Packages changed: MicroOS-release (20260911 -> 20260912) baloo-widgets (26.08.0 -> 26.08.1) blog (2.47 -> 2.48) coreutils coreutils-systemd dialog docker (29.4.0_ce -> 29.7.2_ce) dolphin (26.08.0 -> 26.08.1) falkon (26.08.0 -> 26.08.1) ffmpegthumbs (26.08.0 -> 26.08.1) kaccounts-integration (26.08.0 -> 26.08.1) kaccounts-providers (26.08.0 -> 26.08.1) kate (26.08.0 -> 26.08.1) kdegraphics-mobipocket (26.08.0 -> 26.08.1) kdegraphics-thumbnailers (26.08.0 -> 26.08.1) kdenetwork-filesharing (26.08.0 -> 26.08.1) kdialog (26.08.0 -> 26.08.1) kio-extras (26.08.0 -> 26.08.1) kio-gdrive (26.08.0 -> 26.08.1) konsole (26.08.0 -> 26.08.1) kpmcore (26.08.0 -> 26.08.1) kwalletmanager (26.08.0 -> 26.08.1) libkdcraw (26.08.0 -> 26.08.1) libkexiv2-qt6 (26.08.0 -> 26.08.1) libkgapi6 (26.08.0 -> 26.08.1) libupnp (22.0.6 -> 22.1.0) llvm23 (23.1.0 -> 23.1.1) multipath-tools (0.15.1+227+suse.6644513 -> 0.15.1+229+suse.6c6f63e) partitionmanager (26.08.0 -> 26.08.1) qrca (26.08.0 -> 26.08.1) selinux-policy (20260908 -> 20260910) signon-kwallet-extension (26.08.0 -> 26.08.1) sudo === Details === ==== MicroOS-release ==== Version update (20260911 -> 20260912) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== baloo-widgets ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== blog ==== Version update (2.47 -> 2.48) Subpackages: libblogger2 - Update to version 2.48 * Avoid fortify compiler warnings in vmcp.c * Simplify parseterm() to avoid compiler warning ==== coreutils ==== - coreutils-uniq-fix-read-overrun-with-w.patch: Add upstream security fix (CVE-2026-56391, bsc#1272698) * uniq: '-w' no longer overruns the read buffer in multibyte locales. [bug introduced in coreutils-9.5] - coreutils-unexpand-fix-heap-overflow.patch: Add upstream security fix (CVE-2026-56392, bsc#1272699) * unexpand: '-t' no longer overflows a heap buffer for tab values > SIZE_MAX/16. [bug introduced in coreutils-9.11] - coreutils-tests-df-sync-fix-strace.patch: Add test patch to let df-sync test succeed on more architecures. ==== coreutils-systemd ==== - coreutils-uniq-fix-read-overrun-with-w.patch: Add upstream security fix (CVE-2026-56391, bsc#1272698) * uniq: '-w' no longer overruns the read buffer in multibyte locales. [bug introduced in coreutils-9.5] - coreutils-unexpand-fix-heap-overflow.patch: Add upstream security fix (CVE-2026-56392, bsc#1272699) * unexpand: '-t' no longer overflows a heap buffer for tab values > SIZE_MAX/16. [bug introduced in coreutils-9.11] - coreutils-tests-df-sync-fix-strace.patch: Add test patch to let df-sync test succeed on more architecures. ==== dialog ==== Subpackages: libdialog15 - Update to version 1.3-20260721: + correct order of sprintf parameters for token-count error messages (patch by Xinting Zhou). + updated cs.po, zh_CN.po from https://translationproject.org/latest/dialog/ + configure script fixes for compiler warnings + updated ms.po from https://translationproject.org/latest/dialog/ + updated ar.po, ka.po, ms.po, ru.po, sr.po from https://translationproject.org/latest/dialog/ - Update to version 1.3-20260107: + modify package/debian/* to work with Debian 13+. + modify run_test.sh to set LD_LIBRARY_PATH in case "make check" is used on a system where dialog's shared library was not installed. + improve gen-pkgconfig.in by widening the filter for "-z" options. + improve layout of menu and checklist/radiolist widgets (report by Mike Castle). + add a limit-check in the tailbox widget. + correct length of input-fields in form widget (report by Mike Castle). + correct a typo for aspect ratio in files written by --create-rc (report by Mike Castle). + improve manpage description of --hline (report by Mike Castle). + update configure script macros for cross-compatibility. + added kab.po from https://translationproject.org/latest/dialog/ + updated bg.po, de.po, eo.po, fa.po, id.po, ja.po, ms.po, pl.po, pt.po, ro.po, sq.po, sv.po, uk.po from https://translationproject.org/latest/dialog/ + configure script fixes for compiler warnings + update config.guess, config.sub ==== docker ==== Version update (29.4.0_ce -> 29.7.2_ce) Subpackages: docker-buildx docker-rootless-extras - Ship the SELinux CIL policies from contrib/selinux/, loading docker-af-alg-deny.cil (mitigates CVE-2026-31431) via semodule when SELinux is enabled (bsc#1278193). - Update to Docker 29.7.2. See upstream changelog online at - Update to buildx 0.36.1. See upstream changelog online at - Rebased patches: * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch (renamed from 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch) * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch - Remove patches now fixed upstream: - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch (bsc#1099277, superseded by upstream commit 528a806141 "daemon: Always reload AppArmor profile at daemon startup", which fixes the same root cause: the daemon no longer skips reinstalling the docker-default profile on upgrade) - 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch (bsc#1262346, CVE-2026-39984 fixed upstream via vendored sigstore/timestamp-authority v2.1.2) - 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch (bsc#1265782, CVE-2026-33814 