wunused-function` - test-web-view-jsc: Correct the tests for newer WebKitGTK - e_util_ignore_accel_for_focused: Ignore on GtkTreeView only when its search is on - test-web-view-jsc: Stop test early when script execution fails + Updated translations. - Update to version 3.61.2: + Bug Fixes: - Fails to import Chinese Outook PST file (charset) ][ - Marcus Bains line is displayed on the wrong day ][ - EMFolderTree: Unexpected scroll after context menu dismiss - Can't toggle email labels in popover via keyboard - EShellSearchbar: When changing search type, field contents are erased - cal_shell_view_transfer_selected: Incorrect data type used when moving events - EShellSearchbar: Hide Saved Search submenu when none is saved - Fix translation of "Collection Account" menu item + Miscellaneous: - RSS: Reorder when a new folder flags are set and folder summary created - Addressbook: Improve accessibility of the card view widgets - ETreeViewFrame: Set tooltip on toolbar buttons - flatpak: Workaround autoreconf issue in the flatpak build - flatpak: Remove libmspack module from the build + Updated translations. - Update to version 3.61.1: + Bug Fixes: - Mail: Don't disable folder tree sensitivity after search setup - Do not offer to create a folder under an RSS account - Add composer format override per folder, recipient, and account - Localization is not applied for the date field in the email preview - Composer open delayed by gpg call with stale gpg lock - itip-formatter: Guess attendee for REQUEST without attendees - Mail: Allow to save emails as .eml via drag & drop - Better integration of custom layout dialog - Composer: Add 'View->Use Theme Colors' for HTML mode (view only) - EUIAction: Declare alternative label for popup menus - Truncated file stored in the (mail) cache - prefer-plain: Empty body when prefer plain with HTML and no plain text - Fails to import Chinese Outook PST file (charset) - tnef: Fix OOB read when PR_ATTACH_DATA_OBJ buffer is too short - tnef: Fix PT_UNICODE property over-read via strlen() - Marcus Bains line is displayed on the wrong day - Work Week/Day view overlaps text for multi-day events with times - Inconsistent timezone for completed tasks - IMAP: Add "Manage subscriptions" into "Receiving options" - WebDAVBrowser: Do not save collection color when None is set - Fix line breaks for

and heading elements in ... changelog too long, skipping 52 lines ... + Updated translations. ==== evolution-data-server ==== Version update (3.60.2 -> 3.62.1) Subpackages: evolution-data-server-lang libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-5 libecal-2_0-3 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserverui-1_2-4 - Update to version 3.62.1: * Updated translations. - Update version dependencies according to CMakeLists.txt. - Update to version 3.62.0: + Bug Fixes: - GOA EWS: Do not require OABUrl in autodiscover - EBackend: Document how OAuth2 sources should ask to be authenticated - CalDAV: Ignore Bad Request (400) on overwrite - ESourceRegistry: Name the credentials source in failed-lookup debug message + Updated translations. ==== evolution-ews ==== Version update (3.60.2 -> 3.62.1) Subpackages: evolution-ews-lang - Update to version 3.62.1: * Bug Fixes * Updated translations. - Update version dependencies according to CMakeLists.txt. - Update to version 3.62.0: + Bug Fixes: - Add a per-folder coalescing gate for sync and refresh - camel: Do not save the folder summary in the subclass dispose + Updated translations. - Update to version 3.61.3: + Bug Fixes: - m365: Mail: Flagged and priority indicators are mixed - Stuck on stream read after proxy error response - m365: Incorrect timezone used with recurring events + Miscellaneous: - SetupBuildFlags.cmake: Add `-Wunused-function` - Update windowsZones.xml to 2021a version + Updated translations. - Update to version 3.61.2: + Miscellaneous: - Camel: Reorder when a new folder flags are set and folder summary created - e-ms-oapxbc-util: Adapt to recent API changes in e-ms-oapxbc + Updated translations. - Update to version 3.61.1: + Bug Fixes: - Calendar: Crash when cancelling meeting with empty notice - m365: Event time in UTC incorrectly changes to local timezone - ews-test-common: remove GLIB_CHECK_VERSION(2,35,0) - m365: Use delta sync for calendar events - Camel: Clean up provider conf entries definitions - m365: Validate host of server-provided nextLink and deltaLink URLs - ews: Fix path traversal in attachment filename from server - lzxd: Add bounds checks in lzxd_read_lens() to prevent buffer overrun - oab: Fix integer overflows, memory leaks, and decompression bombs - oab-decoder: Fix crash on unknown properties, string list bug, and DoS - m365: URI-escape id parameter in construct_uri to prevent path injection - e-cal-backend-m365: Fix a compiler warning - Make CMAKE_BUILD_TYPE enumeration for cmake-gui - Convert to CamelDataCache atomic write API - build: Add CAMEL_LDFLAGS into oab-decode-test - Use "--output-on-failure" for ctest in "make test" + Updated translations. ==== firewalld ==== Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python313-firewall - Add zsh BuildRequires: Needed due to zsh-completion dirs. ==== flatpak-kcm6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: flatpak-kcm6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - No code change since 6.8.1 ==== fltk ==== - added patches CVE-2026-116723: stack-based buffer overflow in `Fl_BMP_Image:load_bmp_()` can lead to crash or code execution [bsc#1288053] CVE-2026-116724: integer overflow in `Fl_BMP_Image:load_bmp_()` can lead to heap corruption [bsc#1288054] * fltk-CVE-2026-116723,116724.patch ==== gdk-pixbuf ==== Version update (2.44.7 -> 2.44.8) Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Update to version 2.44.8: + glycin: Support x-/y-dpi options for png, tiff and jpeg + Updated translations. ==== gdm ==== Version update (50.3 -> 51.1.1) Subpackages: gdm-lang gdm-schema gdm-systemd gdm-xdm-integration libgdm1 typelib-1_0-Gdm-1_0 - Add gdm-timeout-for-plymouth-quit.patch: Use a separate timeout for the plymouth quit (bsc#1270027 glgo#GNOME/gdm!414) - Update to version 51.1.1: * Fixed headless user display creation erroring out. - Update to version 51.1: * Improve the reliability of our GPU-is-ready detection (corrected the code that checks for the boot_display sysfs attribute) * Restricted which PAM stacks GDM will run, to defend against malicious greeters * Oo7 enablement for Arch Linux's PAM stacks * Fixed bug where gnome-headless-session@.service would stop working if the user logs out from within the headless session * Changed behavior of RemoteDisplayFactory API to wait for the new headless display to have a `session-id` set before returning/exporting it. This is a backwards-compatible change that makes it easier to use this API * Code cleanups * Updated translations. - Update version dependencies according to meson.build. - Update to version 51.0: + Fixed some memory leaks + Correctness improvements to GDM's PAM extensions + Fixes to remote login with Kerberos + Updated translations. - Rebase gdm-initial-setup-hardening.patch. - Update to version 51.rc: + Follow-up bugfix for $GDM_AUTH_SESSION_ID + Follow-up bugfix for redone PAM service loading logic + Follow-up bugfix for pam_gdm keyring buffer bounds check + Fixed a couple crashes and memory leaks + Introduced pre-authenticated remote displays, for Kerberos authentication in gnome-remote-desktop + Updated Fedora's PAM rules to include support for oo7 instead of gnome-keyring + Translation updates - Update to version 51.beta: + Fixed autologin bypass where a compromised greeter could request autologin for any local account by sending arbitrary usernames via BeginAutoLogin + Dropped unused `enable-web-authentication` and `enable-passkey-authentication` gsettings keys from the `org.gnome.login-screen` schema + Introduced PAM substack safety net, such that authentication cannot by bypassed on systems where authselect hasn't configured a PAM service file for a specific authentication method (i.e. `gdm-switchable-auth`) + Fixed double-free in session worker + Reworked build script for installing PAM service files into modern search path + Redid PAM service loading logic in GDM, to introduce meaningful error messages whenever PAM services aren't found + Fixed memory leaks in PAM extensions + Fixed denial of service where an invalid session name from the greeter would cause the entire daemon to exit, terminating all active sessions + Adjusted D-Bus object path generation for /org/gnome/DisplayManager/Displays/* to fix ASLR leak + Fixed input sanitation when forwarding unknown usernames to audit subsystem + Fixed passphrase handling in pam_gdm to wipe cached plaintext passwords before freeing and to bound the keyring buffer walk preventing out-of-bounds reads + Fixed path traversal vulnerability where a compromised greeter could load arbitrary .desktop files via SelectSession, potentially executing attacker-controlled commands as the authenticated user + Introduced $GDM_AUTH_SESSION_ID environment variable, which communicates the logind session ID of the caller that requested authentication. This will be used for smartcard redirection for remote sessions - Update to version 51.alpha: + Compatibility with kmsconvt + Add checks to make sure PAM plugins don't drop fsuid privilges and break GDM + Reworked the way GDM constructs XDG_DATA_DIRS for its launch environment, so that it will no longer hard-code /usr/share at a higher priority than /usr/local/share. This behavior would prevent people from locally hacking on gnome-shell with - -prefix=/usr/local without also having to rebuild GDM with the same prefix + Reworked conflicting session logic to use logind for enumeration. Previously, GDM would only look for sessions it started itself, but that would cause it to miss conflicting sessions started externally, such as those from ThinLinc or TigerVNC + Fixed bug where plymouth never quit on headless or no-monitor systems, which would prevent the system from ever reaching graphical.target + Added setting to change the fallback session. This is the session that gets used whenever a user doesn't have a preferred session selected, or their preferred session is unusable. Sysadmins can use this setting to change the selected session for users that have never logged into the system before + Fixed bug where GDM would start X11 sessions with XDG_SESSION_TYPE=wayland + Fixed PAM handling code to notify PAM modules when we've switched user and are about to exec the session leader. This fixes PAM modules like pam_cap.so in its `defer` mode + Removed unnecessary `SetRemoteId` method from the remote display DBus API ... changelog too long, skipping 22 lines ... https://gitlab.gnome.org/GNOME/gdm/-/work_items/1059 ==== gjs ==== Version update (1.88.1 -> 1.90.1) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.90.1: * First bugfix release for GNOME 51. This release contains several fixes for crashes related to toggle references and garbage collection, and a fix for filtering of source files when generating code coverage reports. * Closed bugs and merge requests: + Object: Fix reference leak for GObject that already has a wrapper + Object: Don't modify wrapped GObject list while iterating it + Some other commits included + Coverage: Fix source file filtering - Disable testsuite run for arm, it currently fails all tests. Let it build anyway as an best effort kind of thing. - Update version dependencies according to meson.build. - Update to version 1.90.0: + build failure: tests don't specify dependency on sysprof_capture - Update to version 1.89.90: + This is the release candidate for GNOME 51. This release brings primarily minor bug fixes and internal type-safety improvements. + Backwards-incompatible change: Gio.DBus.makeProxyWrapper() returns a class expression, which should be called as a constructor, not as a function. Calling it as a function still works, but will print a deprecation warning. To migrate your code, just add `new`. + Backwards-incompatible change: Don't use the `GJS_ALWAYS_INLINE` macro from gjs/macros.h. It was not meant to be public and will print a deprecation warning if used. + Closed bugs and merge requests: - Various maintenance - Maps are terribly slow when planning for a route - Check for char* returns of ambiguous ownership using clang-tidy - testConsole fails if source directory contains - Revert "Gio: Rewrite _makeProxyWrapper as a class expression" and print a deprecation warning instead ==== glib-networking ==== Version update (2.80.1 -> 2.90.1) Subpackages: glib-networking-lang - Update to version 2.90.1: * Bugs fixed: + CVE-2026-103963: Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service + CVE-2026-112963: glib-networking macOS OpenSSL backend incorrectly trusts non-SSL policy certificates as TLS anchors + CVE-2026-113624: glib-networking TLS client session cache key not rebuilt after certificate property change, allowing stale session resumption + CVE-2026-113622: glib-networking: Missing TLS purpose validation in glib-networking OpenSSL backend allows Extended Key Usage bypass + CVE-2026-113623: glib-networking: Unbounded memory growth in glib- networking GnuTLS backend application data buffer during TLS handshake allows remote denial of service + openssl: consult errno on syscall failure * Updated translations. - Update version dependencies according to meson.build. - Update to version 2.90.0: + Bugs fixed: - meson: Remove version checks that are always true + Updated translations. - Update to version 2.90.alpha: + Bugs fixed: - test fails with openssl 3.4.x - (CVE-2025-60018) (#YWH-PGM9867-106) Out of Bond Reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" due to Incorrect BIO_write Return Value Validation in Certificate PEM Export - (CVE-2026-2574) (#YWH-PGM9867-150) OOB Read on glib-networking through tls/openssl/gtlsclientconnection-openssl.c via g_tls_client_connection_openssl_get_property() - (CVE-2026-10028) (#YWH-PGM9867-278) Infinite loop in certification path building - meson: Introduce option for enable/disable tests - openssl: check return value of g_tls_bio_alloc() and BIO_new() - openssl: delete support for OCSP stapling - Fix file database and PKCS11 test failures and update CI! - Fix miscellaneous safety issues reported by bug hunters - Delete gtlshttp - Fix connection test reusing a GError - openssl: fix error code confusion - ci: add catch for reporting stack traces - Require OpenSSL 1.1.1 or newer - Some fixes found with kiro - Fix various memory leaks - openssl: refactor error handling code - openssl: use ERR_clear_error() all over the place - gnutls: always notify accepted-cas property after handshake + Updated translations. - Drop CVE-2026-10028.patch: Fixed upstream. ==== glib2 ==== Version update (2.88.4 -> 2.90.1) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libgirepository-2_0-0 libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 typelib-1_0-GIRepository-3_0 typelib-1_0-GLib-2_0 typelib-1_0-GLibUnix-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - Update to version 2.90.1: * Bugs fixed: + Add address and thread sanitizer scheduled CI job + inotify: cancelling monitor through symlink alias removes watch used by still-active monitors + g_file_trash() returns FALSE without setting the GError when trashing a non-empty directory for `DT_UNKNOWN` nodes + tools: Add another variant of an existing suppression to glib.supp + giochannel: Fix strncmp() off the end of the buffer + gvariant: Handle get_data_as_bytes() for corrupted variants + utils: Add missing ENUMERATOR_AVAILABLE_IN + rcbox: Turn assertion into error + gdbusauthmechanismsha1: Don't split into too many tokens + logging: Don't stack overflow with too many fields + regex: Handle empty matches at end + unicode: - Fix error handling in normalization - Don't read past limits - Prevent overflow in normalization + gmarkup: Be careful in error paths + gresource: Avoid underflow + gcharsetconverter: Avoid closing invalid iconv descriptors + gregex: Fix some trivial typos in the docs + gfileenumerator: Reformat docs to fully use gi-docgen and match style guide + fileutils: Check the mode before creating the file + Clarify various inconsistencies with g_socket_address_new_from_native() + tests: Avoid a ubsan warning about passing NULL to strncmp() + glib.supp: Mark a TLS variable as not really a leak * Updated translations. - Drop gsettings.zsh (_gsettings completion) as source, no longer needed as zsh ships its own gsettings completions (boo#1284142). - Update to version 2.90.0: + Bugs fixed: - G_DEFINE_TYPE parent_class variable trips clang 23's `-Wunused-but-set-global` - `-Wtypedef-redefinition` warnings from `GDBusActionGroup` when building 2.89.4 with clang - fix: handle long filenames in trash by truncating from front - tests: allocate an adequate alternate signal stack - gtestutils: Mark a TLS variable as not really a leak - goutputstream: Fix an unused-variable warning with G_DISABLE_ASSERT + Updated translations. - Update to version 2.89.4 (Unstable): + Improve support for nanosecond source timeouts + Fix installed service file containing build path + Support clicking notification icons on Windows + Improve stream splice performance by increasing buffer size + Updated translations. - Update to version 2.89.3 (Unstable): + Support systemd-style UAPI file masking and drop-ins for `GKeyFile` + Add some string and date convenience API, `g_string_free_deep()` and `g_set_date_time()` + Add some convenience API to `GUnixFDList` + Bugs fixed: - Support UAPI file masking and drop-ins in GKeyFile - gio/tests: iptosmessage does not compile on Solaris - fd leak in `g_file_set_contents_full()` on error? - gio-tool: crash (assertion failed) when running 'gio help help' - Add g_string_free_deep - datetime: Add g_set_date_time - giostream: Clarify is_closed() method docs for streams - gunixfdlist: Add g_unix_fd_list_append_take, g_unix_fd_list_peek, g_unix_fd_list_lookup, g_unix_fd_list_lookup_peek - gtestutils: Fix a minor typo in a documentation comment - tests: Minor compiler warning fixes for GCC16 - build: Fix a deprecation warning from Meson 1.12 - docs: Use dedicated docblocks for new enum members - docs: Annotate callbacks rather than user_data - Add finer accuracy g_timeout APIs - gdbusnameowning: Don't print any logs when connection is closed - Avoid reserved identifiers in public macros - Update to version 2.89.2 (Unstable): + Fix potential miscompilation with GCC 17 with `G_GNUC_CONST` on `get_type()` functions + Update toolchain requirement to C11; previously this was just strongly recommended + Various bugs fixed. + Updated translations. - Update to version 2.89.1 (Unstable): + g_thread_yield() may not yield control to another thread as expected on Linux. + gio: gmemorymonitordbus: Fix fallback backends can't be properly loaded + gregex: Remove "array length" annotations + win32-build.md: Update Visual Studio build info + Don't use slow content type for icons when only fast content is queried + Performance improvements to GVariant/GDBusMessage + docs: fix wrong reference to gint16 for gint32 types in glib/types.md + Add missing finish-func annotations + gregex: g_match_info_fetch_pos() and g_match_info_fetch_all() will now work after partial matches as well ... changelog too long, skipping 27 lines ... https://gitlab.gnome.org/GNOME/glib ==== glibmm2 ==== Version update (2.88.1 -> 2.90.0) Subpackages: libgiomm-2_68-1 libglibmm-2_68-1 - Update version dependencies according to meson.build. - Update to version 2.90.0: + API is identical to glibmm 2.89.1. + Meson build: Fix missing dependencies, making it possible to build with https://github.com/michaelforney/samurai instead of ninja. (syntheticsweet) - Update to version 2.89.1 (Unstable): + Glib: - SignalTimeout: Add connect_ns(), connect_ns_once(). - Source: Add get_time_ns(). + Gio: - ApplicationCommandLine: Add property_is_remote(). - DesktopAppInfo: Add property_filename(). - UnixFDList: Add peek(), lookup(), append_take(). + Build: Require glib >= 2.89.4 - Update to version 2.89.0 (Unstable): + Drop G_GNUC_CONST as in GLib. + Glib: Markup::ParseContext: Add get_attribute_position(). + Gio: Emblem and DBus::ActionGroup: Don't derive gtkmm__Gxxx types. The underlying C classes are final types since GLib 2.89.2. + Documentation: Remove duplicate of Glib::MarkupError documentation. + Build: Require glib >= 2.89.0 - Update to version 2.88.1+7: + Gio::DBus::ActionGroup: Improve the test whether GDBusActionGroup is final + Gio: Emblem and DBus::ActionGroup: Don't derive gtkmm__Gxxx types + Glib::Markup::ParseContext: Add get_attribute_position() + Regenerate docs.xml and .defs files, using files from glib 2.89.1 - Use source service to generate tarball. - Add mm-common, libxslt-tools and perl-XML-Parser BuildRequries: Needed now that we are using a git checkout. - Pass build-documentation=false to meson setup, skip building documentation. - Pass maintainer-mode=true to meson setup, needed since we are using a git checkout. ==== glycin-loaders ==== Version update (2.1.5 -> 2.2.5) - Update to version 2.2.5: * This release contains the following new component versions: + Glycin-core 4.0.5 + Glycin 4.0.5 + Glycin-builtin 4.0.5 + Glycin-external 4.0.5 + Libglycin 2.2.5 + Libglycin-gtk4 2.2.5 * Fixed: + Require gufo-exif 0.5.5 to avoid reading exif values from incorrect positions in some images. + Libglycin: Don't panic when trying to lookup an infinite pixel density. Instead, don't return any pixel density. + Meson/thumbnailer: Ensure that libglycin is built before glycin-thumbnailer. - Pass libglycin=true to meson setup in glycin-loaders.spec.inc following upstream changes. - Update to version 2.2.4: * This release contains the following new component versions: + Glycin-core 4.0.4 + Glycin-image-rs 2.2.4 + Glycin 4.0.4 + Glycin-builtin 4.0.4 + Glycin-external 4.0.4 + Libglycin 2.2.4 + Libglycin-gtk4 2.2.4 * Fixed: + Require gufo-exif 0.5.4 to avoid a panic in exif lookup for certain images. + Glycin: Longer magic byte strings in config identifiers now have a higher priority. This fixes cursors being sometimes identified as TGAs. - Update to version 2.2.3: * This release contains the following new component versions: + Glycin-core 4.0.3 + Glycin-image-rs 2.2.3 + Glycin 4.0.3 + Glycin-builtin 4.0.3 + Glycin-external 4.0.3 + Libglycin 2.2.3 + Libglycin-gtk4 2.2.3 * Fixed: + Require gufo-exif 0.5.3 which fixes parsing issues with non-Canon MakerNote entries. This can cause images not to be rotated according to the Orientation tag. + Image-rs/animation: Drop thread after the Image.done D-Bus method is called. + Image-rs: Prevent channel with animation frames from filling up, causing a effective memory leak. + Libglycin: Don't block main thead in `get_mime_types`. * Changed: Glycin: Canonicalize paths of "Exec" keys when loading configs. - Update to version 2.2.2: * This release contains the following new component versions: + Glycin-core 4.0.2 + Glycin 4.0.2 + Glycin-builtin 4.0.2 + Glycin-external 4.0.2 + Libglycin 2.2.2 + Libglycin-gtk4 2.2.2 * Fixed: Set the unix socket sending the image data to the loader to non-blocking. Otherwise, small socket send buffer configurations might lead to infinite blocking. - Update to version 2.2.1: + This release contains the following new component versions: - glycin-utils 5.0.1 + Fixed: Don't mmap already write sealed memfds as shared. This is only supported since Linux 6.7 . - Update to version 2.2.0: + This release contains the following new component versions: - glycin-common 2.0.0 - glycin-core 4.0.0 - glycin-heif 2.2.0 - glycin-image-rs 2.2.0 - glycin-jxl 2.2.0 - glycin-raw 2.2.0 - glycin-svg 2.2.0 - glycin-test 2.2.0 - glycin-thumbnailer 2.2.0 - glycin-utils 5.0.0 - glycin 4.0.0 - glycin-builtin 4.0.0 - glycin-external 4.0.0 - libglycin-gtk4-rebind 0.2.0 - libglycin-gtk4-rebind-sys 0.2.0 - libglycin-rebind 0.2.0 - libglycin-rebind-sys 0.2.0 - libglycin 2.2.0 - libglycin-gtk4 2.2.0 + Fixed: - glycin/sandbox: Fix compilation on 32 bit architectures - Update to version 2.2.beta.1: + This release contains the following new component versions: - glycin-core 4.0.0-beta.1 - glycin-heif 2.2.0-beta.1 - glycin-image-rs 2.2.0-beta.1 - glycin-jxl 2.2.0-beta.1 - glycin-raw 2.2.0-beta.1 - glycin-svg 2.2.0-beta.1 - glycin-test 2.2.0-beta.1 ... changelog too long, skipping 157 lines ... + Changed: svg: Don't limit the size of elements in the SVG ==== gnome-autoar ==== Version update (0.4.5 -> 0.5.2) - Update to version 0.5.2: + No changelog provided - Changes from version 0.5.0: + format-filter: Add zstd to supported formats + compressor: Don't use wildcard query string + Remove gnome-autoar-gtk + doc: migrate to gi-docgen + build: Rename docs option + Various CI fixes until it worked again + Add release script - Change -Dgtk_doc meson parameter to -Ddocs: follow upstreams rename of the otion. - Replace gtk-doc BuildRequires for pkgconfig(gi-docgen): follow upstreams port to gi-docgen. - Drop gnome-autoar-gtk related subpackages: libgnome-autoar-gtk-0-0, typelib-1_0-GnomeAutoarGtk-0_1, and gnome-autoar-gtk-devel ==== gnome-calculator ==== Version update (50.0+16 -> 51.1) Subpackages: gnome-calculator-lang gnome-shell-search-provider-gnome-calculator - Update to version 51.1: * Updated translations. - Update to version 51.0: + Updated translations. - Update to version 51.rc: + Updated translations. - Update to version 51.beta: + Show exponent in the current base + Update and remove some currencies + Persist calculation history across sessions + Report the name entry as invalid on the a11y layer + Keep rational arithmetic exact (using gmp) + Fixed compile warnings + Updated translations. - Update to version 51.alpha: + Improve search provider + Style fixes + Fixed help not opening + Fixed compile issues + Updated translations. ==== gnome-characters ==== Version update (50.0 -> 51.0) Subpackages: gnome-characters-lang gnome-shell-search-provider-gnome-characters - Update version dependencies according to meson.build. - Update to version 51.0: + Updated translations. - Update to version 51.rc: + meson: Add check parameter to run_command + Stop using G_GNUC_CONST in _get_type functions + flatpak: Disable gnome-desktop's qr feature + Updated translations. ==== gnome-chess ==== Version update (50.0 -> 50.1) Subpackages: gnome-chess-lang - Update to version 50.1: + Updated translations. ==== gnome-clocks ==== Version update (50.0 -> 51.0) Subpackages: gnome-clocks-lang gnome-shell-search-provider-gnome-clocks - Update version dependencies according to meson.build. - Update to version 51.0: + Updated translations. - Update to version 51.rc: + meson: Require meson 1.7 + flatpak: Disable gnome-desktop's qr and systemd features + Updated translations. - Drop obsolete Groups tag. ==== gnome-connections ==== Version update (50.0 -> 51.0) Subpackages: gnome-connections-lang - Update to version 51.0: + Updated translations. - Update to version 51.rc.1: + Fixed Flatpak build + Updated translations. - Update to version 51.rc: + Updated translations. - Update to version 51.beta2: + Fixed focus chain of authentication dialog + Added captions to app screenshots + Fixed propagation of cursor changes + Enabled h264 in flatpak + Self-build libhandy + Fixed connection to IPv6 URIs + Actualized descriptions of protocols in assistant + Handle NULL Common Name in RdpConnection + Do not remove POINTER_MOTION_MASK + Do not store already stored connections + Updated gtk-frdp + Updated translations. ==== gnome-console ==== Version update (50.0 -> 51.0) Subpackages: gnome-console-lang - Update to version 51.0: + Updated translations. - Update to version 51.rc: + Updated translations. - Update to version 51.beta: + This cycle has seen a focus on stability with our ever expanding testsuite helping us iron out some rough edges, alongside tackling issues found in the wild, all whilst keeping pace with developments in the wider platform. + Updated translations. - Update source service to align with current packaging for git managed GNOME. ==== gnome-contacts ==== Version update (50.0 -> 51.0) Subpackages: gnome-contacts-lang gnome-shell-search-provider-contacts - Update version dependencies according to meson.build. - Update to version 51.0: + Contact photos now persist correctly in the Flatpak version after restarting the application + Import errors are now announced to screen readers, improving accessibility of the import dialog + Updated translations. ==== gnome-control-center ==== Version update (50.4 -> 51.1) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users - Update to version 51.1: * Accessibility: Make text-size slider reflect changes under the hood * Keyboard: Fix reverted condition for updating modifier option buttons * Location: Hide invalid "last-access-time" app labels * Mobile Networks: Fix APN dialog header bar buttons visibility * Printers: Accept hyphenated supply marker types * System: Fix class declaration macros typos * Updated translations. - Update version dependencies according to meson.build. - Update to version 51.0: + Main Window: Revert "reparent sidebar on small screens" since it broke sub page animations + Remote Desktop: Add translation comments to "Verify Fingerprint" string + Updated translations. - Update to version 51.rc.1: + Build: Bump dependency on gsettings-desktop-schemas to 51.beta + Main Window: Move focus to the panel content when activating item in the sidebar + Accessibility: - Fix "Configure Screen Reader" button not launching Orca settings - Fix segfault when launching "Sound" settings from "Hearing" page + Apps: - Add drop-shadow style to default app combo icons - Fix a11y of default app combo items (so screen readers can read it) - Request global-shortcuts portal to rebind shortcuts on removal + Color: Improve keyboard navigation of devices list (a11y) + Fingerprints: - Fix margings in dialog status page - Fix critical for packing verify button in AdwPreferencesPage directly + Keyboard: Fix crash when removing key combos for global shortcuts + Mobile Networks - Align no-sim status page vertically - Port APN selection dialog to AdwDialog + Notifications: Hide apps not set for the current desktop environment (.desktop OnlyShowIn) + Users: - Fix changing user avatar not updating visible page - Rename fingerprint row title + Updated translations. - Update to version 51.beta: + Build: Require libgnome-desktop >= 51.alpha + About: - Add button to open GNOME release notes - Show "GNOME Shell Version" instead of "GNOME Version" + Apps: Show icons in the default-apps drop down options + Accessibility: Add setting to disable focus timeout + Date and Time: Disable ellipzation for one AdwComboRow + Global shortucts: Add "ConfigureShortcuts" + Graphic Tablets (Wacom): Modernize the button mapping fallback dialog + Network: Hide automatic DNS and route toggle in Manual mode + Main Window (Shell): Rework the navigation view and loading of panel pages + Users: - Add new fingerprint management interface - Disable keeping user data if deleting a homed user - Disable auto-login for homed users + Wi-Fi: Fix visible overflow on the Wi-Fi list widget + Updated translations. - Update to version 51.alpha: + Remove Flatpak build support + Merge all panels CSS files into a single global stylesheet + Apply clang-format globally and update coding style + Drop "development" profile + Accessibility: - Add description to the screen reader settings button - Add semantic accessible names to cursor sizes - Fix keyboard navigation between cursor sizes - Give CcSplitRow's radio group a label and role + About (System Details): - Remove Windowing System field - Reorder "Software/Hardware" information groups - Merge system details into toplevel about page - Port "Copy" button to AdwButtonRow + Applications: - Call GNOME Software via D-Bus instead of CLI - Define GNOME Software desktop id only once + Color: Avoid dead nested assignment + Date & Time: Use GtkEnumList + Display: - Add "Auto Rotate" row for devices with accelerometer - Add center-aligned snapping for horizontal edges - Don't allow disabling if it's the last display available - Update cursor styles