Packages changed: SDL3 (3.2.14 -> 3.2.18) accountsservice ddcutil (2.2.0 -> 2.2.1) gpg2 (2.5.8 -> 2.5.9) kernel-default-base kf6-kirigami krb5 libavif libcontainers-common llvm20 pam-config (2.12+git.20250516 -> 2.13+git.20250715) patterns-base psmisc sdbootutil (1+git20250613.ee73e55 -> 1+git20250716.b03c12f) selinux-policy (20250703 -> 20250716) xkeyboard-config (2.44 -> 2.45) zimg === Details === ==== SDL3 ==== Version update (3.2.14 -> 3.2.18) - Update to release 3.2.18 * Added SDL_PROP_WINDOW_CREATE_CONSTRAIN_POPUP_BOOLEAN to support non-constrained and non-grabbing popups * Fixed a crash in SDL_GetAudioDeviceChannelMap() * Fixed duplicate mouse events when using a pen under X11 * Improved thumbstick range for Nintendo Switch Pro Controllers * Fixed loading user calibration for Nintendo Switch Pro Controllers * Added support for the ZEROPLUS P4 Wired Gamepad * Fixed input from the MayFlash GameCube adapter with version 7 firmware - Update to release 3.2.16 * Fixed a rare crash in SDL_WaitEvent() * Fixed entering fullscreen mode on some X11 window managers * Fixed hang processing mouse input on Wayland * Fixed occasionally corrupt text input on Wayland * Respect the application text input area on Wayland ==== accountsservice ==== - Update accountsservice-sysconfig.patch: Check whether sysconfig is used and fallback to display manager settings if sysconfig is not used (bsc#1246127). ==== ddcutil ==== Version update (2.2.0 -> 2.2.1) - Update to 2.2.1: * Added - Do not perform permission checks if running with effective user root, i.e. when running with setuid bit set. Partially addresses issue #509 * Changed - Command environment: report if running as root, with sudo, or setuid bit set - Command environment --verbose: eliminate some unneeded edid read tests - Command setvcp: Emit more more useful messages when the cause of a DDCRC_RETRIES error is itself a DDCRC_RETRIES error. - Add option --disable-traced-function-stack The default traced-function-stack option value (disabled) is set in parms.h. * Fixed - Avoid segfault if invalid feature code specified - Maximum wait time on function lock_display() not respected, possible infinte loop. Addresses issue #511 - Fix --verify/--noverify parsing. Addresses issue #512. - ddca_close_display(): do not respect quiesce, allowing the display lock record to be released, avoiding possible deadlock - Fix the spelling of company name HON HAI PRECISION" (obtained from UEFI), avoiding a lintian message. Addresses issue #500 - Fix errors reported by clang 19: unused variable, expression which evaluates to 0 treated as null pointer. Addresses issue #502. - Command getvcp --terse: Eliminate irrelevant messages regarding VCP version not set. - Make test for missing DRM card-connector directories more robust. Issue #507. - DDC communication not detected with old (340 series) Nvidia proprietary driver. Issue #507 - Function end_capture(): call close() in case of fflush() error, ensuring that messages are always sent to the terminal after message capture complete - Functions ddca_find_display_ref() and ddca_get_display_ref() were returning a pointer to the internal Display_Ref struct rather than an external integer DDCA_Display_Ref, causing segfault or return code DDCRC_INVALID_DISPLAY on a subsequent api call such as ddca_open_display2(). Addresses issue #528. - Several API functions were not recognized as arguments to - -trcfunc and --trcfrom. These included ddca_find_display_ref(), ddca_get_display_ref(), report_parsed_capabilities() - Option --stats was not reporting data - ddc_open_display(): return DDCRC_DISCONNECTED instead of an assert failure if bus_info == NULL. Addresses KDE Powerdevil issue #504861 (powerdevil crash from libddcutil, no restart happens) - Macro TRACED_ASSERT() calls __assert_fail() instead of exit(1). Addresses Powerdevil issue #504861. - Fix troff formatting in ddcutil man page. Pull request #531. * Building - configure option --enable-watch-displays/ - -disable-watch-displays controls whether display watch functionaliity is built. The default is - -enable-watch-displays. If built with - -disable-watch-displays, API functions related to display change detection return DDCRC_UNIMPLEMENTED - If configure option --disable-x11 is specified, the only watch-mode is POLL. watch-mode XEVENT does not exist. * Detailed information about the changes can be found in file CHANGELOG.md in the source tree, and on pages