Packages changed: MicroOS-release (20261105 -> 20261106) baloo-widgets (26.08.2 -> 26.08.3) dolphin (26.08.2 -> 26.08.3) falkon (26.08.2 -> 26.08.3) ffmpegthumbs (26.08.2 -> 26.08.3) kaccounts-integration (26.08.2 -> 26.08.3) kaccounts-providers (26.08.2 -> 26.08.3) kate (26.08.2 -> 26.08.3) kdegraphics-mobipocket (26.08.2 -> 26.08.3) kdegraphics-thumbnailers (26.08.2 -> 26.08.3) kdenetwork-filesharing (26.08.2 -> 26.08.3) kdialog (26.08.2 -> 26.08.3) kernel-firmware-amdgpu (20260926 -> 20261031) kernel-firmware-ath10k (20260926 -> 20261022) kernel-firmware-ath11k (20260926 -> 20261031) kernel-firmware-ath12k (20260926 -> 20261009) kernel-firmware-bluetooth (20260929 -> 20261104) kernel-firmware-i915 (20260806 -> 20261031) kernel-firmware-intel (20260916 -> 20261104) kernel-firmware-media (20260926 -> 20261031) kernel-firmware-mediatek (20260825 -> 20261031) kernel-firmware-network (20260813 -> 20261031) kernel-firmware-nvidia (20260610 -> 20261014) kernel-firmware-platform (20260717 -> 20261026) kernel-firmware-qcom (20260929 -> 20261031) kernel-firmware-realtek (20260915 -> 20261104) kernel-firmware-serial kernel-firmware-sound (20260926 -> 20261022) kernel-firmware-usb-network (20260610 -> 20261012) kio-extras (26.08.2 -> 26.08.3) kio-gdrive (26.08.2 -> 26.08.3) konsole (26.08.2 -> 26.08.3) kpmcore (26.08.2 -> 26.08.3) kwalletmanager (26.08.2 -> 26.08.3) libblockdev libkdcraw (26.08.2 -> 26.08.3) libkexiv2-qt6 (26.08.2 -> 26.08.3) libkgapi6 (26.08.2 -> 26.08.3) libupnp (22.1.10 -> 22.2.0) liburing mozilla-nss (3.130 -> 3.132) partitionmanager (26.08.2 -> 26.08.3) python-configobj python-psutil qemu (11.1.2 -> 11.1.3) qrca (26.08.2 -> 26.08.3) sddm-qt6 signon-kwallet-extension (26.08.2 -> 26.08.3) skopeo ucode-amd === Details === ==== MicroOS-release ==== Version update (20261105 -> 20261106) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== baloo-widgets ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== dolphin ==== Version update (26.08.2 -> 26.08.3) Subpackages: dolphin-part libdolphinvcs6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * kfileitemmodel: apply the refresh of an item that setData() renamed (kde#527059) * KStandardItemListWidget: respect DPR when creating a drag pixmap in Details view * dolphinview: drop the frame of the view where the style draws one (kde#527201) * dolphinviewcontainer: name the view properties after the url the view shows (kde#526398) * dolphinmainwindow: pass the folder of the custom command as one argument (CVE-2026-110236, boo#1285432) * CI: Comment flatpak job ==== falkon ==== Version update (26.08.2 -> 26.08.3) Subpackages: falkon-kde - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== ffmpegthumbs ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kaccounts-integration ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkaccounts6-2 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kaccounts-providers ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kate ==== Version update (26.08.2 -> 26.08.3) Subpackages: kate-plugins - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Do not capture params in lambda slot * Fix not using built PATH on macos * Fix the locals view tooltips * Don't request members of variables that have none anymore * Fix stale variables in collapsed scopes after stepping * Fix crash on a late variables response after clearing the locals view * Fix structs and arrays not expandable in the locals view (kde#526140) * Fix crash when restoring a sidebar with missing tool views * Fix incorrect discard/remove text * Fix "Open At Head" action * Fix reading incorrect config key * Delete all views when closing a split that shows a widget * Fix duplicate tabs and crash after changing the tab limit * Skip skip-worktree files when loading