for hover and drag interactions + Keyboard: - Fix compose key 'á' example - Don't update shortcuts when closing dialog - Improve "Press Esc to cancel [...]" hint - Drop only the colliding combo when rebinding shortcuts - Turn CcKeyboardShortcutDialog into a subpage - Drop nested navigation view in shortcuts page - Port GtkShortcutLabel to AdwShortcutLabel ... changelog too long, skipping 61 lines ... - Add pkgconfig(gnome-qr-gtk-4) BuildRequires: New dependency. ==== gnome-desktop ==== Version update (44.5 -> 51.0) Subpackages: gnome-desktop-lang libgnome-desktop-3_0-common libgnome-desktop-4-2 typelib-1_0-GnomeBG-4_0 typelib-1_0-GnomeDesktop-4_0 - Update version dependencies according to meson.build. - Update to version 51.0: + Updated translations. - Update to version 51.alpha: + New API to generate qr codes. See gnome-qr.h and gnome-qr-gtk.h for details of the api. The new apis are installed as separate shared libraries (libgnome-qr-4.so and libgnome-qr-gtk-4.so). To use in your code, use the pkg-config files gnome-qr-4.pc and gnome-qr-gtk-4.pc. + Bugs fixed: - Introduce gnome-qr library - build: Enable tests again - thumbnail: Fix overly broad path check in can_thumbnail + Updated translations. - Drop typelib-1_0-GnomeRR-4_0 sub-package, no longer built, dropped upstream. - Bump libgnome-desktop soname to 3-21 following upstream changes. - Package new sub-packages: libgnome-qr-4-0, libgnome-qr-gtk-4-0, typelib-1_0-GnomeQR-4_0 and typelib-1_0-GnomeQRGtk-4_0. - Split out shared library in its own sub-package: libgnome-bg-4-2 ==== gnome-keyring ==== Version update (50.0 -> 51.1) Subpackages: gnome-keyring-32bit gnome-keyring-lang gnome-keyring-pam gnome-keyring-pam-32bit libgck-modules-gnome-keyring - Update to version 51.1: + daemon: Fix double unref of session. - Update to version 51.0+1: + fix: plug memory leaks on early returns. - Update to version 51.0: + daemon: - Register the login collection on D-Bus on creation - Fix D-Bus double response issue in secret service methods - Fix crash when prompt is dismissed - Don't leak session on GetSecret/Unlock - Fix memory leaks in DH key exchange that grow with every client connection + build: Restore gettext i18n init broken during meson port + Fix potential FD leak in gkm_rpc_layer_startup + Drop conversion from GConf + Updated translations. - Drop 04a6bc68ff4350676c5fc55d1b244a17224fbea2.patch: fixed upstream. - Add check section and call meson_test therein through dbus-run-session. (except on i586; test suite has no priority to upstream on 32bit architectures). ==== gnome-mahjongg ==== Version update (49.1.1 -> 51.1) Subpackages: gnome-mahjongg-lang - Update to version 51.1: + Fix a crash in the Scores dialog + More balanced light background color for Smooth theme - Update to version 51.0: + Add new animation for showing pause menu + Add missing mnemonic to 'Resume Game' button + Add missing translations for 'Clear Scores' string + Bump minimum GTK version to 4.22 + Upgrade license to GPLv3+ + Updated translations. ==== gnome-maps ==== Version update (50.5 -> 51.2) Subpackages: gnome-maps-lang - Update to version 51.2: * Avoid some GTK warnings when rendering public transit itineraries * Do not try rendering shape layers if loading is not complete * Updated translations. - Update version dependencies according to meson.build. - Update to version 51.1: + Fix showing correct POI type names in some cases that were broken in our import script from id-tagging-schema since changes lately + Updated translations. ==== gnome-remote-desktop ==== Version update (50.2 -> 51.0) Subpackages: gnome-remote-desktop-lang - Update version dependencies according to meson.build. - Update to version 51.0: + Fix pid reuse vulnerability in the smartcard redirection + Add smartcard redirection documentation + Signal full range BT.709 in the AVC bitstreams + Misc bug fixes & cleanups + Updated translations. - Update to version 51.rc+4 (boo#1276523): + daemon-utils: - Use pidfd instead of pid to get session ID - Add helper to get a session ID from a pidfd - Remove unnecessary g_steal_pointer() + Updated translations. - Update to version 51.rc: + Add support for Kerberos multi user remote login + Fix Vulkan image allocation + Fix building on 32 bit architectures + Misc bug fixes & cleanups - Register gnome-remote-desktop-pcscd.service as systemd_unit, to ensure the rpm scriptlets handle that service too. - Update to version 51.beta: + Fix video corruption when using VA-API + Add support for smartcard redirection + Misc bug fixes & cleanups + Updated translations. - Update to version 51.alpha: + Simplify GDM remote display handling + Updated translations. ==== gnome-session ==== Version update (50.1 -> 51.0) Subpackages: gnome-session-lang - Update to version 51.0: + Fixed bug where oo7-daemon.service never starts by default + Updated translations. - Update to version 51.rc: + Switched to dbus for looking up logind graphical session + Downgraded logout inhibitors from strong to weak, as a stop-gap fix for buggy inhibitor behavior + Updated translations. - Update to version 51.beta: + Added `SessionIsLocked` and `SessionClass` properties on D-Bus + Updated mimeapps.list: removed Shaper, since it was split out of GTK into its own app + Fixed regression in screen blanking / idle handling + Updated translations. - Update to version 51.alpha: + Enabled use of oo7-portal as the implementation of the Secret portal + Updated mimeapps.list for removal of gcr3, and expansion of Loupe's supported mime types + Applied various code cleanups from gobject linter + Fixed a double-free bug - Drop hicolor-icon-theme Requires, gnome-session does not need this anymore. ==== gnome-settings-daemon ==== Version update (50.1+6 -> 51.1) Subpackages: gnome-settings-daemon-lang - Update to version 51.1: * Housekeeping: Update donation notification to fetch the ongoing campaign message from https://donate.gnome.org/api/campaign, and provide distro/campaign information for analytics in the URL opened by the "Donate" button in the notification. * Updated translations. - Update version dependencies according to meson.build. - Rebase g-s-d-skip-donation.patch. - Update version dependencies according to meson.build. - Update to version 51.0: + Updated translations. - Update to version 51.rc: + Power: Avoid overlap between panel dimming and idle sleep notification + CI improvements + Updated translations. - Update to version 51.beta: + Usb-protection: - Refactors and improvements - Rely on newer gnome-session for active session tracking + Updated translations. - Rebase patches with quilt. - Drop patch fixed differently upstream: + 0001-usb-protection-Treat-hubs-and-HID-devices-like-any-o.patch - Update to version 51.alpha: + Update gnome-volume-control dependency + Housekeeping: - Fix launching baobab - Fix use-after free + Power: Make temporary unidle play well with inhibitors + Updated translations. ==== gnome-shell ==== Version update (50.5 -> 51.1) Subpackages: gnome-shell-calendar gnome-shell-lang - Update to version 51.1: * Improve web login and banner layout * Fix workspace thumbnail centering in RTL * Fix legacy auth services messages interfering with SSSD * Fix applying color filter when using full grayscale * Fix closing mount notification on drive disconnect * Use gnome-autoar for extracting extensions * Allow mutter to fall back to XCursor * Fix clock position on lock screen * Fix quick settings preventing direct scanout * Plugged leaks * Misc. bug fixes and cleanups * Updated translations. - Update version dependencies according to meson.build. - Update to version 51.0: + Don't duplicate locale keyboard layout + Fix activating network items in quick settings + Improve lock/login screen styling + Cancel mount password dialogs when locking screen + Validate serilized image data before creating pixbuf + Fixed crash + Plugged leaks + Misc. bug fixes and cleanups + Updated translations. - Drop e5c2018d.patch: fixed upstream. - Add e5c2018d.patch: status/network: Restore chain up on activate() with a Clutter.Event. Fixes VPN connection not being activatable from the GNOME Shell menu. - Update to version 51.rc: + Fix glitch when switching workspaces with direct scanout + Use glycin to load and cache background images + Support building with libical4 + Refuse to unlock screen after screen time limit was reached + Fix blocking when toggling wireless toggle + Continue port from raw event handlers to controllers + Fix focusing calendar app from reminder notification + Don't show busy cursor when activating actions + Fix race condition that prevents password prompt from showing + Fix glitch when cancelling lock screen prompt with Esc + Track magnifier mouse position without polling + Limit parallel texture loading operations + Focus first menu item when opened via keyboard + Fix race condition when enabling extensions + Open windows created via new-window action on correct workspace + Plugged leak + Misc. bug fixes and cleanups + Updated translations. - Add pkgconfig(glycin-2) BuildRequires: new dependency, moved to gnome-shell from mutter. - Update to version 51.beta: + Fix glitch when switching to minimized window on another workspace + Add initial support for 'reduced-motion' setting + Explicitly disallow async disable() methods in extensions + Add SVG-based cursor implementations + Continue port from raw event handlers to controllers + Improve keyboard navigation of screenshot area selection + Support COPY, CUT and PASTE action keys in entries + Fix miscaled magnified cursor on HiDPI + Fix sound glitch when pushing redundant volume changes + Refine auth prompt UX + Add support for web login and unified auth mechanism + Handle event reminder notifications + Fix removing arbitrary provider when removing unregistered search provider + Misc. bug fixes and cleanups + Updated translations. - Add pkgconfig(librsvg-2.0) BuildRequires: new dependency for SVG based cursors. - Update to version 51.alpha: + Fix autorun notification for connected USB drives + Fix reapplying layout on `xkb-options` changes + Expose slow-down-factor in looking glass + Improve app grid accessibility + Support touch scrolling in ScrollView + Use custom sound effects instead of sound theme + Use more readable St.ButtonMask values + Save and restore monitor brightness + Support elogind as libsystemd provider + Prevent workspaces from being removed mid-animation + Support version 2 of text_input_v3 protocol + Improve UI for conflicting sessions on login screen + Announce search result description to screen readers + Improve animation when expanding app grid label + Replace GLSLEffect with ClutterShaderEffect + Fix spacing in lock screen media notifications + Add support for start/end text-align + Pass params object to popupMenu open()/close() methods + Split extensions-app into its own repository + Plugged leak + Misc. bug fixes and cleanups + Updated translations. - Bump mutter_api define to 51 and mutter_req define to 51.alpha following upstream changes. - Drop gnome-extensions sub-package, split out to new stand-alone package upstream - Filter typelib(Malcontent) from the dependency list: the latest upstream version cannot be included in openSUSE due to pending CVEs, where upstream confirmed not having time to address them ... changelog too long, skipping 82 lines ... package upstream ==== gnome-software ==== Version update (50.4 -> 51.1) Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Update to version 51.1: * Various user interface fixes * Fix an unlikely crash when downloading icons * Fix triggering a second refresh on the updates page * Updated translations. - Update to version 51.0+22: * src: Ensure broken markup won't leave stale text in labels * gs-plugin-loader: Add missing NULL check for icon downloader * Updated translations. - Update version dependencies according to meson.build. - Disable parental control (malcontent) for now: upstream does not have resources to maintain malcontent and address CVEs. We do not want to ship it to our users in this case. - Update to version 51.0: + Updated translations. - Update to version 51.rc: + Various user interface fixes + Updated translations. - Update to version 51.beta: + Improve performance of icons loading + Improve performance of PackageKit repositories refine + Change statistical approach for average rating scores + Updated translations. - Update to version 51.alpha: + Extend Flatpak file permissions list + Warn before installing end-of-life apps + Add tooltips to icon-only buttons in narrow mode + Reuse cached AppStream data on start-up to improve performance + Fixed few memory leaks + Updated translations. - BuildRequire pkgconfig(glib-testing-0): new dependency. - Temp disable testsuite, it currently fails! ==== gnome-sudoku ==== Version update (50.4 -> 51.0.1) Subpackages: gnome-sudoku-lang - Update to version 51.0.1: + Fix flatpak. - Update to version 51.0: + Update translations. - Update to version 51.rc: + Fix redo button visibility not updating when toggling Show Timer + Partly fix numbers sometimes leaving artifacts on removal + Updated translations. - Update to version 51.beta: + Separate the vertical UI from the small UI + Ship more icons with the application: clock, play and pause + Use the sudoku namespace for icons shipped with the application + Hide redo button over earmark mode button when size constrained + Expand grid margin from top left, this is a 2 pixel difference + Fix numbers rarely having different sizes + Scale paused label with height aswell as width + Scale paused label on resize + Updated translations. - Replace appstream-glib with AppStream BuildRequires: appstream-cli is what meson setup checks for. - Update to version 51.alpha: + Add a new user interface for vertical aspect ratios and small screens + Limit long press to touch based devices + Update slate, teal and pink accent colors in light mode + Replace the clock by a medal if a highscore is achieved + Always focus suggested responses in alert dialogs + Add accessibility label for the clock + Updated translations. ==== gnome-system-monitor ==== Version update (50.0 -> 51.1) Subpackages: gnome-system-monitor-lang - Update to version 51.1: * Remember window location on X11 * Fixed crash on systems without libselinux * Updated translations. - Update version dependencies according to meson.build. - Update to version 51.0: + Updated translations. - Update to version 51.rc: + Updated translations. - Update to version 51.beta: + Fixed summary units in process table + Improve code of systemd/selinux/cgroups + Improved process actions wording + Use correctly translatable disk read/write rate units + Fixed multiple Icon text on preferences + Improve cgroups performance + Fixed compile failure + Updated translations. - Drop pkgconfig(catch2-with-main) BuildRequires: No longer needed, nor used. - Refresh patch with quilt. ==== gnome-text-editor ==== Version update (50.1 -> 51.0) Subpackages: gnome-text-editor-lang - Update to version 51.0: + Fix tooltip for subtitle when using document portal + Updated translations. - Update to version 51.beta: + Allow move-next and previous when search bar is closed + Build/CI updates + Minor code cleanups ==== gsettings-desktop-schemas ==== Version update (50.1 -> 51.0) Subpackages: gsettings-desktop-schemas-lang - Update to version 51.0: + Updated translations. - Update to version 51.rc: + Added setting for custom pointer acceleration profile + Remove gconf schema migration files + Updated translations. - Update to version 51.beta: + Add setting to configure the focus ring visibility timeout + Add 'orientation-lock' setting to take over the g-s-d setting + Updated translations. - Update to version 51.alpha: + Add scroll speed setting for touchpads + Add the ability to enable button scrolling on a mouse + Increase default maximum thumbnail cache from 512MB to 2GB + Updated translations. ==== gtk4 ==== Version update (4.22.5 -> 4.24.1) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.24.1: + Bugs fixed: - search-entry: Needs extra touch to show OSK although it has focus - text-input: Preedit gets