Packages changed: ImageMagick (7.1.1.47 -> 7.1.2.0) SDL3 (3.2.14 -> 3.2.18) accountsservice ddcutil (2.2.0 -> 2.2.1) erofs-utils (1.8.3 -> 1.8.10) gnome-maps (48.4 -> 48.5) gpg2 (2.5.8 -> 2.5.9) kf6-kirigami krb5 libavif libdbusmenu-gtk2 libdbusmenu-gtk3 libgpod llvm20 mutter netpbm (11.9.3 -> 11.11.0) nvidia-open-driver-G06-signed-cuda (575.57.08_k6.15.4_1 -> 575.57.08_k6.15.6_1) pam-config (2.12+git.20250516 -> 2.13+git.20250715) patterns-base patterns-gnome psmisc python-netaddr sdbootutil (1+git20250613.ee73e55 -> 1+git20250716.b03c12f) selinux-policy (20250703 -> 20250716) xkeyboard-config (2.44 -> 2.45) xscreensaver yast2-storage-ng (5.0.32 -> 5.0.33) zimg === Details === ==== ImageMagick ==== Version update (7.1.1.47 -> 7.1.2.0) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.2.0 * magick-config.h: Remove redundant block by @ferdnyc in #8076 * Remove generated 'magick.sh' from repo by @ferdnyc in #8075 * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074 * Support ICN file extension for old Windows icons by @bitplane in #8107 * fix build when libjpeg is not in its default location by @mmomtchev in #8172 * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224 * Fix NULL pointer dereference in XWarning by @moon044 in #8230 - modified patches % ImageMagick-library-installable-in-parallel.patch (refreshed) - fixes: CVE-2025-53101 [bsc#1246529] CVE-2025-53014 [bsc#1246530] CVE-2025-53015 [bsc#1246531] CVE-2025-53019 [bsc#1246534] ==== SDL3 ==== Version update (3.2.14 -> 3.2.18) - Update to release 3.2.18 * Added SDL_PROP_WINDOW_CREATE_CONSTRAIN_POPUP_BOOLEAN to support non-constrained and non-grabbing popups * Fixed a crash in SDL_GetAudioDeviceChannelMap() * Fixed duplicate mouse events when using a pen under X11 * Improved thumbstick range for Nintendo Switch Pro Controllers * Fixed loading user calibration for Nintendo Switch Pro Controllers * Added support for the ZEROPLUS P4 Wired Gamepad * Fixed input from the MayFlash GameCube adapter with version 7 firmware - Update to release 3.2.16 * Fixed a rare crash in SDL_WaitEvent() * Fixed entering fullscreen mode on some X11 window managers * Fixed hang processing mouse input on Wayland * Fixed occasionally corrupt text input on Wayland * Respect the application text input area on Wayland ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Update accountsservice-sysconfig.patch: Check whether sysconfig is used and fallback to display manager settings if sysconfig is not used (bsc#1246127). ==== ddcutil ==== Version update (2.2.0 -> 2.2.1) Subpackages: ddcutil-i2c-udev-rules libddcutil5 - Update to 2.2.1: * Added - Do not perform permission checks if running with effective user root, i.e. when running with setuid bit set. Partially addresses issue #509 * Changed - Command environment: report if running as root, with sudo, or setuid bit set - Command environment --verbose: eliminate some unneeded edid read tests - Command setvcp: Emit more more useful messages when the cause of a DDCRC_RETRIES error is itself a DDCRC_RETRIES error. - Add option --disable-traced-function-stack The default traced-function-stack option value (disabled) is set in parms.h. * Fixed - Avoid segfault if invalid feature code specified - Maximum wait time on function lock_display() not respected, possible infinte loop. Addresses issue #511 - Fix --verify/--noverify parsing. Addresses issue #512. - ddca_close_display(): do not respect quiesce, allowing the display lock record to be released, avoiding possible deadlock - Fix the spelling of company name HON HAI PRECISION" (obtained from UEFI), avoiding a lintian message. Addresses issue #500 - Fix errors reported by clang 19: unused variable, expression which evaluates to 0 treated as