files from git * Return widgets without a tab from KateViewSpace::widgets() * Fix registration of new documents in project * tests with ASAN on FreeBSD are very slow * try to fix latex test on windows * git-blame: ignore the configured revs file when it is missing ==== kdegraphics-mobipocket ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdegraphics-thumbnailers ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdenetwork-filesharing ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kdialog ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== kernel-firmware-amdgpu ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * amdgpu: DMCUB updates for various ASICs - Update to version 20261026 (git commit 98b55c84e8da): * amdgpu: DMCUB updates for DCN42 - Update to version 20261017 (git commit a2dcb924f089): * Revert "amdgpu: update GC 11.0.0 firmware" * amdgpu: update vangogh firmware * amdgpu: update VPE 6.1.1 firmware * amdgpu: update VCN 4.0.6 firmware * amdgpu: update PSP 14.0.1 firmware * amdgpu: update GC 11.5.1 firmware * amdgpu: update VCN 4.0.5 firmware * amdgpu: update PSP 14.0.0 firmware * amdgpu: update GC 11.5.0 firmware * amdgpu: update renoir firmware * amdgpu: update yellow carp firmware * amdgpu: update raven2 firmware * amdgpu: update raven firmware * amdgpu: update VCN 3.1.2 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update picasso firmware * amdgpu: update PSP 13.0.11 firmware * amdgpu: update GC 11.0.4 firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update VCN 5.0.0 firmware * amdgpu: update PSP 14.0.3 firmware * amdgpu: update GC 12.0.1 firmware * amdgpu: update PSP 14.0.2 firmware * amdgpu: update GC 12.0.0 firmware * amdgpu: update VCN 4.0.4 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update beige goby firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update navy flounder firmware * amdgpu: update sienna cichlid firmware * amdgpu: update navi14 firmware * amdgpu: update navi12 firmware * amdgpu: update navi10 firmware * amdgpu: update VCN 5.0.1 firmware * amdgpu: update GC 9.4.4 firmware * amdgpu: update PSP 15.0.9 firmware * amdgpu: update GC 11.7.1 firmware * amdgpu: update VCN 5.3.0 firmware * amdgpu: update PSP 15.0.0 firmware * amdgpu: update PSP 14.0.5 firmware * amdgpu: update GC 11.5.3 firmware * amdgpu: update PSP 14.0.4 firmware * amdgpu: update GC 11.5.2 firmware * amdgpu: update green sardine firmware * amdgpu: update VCN 4.0.3 firmware * amdgpu: update PSP 13.0.6 firmware * amdgpu: update GC 9.4.3 firmware * amdgpu: DMCUB updates for various ASICs - Update to version 20261012 (git commit b9df1a1aa45b): * amdgpu: DMCUB updates for various ASICs * amdgpu: update gc 11.0.1 and 11.0.4 firmware ==== kernel-firmware-ath10k ==== Version update (20260926 -> 20261022) - Update to version 20261022 (git commit 412eb7861d40): * ath10k: WCN3990: hw1.0: update shikra/wlanmdsp.mbn to WLAN.HL.3.3.7.c5-00226 ==== kernel-firmware-ath11k ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * ath11k: QCA2066 hw2.1@nfa725: add to WLAN.HSP.1.1.c6-00302-QCAHSPSWPL_V1_V2_SILICONZ_LITE-1 * ath11k: QCA2066 hw2.1: update board-2.bin ==== kernel-firmware-ath12k ==== Version update (20260926 -> 20261009) - Update to version 20261009 (git commit 8f9cd8ebb163): * ath12k: WCN7850 hw2.0: update board-2.bin ==== kernel-firmware-bluetooth ==== Version update (20260929 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * linux-firmware: Update firmware file for Intel Scorpius2 core * linux-firmware: Update firmware file for Intel Scorpius2 core - Update aliases from 7.4-rc1 - Update to version 20261022 (git commit 412eb7861d40): * QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00680 - Update to version 20261012 (git commit b9df1a1aa45b): * aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware - Update to version 20261009 (git commit 8f9cd8ebb163): * linux-firmware: Update firmware file for Intel Solar core * linux-firmware: Update firmware file for Intel Magnetar core * linux-firmware: Update firmware file for Intel BlazaruHrpGfp core * linux-firmware: Update firmware file for Intel BlazariGfp core * linux-firmware: Update firmware file for Intel BlazarUFmPArl core * linux-firmware: Update firmware file for Intel BlazarI core * linux-firmware: Update firmware file for Intel BlazariFmp core * linux-firmware: Update firmware file for Intel BlazarU core * linux-firmware: Update firmware file for Intel ScorpiusGfp core * linux-firmware: Update firmware file for Intel Scorpius core ==== kernel-firmware-i915 ==== Version update (20260806 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * xe: Add GSC 108.0.0.1211 for NVL - Update aliases from 7.3-rc1 ==== kernel-firmware-intel ==== Version update (20260916 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * Linux-firmware: Add Dell ISH firmware 582.7822.0 for Intel Nova Lake-H systems. * intel-ipu6: Add firmware binary for IPU8 * intel-ipu6: Support IPU 7 and later as well - Update to version 20261009 (git commit 8f9cd8ebb163): * linux-firmware: Add ISH firmware files for Intel Nova Lake-H/S platforms ==== kernel-firmware-media ==== Version update (20260926 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * qcom: vpu: Update video firmware binary for Kaanapali ==== kernel-firmware-mediatek ==== Version update (20260825 -> 20261031) - Update to version 20261031 (git commit bda6eccc3a8f): * mediatek MT7922: update bluetooth firmware to 20261027203403 * linux-firmware: update firmware for MT7922 WiFi device - Update to version 20261021 (git commit 084e837ec47f): * mediatek MT7925: update bluetooth firmware to 20261016233221 * linux-firmware: update firmware for MT7925 WiFi device ==== kernel-firmware-network ==== Version update (20260813 -> 20261031) - Update aliases from 7.4-rc1 - Update to version 20261031 (git commit bda6eccc3a8f): * wilc1000: update WILC1000/WILC3000 firmware to v16.5.2 ==== kernel-firmware-nvidia ==== Version update (20260610 -> 20261014) - Update aliases from 7.4-rc1 - Update to version 20261014 (git commit d5455717ead0): * nvidia: Update and add missing firmware files for Tegra SoCs ==== kernel-firmware-platform ==== Version update (20260717 -> 20261026) - Update aliases from 7.4-rc1 - Update to version 20261026 (git commit 98b55c84e8da): * linux-firmware: nxpwifi: add firmware for IW610 WiFi device - Update to version 20261017 (git commit a2dcb924f089): * rockchip: add PCIe3 PHY firmware for snps-pcie3 - Update to version 20261014 (git commit d5455717ead0): * wfx: update to firmware 3.18 - Update to version 20261009 (git commit 8f9cd8ebb163): * panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU ==== kernel-firmware-qcom ==== Version update (20260929 -> 20261031) - Update aliases from 7.4-rc1 - Update to version 20261031 (git commit bda6eccc3a8f): * qcom: update LPAICP firmware for shikra platform * qcom: update Rubik Pi 3 ADSP firmware * qcom: update CDSP firmware for shikra platform - Update to version 20261022 (git commit 412eb7861d40): * qcom: Add gpu firmwares for Nord chipset - Update to version 20261021 (git commit 084e837ec47f): * qcom:x1e80100: Support for Lenovo Yoga Slim7 Snapdragon platform CDSP - Update to version 20261017 (git commit a2dcb924f089): * Update ADSP firmware for Qualcomm qcs615 platform. - Update to version 20261014 (git commit d5455717ead0): * qcom:Update qdsp6sw firmware for shikra platform - Update to version 20261012 (git commit b9df1a1aa45b): * qcom: update HPASS firmware for nord platform - Update to version 20261009 (git commit 8f9cd8ebb163): * qcom: update LPAICP