cleared due to text-change-cause - GtkSvgWidget can't parse '@media' if it is not on a new line - gtkmain: Split out debug code - gtkgstsink: release GL context on disposal - Post-release version bump - Fix typo in CONTRIBUTING.md - texthandle: fix transformation issues & relative movement - Fix typo ('witten' should be 'written') - searchbar: Show OSK when search-mode gets enabled - docs: Correct docs for allocation functions - textbuffer: Fix tag colors in accessible text attributes - gtk/inscription: Refresh GtkInscription's PangoLayout when rooted - text: Protect against invalid offset - macos: fix cursor keys - various fixes - gl: Create 2 fbos per frame instead of 1 per image - textview: Make text handles visible after giving them a position + Updated translations. - Update version dependencies according to meson.build. - Update to version 4.24.0: + Bugs fixed: - Animated SVG frequently disappears - Drop-performed class handlers read a phantom timestamp and send it in XdndDrop - GtkColumnView: sortable column headers expose no AT-SPI action, so sorting is unreachable for assistive technology - Media queries are not respected - svg: if the only animations in an svg are visibility animations elementa stay at initial value - Crash triggered by gtk_text_accessible_text_get_extents() - CUPS Secret Service authentication causes use-after-free in lookup_auth_info_cb() - Fix mismatches between parameters in four signal declarations and the corresponding class slots - gtkaccesskitcontext: Expose GActions as custom actions - gtk: Repair action muxer subscriptions - gsk: Allow conics with weight zero - docs: Update release howto - vulkan: Always update global buffer descriptor set - svg: Fix run mode discrete - memoryconvert: Pass the correct pointer address - curve: Add gsk_curve_get_extrema - Some frame clock fixes - gdkclipboard-x11: don't call a NULL converter + Updated translations. - Update to version 4.23.4: + Bugs fixed: - AT-SPI attempts to use /org/a11y/atspi/cache before it is ready w/gtk4 apps - GtkListView misses items - Issue: Fix Memory Leaks and Potential Crashes in GTK Components - GtkConstraintLayout: non-required inequality constraints release an error variable twice - Wayland: SIGSEGV in text_input_preedit_hint() when using IBus Chewing in GTK 4 applications - (GtkTextView) Cutting, pasting, or deleting text does not reset virtual cursor position - GtkText's input interceptor logic is too eager - gtk4-demo empty context menu on tabs - The menu bar focusing with F10 is wrong - GtkAccessibleTextInterface mismatch between interface documentation and its implementations - `gtk_test_init` docs incorrect about locale - Shortcut labels in menus started showing keypad/numpad keys instead of regular ones - Enable ubsan in the sanitizers CI build - rendernode: Add bilevel opacity flag - listbase: Sanity-check alignment values - inspector: Add a frametime overlay - gsk/vulkan: put the globals in a UBO instead of push constant - demos/gtk-demo: Drop nonexistent session-id property - android/contentfile: Return NOT_SUPPORTED for foreign copy sources - Update glib and GStreamer deps and move Fedora CI to F45 - svg: Make symbolic rendering opt-in - svg: Add tests for symbolic rendering - svg: Avoid a crash - svg: Serialize gpa:rendering - placesview: Small cleanup - various fixes - gsk: Fix a typo in quad printing - gsk/gpu: avoid GPU draw ops for zero-ink glyphs - rendernodeparser: Allow naming paths - svg: Fix some state handling mishaps - icons: Add folder-projects-symbolic - adjustment: Respect the reduced-motion setting - gdkcontentserializer: close the string serializer's converter stream - color scale: Make vertical alpha scales work - svg: Avoid unnecessary rendering work - Add a setting for accent color - color scale: Make vertical alpha scales work ... changelog too long, skipping 93 lines ... + Updated translations. ==== gtkmm4 ==== Version update (4.22.0 -> 4.24.0) - Update version dependencies according to meson.build. - Update to version 4.24.0: + Gdk: - KeymapKey: New class. - Add Display::map_keyval() + Gtk: Add Settings::property_gtk_accent_color(). + Build: - Require glibmm >= 2.89.0 - Require gtk >= 4.23.4 - Meson build: Fix missing dependencies, making it possible to build with https://github.com/michaelforney/samurai instead of ninja. - Update to version 4.23.2: + Some unstable API has been removed. + The corresponding API was removed in gtk 4.23.3. + Drop G_GNUC_CONST as in glib + Gdk: - Graphene::Point: Add Point(cobst Vec2& src), distance(), interpolate(). - Graphene::Size: Add scale(), interpolate(). - Add Graphene::Vec2. - Graphene::Rect: Add get_vertices(), join(), intersection(), offset(), inset(), round_extents(), interpolate(), expand(), scale(). - Don't derive gtkmm__GdkXxx GTypes from final types and internal types. - Such declarations have been added to many GdkXxx classes. - Add enum FrameResult. - FrameTimings: Add get_result(). + Gsk: - tools/m4/enum.m4: Flags operators are constexpr also in namespace Gsk. - Add classes Path, PathBuilder, PathMeasure, PathPoint, Stroke. - Add enums LineCap, LineJoin, PathDirection. + Gtk: - Rename EnumList to EnumListBase, add template EnumList. - Snapshot: Add push_fill(), push_stroke(), append_fill(), append_stroke(). - Deprecate EventControllerKey::forward(). - Application: Remove save(), forget(), property_support_save(), property_autosave_interval(), signal_restore_window(), signal_save_state(), signal_restore_state(). - ApplicationWindow: Remove signal_save_state(). - Remove enum RestoreReason. - ATContext: Add property_realized(). - Editable: Add set/unset/get/property_input_interceptor(), signal_input_intercepted(). - Settings: Add property_gtk_keyboard_focus_visible_timeout(). - ShortcutTrigger: Add ShortcutTrigger::create_with_aliases(), create_for_menu(). - SvgWidget: Add property_svg(). + Documentation: Gtk::AlternativeTrigger: Update class description. + Demos: DropDown demo: Add a DropDown using EnumList. + Build: - Meson: Don't export Vulkan as an installed dependency. - Require gtk4 >= 4.23.3 - Update to version 4.23.0+17: + Gtk: Remove API as in gtk 4.23.3 - Update to version 4.23.0+16: + meson: Don't export Vulkan as an installed dependency + Drop G_GNUC_CONST as in glib + Gdk: Don't derive gtkmm__GdkXxx GTypes from internal types + Deprecate Gtk::EventControllerKey::forward() + Gdk::Graphene::Rect: Add get_vertices(), etc. + Update gtk_docs_override.xml + Gdk::Graphene::Point: Remove distance_squared() + Gtk::Snapshot: Add push_fill(), etc. + Gsk: Add classes Path, PathBuilder, PathMeasure, PathPoint, Stroke - Switch to source service for tarball: + Pass -Dmaintainer-mode=true to meson: the generated C sources are not in git and need thus be generated. + Add mm-common, m4, and perl-XML-Parser BuildRequires: needed for C source generation. - Update to version 4.23.0: + Gdk: contentformats.[ccg|hg]: Add Glib::Value wrapper for GdkFileList. Add Value>> specialization. + Gtk: - Gtk::AccelKey: include . Since gtk 4.23.0 it's not possible to include only gdk/gdkkeysyms.h. - Application: Add save(), forget(), property_support_save(), property_autosave_interval(), signal_restore_winodw(), signal_save_state(), signal_restore_state(). - Editable: Add get/property_complete_text(). - Add enum RestoreReason - Settings: Deprecate property_gtk_application_prefer_dark_theme(), property_gtk_shell_shows_app_menu(), property_gtk_shell_shows_menubar(), property_gtk_shell_shows_desktop(). - Svg: Add set/get/property_overflow(), set/get/property_stylesheet(), set_settings(). - SvgErrorExtra: Add get_input(). - Window: Add signal_force_close(). - New classes: EnumList, EnumListItem, SvgWidget. ... changelog too long, skipping 7 lines ... + Fix build with build-deprecated-api=false. ==== gtksourceview5 ==== Version update (5.20.0 -> 5.22.0) Subpackages: gtksourceview5-lang libgtksourceview-5-0 - Update version dependencies according to meson.build. - Update to version 5.22.0: + Reject non-regular files before opening them in GtkSourceFileLoader + Add a configurable GtkSourceFileLoader max-size limit, defaulting to 1 GiB, for file, stream, and decompressed input + Report oversized loads with GTK_SOURCE_FILE_LOADER_ERROR_TOO_BIG + Centralize checked arithmetic for input sizes and buffer growth + Unwind buffer output streams when file loading fails + Handle stream-based loads without a file location in profiler marks + Expand file loader tests for size limits, compressed input, load failures, and arithmetic boundaries + Fix gutter renderer list and gutter lines leaks + Break a circular reference when line numbers are enabled + Avoid temporary region and text mark allocations in search context intersection checks + Avoid per-line timer allocations in the syntax highlighting engine + Avoid rescanning UTF-8 text to determine line character counts + Reduce scrolling overhead in GtkSourceMap + Fix GtkSourceMap slider sizing and positioning when the map is taller than its contents + Reduce allocations and per-line work when drawing source mark backgrounds + Reduce array access overhead in gutter lines + Fix vertical alignment when jumping to text positions + Improve Vim emulation for command repetition, r, and cw/cW + Add Vim support for +, X, gu, gU, g~, and visual-mode ~ + Add Vim Ctrl-A and Ctrl-X support for signed decimal numbers + Add Vim :set aliases and :noh/:nohlsearch commands + Expand Vim input tests for commands, motions, and repetition + Use canonical property names and static strings for properties + Add missing API version annotations and correct function attributes + Updated translations. - Update to version 5.21.0: + This is an unstable release for GNOME 51.alpha + GtkSourceFileLoader now rejects non-regular files before opening + GtkSourceFileLoader now bounds expanded input size, including decompressed input, and reports oversized loads cleanly + GtkSourceFileLoader now unwinds buffer output streams on load failure + Fix gutter and gutter lines leaks + Break a circular reference when line numbers are enabled + Improve Vim emulation for repeated commands, r, cw/cW, +, X, gu, gU, g~, Ctrl-A, Ctrl-X, and :set aliases + Fix vertical alignment when jumping to iters + Improve context engine and search context performance + Use canonical property names and static strings for properties + Updated translations. ==== gvfs ==== Version update (1.60.3 -> 1.62.0) Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-gphoto gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Update version dependencies according to meson.build. ==== ibus ==== Version update (1.5.34 -> 1.5.35~rc1) Subpackages: ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-lang libibus-1_0-5 typelib-1_0-IBus-1_0 - Update to version 1.5.35~rc1: + Build with Meson 1.5 or later + Support XKB latch keys in Wayland input-method + Support use-system-keymap setting in Wayland input-method + Support forwarding key events in Wayland input-method V2 - Drop upstream merged patches: + 1a331e695d84fc6bae8f2d11c52d4776df49647b.patch + 5bbe88a1936246185a65f76e58cc85871401e59a.patch + c534999a9dbea2666864250d74e058ecfb46e76f.patch - Backport one more patch to fix another GNOME 51 / GTK4 crash: + c534999a9dbea2666864250d74e058ecfb46e76f.patch (glgo#GNOME/gtk#8503) ==== ibus_gtk4 ==== Version update (1.5.34 -> 1.5.35~rc1) - Update to version 1.5.35~rc1: + Build with Meson 1.5 or later + Support XKB latch keys in Wayland input-method + Support use-system-keymap setting in Wayland input-method + Support forwarding key events in Wayland input-method V2 - Drop upstream merged patches: + 1a331e695d84fc6bae8f2d11c52d4776df49647b.patch + 5bbe88a1936246185a65f76e58cc85871401e59a.patch + c534999a9dbea2666864250d74e058ecfb46e76f.patch - Backport one more patch to fix another GNOME 51 / GTK4 crash: + c534999a9dbea2666864250d74e058ecfb46e76f.patch (glgo#GNOME/gtk#8503) ==== java-25-openjdk ==== Subpackages: java-25-openjdk-headless - Modified patch: * JDK-8395142-25u.patch + augment the patch with upstream changes following the annoucement of eMudhra's exit from global SSL/TLS certificate business + it removes the set of impacted root CA certificates related to eMudhra (bsc#1287962, CVE-2026-114820) ==== kactivitymanagerd6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kactivitymanagerd6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kde-cli-tools6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kde-cli-tools6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kde-gtk-config6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kde-gtk-config6-gtk3 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kdecoration6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libkdecorations3-6 libkdecorations3-6-lang libkdecorations3private2 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kdeplasma6-addons ==== Version update (6.8.1 -> 6.8.2) Subpackages: kdeplasma6-addons-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * wallpapers/tiled: Animate animated images again (kde#516541) * applets/webbrowser: Apply the fixed zoom factor after each page load (kde#485583) * wallpapers/potd: Make the preview match Scaled, Centered and Tiled (kde#505690) * applets/webbrowser: Allow pages to read and write to the clipboard (kde#523381) * applets/mediaframe: fix adding files/folders ==== kglobalacceld6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libKGlobalAccelD6-0 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kinfocenter6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kinfocenter6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * kcms/energy: Don't read properties of a null battery ==== kmenuedit6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kmenuedit6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== knighttime6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libKNightTime0 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kpipewire6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWire6-lang libKPipeWireDmaBuf6 libKPipeWireMonitor6 libKPipeWireRecord6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * libx264encoder: Tell libx264 the stream's frame rate (kde#526931) * PipeWireBaseEncodedStream: Apply a requested size set before starting ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Package /var/log/krb5 in krb5-server (mode 0700, as created by krb5-log.tmpfiles) so the directory the krb5-server logrotate config rotates is owned by a package, and move krb5-log.conf (the tmpfiles entry creating it) and its %tmpfiles_create call from the main package to krb5-server, where both belong; client-only installs no longer create the server log directory - Mark the LDAP schema templates (kerberos.schema, kerberos.ldif) %config(noreplace) like the package's other config files - Annotate the /var/lib/kerberos/krb5 and .../user %ghost state directories with their real mode (0755, per krb5.tmpfiles) - Drop the duplicated kinit/klist entries from %files client - Drop three dead rpmlintrc filters (files-duplicate for css and png files and shlib-policy-missing-suffix); nothing in the current file lists matches them ==== kscreen6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kscreen6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kscreenlocker6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kscreenlocker6-imports kscreenlocker6-lang libKScreenLocker6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== ksshaskpass6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: ksshaskpass6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== ksystemstats6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: ksystemstats6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kwayland-integration6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kwayland6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libKWaylandClient6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== kwin6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: kwin6-lang libkwin6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Too many changes since 6.8.1, only listing bugfixes: * keyboard_layout: Keep an application's layout after its last window closes (kde#476831, kde#452445) * backends/drm: move direct scanout device check to the compositor (kde#527544) * wayland/pointerconstraints_v1: fix state being overwritten (kde#527675) * backends/drm: disable post-blend offloading if color pipelines aren't supported (kde#527628) * multigpuswapchain: more correctly check the buffer type (kde#527591) * multigpuswapchain: fix synchronization with EGL copy (kde#527591) * Lower pip surfaces in the stack (kde#527648) * plugins/stickykeys: Latch and lock modifiers on key release (kde#509714) * plugins/slidingnotifications: Fix instant animation speed handling (kde#527478) * backends/drm: don't allow post-blend offloading with legacy (kde#527421) * plugins/startupfeedback: Fix icon sizing (kde#527308) * inputmethod: Fix visible in virtual keyboard dbus API (kde#527067) * outputconfigurationstore: allow generating a completely new config (kde#527401) * qpa: Guard against resizes in EGLPlatformContext::swapBuffers() (kde#527269) ==== layer-shell-qt6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libLayerShellQtInterface6 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== libHX ==== Version update (5.4 -> 5.5) - Update to release 5.5 * io, proc, rand: set O_CLOEXEC on all newly generated file descriptors ==== libadwaita ==== Version update (1.9.4 -> 1.10.0) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.10.0: + AdwAnimation: Fix AdwCallbackAnimationTarget annotations + AdwActionRow: Ensure :use-markup property is set in constructed() + AdwStatusPage: Stop using :last-child in styles + AdwSidebar/AdwViewSwitcherSidbar: Document how to display suffix at the bottom + AdwTabBar/AdwTabGrid: Clear a dangling idle callback in dispose + Build: - Fix release builds requiring sassc - Depend on glib 2.89.3 + Stylesheet: Support .flat and .raised for GtkDropDown + Update icons from devkit + Updated translations. - Update to version 1.10.beta.1: + Build: Ministream-related fixes + AdwAboutDialog: - Fix a bug with deselecting text in the legal section - Animate showing/hiding the title on the main page + AdwActionRow: Don't emit signals in dispose + AdwPreferencesRow: Warn when placed + AdwSidebarItem: Add :prefix + AdwSidebarSection: Add :suffix + AdwTabOverview: Make sure we don't round corners in adaptive preview + AdwWindow/AdwApplicationWindow: Fix false minimum size warnings in adaptive preview + Update internal icons + Docs: Use more detailed placeholder comments in examples + Updated translations. - Update to version 1.10.alpha.1: + Include ministream sources into release tarballs. + Updated translations. - Update to version 1.10.alpha: + Add translation comments across the project + Add AdwCssClassBinding + Deprecate AdwEnumListModel; switch everything to GtkEnumList: - Require GTK 4.23.1 - Depend on ministream instead of appstream - Make it possible to build on Android + Adaptive preview: - Try to contain window styles within the preview - Collapse the sidebar on small sizes - Fix casing in a message - Don't make device model names and Phosh names translatable + AdwAboutDialog: Add :other-apps-title + AdwAboutDialog and AdwAboutWindow + AdwApplication: Speed up initial style loading + AdwBreakpointBin: - Fix initial focus - Reduce the number of notify::opacity emissions on children + AdwOverlaySplitView: Add a unique style class to the overlay sidebar + AdwShortcutLabel: - Use a more natural modifier ordering - Improve key labels on macOS - Add :prefix and :suffix + AdwSpinnerPaintable: - Support icon weight - Implement Android settings backend - Speed up initial loading + AdwSwipeTracker: Ignore mostly orthogonal touchpad scrolls + AdwViewSwitcherSidebar: - Add :prefix and :suffix - Fix a leak + Demo: Adjust shortcuts on macOS + Examples: - Fix a build error - Reduce icon weight for large icons - Improve popover shadow - Fix svg asset rendering with newer GTK - Adapt to GtkSpinner changes in newer GTK - Fix a copypaste error + Update internal icons + Various cleanups + Updated translations. - Replace pkgconfig(appstream) with pkgconfig(ministream) following upstream changes. ==== libarchive ==== Version update (3.8.9 -> 3.8.10) - Update to 3.8.10 (security, bugfix and minor feature release): * 7z: add Delta, RISCV, ARMTHUMB and IA64 filters for non-lzma archives * Support message digests via nettle 4 and mbedtls 3 * tar: add --mode option for GNU tar compatibility * Hardening fixes: iso9660 boot-image block count overflow, two reader use-after-free paths, compress flush 1-byte heap overflow, bsdunzip use-after-free, rar5 integer overflow, integer conversion hardening in lha and iso9660 * No soname change: libarchive.so.13 unchanged - Drop obsolete Group: tags; encode upstream libxml2 >= 2.7.3 floor. ==== libglycin ==== Version update (2.1.5 -> 2.2.5) - Update to version 2.2.5: * This release contains the following new component versions: + Glycin-core 4.0.5 + Glycin 4.0.5 + Glycin-builtin 4.0.5 + Glycin-external 4.0.5 + Libglycin 2.2.5 + Libglycin-gtk4 2.2.5 * Fixed: + Require gufo-exif 0.5.5 to avoid reading exif values from incorrect positions in some images. + Libglycin: Don't panic when trying to lookup an infinite pixel density. Instead, don't return any pixel density. + Meson/thumbnailer: Ensure that libglycin is built before glycin-thumbnailer. - Pass libglycin=true to meson setup in glycin-loaders.spec.inc following upstream changes. - Update to version 2.2.4: * This release contains the following new component versions: + Glycin-core 4.0.4 + Glycin-image-rs 2.2.4 + Glycin 4.0.4 + Glycin-builtin 4.0.4 + Glycin-external 4.0.4 + Libglycin 2.2.4 + Libglycin-gtk4 2.2.4 * Fixed: + Require gufo-exif 0.5.4 to avoid a panic in exif lookup for certain images. + Glycin: Longer magic byte strings in config identifiers now have a higher priority. This fixes cursors being sometimes identified as TGAs. - Update to version 2.2.3: * This release contains the following new component versions: + Glycin-core 4.0.3 + Glycin-image-rs 2.2.3 + Glycin 4.0.3 + Glycin-builtin 4.0.3 + Glycin-external 4.0.3 + Libglycin 2.2.3 + Libglycin-gtk4 2.2.3 * Fixed: + Require gufo-exif 0.5.3 which fixes parsing issues with non-Canon MakerNote entries. This can cause images not to be rotated according to the Orientation tag. + Image-rs/animation: Drop thread after the Image.done D-Bus method is called. + Image-rs: Prevent channel with animation frames from filling up, causing a effective memory leak. + Libglycin: Don't block main thead in `get_mime_types`. * Changed: Glycin: Canonicalize paths of "Exec" keys when loading configs. - Update to version 2.2.2: * This release contains the following new component versions: + Glycin-core 4.0.2 + Glycin 4.0.2 + Glycin-builtin 4.0.2 + Glycin-external 4.0.2 + Libglycin 2.2.2 + Libglycin-gtk4 2.2.2 * Fixed: Set the unix socket sending the image data to the loader to non-blocking. Otherwise, small socket send buffer configurations might lead to infinite blocking. - Update to version 2.2.1: + This release contains the following new component versions: - glycin-utils 5.0.1 + Fixed: Don't mmap already write sealed memfds as shared. This is only supported since Linux 6.7 . - Update to version 2.2.0: + This release contains the following new component versions: - glycin-common 2.0.0 - glycin-core 4.0.0 - glycin-heif 2.2.0 - glycin-image-rs 2.2.0 - glycin-jxl 2.2.0 - glycin-raw 2.2.0 - glycin-svg 2.2.0 - glycin-test 2.2.0 - glycin-thumbnailer 2.2.0 - glycin-utils 5.0.0 - glycin 4.0.0 - glycin-builtin 4.0.0 - glycin-external 4.0.0 - libglycin-gtk4-rebind 0.2.0 - libglycin-gtk4-rebind-sys 0.2.0 - libglycin-rebind 0.2.0 - libglycin-rebind-sys 0.2.0 - libglycin 2.2.0 - libglycin-gtk4 2.2.0 + Fixed: - glycin/sandbox: Fix compilation on 32 bit architectures - Update to version 2.2.beta.1: + This release contains the following new component versions: - glycin-core 4.0.0-beta.1 - glycin-heif 2.2.0-beta.1 - glycin-image-rs 2.2.0-beta.1 - glycin-jxl 2.2.0-beta.1 - glycin-raw 2.2.0-beta.1 - glycin-svg 2.2.0-beta.1 - glycin-test 2.2.0-beta.1 ... changelog too long, skipping 157 lines ... + Changed: svg: Don't limit the size of elements in the SVG ==== libglycin-gtk4 ==== Version update (2.1.5 -> 2.2.5) - Update to version 2.2.5: * This release contains the following new component versions: + Glycin-core 4.0.5 + Glycin 4.0.5 + Glycin-builtin 4.0.5 + Glycin-external 4.0.5 + Libglycin 2.2.5 + Libglycin-gtk4 2.2.5 * Fixed: + Require gufo-exif 0.5.5 to avoid reading exif values from incorrect positions in some images. + Libglycin: Don't panic when trying to lookup an infinite pixel density. Instead, don't return any pixel density. + Meson/thumbnailer: Ensure that libglycin is built before glycin-thumbnailer. - Pass libglycin=true to meson setup in glycin-loaders.spec.inc following upstream changes. - Update to version 2.2.4: * This release contains the following new component versions: + Glycin-core 4.0.4 + Glycin-image-rs 2.2.4 + Glycin 4.0.4 + Glycin-builtin 4.0.4 + Glycin-external 4.0.4 + Libglycin 2.2.4 + Libglycin-gtk4 2.2.4 * Fixed: + Require gufo-exif 0.5.4 to avoid a panic in exif lookup for certain images. + Glycin: Longer magic byte strings in config identifiers now have a higher priority. This fixes cursors being sometimes identified as TGAs. - Update to version 2.2.3: * This release contains the following new component versions: + Glycin-core 4.0.3 + Glycin-image-rs 2.2.3 + Glycin 4.0.3 + Glycin-builtin 4.0.3 + Glycin-external 4.0.3 + Libglycin 2.2.3 + Libglycin-gtk4 2.2.3 * Fixed: + Require gufo-exif 0.5.3 which fixes parsing issues with non-Canon MakerNote entries. This can cause images not to be rotated according to the Orientation tag. + Image-rs/animation: Drop thread after the Image.done D-Bus method is called. + Image-rs: Prevent channel with animation frames from filling up, causing a effective memory leak. + Libglycin: Don't block main thead in `get_mime_types`. * Changed: Glycin: Canonicalize paths of "Exec" keys when loading configs. - Update to version 2.2.2: * This release contains the following new component versions: + Glycin-core 4.0.2 + Glycin 4.0.2 + Glycin-builtin 4.0.2 + Glycin-external 4.0.2 + Libglycin 2.2.2 + Libglycin-gtk4 2.2.2 * Fixed: Set the unix socket sending the image data to the loader to non-blocking. Otherwise, small socket send buffer configurations might lead to infinite blocking. - Update to version 2.2.1: + This release contains the following new component versions: - glycin-utils 5.0.1 + Fixed: Don't mmap already write sealed memfds as shared. This is only supported since Linux 6.7 . - Update to version 2.2.0: + This release contains the following new component versions: - glycin-common 2.0.0 - glycin-core 4.0.0 - glycin-heif 2.2.0 - glycin-image-rs 2.2.0 - glycin-jxl 2.2.0 - glycin-raw 2.2.0 - glycin-svg 2.2.0 - glycin-test 2.2.0 - glycin-thumbnailer 2.2.0 - glycin-utils 5.0.0 - glycin 4.0.0 - glycin-builtin 4.0.0 - glycin-external 4.0.0 - libglycin-gtk4-rebind 0.2.0 - libglycin-gtk4-rebind-sys 0.2.0 - libglycin-rebind 0.2.0 - libglycin-rebind-sys 0.2.0 - libglycin 2.2.0 - libglycin-gtk4 2.2.0 + Fixed: - glycin/sandbox: Fix compilation on 32 bit architectures - Update to version 2.2.beta.1: + This release contains the following new component versions: - glycin-core 4.0.0-beta.1 - glycin-heif 2.2.0-beta.1 - glycin-image-rs 2.2.0-beta.1 - glycin-jxl 2.2.0-beta.1 - glycin-raw 2.2.0-beta.1 - glycin-svg 2.2.0-beta.1 - glycin-test 2.2.0-beta.1 ... changelog too long, skipping 157 lines ... + Changed: svg: Don't limit the size of elements in the SVG ==== libkscreen6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libKF6Screen8 libKF6Screen8-lang libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== libksysguard6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-lang libksysguard6-plugins - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Only show 2000 data points in Line Chart applet (kde#527627) - Drop patch: * 0001-Drop-org.kde.ksysguard.processlisthelper.applyschedu.patch ==== libnice ==== Version update (0.1.23 -> 0.1.24) Subpackages: gstreamer-libnice libnice10 - Update version dependencies according to meson.build. - Update to version 0.1.24: + API: nice_agent_attach_recv_ex() to retrieve extra message data in recv callback + API: nice_message_extra_data_get_tos() to enable access to IP_TOS/IPV6_TCLASS IP header field of incoming packets + API: stun_usage_bind_run_compat() to allow specifying compatibility mode when sending a binding request + Nicesrc: Attach GstNetControlMessageMeta containing the TOS header field to buffers + Ensure NICE_CANDIDATE_MAX_TURN_SERVERS is obeyed + Ensure nice_agent_get_local_credentials() returns FALSE on error + Fix random crashes + Fix potential heap buffer overflow in UDP-TURN over TCP + Fix compilation on FreeBSD ==== libostree ==== Version update (2026.4 -> 2026.5) Subpackages: libostree-1-1 - Update to version 2026.5: * static-delta: validate bspatch payload offset and length * min-free-space: Use min(3%, 1GB) as default * docs: drop parameters that are no longer in the signatures * ostree-repo: Change argument name in header to match implementation * generator: Skip boot.mount if /etc/fstab has a /boot entry by * static-delta: validate on-disk checksum names when listing deltas * static-delta: bound mode and xattr dict offsets * bin/prune: Keep recent unreferenced commits * prepare-root: Tolerate an existing /sysroot.tmp in the static path * prepare-root: Guard against short digest in load_variant * lib: Validate commit tree checksum length on read * fetcher-curl: Bound header value copies to buffer length * ostree-gpg-verify-result: Strictly match subkeys if suffixed with ! * otcore: Treat only 1 from EVP_DigestVerify as valid * lib: Parse content object header as untrusted * man: Document signed-delta and sign-verify behaviour * core: Throw an error for short ostree.sizes entries * static-delta: Avoid copying bspatch output * static-delta: Simplify mapped content allocation * Two security-related fixes reported ==== libplasma6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libPlasma6-lang libPlasma8 libplasma6-components libplasma6-desktoptheme - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * PlasmaCore.ToolTipArea: don't lower label opacity when there is no heading present ==== libqaccessibilityclient-qt6 ==== Subpackages: libqaccessibilityclient-qt6-0 - Drop the Qt 5 flavor ==== librsvg ==== Version update (2.62.4 -> 2.63.4) Subpackages: librsvg-2-2 typelib-1_0-Rsvg-2_0 - Update to version 2.63.4: * Handle EXIF orientation in images, and handle the image-orientation property. Note that the only values supported for this property are 'from-image' (the default) and 'none'. Note that this will change the rendering of SVG documents which assume the images with EXIF orientation data are not auto-oriented correctly. In this case, please add the following attribute to the corresponding image elemnts: style="image-orientation: none;" - Update to version 2.63.3: * Librsvg-rebind crate version 0.3.0: * Let the image-rs crate enforce its default limit of 512 MB for allocated memory for each decoded image. The `--unlimited` flag in rsvg-convert (or the corresponding flags in the C and Rust APIs) now control whether the limits are enforced or not. * Fix panic when a feConvolveMatrix declaration has an invalid size. * When fuzzing, don't decode raster images from data: URIs to avoid sinking fuzz time in the image-rs crate. - Update version dependencies according to meson.build. - Update to version 2.63.2 (RUSTSEC-2026-0305 / CVE-2026-96889): + librsvg crate version 2.63.2 + librsvg-rebind crate version 0.3.0 + Fix use-after-free when there are duplicate XML entities in nested Xinclude documents. - Changes from version 2.63.1: + This version is to be considered non-working; the chacha20 0.10.1 crate was yanked from crates.io. - Update to version 2.63.0: + librsvg crate version 2.63.0 + librsvg-rebind crate version 0.3.0 + Limit the depth of files that reference other files, via XML XInclude, inter-document references, and CSS