ddcutil 2.2.1 Release Notes (https://www.ddcutil.com/release_notes_221/) and Shared Library Changes for Release 2.2.1 (https://www.ddcutil.com/c_api_221/) on the web site. - Drop patch which is already included by upstream: * ddcutil-2.2.0-verify-noverify.patch - reproducible builds: pass --disable-build-timestamp - improve handling of --verify/--noverify (boo#1245807) add ddcutil-2.2.0-verify-noverify.patch from upstream ==== gpg2 ==== Version update (2.5.8 -> 2.5.9) - Update to 2.5.9: * gpg: Add the revocation reason to the sigclass of a "rev" line (drops gnupg-2.5.8-re-add-revocation-reason.patch) * gpg: Do not show the non-standard secp256k1 curve in the menu to select the curve. It can however be specified using its name * gpg: Fix regression in using the secp256k1 curve. * dirmngr: New option --user-agent and send a default User-Agent of "GnuPG/2.6" for all HTTP requests ==== kernel-default-base ==== - Add modules for confidential compute (bsc#1246502) ==== kf6-kirigami ==== Subpackages: kf6-kirigami-imports libKirigamiPlatform6 - Replace 0001-Fix-another-ShadowedTexture-crash-with-software-rend.patch with new version: * 0001-Revert-Fix-SoftwareRectangleNode-leaking-image-nodes.patch * 0002-Revert-Fix-ShadowedTexture-crashing-with-software-re.patch * 0003-Fix-SoftwareRectangleNode-creating-QSGImageNode-s-wi.patch - Add patch to fix a crash with the Qt Quick software renderer (kde#506991, boo#1246411): * 0001-Fix-another-ShadowedTexture-crash-with-software-rend.patch ==== krb5 ==== - Moved /etc/krb5.conf to /usr/etc/krb5.conf This patch (0011_usr_etc.patch) is upstream: https://github.com/krb5/krb5/pull/1437/ ==== libavif ==== - Update libavif.spec: Add compile condition for SvtAv1Enc, SLE-15-SP4, and other old releases will not build with it to make the update successful. (jsc#PED-13277, CVE-2025-48175, bsc#1243270, CVE-2025-48174, bsc#1243269) ==== libcontainers-common ==== Subpackages: libcontainers-default-policy registries-conf-default - Remove subpackage libcontainers-sles-mounts and prevent auto mounting SUSEConnect credentials from host to container. SLE16 onwards, the idea is to expect users to explicitly mount secrets. (bsc#1246227) ==== llvm20 ==== - Enable libcxx, openmp, lldb and thin_lto on loongarch64 - Add reproducible.patch to make libomp.so reproducible (boo#1199076) ==== pam-config ==== Version update (2.12+git.20250516 -> 2.13+git.20250715) - Update to version 2.13+git.20250715: * Release version 2.13 * Place himmelblau near the top of pam stack [bsc#1243418] ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - Do not build transactional_base pattern for Leap 16 - Drop yast inclusion for Leap 16, code-o-o#leap/features/173 ==== psmisc ==== - Add patch 0001-fuser-Fix-expandpath.patch * Is an upstream commit which fixes https://gitlab.com/psmisc/psmisc/-/issues/57 as well as bug boo#1242093 ==== sdbootutil ==== Version update (1+git20250613.ee73e55 -> 1+git20250716.b03c12f) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20250716.b03c12f: * Revert "Check for transactional systems by actually checking ro status, not mount attributes" - Update to version 1+git20250710.d8e5d82: * Check for transactional systems by actually checking ro status, not mount attributes ==== selinux-policy ==== Version update (20250703 -> 20250716) Subpackages: selinux-policy-targeted - Update to version 20250716: * Allow virtqemud_t use its private tmpfs files (bsc#1242998) * Allow virtqemud_t setattr to /dev/userfaultfd (bsc#1242998) * Allow virtqemud_t read and write /dev/ptmx (bsc#1242998) * Extend virtqemud_t tcp_socket permissions (bsc#1242998) * Mark configfs_t as mountpoint (bsc#1246080) * healthchecker: add proper optional_policy() guards * Allow virtqemud_t to read and write generic pty (bsc#1242998) * Allow plymouthd_t read proc files of systemd_passwd_agent (bsc#1245470) ==== xkeyboard-config ==== Version update (2.44 -> 2.45) - update to 2.45 (boo#1246516) - added %pretrans lua script for migration from /usr/share/X11/xkb directory to symlink - custom files previously under `/usr/share/X11/xkb`, e.g. the file `/usr/share/X11/xkb/symbols/custom`, which are saved under `/usr/share/X11/xkb.rpmmoved` after the update to 2.45 needs to be migrated manually by the user to `usr/share/xkeyboard-config-2` ==== zimg ==== - add patch cmake-googletest.patch to fix incompatibility of old google-test with CMake 4.0. Upstream has already updated the dependency.