Packages changed: Imath (3.2.2 -> 3.2.3) PackageKit colord dos2unix (7.5.6 -> 7.5.7) emacs (30.2 -> 31.1) flatpak (1.18.1 -> 1.18.2) icewm (3.9.0 -> 4.1.0) ktextaddons (2.1.1 -> 2.1.2) libjpeg-turbo (3.1.4.1 -> 3.2.0) libseccomp msgraph (0.3.4 -> 0.3.5) multipath-tools (0.15~1+230+suse.d36a6a70 -> 0.15.1+227+suse.6644513) openSUSE-release (20260828 -> 20260829) procps qpdf (12.3.2 -> 12.4.1) wget === Details === ==== Imath ==== Version update (3.2.2 -> 3.2.3) - version update to 3.2.3 * Vec integer method resolution improved — Replaced  =delete with SFINAE ("Substitution Failure Is Not An Error"), via a new `is_float_like` trait, for `length()`, `normalize()`, `normalizedExc()`, etc on integer-typed Vec2/3/4. This gives clearer compiler diagnostics and allows custom numeric types (with an `is_float_like` specialization) to opt into these methods. `half` is explicitly supported. (#[575](https://github.com/AcademySoftwareFoundation/Imath/pull/575)) * Fixed duplicate installation of `ImathConfig.h` (#[591](https://github.com/AcademySoftwareFoundation/Imath/pull/591)) * Fixed shared library installation path (#[556](https://github.com/AcademySoftwareFoundation/Imath/pull/556)) * Fixed Python module install directory, now derived correctly from `Python3_SITEARCH` instead of a hardcoded/absolute path (#[528](https://github.com/AcademySoftwareFoundation/Imath/pull/528)) * Suppressed a C++23 deprecation warning for `std::float_denorm_style/denorm_present` usage in `numeric_limits` (#[546](https://github.com/AcademySoftwareFoundation/Imath/pull/546)) only) * Simplified CMake minimum-version policy handling by removing explicit CMP0074/CMP0077 settings now implied by the 3.14 minimum (#[526](https://github.com/AcademySoftwareFoundation/Imath/pull/526)) * Documentation fixes: corrected install instructions in README.md, fixed broken links, minor spelling corrections ==== PackageKit ==== Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Only make DNF backend available in openSUSE Leap 16+. Add 0%{?is_opensuse} check to make sure it's only available in Leap. ==== colord ==== Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2 - Build the ICC print profiles with GLIBC_TUNABLES=glibc.cpu.hwcaps=-FMA,-FMA4 so that they no longer depend on the build host CPU (boo#1217747) ==== dos2unix ==== Version update (7.5.6 -> 7.5.7) - update to 7.5.7: * Detect a missing UTF-16 low surrogate at the end of a file. * Fixed the processing of files containing only half a BOM. * unix2dos: Fixed conversion of a DOS line break immediately after a Mac line break. * mac2unix/unix2mac: Fixed counting line breaks in verbose mode of files with mixed line break types. * Code cleanup. ==== emacs ==== Version update (30.2 -> 31.1) Subpackages: emacs-el emacs-eln emacs-info emacs-nox etags - Use lexical-binding for lisp file - Update to GNU Emacs version 31.1 + This update fix bsc#1275941, bsc#1275927 (CVE-2026-79992), and bsc#1276264 * Using the mouse to control Emacs in a terminal enabled by default * New user-lisp/ subdirectory of your Emacs configuration directory * Child frames supported on text frames * Various improvements to the *Completions* buffer * Commands to split windows make better choices about the split direction * The *grep* and *xref* buffers now support editable modes * New feature to review changes to packages before installing or upgrading them * New theme designed to make Emacs more approachable for new users * No ctags support in etags anymore - Remove obsolete patches now upstream solved * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch * 03_all_ruby-flymake.patch * 04_all_shorthands.patch * emacs-30.1-seccomp.patch * emacs-30.2-boo1262611.patch * emacs-30.2-bsc1275927.patch * emacs-30.2-tree-sitter-0.26.8.patch - Port patch emacs-29.1.dif and renamed it to emacs-31.1.dif - Port patches * 0012-Add-inhibit-native-compilation.patch * 0013-Rename-to-inhibit-automatic-native-compilation.patch * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch * emacs-24.1-ps-mule.patch * emacs-24.3-iconic.patch * emacs-24.4-glibc.patch * emacs-24.4-nonvoid.patch * emacs-24.4-ps-bdf.patch * emacs-27.1-pdftex.patch * emacs-30.1-pdumper.patch * emacs-30.1-silent.patch * pdump.patch - Add upstream patch * 0001-speedbar-mode-must-be-enabled-in-the-speedbar-window.patch ==== flatpak ==== Version update (1.18.1 -> 1.18.2) Subpackages: flatpak-remote-flathub flatpak-selinux libflatpak0 system-user-flatpak - Update to version 1.18.2: + Bug fixes: - Validate GVariant structure of summaries before using generated variant readers - Fix crash in system helper when iterating cache directories - Avoid corrupted output from non-UTF-8 characters in error messages - Fix portal passing wrong file descriptor when sandbox-expose-fd-ro triggers fd remapping collision - Fix system helper tracking wrong D-Bus sender for pulls - Fix extensions not being populated in the sandbox due to unhandled EAGAIN from openat2 - Fix build failure with GLib versions older than 2.72 - Test infrastructure improvements ==== icewm ==== Version update (3.9.0 -> 4.1.0) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to version 4.1.0: + Fixes: - Default Alpha to false to avoid rare video performance problems.. - Properly handle unterminated strings in configuration files.. - Properly handle a string parsing error for _NET_STARTUP_ID.. - Free the picture before its pixmap to prevent an error message. + Changes: - Add a new winoption ignoreUserTime. - Add a "mousemove" command to icesh. + Updated translations. - update to 4.0.0: * Features: - Add QuickSwitchPreview for application previews during Alt+Tab switching. - Support for high-resolution icons (up to 256x256) in previews and taskbar. - Add getWorkspaceName and getWorkspaceNames commands to icesh. - Select applications by the first letter of their class name in Alt+Tab. - Improved system tray icon handling for mixed bit depths - Improved clock LED rendering and fallback to fonts if pixmaps are missing. - Recognition of UTF-8 combining marks in window titles. - Enhanced QuickSwitch with workspace separators and keypad support. - Server-side caching of icon pictures to improve drawing performance. * Fixes: - Prevent crash when a dock layer window exits. - Fix keyboard layout switching on OpenBSD. - Fix bug where tasks pane could overlap workspaces pane. - Fix sorting of FDO menu entries with non-English characters. - Improve workspace name updates on the taskbar when changed externally. - Diagnostic messages for loadicon and saveicon in icesh. * Changes: - Increase maximum icon size to 256 for LargeIconSize and HugeIconSize. - Set the default value for Alpha blending to 1 and drop DoubleBuffer preference. - Update issue tracker and repository URLs to the ice-wm organization. - Improved autogen.sh with better versioning and error handling. - Updated translations for many languages including Indonesian, Russian, Dutch, and Japanese. ==== ktextaddons ==== Version update (2.1.1 -> 2.1.2) Subpackages: ktextaddons-lang libKF6TextAddons1 - Update to 2.1.2 * When we define default dialog size, it didn't work when screen scale size was different to 100% * In textaddons autogenerate lib, don't allow to collapse with double click in textautogeneratehistorylistview * Reduce duplicate FlowLayout class * Fix attachment widget layout (Use QToolButton). This class is used in kaichat. * Fix initialise variable in plugincommonmodelinstalledinfosdelegate * Reduce duplicate code in plugin textaddons autogenerate ==== libjpeg-turbo ==== Version update (3.1.4.1 -> 3.2.0) Subpackages: libjpeg8 libjpeg8-x86-64-v3 libturbojpeg0 libturbojpeg0-x86-64-v3 - update to 3.2.0: * Fixed a regression introduced by 3.2 beta1[9] that broke Arm64EC Windows builds. * Hardened the PNG writer (which is used by djpeg and tj3SaveImage*()) against applications that may erroneously attempt to write sample values that are out of range for the specified output data precision. * Hardened the libjpeg API against hypothetical applications that may erroneously call jpeg_crop_scanline() with buffered-image mode and raw data output enabled. * Fixed a buffer