includes. The Rust API has a new ImplementationLimit::MaximumFileNestingDepthExceeded error variant to surface this to the loading functions. + Fix blurry embeded SVG images by rasterizing them at device resolution. + Remove loading limits from image-rs. This means that raster images, when embedded in SVG documents, have no limits for their size or memory consumption. The idea, for now, is that security-sensitive applications that use librsvg should do their own sandboxing if they want to impose memory limits. + Raise the maximum nesting depth of layers for glibc systems. The maximum on glibc is now 500 nested layers; the maximum for musl systems remains at 50 layers. This is due to the amount of stack space required, since musl has a reduced default stack compared to glibc. Please see the comments in that bug if you would like to help with the musl situation. - Disable bug1100_fuzz_layer_nesting_depth test and enable svg1_1_text_text_03_b_svg test again. - Update to version 2.62.91: + librsvg crate version 2.63.0-beta.1 + librsvg-rebind crate version 0.3.0 + Update test suite for change in how Pango renders underline/overline. + Update Rust dependencies. + Update C dependencies in the CI. - No longer disable librsvg --test reference. - Update to version 2.62.90: + librsvg crate version 2.63.0-beta.0 + Limit the depth of files that reference other files, via XML XInclude, inter-document references, and CSS includes. The Rust API has a new ImplementationLimit::MaximumFileNestingDepthExceeded error variant to surface this to the loading functions. + Fix blurry embeded SVG images by rasterizing them at device resolution. + Fix build when gobject-introspection is enabled but gdk-pixbuf is disabled. + Document the crate's feature flags. + Update the Rust dependencies. ==== libshumate ==== Version update (1.6.3 -> 1.7.0) Subpackages: libshumate-1_0-1 libshumate-lang typelib-1_0-Shumate-1_0 - Update version dependencies according to meson.build. - Update to version 1.7.0: + No changes since 1.7.0. - Update to version 1.7.rc: + No changes since 1.7.beta. - Update to version 1.7.beta: + Deselect markers before removing from layer + Stop using G_GNUC_CONST in _get_type functions + gi-docgen: List more dependencies - Update to version 1.7.alpha: + Added new APIs to refresh and get refresh notifications for map sources + Added missing translation text domains ==== libsoup ==== Version update (3.6.6 -> 3.8.1) Subpackages: libsoup-3_0-0 libsoup-lang typelib-1_0-Soup-3_0 - Update to version 3.8.1: * Limit the size of intermediate (redirect and auth) response bodies * Http2: Fix stalls when the reader is slower than the session timeout, and propagate connection errors to response body streams * Zstd: Support multiple concatenated frames, which previously truncated responses * Cookie-jar: Fix a `SoupConnection` leak when using an HTTP proxy * Logger: Fix undefined behavior found by UBSan * Build: Require brotli >= 1.1.0 for brotli support * Fix building the tests on Windows and update README.msvc * Updated translations. - Add explicit pkgconfig(libbrotlienc) BuildRequires: meson setup checks for it - Update to version 3.8.0: + Harden authentication: - Check `nonce` validity in Digest authentication (CVE-2026-3099) - Do not send cached proxy credentials after a redirect to a different origin + Harden multipart handling: - Fix an out-of-bounds read when less data than the boundary is buffered (CVE-2026-66337) - Limit the length of part headers - Fix a leak of the current part's headers + Prevent request smuggling in the server: - Close the connection after an early response to `Expect: 100-continue` - Reject `Host` headers containing URI delimiters - Require chunk-size to begin with a hex digit + Http2: - Fix skipping over multiple buffered chunks of a response body - Fix a `GCancellable` leak [Michael Catanzaro] + Fix the build on platforms without `dlfcn.h` + Updated translations. - Skip test-suite on non-64-bit architectures (glgo#GNOME/libsoup#556). - Update to version 3.7.3: + Add `soup_message_set_compression_dictionary_id()` and `soup_message_get_compression_dictionary_id()` to send the `Dictionary-ID` header alongside `Available-Dictionary` + Add `soup_websocket_extension_process_incoming_message_with_limit()` so extensions can bound how much they decompress + Harden WebSocket handling: - Bound decompressed message size during inflation (CVE-2026-15709) - Reject oversized control frames (CVE-2026-15711) - Cap incoming frame payloads, message reassembly, and outgoing frames at what the underlying buffer can hold - Bound outgoing permessage-deflate buffer growth - Cap the number of queued unsolicited pongs - Emit `SoupWebsocketConnection::pong` with a `GBytes`, as declared - Store accepted WebSocket extensions per message rather than per handler + Harden authentication and caching: - Do not send `Proxy-Authorization` through an established CONNECT tunnel (CVE-2026-66339) - Scope cached proxy credentials to the proxy they came from (CVE-2026-12547) - Reject caching authenticated responses in shared caches (CVE-2026-15713) + Tighten HTTP parsing and validation: - Reject CRLF injection in the HTTP method (CVE-2026-3633) - Fix `Range` parsing overflows and coalescing cost, and validate `Content-Range` when parsing it - Keep duplicate `Content-Length` headers when they are identical - Fix an out-of-bounds read in case of an excessively long multipart boundary - Do not treat base64 data URI content as a NUL-terminated string + http2: - Never send more body bytes than nghttp2 requested (CVE-2026-85534) - Keep the message alive across `io_run_until()` in `run_until_read()` - Do not assume that `GOAWAY` opaque data is NUL-terminated + server: Report the resource length in 416 responses + session: Do not send a message cancelled while being queued + cookie: Annotate constants' values - Drop libsoup-CVE-2026-85534.patch, - Drop libsoup-CVE-2026-15711.patch, libsoup-CVE-2026-12547.patch, libsoup-CVE-2026-15712.patch, libsoup-CVE-2026-15714.patch, libsoup-CVE-2026-66339.patch: fixed upstream. - Update to version 3.7.2: + Add support for compression dictionaries: - Support the dcb and dcz encodings - Add new `soup_message_set_compression_dictionary_hash()`, `SoupMessage::request-compression-dictionary`, and `SoupCompressionDictionaryRequest` + Remove color codes from http2 debug logs + Add missing autoptr defines for `SoupMessageBody` + http2: - Fix content-sniffer running while message is paused - Consume buffered response body before cancel - Fix requeuing failed messages when connection is not reusable + soup-body-input-stream: Limit buffer read to the received content - Update to version 3.7.1: Use canonical signal names. ... changelog too long, skipping 42 lines ... + libsoup-revert-dep-meson-0.62-shim02-6b34bc58.patch ==== localsearch ==== Version update (3.11.2 -> 3.12.0) Subpackages: localsearch-lang - Update version dependencies according to meson.build. - Update to version 3.12.0: + Sandbox fixes for musl libc + Fix "localsearch index --remove" applying the configuration + Memory leak fixes + Add "localsearch list" alias to "localsearch search" + Updated translations. ==== loupe ==== Version update (50.0 -> 51.1) Subpackages: loupe-lang - Update to version 51.1: * Fixed: + Print: Some images with physical dimensions attached could be printed in the wrong size and not properly positioned on the page. + Print: The PDF that's sent to the printer did report the wrong physical dimensions. This could potentially cause issues with some printers. - Update version dependencies according to meson.build. - Update to version 51.0: + Updated translations. - Update to version 51.rc: + After editing a file and pressing cancel, ask for saving the image instead of waiting for closing the global window. + After editing a file, unsaved changes were still reported after using the "Save as…" feature. - Update to version 51.beta: + Added: Show ICC profile description or generated CICP description if applicable. - Update to version 51.alpha: + Added: Show creator, copyright information, camera lens, and used software in image metadata. + Fixed: - Don't accumulate delays during animations. - Don't keep showing saving overlay after error. ==== milou6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: milou6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== mutter ==== Version update (50.5 -> 51.1) Subpackages: mutter-lang - Update to version 51.1: * Fix drag&drop between Wayland and Xwayland clients * Update window's monitor after configure * Use logical normal orientation when resetting panel rotation * Preserve MRU order when windows become sticky * Allow changing selections with the same serial * Fix applying `workspaces-only-on-primary` after monitor changes * Allow cursor implementations to fall back to Xcursor * Enforce throttling of frame clock updates while power saving * Misc. bug fixes and cleanups - Rebase mutter-disable-cvt-s390x.patch. - Update version dependencies according to meson.build. - Update to version 51.0: + Fix giving some X11 clients a wrong empty input mask + Return correct xdg-shell error for illegal size requests + Improve backlight detection + Fix dma-buf screencasting with primary GPU FBO path + Support custom acceleration profiles + Add builtin key controller to handle binding pools + Fix background blur in offscreen and clone paints + Fix invisible cursor when magnified + Fix assigning some X11 clients a wrong initial size + Fix partial unmaximization + Make WindowConfig maximize flag setters public + Fixed crashes + Plugged leaks + Misc. bug fixes and cleanups + Updated translations. - Update to version 51.rc: + Hook up stylus eraser button configuration + Fix using hardware cursor for SVG cursors + Do not require EDID to generate device color profile + Fix auto-rotate on phones without tablet mode switch + Decouple timelines from expected presentation times + Add background effect policy + Prevent modifier release from stopping key repeat + Align drag icon coordinates to pixel grid + Handle cross GPU buffer scanout + Fix multiple monitors being reported as primary + Fix desaturated SDR content in HDR mode + Add primary GPU rendering path using FBOs + Remove clutter_get_default_backend() + Fix offscreen effect glitches on resource scale changes + Fix hang on external monitor hotplug + Throttle timelines that don't produce a frame every cycle + Consider key alias for binding pool bindings + Allow overriding client initial config + Fix direct scanout handling for captures without dma-buf + Make binding pool key activation case-insensitive + Support Night Light on hardware without GAMMA_LUT + Fix listing all supported fallback resolutions + Make software cursor overlay visibility per-view + Fixed crashes + Plugged leaks + Misc. bug fixes and cleanups + Updated translations. - Drop pkgconfig(glycin-2): dependency no longer required. - Update to version 51.beta: + Allow to get last input device from backend + Send sprite object with grab-op-begin signal + Hook up disable-while-typing timeout setting + Hide cursor while input capture is active + Add ext-background-effect-v1 blur support + Fix blurred rendering with non-pixel-aligned monitors + Use staging xdg_session_management_v1 protocol + Allow for button scrolling on mice + Allow external cursor implementations + Do not add unsuported fallback monitor modes + Improve frame scheduling + Add dedicated "input panel" group + Fix reapplying shader snippet after resize/scale operations + Fill in mastering display metadata for HDR output + Add transition-removed signal on ClutterActor + Fix invalid redraw clips on rotated monitors + Avoid using cairo in public screenshot API + Split experimental features into separate settings + Use MetaWindowConfig to process window state changes + Allow global shortcut inhibitors to inhibit a11y shortcuts + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Update to version 51.alpha: + Allow input capture portal to integrate with clipboard + Ignore repeated events for double click counting + Do not unfullscreen fullscreened window on unmaximize + Add format-aware window_actor_paint_to_content() variant + Make DND with tablets work across surfaces + Ensure preferred_scale event is sent to clients + Remove support for legacy NVIDIA drivers + De-prioritize focusing desktop windows + Minimize stage paints and buffer copies in screencasts + Remove CoglProgram/Shader API + Fix erroneous stack order changes on workspace switches + Allow creating Devkit monitors from the command line + Fix triggering OSK for text_input_v3 version 1 clients + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Bump api_major define to 51 following upstream changes. - Disable mutter-disable-cvt-s390x.patch, needes rebase. - Stop passing egl_device=true and wayland_eglstream=true to meson setup, no longer needed nor recognized. ==== nautilus ==== Version update (50.4 -> 51.1) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 51.1: * Bugfixes: + Fix reusing tabs when opening locations from shell + Fix unwritable file indicator + Focus Replace button by default in conflict dialog + Disable markup syntax on property extension rows + Fix leak in audio/video extension + Fix setting custom icons in properties + Assure thumbnails in properties are fitted into a square + Fix properties window not showing checker background + Fix various leaks and errors without reports + Don't abort on invalid boolean metadata + Respect GTK4 file chooser's folder sorting default settings + Fix properties dialog sometimes opening too small * Cleanups: + Require GTK 4.24 + Prevent unnecessary relinking on every build caused by Blueprint files * Updated translations. - Update version dependencies according to meson.build. - Update version dependencies according to meson.build. - Temp disable test-suite until we figure out the intermitten test fail. - Update to version 51.0.1: + Bugfix: Fix metainfo release description syntax. - Update to version 51.0: + Bugfix: Fix a possible crash when changing app defaults after closing the app chooser + Cleanups: Adjust to renamed sushi devel name + Updated translations. - Update to version 51.rc: + Enhancements: - Add tests for image, files-view, properties - Add shortcut to focus file chooser filename entry - Delay clearing of the view for smoother navigation - Add rename, trash and folder opening functionality to previewer - Use type-to-search pattern in app-chooser - Mark network address entry invalid on the a11y layer when appropriate - Announce feedback text to screen readers in filename entries + Bugfixes: - Fix tab overview behavior with single tab - Fix empty list state in app-chooser - Only show apps in one section in app-chooser - Show parent folder row when properties dialog is detached - Fix memory trimming on window closure - Correctly fix non-keypad shortcuts in menus - Close app when only property windows are left - Restore focus and selection if a file gets removed + Cleanups: - Drop view-related context menu entries - Add and use recursive directory iterator helper - Attempt using any sushi version + Updated translations. - Enable tests during build again. - Update to version 51.beta: + Enhancements: - Use AdwTabOverview in narrow mode - Open locations from other apps in new tabs - Add an empty document menu entry in case of empty templates directory - Ignore most duplicate app entries in the app chooser - Add gobject-linter CI job - Move search focus to higher relevance result - Use AdwComboRow for open action preference - Hide redundant 'Open Parent Folder' properties row - Use dedicated symbolic for Projects bookmark icon - Adjust sidebar width limit - Don't duplicate loading locations + Bugfixes: - Show non-keypad shortcuts in menus - Handle timed dialogs being destroyed before their timeout - Put g_set_date_time behind a guard - Fix memory leak in action_create_links_in_place - Correctly position related apps in the app chooser + Cleanups: - Apply gobject-linter fixes - Clean up NautilusWindowSlot internals + Updated translations. - Update to version 