firmware for shikra platform * qcom: update ADSP firmware for glymur platform * qcom: fix qcs8300 gpdspr.jsn symlink target * qcom: update ADSP firmware for x1e80100 platform * qcom: add ADSP firmware for eliza platform ==== kernel-firmware-realtek ==== Version update (20260915 -> 20261104) - Update to version 20261104 (git commit 0cb5a7fb037e): * rtw89: 8852c: update fw to v0.27.138.1 - Update to version 20261014 (git commit d5455717ead0): * rtw89: init board_elm.bin with stuffs for board ID 1 * rtw89: 8922d: update fw 0.35.119.3 with format suffix -1 * rtw89: 8922d: update fw 0.35.115.2 ==== kernel-firmware-serial ==== - Update aliases from 7.4-rc1 ==== kernel-firmware-sound ==== Version update (20260926 -> 20261022) - Update aliases from 7.4-rc1 - Update to version 20261022 (git commit 412eb7861d40): * linux-firmware: qcom: sync audioreach firmwares from v1.0.5 build - Update to version 20261009 (git commit 8f9cd8ebb163): * cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops * cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops * cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops * cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops * cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop * cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6 ==== kernel-firmware-usb-network ==== Version update (20260610 -> 20261012) - Update to version 20261012 (git commit b9df1a1aa45b): * aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware ==== kio-extras ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkioarchive6-6 trash_kcm - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * smb: use the saved login of a share whose url names no user ==== kio-gdrive ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== konsole ==== Version update (26.08.2 -> 26.08.3) Subpackages: konsole-part - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Vt102: Only accept cursor commands ==== kpmcore ==== Version update (26.08.2 -> 26.08.3) Subpackages: libkpmcore13 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - Changes since 26.08.2: * Partition length should not be cached in ResizeFileSystemJob because partition is expanded just before ::run(), and we need live data, not old cached data. * Fix ResizeFileSystemJob to cache partition() properties that might change. * Make sure queued move is using partition boundaries at creation time, not runtime. (kde#527047) ==== kwalletmanager ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libblockdev ==== Subpackages: libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_smart3 libbd_swap3 libbd_utils3 libblockdev3 - Add libblockdev-CVE-2026-111581.patch: CVE-2026-111581: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method (bsc#1286323) ==== libkdcraw ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKDcrawQt6-5 libkdcraw-qt6 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkexiv2-qt6 ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKExiv2Qt6-0 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libkgapi6 ==== Version update (26.08.2 -> 26.08.3) Subpackages: libKPim6GAPICore6 libKPim6GAPIDrive6 libkgapi6-sasl2-kdexoauth2 - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== libupnp ==== Version update (22.1.10 -> 22.2.0) Subpackages: libixml22 libupnp22 - Update to release 22.2 * Cast input to ctype calls to unsigned char ==== liburing ==== - add 0001-test-waitid-accept-ETIME-for-a-fired-linked-timeout.patch to fix tests for kernel 7.4 - add to excludes * connect.t: flaky on 16.1 + 7.3 * sqpoll-exec.t, thread-exit.t: flaky on 7.3 ==== mozilla-nss ==== Version update (3.130 -> 3.132) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - Update to version 3.132: * bmo#2084101 - Remove eMudhra emSign Root CA - G3 from NSS. * bmo#2083709 - Remove eMudhra emSign Root CA - C1 and emSign ECC Root CA - C3 from NSS. * bmo#2056777 - fix build failures. * bmo#2056777 - secasn1d: propagate end-of-contents flag to enclosing construct. * bmo#2056777 - additional secasn1d tests for end of contents handling. * bmo#2056777 - Changing the end_of_content for BER encoding. * bmo#2064148 - run the FIPS-mode SSL tests in CI. * bmo#2064148 - run fips.sh in CI. * bmo#2064148 - run gtests in FIPS mode. * bmo#2082675 - do not force-import an empty symmetric key. * bmo#2082671 - allow unwrapping an EC private key without a public point. * bmo#2064426 - DTLS1.3 must not use EndOfEarlyData (per RFC 9147 Section 5.6). * bmo#2081444 - make clang-cl the default compiler for Windows in CI. * bmo#2081444 - add option to build with clang-cl in CI. * bmo#2075015 - prefer the seed format for wrapped ML-KEM and ML-DSA private keys. * bmo#2074404 - Encode ML-DSA private keys in PK11_ExportPrivKeyInfo. * bmo#2074404 - Encode ML-KEM private keys in PK11_ExportPrivKeyInfo. * bmo#2081440 - use nspr4 branch tip for CI runs. * bmo#2082406 - Read p7env and p7verify input in binary mode on Windows. * bmo#2082407 - p7verify, p7content: exit non-zero on invalid signatures; fix p7verify SHA-384/512 digests. * bmo#2050941 - libpkix http default client tests. * bmo#2079860 - clear held back early data byte when 0rtt is rejected. * bmo#2030245 - add Windows ARM64 CI jobs. * bmo#2079416 - Update the wycheproof testvectors README. * bmo#2079416 - Update ML-KEM wycheproof testvectors. * bmo#2079416 - Update ML-DSA wycheproof testvectors. * bmo#2079416 - Update DSA wycheproof testvectors. * bmo#2079416 - Update RSA PKCS#1 v1.5 signature wycheproof testvectors. * bmo#2079416 - Update RSA-PSS wycheproof testvectors. * bmo#2079416 - Update RSA PKCS#1 v1.5 decryption wycheproof testvectors. * bmo#2079416 - Update RSA-OAEP wycheproof testvectors. * bmo#2079416 - Update EdDSA wycheproof testvectors. * bmo#2079416 - Update ChaCha20-Poly1305 wycheproof testvectors. * bmo#2079416 - Update ECDSA wycheproof testvectors. * bmo#2079416 - Update ECDH wycheproof testvectors. * bmo#2079416 - Update X25519 wycheproof testvectors. * bmo#2079416 - Update HMAC wycheproof testvectors. * bmo#2079416 - Update AES-CMAC wycheproof testvectors. * bmo#2079416 - Update AES-CBC wycheproof testvectors. * bmo#2079402 - read JSON directly for all wycheproof tests. * bmo#2079457 - explicitly reject RSA PKCS#1 v1.5 ciphertexts that are not less than the modulus. * bmo#2075179 - finalize the PRAGMA table_info statement on error paths in sdb_init. * bmo#2076062 - Limit nesting depth in PKCS#12 safeContents decoder. * bmo#2072757 - use encoded serial number to look up trust in fill_CERTCertificateFields. * bmo#2077359 - remove unused SEC_ASN1_MKSUB from secsign.c. * bmo#1961826 - Run NSS_Shutdown at exit in SMIME fuzzer. * bmo#1961826 - Add streaming decoder pass to SMIME fuzzer. * bmo#1961826 - Verify SignerInfos in SMIME fuzzer. * bmo#1961826 - Regenerate test certs for SMIME fuzzer. * bmo#1961826 - Add EC cert for ECDH and decrypt key callback to SMIME fuzzer * bmo#1961826 - Extend the SMIME fuzzer to cover more functions. * bmo#390374 - return NULL for deprecated PBE functions. * bmo#2061403 - Keep sigd->digests parallel to sigd->digestAlgorithms. * bmo#2076696 - guard against integer overflow in PK11_HPKE_Seal and PK11_HPKE_Open. * bmo#2076037 - ensure chacha20-poly1305 tag buffer is 16 bytes in PK11_AEADOp. * bmo#2077359 - remove more unused functions from NSS. * bmo#1960284 - Don't report epoch exhaustion through FatalError. - Changes from version 3.131.1: * This release removes trust in the following root certificates: + bmo#2083709 - emSign Root CA - C1 + bmo#2083709 - emSign ECC Root CA - C3 + bmo#2084101 - emSign ECC Root