fixed upstream via vendored golang.org/x/net v0.57.0) - 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch (bsc#1266625, CVE-2026-39821 fixed upstream via vendored golang.org/x/net v0.57.0) - 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch (bsc#1267827, CVE-2026-41567 fixed upstream directly in moby/moby via commit 2022313ffe) ==== dolphin ==== Version update (26.08.0 -> 26.08.1) Subpackages: dolphin-part libdolphinvcs6 - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - Changes since 26.08.0: * dolphintabpage: set the active split pane from the view that activated (kde#509525) * previewssettingspage: Emit changed() if the data actually changes, not on click. * DolphinItemListView: Revert 16 to 48 in itemWidth (kde#523432) * dolphinitemlistview: do not store the fallback icon size in the cache (kde#524606) * views: Never let the item layout use a zero icon size (kde#523228) * kitemlistview: Fix group headers showing over the view's header * Dolphinview: Refresh the default zoom level when settings are applied * Close a tab on middle click whether or not it shows a close button * dolphinview: Base the default zoom level on the preview state ==== falkon ==== Version update (26.08.0 -> 26.08.1) Subpackages: falkon-kde - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== ffmpegthumbs ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kaccounts-integration ==== Version update (26.08.0 -> 26.08.1) Subpackages: libkaccounts6-2 - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kaccounts-providers ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kate ==== Version update (26.08.0 -> 26.08.1) Subpackages: kate-plugins - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kdegraphics-mobipocket ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kdegraphics-thumbnailers ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kdenetwork-filesharing ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kdialog ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kio-extras ==== Version update (26.08.0 -> 26.08.1) Subpackages: libkioarchive6-6 trash_kcm - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kio-gdrive ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== konsole ==== Version update (26.08.0 -> 26.08.1) Subpackages: konsole-part - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - Changes since 26.08.0: * Fix OSC22 mouse cursor shapes for splits * ViewSplitter: Fix focus shortcut issue (kde#524598) ==== kpmcore ==== Version update (26.08.0 -> 26.08.1) Subpackages: libkpmcore13 - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== kwalletmanager ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== libkdcraw ==== Version update (26.08.0 -> 26.08.1) Subpackages: libKDcrawQt6-5 libkdcraw-qt6 - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== libkexiv2-qt6 ==== Version update (26.08.0 -> 26.08.1) Subpackages: libKExiv2Qt6-0 - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== libkgapi6 ==== Version update (26.08.0 -> 26.08.1) Subpackages: libKPim6GAPICore6 libKPim6GAPIDrive6 libkgapi6-sasl2-kdexoauth2 - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== libupnp ==== Version update (22.0.6 -> 22.1.0) Subpackages: libixml22 libupnp22 - Update to release 22.1.0 * OSS-Fuzz: Add new fuzzer targets service table processing ==== llvm23 ==== Version update (23.1.0 -> 23.1.1) - Update to version 23.1.1. * This release contains bug-fixes for the LLVM 23.1.0 release. This release is API and ABI compatible with 23.1.0. - Drop obsolete llvm-fix-i586-build.patch. ==== multipath-tools ==== Version update (0.15.1+227+suse.6644513 -> 0.15.1+229+suse.6c6f63e) Subpackages: kpartx libmpath0 - Update to version 0.15.1+229+suse.6c6f63e: * Fix hang in initrd during installation (bsc#1274053) ==== partitionmanager ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== qrca ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== selinux-policy ==== Version update (20260908 -> 20260910) Subpackages: selinux-policy-targeted - Update to version 20260910: * Allow polkit_auth_t dac_read_search/dac_override (bsc#1255503) * Allow pam_ssh_agent configure custom key location (bsc#1255503) ==== signon-kwallet-extension ==== Version update (26.08.0 -> 26.08.1) - Update to 26.08.1 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.1/ - No code change since 26.08.0 ==== sudo ==== - Drop make -B workaround for parallel build race condition. The underlying issue (sudo Bug #842, libtool .o/.lo race) was fixed upstream in sudo 1.8.24 (July 2018). The -B flag was added in SR#622342 with the note that it could be reverted after the upstream fix landed. Also drop the sle_version < 150000 build conditional that was only needed for the non-B code path. - Add --with-devel to build the full upstream test suite including the testsudoers regression binary. Pre-generated parser files are removed before make to prevent a parallel build race where yacc overwrites gram.h while other sources are compiling against it. Add bison and flex as BuildRequires for the regeneration. - Add %check section to run the upstream test suite during build. Fedora, Debian and Arch Linux all run make check.