51.alpha: + Enhancements: - Show selected items count badge while dragging multiple files - Combine '.' and '..' name errors in validators - Hide parent folder for mount root children - Don't show placeholder trashed info for multiple files or the Trash in properties - Add a tooltip to properties detach window button - Show either an unreadable or read-only emblem - Show symbolic link emblem before read-only/unreadable - Adjust non-indexed search description in info popover - Advertise notification categories for file and mount/unmount operations - Slightly enhance view reloading performance - Add more tests for bookmarks list, icon-info, image widget, file creation, and thumbnailing + Bugfixes: - Show the correct starred status and normal features of properties in Recents - Don't unselect when right clicking the view's background ... changelog too long, skipping 25 lines ... - Add libgxdp submodule and add as source. ==== nvidia-settings ==== Version update (580.159.03 -> 580.196.07) - update to version 580.196.07 (boo#1286887) - update to version 580.178.04 (boo#1271603) ==== ocean-sound-theme6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== openSUSE-release ==== Version update (20261028 -> 20261030) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== orca ==== Version update (50.3 -> 51.1) Subpackages: orca-lang - Update to version 51.1: * Web: + Fix several bugs related to grouping objects on the same visual line. + Improve presentation of tables/grids where selection does not follow focus. + Fix presentation of contenteditables newly-focused via native navigation. + Prefer pending focus event when recovering from destruction of the current object. + Fall back on text for childless ARIA combo boxes with no valuetext value. + Fix presentation of headings with explicit names and empty children. + Fix Where Am I sometimes triggering mode changes. + Fix some substrings being skipped over during forward word navigation. + Ignore caret-moved events from ignored, but exposed children of input elements. * General: + Fix multiple bugs related to text-selection. + Fix Say All starting from the incorrect location in terminals. + Fix presentation of repeated symbols separated by zero-width no-break spaces. + Clear stale braille selection indicators when the caret moves. + Fix a couple of bugs related to profiles in the preferences UI. + Add support for the GPaste3 D-Bus interface. + Fix bug causing object navigator object click to fail. + Fix several "chattiness" issues. * Updated translations. - Update version dependencies according to meson.build. ==== pam_kwallet6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: pam_kwallet6-32bit pam_kwallet6-common - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== pangomm ==== Version update (2.56.2 -> 2.58.0) - Update to version 2.58.0: + Add enums FontColor, Width, RenderComponent. + FontDescription: Add Add set/get_color(). + Attributes: Add create_attr_width(). + FontDescription: Add set/get_width(). + Layout: Add add_components_to_cairo_context(). + Renderer: Add set/get_components(). + Build: Require pango >= 1.58.0. ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced - Regenerate pattern-definition-32bit.txt from the current spec (pre_checkin.sh), as a follow-up to SR 1392459: the file had not been regenerated for several spec generations, so the 32-bit pattern definitions no longer matched the patterns: drop entries whose packages left the patterns (yast2-apparmor, systemd-sysvinit, nscd, dmraid, ifplugd, setserial, providers, the system-user-*/system-group-* helpers, terminfo-iterm/ - screen, dbus-1-glib, dbus-1-x11, tigervnc and the YaST control-centre packages), follow the renames (terminfo-base, coreutils-systemd, opensuse-welcome-launcher) and the moves between patterns (mailx, zypper, udev-configure-printer), and add the entries added to the patterns since (lvm2, wtmpdb, procps, fwupd, blog-plymouth, supportutils, systemd-coredump, cockpit-packages, myrlyn) - Extend the pre_checkin.sh skip list with kdump, kernel_livepatching, immutable_base and hardware: the spec creates no 32-bit marker files for them ("These packages don't generate a 32bit pattern"), so the generator must not emit sections for them either; this also keeps future regenerations free of the truncated rich-dependency lines the generator produces for those patterns - x11_enhanced pattern: on openSUSE, drop the hard Requires on pattern() = x11. x11_enhanced is session plumbing, not a server, and the default openSUSE session is Wayland (X applications run via Xwayland); the x11 pattern stays the opt-in X session bundle and itself Recommends x11_enhanced, so selecting X still pulls the enhanced plumbing in. The non-openSUSE (SLE / SL Micro) branch keeps the hard requirement unchanged ==== pcsc-lite ==== Subpackages: libpcsclite1 - Add merge-sysuser.patch: (boo#1287634) This merges our pcsc-lite.sysusers into the upstream sysuser file and also ensures that the pcscd user is also in the scard group as an additional group. ==== perl-MIME-tools ==== Version update (5.518.0 -> 5.522.0) - updated to 5.522.0 (5.522) see /usr/share/doc/packages/perl-MIME-tools/ChangeLog 5.522 2026-10-27 Dianne Skoll * VERSION 5.522 RELEASED * Many security issues were addressed (see the following ten CVEs) Issues were brought to my attention, and patches supplied, by the CPANSec security group. * parse_params: flag a parameter list that could not be parsed Detect additional ambiguous parse situations when parameter names contain illegal characters. Fixes: CVE-2026-116264 invalid parameter hides boundary/filename. bsc#1288723 * parse_params: check the boundary after RFC 2231 reassembly Another ambiguous-parse case was missed (trailing space after boundary was not detected for RFC-2231-encoded boundaries.) Fixes: CVE-2026-116265 RFC 2231 boundary skips ambiguity checks. bsc#1288722 * parse_params: Stricter checking for encoded boundaries; earlier versions would miss some cases. Fixes: CVE-2026-116266 boundary changed by decoding not flagged. bsc#1288721 * Cap the indentation levels in the Results: structure. Otherwise, specially-crafted messages could consume large amounts of memory. Fixes: CVE-2026-116267 indent stored per message per level bsc#1288720 * parse_params: stop a comment match at the next parenthesis. Otherwise, specially-crafted messages could cause the regex back-tracker to consume large amounts of CPU time. Note that MIME::Parser does not correctly parse ((nested comments)) and has never done so. Fixes: CVE-2026-116268 unclosed "(" comments backtrack CPU exhaustion. bsc#1288719 * parse_params: re-encode filename* values without charset tricks Specially-crafted messages could trick recommended_filename() into returning an empty string instead of a plausible filename. Fixes: CVE-2026-116269 RFC 2231 language tag empties filename. bsc#1288718 * decode_mimewords: do not copy the input into each error. Otherwise, specially-crafted messages could consume large amounts of memory. Fixes: CVE-2026-116270 each bad "=?" copies the input into $@. bsc#1288717 * FileUnder: do not reuse an existing generated directory. Otherwise, attackers might be able to use symbolic links to get files created in unexpected locations. Fixes: CVE-2026-116271 FileUnder reuses a pre-created directory. bsc#1288716 * parse_params: flag comments other readers do not skip Specially-crafted messages could create ambiguous messages without setting the ambiguous_parse flag. Fixes: CVE-2026-116272 comment hides a duplicate boundary. bsc#1288715 * Call whine() rather than error() if max_parts or max_depth is exceeded during a parse. This lets us return undef rather than throwing an exception if ignore_errors() is set to 0. * Change to defaults: max_parts is now set to 1000 and max_depth to 64 rather than being unlimited. This should not affect most real-world uses of MIME::tools, but you may need to increase these values or set them to -1 (unlimited) if you run into trouble. * **** NOTE INCOMPATIBILITY ***** Fixes: CVE-2026-116273 max_parts and max_depth unlimited. bsc#1288714 * Do not signal an ambiguous parse if we have filename="" or name="" * Update author names in META.yml * Add git repo to META.yml 5.520 2026-10-21 Dianne Skoll * VERSION 5.520 RELEASED * MIME::Parser used O(N^2) CPU time and memory parsing a MIME message nested N levels deep. A smallish specially-crafted message could DOS the computer by making it consume enormous amounts of memory and CPU time. The parser was modified to use O(N) time and memory in this case. Additionally, a new MIME::Parser::max_depth() function was added to limit the nesting depth before declaring a parse failure. Problem was reported to me by Zhaoyang Li and Xiang Li from AOSP Lab at Nankai University. * MIME::Parser would ignore multiple blank lines in a message preamble when parsing it; this could break DKIM. Problem pointed out and fix suggested by Tim Henderson. * If a MIME boundary includes trailing whitespace, we mark the parse as ambiguous. Problem noted and patch submitted by Christian Herdtweck 5.519 2026-09-22 Dianne Skoll * VERSION 5.519 RELEASED * Some (buggy) software creates base64-encoded parts as a concatenation of multiple base64-encoded streams, and some client software decodes each stream separately and concatenates the results. Duplicate this behavior in MIME::tools to prevent it from being used as a mechanism to sneak dangerous content past a security scanner. Patch courtesy of Giorgio Premi . ==== phodav ==== Version update (3.0 -> 3.2) - Update to version 3.2: * Spice-webdavd: close the local client connection when the host drops it, instead of leaving the webdav client waiting for the end of the response or reusing a dropped connection, which led to dropped frames and hangs * Spice-webdavd: announce the local mDNS service on loopback only, and run as an unprivileged user in the systemd unit * Libphodav: add debug tracing for the request lifecycle, the streamed response pulls and the spice mux frames, silent unless G_MESSAGES_DEBUG is set * Windows testing fixes: read the virtual-dir server port from a file to avoid the carriage return of the text-mode standard handles, and run the Wine tests with their output to regular files, which a stray "explorer.exe /desktop" process cannot keep open * Updated translations. - Changes from version 3.1: * CVE-2026-114417: reject the encoded slashes in the COPY/MOVE Destination header, which allowed writing outside of the shared directory * CVE-2026-114418: don't handle PUT when the request was already rejected: with digest authentication configured, an unauthenticated client could create or overwrite any file of the share * CVE-2026-114419: chezdav: check the digest password, any password was accepted for a user listed in the htdigest file * refuse the oversized request bodies with 413, including the chunked ones, and don't run the method handler of an already rejected request * fix crash and hangs on invalid If headers * fix a crash on PROPFIND/PROPPATCH requests without any property - Update version dependencies according to meson.build. - Drop harden_spice-webdavd.service.patch: fixed upstream. - Convert to _service for easier management. - Replace gtk-doc BuildRequires for scdoc and pkgconfig(gi-docgen): follow upstreams port away from gtk-doc - Add pkgconfig(neon), pkgconfig(gobject-introspection-1.0): new dependencies - Split out lang files from the shared library package: fixing policy violation - Provide phodav-3.0 by the libphodav-3_0-0 to have the new lang package installable ==== pipewire ==== Version update (1.6.10 -> 1.6.11) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.6.11: * This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. * Highlights - Backported a lot of bluetooth fixes. - Fix an issue with draining in the ALSA plugin that could cause lockups in applications. - Some smaller bugfixes and improvements. * PipeWire - Use extra buffer in reliable mode. * Modules - Fail client device export when device can't be started. Together with Wireplumber changes this avoids non-functioning devices in case of errors. - Fix potential crash in adapter. (#5549 (closed)) * SPA - Clean up some SPA_POD_Long arguments to make things work on 32bits. * Bluetooth - Backport some security fixes. - Handle some allocation errors better. - Fix handling of multiple concurrent profile registrations. - Fix BIS latency range checks. - Improve ofono compatibility. - Handle async device and node removal. - Avoid using stale transport or device pointers by using a unique serial instead. * ALSA plugin - Avoid going into XRUN when draining. (#5544 (closed)) ==== plasma5support6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: libPlasma5Support6 libPlasma5Support6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-activities ==== Version update (6.8.1 -> 6.8.2) Subpackages: libPlasmaActivities7 plasma6-activities-imports - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-activities-stats ==== Version update (6.8.1 -> 6.8.2) Subpackages: libPlasmaActivitiesStats1 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-browser-integration ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-browser-integration-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-desktop ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-desktop-emojier plasma6-desktop-lang plasma6-kimpanel-ibus - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Update version for new release 6.8.2 * applets/kickoff: Tie sidebar item spacing to the compact list style (kde#524003) * applets/taskmanager: wrap labels anywhere (kde#526972) * dwellclicker: fix after click keep open when pinned * applets/kicker: use the containment's screen for the popup size limit (kde#527385) * folder: make row/column arrangement settings match actual behavior (kde#512993) * activitymanager: Crop activity wallpapers instead of stretching them (kde#478784) * applets/pager: Keep desktop labels and window icons bound to the model (kde#522322) * Do not use wallpaper context variable binding as it changes value incorrectly (kde#527569) * applets/kickoff: directly scroll list in ListOfGridsView (kde#526911) * applets/taskmanager: fix highlight effect signal order issue (kde#527229) * Shell package: correct size and position for the activity switcher (kde#527158) * runners/keys: Use KGlobalAccel QKeySequence (de)serialization code * Fix disappearing desktop icons ==== plasma6-disks ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-disks-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-integration ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-integration-plugin plasma6-integration-plugin-lang plasma6-integration-plugin-qt5 - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-nm ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-nm-lang plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.8.2 ==== plasma6-pa ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-pa-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Play feedback when increasing/decreasing volume (kde#527775) * volumefeedback: Play the sound from the configured sound theme (kde#525954) ==== plasma6-print-manager ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-print-manager-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== plasma6-systemmonitor ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-systemmonitor-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Ensure SplitView maximumWidth > minimumWidth ==== plasma6-thunderbolt ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-thunderbolt-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - No code change since 6.8.1 ==== plasma6-workspace ==== Version update (6.8.1 -> 6.8.2) Subpackages: plasma6-session plasma6-workspace-lang plasma6-workspace-libs sddm-qt6-branding-openSUSE - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * kcms/style: use consistent slider value * applets/digital-clock: Keep the system font's OpenType features for the time (kde#524257) * libnotificationmanager: Accept single-quoted attributes in notification