CA - G3 - Changes from version 3.131: * bmo#2078438 - remove unused private pkcs12, pkcs7, and smime functions. * bmo#2070738 - Fix generating nss.pc with system-nspr. * bmo#2066048 - replace sslSecurityInfo peerCert with peerCertDER. * bmo#2067244 - remove support for inherited DSA parameters in libssl. * bmo#2017995 - Fix issues with Unwrapping keys using tokens in FIPS mode. * bmo#2069886 - remove Windows-only AES-CTR implementation. * bmo#2069887 - improve algorithm policy enforcement for ML-DSA. * bmo#2064512 - reject non-RFC 8410 curve OIDs when encoding an X25519 or Ed25519 SubjectPublicKeyInfo. * bmo#2076212 - Clear freed CMS members in the destructors. * bmo#2076212 - Release the previous signer certificate when re-verifying a PKCS#7 signature. * bmo#2076212 - Make SEC_PKCS7DecoderAbort fail the decode. * bmo#2076212 - Fail closed after an incomplete PKCS#12 decode. * bmo#2076240 - remove unused NSSCryptoContext and NSSTrustDomain functions. * bmo#1993638 - can’t import eddsa .p12 from OpenSSL. * bmo#2055638 - fix clang format. * bmo#2072045 - pk12util fails to import private key into SoftHSM token despite initialized slot and valid PKCS#12 file. * bmo#2075580 - p7content: open output file in binary mode. * bmo#2068388 - fix msvc build error. * bmo#2072416 - use SEC_ASN1_GET for SEC_OctetStringTemplate in der_gtest. * bmo#2074663 - remove unused and unexported CERT_ functions. * bmo#2072416 - fix leak when decoding nested indefinite length octet strings with null arena. ... changelog too long, skipping 19 lines ... * bmo#2074968 - stub out DER_Lengths. ==== partitionmanager ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== python-configobj ==== - CVE-2026-112300: Avoid ReDOS in section parsing. (bsc#1286097) * Add patch CVE-2026-112300.patch ==== python-psutil ==== - Add rlim_infinity.patch to fix compatibility with Python 3.15 ==== qemu ==== Version update (11.1.2 -> 11.1.3) - Drop libpmem support (bsc#1288103) - [openSUSE] Update to version 11.1.3 Full backport list here: https://lore.kernel.org/qemu-devel/20261029051934.1487878-2-mjt@tls.msk.ru/ A selection of them is reported here below: target/ppc: Name the EBB exceptions hw/intc/exynos4210_combiner: Fix group register range check hw/misc/bcm2835_cprman: Treat invalid clock mux source select as GND hw/usb/hcd-xhci: More reentrancy guard fixes for the XHCI code hw/usb/dev-mtp: Fix heap OOB read in usb_mtp_write_metadata() hw/usb/dev-mtp: Fix assert crash on short CMD_SEND_OBJECT usb-host: delete bottom halves during unrealize usb-host: free request on libusb submit failure tests/qtest/usb-hcd-xhci: test interrupt pacing above 2^32 usb-host: free configuration descriptors on error paths usb-host: validate interface number before indexing altsetting tests/qtest: Cover OHCI endpoint type mismatches hw/usb/hcd-ohci: Fail iso packets sent to non-iso endpoints and vice-versa hw/usb/dev-mtp: Fix assert crash on undersized BULK IN hw/uefi: fix ContentInfo detection in wrap_pkcs7() hw/9pfs: fix dirent stream protection for legacy (9p2000.u) Tread iotests/migrate-bitmaps-postcopy-test: add a bitmap on a second node migration/block-dirty-bitmap: fix postcopy abort with bitmaps on several nodes migration: add QEMU_COUNTED_STRING_SIZE for counted string buffers qemu-img: convert: flush target image after copying block: report flush error during bdrv_close() iotests.py: add filter_qemu() iotests: add test cases for failing flush after qemu-img convert seccomp: really fix blocking of setns/execveat/unshare seccomp: fix blocking of setns/execveat/unshare target/riscv: Check Svnapot PTE before updating A/D bits tests/qtest/bios-tables-test: Update riscv64 virt SPCR golden reference hw/riscv/virt-acpi-build: Fix the UART register width in SPCR tests/qtest/bios-tables-test: Allow changes to riscv64 virt SPCR target/riscv/kvm: Preserve VCSR across migration target/riscv/kvm: Reject migration with a different timer frequency target/riscv/kvm: Preserve FCSR across migration targetriscv: svinval instructions raise virtual instruction exception target/riscv: stop translating after WFI target/riscv: Restore LCOFI handling in interrupt CSRs target/riscv: check G-stage write permission for VS-stage A/D updates hw/intc/arm_gicv5: Make IRS_IDR0 reads return actual value, not 0 tests/tcg/aarch64: Test the TTBR layout with TCR.DS and a 48-bit OA target/arm: Use the 52-bit TTBR base address layout when TCR.DS is set tests/tcg/aarch64: Add a test for a two-entry 52-bit TTBR table target/arm: Clear TTBR[5:0] from a 52-bit table base address tcg/riscv64: Remove vector min/max ops with immediates target/i386: fix immediate stack adjustment for RET and RETF target/i386/tcg: zero FXSAVE FOP and reserved slot bytes tests/tcg: Add tests for sign extension after rotate tcg/optimize: Do not derive s_mask from rotated s_mask hw/display/vga: fix OOB writes after external surface resize hw/tpm: crb: Do not clear internal buffers when backend is busy tpm_emulator: Reject sending commands smaller than the request header io: cork TLS writes to avoid small TLS records block: Remove now redundant bdrv_wait_serialising_requests() calls block: Fix corruption from broken RMW atomicity block: reject a reopen of an unusable node instead of crashing qcow2: do not clear the dirty bit when reopening a read-only node file-posix: add statx(STATX_DIOALIGN) support block: fix bdrv_next() skipping monitor-owned nodes iotests: cover inactivating a read-only node block/throttle-groups: fix crash when enabling I/O limits on a busy disk io: prevent unbounded read of websocket data from client hw/usb: Fix USB MTP Use-After-Free in usb_mtp_deletefn List Iteration target/i386/tcg: ignore VEX.L for unary scalar instructions accel/kvm: coalesced mmio: check lenght of the MMIO write entry accel/kvm: protect kvm_resample_fd_list with a mutex system: fix buffer overflow in tdx_parse_panic_message target/i386: Don't clear C1 for FCOMI/FCOMIP/FUCOMI/FUCOMIP target/i386: clear C1 for all x87 compare instructions target/i386: Migrate error code only with an exception target/i386/tcg: raise #GP(0) on null SS load with RPL != CPL plugins: fix register handle encoding to reserve NULL as invalid hw/nvme: fix memory leak on sr-iov capable nvme controller removal hw/nvme: fix assertion failure on sr-iov capable nvme controller removal block/nbd: clear reply.cookie under receive_mutex block/nbd: never index requests[] with an unchecked cookie block/nbd: clear reply.cookie when the reply is rejected ... - supportconfig: Major update ==== qrca ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== sddm-qt6 ==== Subpackages: sddm-greeter-qt6 - Require /usr/bin/X: 00-general.conf defines ServerPath=/usr/bin/X (boo#1288770). ==== signon-kwallet-extension ==== Version update (26.08.2 -> 26.08.3) - Update to 26.08.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/26.08.3/ - No code change since 26.08.2 ==== skopeo ==== - When stripping WhiteoutPrefix, make sure the result is a proper basename CVE-2026-79699, bsc#1280698 + 0001-CVE-2026-79699-archive-When-stripping-WhiteoutPrefix.patch - Don't panic on empty ciphertext CVE-2026-116585, bsc#1288278 + 0002-CVE-2026-116585-cipher-cbc_hmac-don-t-panic-on-empty.patch - limit stack depth CVE-2026-116586, bsc#1288278 + 0003-CVE-2026-116586-json-limit-stack-depth.patch - bound RSA modulus size and reject private keys in JWK/EPK headers CVE-2026-116587, bsc#1288278 + 0004-CVE-2026-116587-jwk-bound-RSA-modulus-size-and-rejec.patch ==== ucode-amd ==== - Fix supplements to add dependency on kernel (bsc#1249138)