overrun and subsequent segfault in jpegtran that occurred when attempting to use the -crop and -trim options to expand the width of an image narrower than one iMCU, discard partial iMCUs, and fill each block in the expanded region with the DC coefficient of the nearest block in the input image ("flatten.") - deleted sources * libjpeg-turbo-3.1.4.1.tar.gz.sig (not needed) - added sources * libjpeg-turbo-3.2.0.tar.gz.sig ==== libseccomp ==== - `python` build should not install non-Python files. - replace deprecated 'setup.py install' with PEP 517 wheel install ==== msgraph ==== Version update (0.3.4 -> 0.3.5) - Update to version 0.3.5: + drive: fall back to /me/drive when /me/drives is denied + doc: update URLs ==== multipath-tools ==== Version update (0.15~1+230+suse.d36a6a70 -> 0.15.1+227+suse.6644513) Subpackages: kpartx libmpath0 - Update to version 0.15.1+227+suse.6644513 (see NEWS.md for details) * The `preferredip=`parameter for the `iet` prioritizer has been generalized. See multipath.conf(5) for details. - Upstream fixes for vulnerabilities: * DoS on mulipathd socket by blocking IPC send operations (GHSA-hmcm-9cq4-r2xm bsc#1277199) * DoS on multipathd socket by exhausting connections (GHSA-pvp6-c9p3-25fp bsc#1277203) * Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%` (GHSA-g5mh-253r-jjw5 bsc#1277205) * Heap out-of-bounds read in device-mapper-multipath ALUA RTPG parsing (GHSA-pxwh-g75c-95pc 1277208) * kpartx: Heap Out-of-Bounds Read in GPT Header Validation (GHSA-p6rh-9x9j-3hvx, bsc#1277209) * Path traversal in device-mapper-multipath failed_wwids management (GHSA-gr7q-prfc-q636 bsc#1277210) * libmpathpersist PRIN READ FULL STATUS parser — unbounded descriptor rewrite causes root heap overflow (GHSA-hj7j-qr9h-5fv6 bsc#1277212) - Bug fixes: * Fix use-after free error during shutdown (gh#opensvc/multipath-tools#152) * Add missing NULL check in DM parser (gh#opensvc/multipath-tools#155) ==== openSUSE-release ==== Version update (20260828 -> 20260829) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== procps ==== Subpackages: libproc2-1 procps-lang - Add patch procps-ng-4.0.7-sysctl_ipv6.patch (boo#1276206) * Really ignore stable_secret below /proc/sys/net/ipv6/conf ==== qpdf ==== Version update (12.3.2 -> 12.4.1) - Update to version 12.4.1: - Update to 12.4.1: * Avoid generating JSON with leading zeroes when converting real numbers. * Detect and warn in check linearization when the cross-reference (xref) stream reports that the object containing a compressed object is itself a compressed object. * Improve uniformity and accuracy of progress reporting when writing linearized files and files with a large number of object streams. 10 - Update to 12.4.0: * Fix error message when --check encounters a PDF file with no pages. * Remove non-array/empty /Annots entries and non-dictionary annotations from copied pages in QPDFAcroFormDocumentHelper::fixCopiedAnnotations. * Fix failure in QPDFWriter when trailer /ID entries are invalid. * Limit the effect of QPDF::setMaxWarnings to the initial loading of the PDF file to prevent treating subsequent exceptions as recoverable. * Correctly handle page rotation values outside [0, 360] range in QPDFPageObjectHelper::getMatrixForTransformations. * Enforce conservative limits on the depth of direct objects created via QPDFObjectHandle::makeDirect to reduce stack overflow risk. * Enforce conservative limits on pages tree depth to prevent stack overflows. * Detect duplicate entries in the AcroForm field hierarchy earlier. * Rewrite zsh and bash shell completion functions to autogenerate from argument parsing metadata (job.yml) instead of invoking the executable. * Show linearization data even if linearization checks throw an exception. * Add REQUIRE_SHELLS CMake option to fail completion tests if new bash/zsh are missing (enabled by default in maintainer mode). * Deprecate external-libs on Windows in favor of vcpkg. ==== wget ==== Subpackages: wget-lang - Fix server-controlled unbounded MD5 loop in FTP OPIE [bsc#1276962; CVE-2026-16599] * CVE-2026-16599.patch