markup (kde#506733) * applets/kicker: port old favoriteId format to new one (kde#527651) * components/timezoneselector: fix margins * components/calendar: Don't navigate to years before year 1 (kde#525980) * shell: Set entered edit mode to false on startup (kde#527738) * libtaskmanager: Re-filter launchers when a window changes screen (kde#527507) * wallpapers/color: Set the accent color from the configured color (kde#513851) * libkmpris: Don't auto-repeat the global play/pause shortcut (kde#521448) * Applets Layout Manager: don't take preferred size into account when restoring (kde#490687) * libtaskmanager: Let the compositor name desktops created from the pager (kde#501808) * libkmpris: Keep non-ASCII characters in the title and album fallbacks (kde#503405) * applets/activitybar: fix tab focus and arrow nav (kde#527235) * Image wallpaper: Make all image packages correctly load (kde#527150) * appmenu: auto focus search field (kde#525569) * launcher tasks model: Guard lookup to serviceMenuById * libtaskmanager: put tasks in place of their launchers (kde#527189) ==== polkit-kde-agent-6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: polkit-kde-agent-6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== powerdevil6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: powerdevil6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * applets/batterymonitor: set switch state on first open (kde#527560) * backlightbrightness: Also log error code when executejob fails ==== python-gobject ==== Version update (3.56.3 -> 3.58.1) Subpackages: python313-gobject python313-gobject-Gdk python313-gobject-cairo - Drop glib_version, gi_version, pycairo_version and libffi_version defines: set minimum versions on every (Build)Requires, geckopit handles this for us now. - Update to version 3.58.1: * (backport) Fix GStreamer crash with python-debug - Update version dependencies according to meson.build. - Update to version 3.58.0: + Stable release. - Update to version 3.57.1: + Add extra checks around construction of object destroy notifier + `GLib.Pid` should be a number with a special `close` method + Use `PathLike` objects for `Gtk.Template` + Fast marshalling of `bytearray` to `GBytes` + Prevent crashes where `GValue` is `NULL` - Update to version 3.57.0: + doc: Update tutorial and examples + Fix potential buffer overflow errors where the C API exposes + gio: Support creating `GFile` child with slash operator, similar to `pathlib.Path` + Refactor memory management for marshaller cache + Add missing msg argument to asyncio cancel() + Fix deprecation warning for register_object + Find libraries automatically on Windows + Fix crash when `user_data` is defined before callback + Avoid extraneous deprecation warnings + Support generic annotations on `Async` + fix: Simplify string prefix handling + doc: Use gobject-linter for linting GObject code ==== python-msgpack ==== Version update (1.2.3 -> 1.2.4) - Uppdate to 1.2.4: (GHSA-j586-36cw-2gc2) - fallback: pass object_pairs_hook a list of pairs by @youdie006 in #744 - fallback: leave the object unread when a header type does not match by @Shaisolaris in #748 - Bump the all-dependencies group with 3 updates by @dependabot[bot] in #749 - fallback: return bytes from Unpacker.read_bytes by @Cherith1222 in #747 - Run tracemalloc tests sequentially by @methane in #758 ==== qqc2-breeze-style6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * MobileTextActionsToolBar: Fix popup not closing after an action is activated * MobileTextActionToolbar: Fix TextArea not showing contextual actions (kde#526591) ==== qt6-declarative ==== Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsPlatform6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsStyleKit6 libQt6LabsSynchronizer6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlDesignSupport6 libQt6QmlLocalStorage6 libQt6QmlMeta6 libQt6QmlModels6 libQt6QmlNetwork6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickVectorImage6 libQt6QuickWidgets6 qt6-declarative-imports - Add upstream change (kde#527720) * 0001-Fix-teardown-hang-with-QuickPixmapReader.patch ==== quadrapassel ==== Version update (50.2 -> 51.1) Subpackages: quadrapassel-lang - Update to version 51.1: * Made the game statistics in the compact mode into cards * Made miscellaneous style changes * Added a focus ring to the game cards * Documented the Return key shortcut for starting a game * Updated libgnome-games-support * Updated translations. - Update to version 51.0: + Changed preferred audio backend to pipewire + Updated libgnome-games-support + Updated translations. - Update to version 51.rc.1: + metainfo: add missing end tag. - Update to version 51.rc: + Removed the man page + Modernized the 'Game Over' view + Removed the pango, pangocairo, posix, and rsvg dependencies + Replaced the cairo drawn blocks with css styling + Removed the tango and tango flat styles + Changed the game stats to use cards + Replaced the 'Appearance' dialog with an 'Appearance' page in the preferences + Updated translations. - Update to version 51.alpha: + Fixed a bug where blocks would not stop moving if the game lost focus. + Fixed a bug where game keys wouldn't work once if they were pressed before to starting a game. + Added a -1 difficulty, where the level never increases. + Updated translations. ==== rdma-core ==== Version update (63.0 -> 65.0) Subpackages: libefa1 libhns1 libibverbs libibverbs1 libionic1 libmana1 libmlx4-1 libmlx5-1 librdmacm1 - Remove librdmacm dependency on rdma-core to avoid systemd being pulled in by valkey (bsc#1265295) - Add kernel-boot-Remove-Wants-network-pre.target-from-ini.patch to fix network-pre.target being resolved during initrd (bsc#1276748) - Update to rdma-core v65.0 - https://github.com/linux-rdma/rdma-core/releases/tag/v65.0 - Update to rdma-core v63.1 - https://github.com/linux-rdma/rdma-core/releases/tag/v63.1 ==== ruby4.0 ==== Subpackages: libruby4_0-4_0 - Set the alternative names inside the loop in %post and %preun. They were set before it, while $bin was still empty, so without libalternatives /usr/bin/.ruby4.0 was registered instead of the versioned alternatives (bundle.ruby4.0, rake.ruby4.0, ...), and their symlinks dangled. ==== screen ==== Version update (4.9.1 -> 5.0.2) - Update to 5.0.2 (major 5.x release): * Rewritten authentication mechanism; new auth, status, truecolor and multiinput commands; new %T, %O and %* escapes. Removed time, debug, password, maxwin and nethack commands. * Behavior notes: single socket dir /run/screens (the old screens/uscreens split is gone); bare -L only enables logging, use -Logfile to set the logfile name; screenrc files using removed commands need updating; terminfo entries still honored. * CVE-2025-46805: no signals sent with root privileges. * CVE-2025-46804: no file existence test information leaks. * CVE-2025-46803: safe PTY default mode of 0620. * CVE-2025-23395: reintroduce lf_secreopen for logfile. * 5.0.2 also fixes a SendCmdMessage buffer overflow and a detaching TOCTOU race with empty terminfo. - Drop libtinfo.diff (upstream rewrote termcap detection), sendfdcont.diff, multicont.diff, nottychmod.diff (all superseded by the 5.0 authentication rewrite). - Refresh screen.keyring from upstream (new upstream signing key). - Run the upstream unit tests in %%check (the detach integration test needs a live pty, unavailable in the buildroot). ==== sddm-kcm6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: sddm-kcm6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== sensors ==== Subpackages: libsensors4 - Stop using globs in filelist, removes rpmlint warning. - Own zsh-completion dirs, explicitly list files. ==== simdutf ==== Version update (9.3.2 -> 9.3.3) - Update to version 9.3.3: * Check the tail of the ASCII validators in place * Check the tail of the UTF-8 validators in place * base64: avoid overflow in base64_length_from_binary_with_lines * arm64: fix base64 default_or_url tables accepting '[' ==== snapshot ==== Version update (50.0 -> 51.0) Subpackages: snapshot-lang - Update to version 51.0: + Update gettext-rs to 0.8.0 - Update to version 51.beta: + Inhibit idle while the viewfinder is active + Remove glycin build dependencies from meson.build + Update rust crates + Updated translations. - Drop liblcms2-devel and libseccomp-devel BuildRequires: No longer needed. - Update to version 51.alpha: + Minor improvements + Updated translations. ==== snowball ==== Version update (3.0.1 -> 3.1.1) - Update to version 3.1.1: + Numerous bug fixes and improvements, see full details in /usr/share/doc/packages/snowball/NEWS. - Rebase patches: + build-options.diff + python-dist.diff + shared-library.diff ==== spectacle ==== Version update (6.8.1 -> 6.8.2) Subpackages: spectacle-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * Delete temporary OCR text file once job is done ==== sushi ==== Version update (50.0 -> 51.2) Subpackages: sushi-lang - Update to version 51.2: * Minor graphical app icon fixes * Update vulnerable NPM packages * Update and modernize flatpak manifest * Add desktop file * Set application name * Updated translations. - Update to version 51.1: + Fix toolbar overlay from blocking content + Fix release note tags + Add metainfo validation + Updated translations. - Update to version 51.0: + Handle corrupted pdf documents + Handle strings as errors from plugins + Use ".Devel" suffix for the nightly version + Add app icon + Fix papers dependency version + Updated translations. - Update to version 51.rc: + Enhancements: - Add Rename (`F2`) and Trash (`Del`) shortcuts - Add `O` as a shortcut to open a file - Open folders in currently previewed nautilus window - Add play/pause (`P`) shortcut for audio and video - Use dark background for videos - Add foundry config - Resize window on changed scale factor + Bug Fixes: - Fix playing animated images using glycin - Fix re-attaching dialog to nautilus after previously closing the window - Ignore errors from stopped/cancelled renderers - Fix HTML renderer without WebKit availability - Fix attaching open-with portal dialogs - Fix and rework user resizing detection - Avoid resizes on opening of window - Fix width/height ratio of image renderer - Don't scale up small images - Prefer Glycin over Papers to handle loading TIFF files - Fix long filenames making the window too wide + Plugins: - Add example with UI file and shortcuts - Add action group setup helper - Add relative path resolving helper - Rename markReady/markInitialized API functions - Add explicit markFailed error API - Remove ResizePolicy.CUSTOM, use ResizePolicy.SCALED instead + Backend Changes: - Create RendererWrapper that handles overlays and GTK window size geometry - Use SignalGroup for renderer signals - Add cyclic heap dumping development mechanism - Rework content type matching, remove legacy generated type list - Report (some) video stream errors - Separate out LibreOffice conversion logic from pdf renderer - Only initialize PapersDocument on demand - Add an abstraction over GLib sources and connections - Fix various signal-related leaks - Port text UI to blueprint - Make private renderer fields inaccessible to renderers - Use correct wrap mode in text renderer - Improve error handling - Improve reactivity for large text files + Updated translations. - Update to version 51.beta: + UI changes: - Show a loading spinner when loading a file takes longer - Ensure legibility of icons in statuspage - Clamp MediaControls to limit width - Wrap lines in text viewer - Handle single- and double-click in video viewer - Add double-click to fullscreen support to image viewer - Enable context menu in HTML viewer - Prompt user before loading remote resources in HTML viewer - Improve loading states - Tweak toolbar and headerbar - Fix title for tagless files - Always use integrated artwork - Hide headerbar in fullscreen - Use icon for file open button - Preserve aspect ratio when showing images + Known regressions: Only the first frame of animated GIFs is shown + Backend changes: - Add more mime types to the LibreOffice viewer - Add ESLint - Replace use of deprecated GJS APIs with their suggested replacements - Use Blueprint - Handle XHTML mime type - Cancel pending operations when file is switched - Plug memory leaks - Overhaul plugin API and introduce a system-wide plugin path - Document plugin API - Promisify async calls - Rework hovering - Improve handling of renderer sizing ... changelog too long, skipping 35 lines ... - Use meson BuildSystem and macros, autogenerate BuildRequires. ==== systemsettings6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: systemsettings6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 ==== tecla-keyboard-layout-viewer ==== Version update (50.0 -> 51.0) Subpackages: tecla-keyboard-layout-viewer-lang - Update to version 51.0: + Updated translations. - Update to version 51.beta: + Updated translations. ==== tevent ==== Subpackages: libtevent0 libtevent0-32bit python3-tevent - Convert the package to _multibuild flavors: the man pages are now built from the "man" flavor of tevent.spec instead of a generated tevent-man.spec, so pre_checkin.sh, tevent-man.spec and tevent-man.changes are gone. No need to maintain duplicate files. - Merge the duplicated %if blocks in the spec file and give the man flavor its own summary and description. - Remove use of obsolete %py3* macros, use only the maintained ones from `python-rpm-macros` package. - Drop obsolete spec constructs (BuildRoot, %defattr, PreReq, legacy suse_version conditionals). - Build and install pycache files - fix deps * cmocka (>=1.1.8) ==== tinysparql ==== Version update (3.11.1 -> 3.12.0) Subpackages: libtracker-sparql-3_0-0 tinysparql-lang typelib-1_0-Tracker-3_0 - Update version dependencies according to meson.build. - Update to version 3.12.0: + No changes, version update only. - Update to version 3.12.rc: + Fix potential memory leaks in JSON-LD serializer + Fix possible memory leaks in SPARQL parser - Update to version 3.12.alpha: + Performance improvements to ICU full-text search tokenizer + Fix potential leaks with malformed ontology definitions + Test suite changes to cater for SQLite >= 3.53.1 ==== totem ==== Subpackages: totem-lang totem-plugins totem-video-thumbnailer - Update version dependencies according to meson.build. - Own %{_datadir}/GConf and %{_datadir}/GConf/gsettings: legacy migration directories. ==== union6 ==== Version update (6.8.1 -> 6.8.2) - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2 * AbstractElement: Set elementQuery at construction * IndicatorElement: Set indicator values at construction * TabElement: set hSpace and vSpace at construction * AbstractElement: Check if we already have this element and update it * output/widgets: scale the widget animation duration with the animation speed (kde#527527) * output/quick: Explicitly set the Style instance for TextArea's background (kde#527455) * input/css/breeze: Only round delegate backgrounds in list when highlighted (kde#527087) * output/quick: Also consider parent for inside-{list,table} hints * input/css/breeze: Use large spacing for menubar item horizontal padding (kde#527213) * output/widgets: Don't dereference potential nullptr value (kde#527459) ==== xdg-desktop-portal-gnome ==== Version update (50.0 -> 51.0) Subpackages: xdg-desktop-portal-gnome-lang - Update version dependencies according to meson.build. - Update to version 51.0: + Update CI to use the gnomeos-basic-ci component - Update to version 51.rc: + Various fixed to the Global Shortcuts portal + Stop using G_GNUC_CONST in _get_type functions + Fix input-only Remote Desktop sessions + Updated translations. - Update to version 51.alpha: + Add support for session persistence in the Input Capture portal + Use newer GLib APIs to simplify code + Various small code cleanups + Updated translations. - Update libgxdp vendored tarball ==== xdg-desktop-portal-kde6 ==== Version update (6.8.1 -> 6.8.2) Subpackages: xdg-desktop-portal-kde6-lang - Update to 6.8.2 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/6/6.8.2 - Changes since 6.8.1: * Update version for new release 6.8.2