null pointer. Addresses issue #502. - Command getvcp --terse: Eliminate irrelevant messages regarding VCP version not set. - Make test for missing DRM card-connector directories more robust. Issue #507. - DDC communication not detected with old (340 series) Nvidia proprietary driver. Issue #507 - Function end_capture(): call close() in case of fflush() error, ensuring that messages are always sent to the terminal after message capture complete - Functions ddca_find_display_ref() and ddca_get_display_ref() were returning a pointer to the internal Display_Ref struct rather than an external integer DDCA_Display_Ref, causing segfault or return code DDCRC_INVALID_DISPLAY on a subsequent api call such as ddca_open_display2(). Addresses issue #528. - Several API functions were not recognized as arguments to - -trcfunc and --trcfrom. These included ddca_find_display_ref(), ddca_get_display_ref(), report_parsed_capabilities() - Option --stats was not reporting data - ddc_open_display(): return DDCRC_DISCONNECTED instead of an assert failure if bus_info == NULL. Addresses KDE Powerdevil issue #504861 (powerdevil crash from libddcutil, no restart happens) - Macro TRACED_ASSERT() calls __assert_fail() instead of exit(1). Addresses Powerdevil issue #504861. - Fix troff formatting in ddcutil man page. Pull request #531. * Building - configure option --enable-watch-displays/ - -disable-watch-displays controls whether display watch functionaliity is built. The default is - -enable-watch-displays. If built with - -disable-watch-displays, API functions related to display change detection return DDCRC_UNIMPLEMENTED - If configure option --disable-x11 is specified, the only watch-mode is POLL. watch-mode XEVENT does not exist. * Detailed information about the changes can be found in file CHANGELOG.md in the source tree, and on pages ddcutil 2.2.1 Release Notes (https://www.ddcutil.com/release_notes_221/) and Shared Library Changes for Release 2.2.1 (https://www.ddcutil.com/c_api_221/) on the web site. - Drop patch which is already included by upstream: * ddcutil-2.2.0-verify-noverify.patch - reproducible builds: pass --disable-build-timestamp - improve handling of --verify/--noverify (boo#1245807) add ddcutil-2.2.0-verify-noverify.patch from upstream ==== erofs-utils ==== Version update (1.8.3 -> 1.8.10) - Update to release 1.8.10 * mkfs: Fix unusual PAX header handling for tarerofs * mkfs: Add a `-E^fragdedupe` option to explicitly disable fragment deduplication * mkfs: Support `-Efragdedupe=inode` for multithreading * dump: Add `--cat` to show file contents * mkfs: Support per-segment reaper for multi-threaded compression * mkfs: Support extent-based deduplication for `-Efragments` * mkfs: Support `--fsalignblks` to align filesystem sizes * mkfs: Support `--vmdk-desc` to generate VMDK for flattened block devices - Enable zstd [boo#1229961] ==== gnome-maps ==== Version update (48.4 -> 48.5) Subpackages: gnome-maps-lang - Update to version 48.5: + Remove extra slash in API URL for Transitous, unbreaks routing with latests MOTIS releases. ==== gpg2 ==== Version update (2.5.8 -> 2.5.9) Subpackages: dirmngr gpg2-lang - Update to 2.5.9: * gpg: Add the revocation reason to the sigclass of a "rev" line (drops gnupg-2.5.8-re-add-revocation-reason.patch) * gpg: Do not show the non-standard secp256k1 curve in the menu to select the curve. It can however be specified using its name * gpg: Fix regression in using the secp256k1 curve. * dirmngr: New option --user-agent and send a default User-Agent of "GnuPG/2.6" for all HTTP requests ==== kf6-kirigami ==== Subpackages: kf6-kirigami-imports libKirigamiPlatform6 - Replace 0001-Fix-another-ShadowedTexture-crash-with-software-rend.patch with new version: * 0001-Revert-Fix-SoftwareRectangleNode-leaking-image-nodes.patch * 0002-Revert-Fix-ShadowedTexture-crashing-with-software-re.patch * 0003-Fix-SoftwareRectangleNode-creating-QSGImageNode-s-wi.patch - Add patch to fix a crash with the Qt Quick software renderer (kde#506991, boo#1246411): * 0001-Fix-another-ShadowedTexture-crash-with-software-rend.patch ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Moved /etc/krb5.conf to /usr/etc/krb5.conf This patch (0011_usr_etc.patch) is upstream: https://github.com/krb5/krb5/pull/1437/ ==== libavif ==== - Update libavif.spec: Add compile condition for SvtAv1Enc, SLE-15-SP4, and other old releases will not build with it to make the update successful. (jsc#PED-13277, CVE-2025-48175, bsc#1243270, CVE-2025-48174, bsc#1243269) ==== libdbusmenu-gtk2 ==== - Work with newer gettext-runtime. In gettext 0.24.1 the m4 files moved from /usr/share/aclocal/ to /usr/share/gettext/m4 ==== libdbusmenu-gtk3 ==== - Work with newer gettext-runtime. In gettext 0.24.1 the m4 files moved from /usr/share/aclocal/ to /usr/share/gettext/m4 ==== libgpod ==== Subpackages: libgpod-lang libgpod-tools libgpod4 - Work with newer gettext-runtime. In gettext 0.24.1 the m4 files moved from /usr/share/aclocal/ to /usr/share/gettext/m4 ==== llvm20 ==== - Enable libcxx, openmp, lldb and thin_lto on loongarch64 - Add reproducible.patch to make libomp.so reproducible (boo#1199076) ==== mutter ==== Subpackages: mutter-lang - Drop mutter-SLE-bell.patch. It no longer applies with --fuzz=0, and it is X11-only, so it is no longer useful for SLE 16. ==== netpbm ==== Version update (11.9.3 -> 11.11.0) Subpackages: libnetpbm11 - Remove the doc and man pages for pamtojpeg2k since the binary has not been available since jasper was dropped. [bsc#1245164] - Update to 11.11.00: * pamflip: add -inverse. * pamflip: add -reflect. * pamdice: add -outsuffix. * libnetpbm and 'ppmdraw' circle drawing functions: use floating point arithmetic to make smoother circle. * pamdice, pamundice: Add PBM fast path. * ppmdraw: fix error message about 'filledrectangle' syntax. * pamdice: fix using more digits than necessary in output file names -- width was based on one more slice than was actually generated. Broken since Netpbm 10.29 (August 2005). * pnmquantall: fix arbitrary shell command execution with input file names or color count that contain shell metacharacters. Always present ('pnmquantall' has existed, aka 'ppmquantall', since primordial Netpbm). * ppmtogif: fix arbitrary shell commands when arguments contain shell metacharacters. Broken in Netpbm 10.37 (June 2006). * pnmtofiasco: fix crash when image is really small. Always broken (program was new in Netpbm 9.6, July 2000). * pnmtofiasco: fix bug: uses one tile regardless of - -tiling-exponent. Always broken (programs were new in Netpbm 9.6, July 2000). * pnmtofiasco: fix bug: infinite loop with multiple tiles. Always broken (program was new in Netpbm 96., July 2000), but made functional by bug fix in 11.10 (March 2025). * pnmtofiasco: fix bug: does wrong level of optimization Introduced in Netpbm 11.05 (December 2023). * libnetpbm ppmd_fill and ppmdraw filled shapes: fix bug: final span of filling omitted from output. Always broken (ppmd_fill was in primordial Netpbm). - Update to 11.10.00: * pamdice: Add -listfile, -indexfile, -numberwidth, -dry-run. * pamundice: Add -indexfile. * pamflip: improve efficiency - less copying of tuples in basic whole-image non-PBM case. * pamflip: more direct error message for -memsize=0. * pamflip: warn if redundant -pagesize specified with -verbose. * pcdovtoppm: improve syntax error messages. * pammixmulti: Fix crash from uninitialized memory. Introduced in Netpbm 11.09 (December 2024). * giftopnm: Fix wild pointer reference with -verbose and invalid extension type. Broken in Netpbm 10.59 (December 2012). * pdbimgtopam, pamtopdbimg: Fix crash when out of memory. Always broken (programs were new in Netpbm 10.52 (September 2010)). * pamrestack: fix failure when height too large for computations. Broken in Netpbm 10.99 (June 2022). * pamflip: fix: Don't allow -xform with older transform options (-leftright, etc.). Before, -xform would be ignored in that case. ==== nvidia-open-driver-G06-signed-cuda ==== Version update (575.57.08_k6.15.4_1 -> 575.57.08_k6.15.6_1) - update non-CUDA variant to 570.172.08 (boo#1246327) - supersedes * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch - update pci_ids-supported - empty pci_ids-570.169; PCI ID hardware Supplements get moved to gfx repository to package nvidia-open-driver-G06-signed-kmp-meta (boo#1246010) - remove 60-nvidia-$flavor.conf, since driver no longer gets autoselected without gfx/cuda repositories present and so we no longer need to disable it by default (boo#1246010) ==== pam-config ==== Version update (2.12+git.20250516 -> 2.13+git.20250715) - Update to version 2.13+git.20250715: * Release version 2.13 * Place himmelblau near the top of pam stack [bsc#1243418] ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced - Do not build transactional_base pattern for Leap 16 - Drop yast inclusion for Leap 16, code-o-o#leap/features/173 ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome - Drop gnome_yast on Leap 16, code-o-o#leap/features/173 ==== psmisc ==== Subpackages: psmisc-lang - Add patch 0001-fuser-Fix-expandpath.patch * Is an upstream commit which fixes https://gitlab.com/psmisc/psmisc/-/issues/57 as well as bug boo#1242093 ==== python-netaddr ==== - Convert to libalternatives ==== sdbootutil ==== Version update (1+git20250613.ee73e55 -> 1+git20250716.b03c12f) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper - Update to version 1+git20250716.b03c12f: * Revert "Check for transactional systems by actually checking ro status, not mount attributes" - Update to version 1+git20250710.d8e5d82: * Check for transactional systems by actually checking ro status, not mount attributes ==== selinux-policy ==== Version update (20250703 -> 20250716) Subpackages: selinux-policy-targeted - Update to version 20250716: * Allow virtqemud_t use its private tmpfs files (bsc#1242998) * Allow virtqemud_t setattr to /dev/userfaultfd (bsc#1242998) * Allow virtqemud_t read and write /dev/ptmx (bsc#1242998) * Extend virtqemud_t tcp_socket permissions (bsc#1242998) * Mark configfs_t as mountpoint (bsc#1246080) * healthchecker: add proper optional_policy() guards * Allow virtqemud_t to read and write generic pty (bsc#1242998) * Allow plymouthd_t read proc files of systemd_passwd_agent (bsc#1245470) ==== xkeyboard-config ==== Version update (2.44 -> 2.45) Subpackages: xkeyboard-config-lang - update to 2.45 (boo#1246516) - added %pretrans lua script for migration from /usr/share/X11/xkb directory to symlink - custom files previously under `/usr/share/X11/xkb`, e.g. the file `/usr/share/X11/xkb/symbols/custom`, which are saved under `/usr/share/X11/xkb.rpmmoved` after the update to 2.45 needs to be migrated manually by the user to `usr/share/xkeyboard-config-2` ==== xscreensaver ==== Subpackages: xscreensaver-data xscreensaver-lang - Work with newer gettext-runtime. In gettext 0.24.1 the m4 files moved from /usr/share/aclocal/ to /usr/share/gettext/m4 ==== yast2-storage-ng ==== Version update (5.0.32 -> 5.0.33) - Use correct iSCSI driver name (related to bsc#1244935). - 5.0.33 ==== zimg ==== - add patch cmake-googletest.patch to fix incompatibility of old google-test with CMake 4.0. Upstream has already updated the dependency.