Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20260914 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gimp (3.2.4 -> 3.2.6) kbd (2.9.0 -> 2.10.0) kernel-source (7.2.4 -> 7.2.5) lrzip (0.660 -> 0.702) openSUSE-release (20260912 -> 20260914) qt6-declarative shotwell (0.32.17 -> 33.0) thunar (4.20.9 -> 4.20.10) zchunk (1.5.3 -> 1.5.4) zoo (2.10 -> 2.10.1) === Details === ==== gimp ==== Version update (3.2.4 -> 3.2.6) Subpackages: gimp-plugin-aa gimp-plugin-python3 libgimp-3_0-0 libgimpui-3_0-0 - Update to 3.2.6 - Core: - macOS: Macbook touchpad over-sensitivity now fixed. - Destructive-only filter actions will be made insensitive on all non-raster layers (unless rasterized). - Windows: in release builds, we now attach our standard outputs to the Windows console on certain scenarios only (when there is no interface, or in verbose mode, or when - -console-messages is set, or finally when there are batch commands). By default, we are back to how it was before GIMP 3.2.0, which is that GIMP doesn't output anything on native shells it was called from. - Fix expand from center which was failing in some cases. - Layers to Image Size only works for raster (or rasterized) layers. - Clipboard brush and pattern max size bumped to 8192 on Aarch64 architecture too (this was changed in 3.2.0 RC2, but only for x86-64 and PPC64). - Dashboard backtraces now work on Windows Aarch64 too (additionally to Windows x86-64). - No pass-through reduction on group layers with non-destructive filters. - Dashboard backtraces now work on macOS with native API without libbacktrace. - MyPaint's custom brush directory ($USERPROFILE/.mypaint) better retrieved on Windows. - XCF: * Visibility lock on paths is now properly saved. Channel * filters were not saved either. XCF is bumped to version 26. - Clear does not affect non-raster layers, unless rasterized. - Improved management of plug-in pipes and process watch. In particular, we avoid various warnings (about empty contexts or broken pipes) when closing GIMP if plug-ins processes didn't end first or just when closing some plug-ins. - Stop noninteractive filters on invisible layers unless the relevant option is enabled in Preferences. - We now verify if a plug-in has been updated since last start by using the changed time (ctime) as fallback when the modified time (mtime) is 0. This is because on some environment (such as ostree, hence flatpak), all files mtimes are set to the UNIX epoch. - Various small changes or fixes were made to prepare for a potential GTK 4 port. - Cache directory on macOS is now in ~/Library/Caches/ (instead of ~/Library/Application Support/). - Added "Rotation" input for dynamics. This gives us support of the Wacom Art Pen 2 stylus at least. - Various performance improvements in text tool and font handling were made. - It is now possible to cut layer groups with a selection (which will cut every children, recursively), as long as every child is writable ("Content Lock" must not be set and the layers must be raster, or rasterized). - Tools: - Warp tool: properly show the warp cursor even when hovering other images from where we started warping. - Crop tool: do not change position of vector layers. - Gradient tool: * The non-linear blending space was always used, even when linear blending was requested. * Fixed transparent areas when the Offset is set to 100% * (1.0) and the Repeat policy is set to Truncate. - Filters: clip setting was lost when editing non-destructive filters. - Text tool: ignore selected layer mask of a text layer when selecting it with the tool to edit the text contents. The layer mask still stays the selected item in such a case. - Heal tool: dark smudge at crop boundaries is fixed. - Color Picker tool: there was an exception ignoring Sample Merged option when a single layer was visible (allowing to retrieve the exact palette color from indexed images). This exception has been further restricted to the absence of filters. Sample Merged, even of single layer images, should return the color after filters are applied. - MyPaint Brush tool: broken initialization was sometimes triggering a stroke being skipped. - Graphical User Interface: - MyPaint brush previews are now loaded at full size instead of 48Ã48. - Alpha Component previews fixed. - Caret/text cursor color now specifically set in our theme to prevent it from being overridden by the system theme. - macOS: * Title bar color scheme now follows the chosen theme scheme. * Transiency of dialogs on macOS was globally broken and is * now being worked around on a case-by-case basis. * Minimize button removed from various dialogs. Fix dockable * windows not floating. GIMP's Spin buttons now respect the * Cmd key. Scrollbars hiding now follows the relevant macOS * system setting to allow always showing them if requested (this is not the default), just like it does with supported DEs. * Use Cmd+` instead of Alt+Tab. Modules and Units are now * listed on the mac menu like in 2.10. Welcome and About * dialogs are redundant from the application menu and were removed. * Ctrl+F2 is used on behalf of Alt. Cmd+Shift+/ opens the ... changelog too long, skipping 178 lines ... + gimp-CVE-2026-80101.patch (bsc#1276911, glgo#GNOME/gimp#16583) ==== kbd ==== Version update (2.9.0 -> 2.10.0) Subpackages: libkbdfile1 libkeymap1 libkfont0 - Require xkeyboard-config to be able to load XKB based keymaps. Its data is required to compile these keymaps, and its %posttrans creates /var/lib/xkb/compiled in a way compatible with immutable updates. - Update to version 2.9.0 (boo#1268148): * keymaps: + Add Backtab keysym and update keymaps to use it for Shift+Tab. + Add keymap for Norwegian Apple ISO keyboard. + Adjust Swiss German keyboard mappings. * libkeymap: + Add API to validate keysyms. + Add XKB-aware symbol aliases through the normal synonym tables. + Fix compose table upload limit handling. * utils: + loadkeys: Add support for generating console keymaps from XKB. + loadkeys: Add XKB compose import support. + loadkeys: Add support for XKB group switching, modifier handling, virtual console switching and keypad/editing remaps. + loadkeys: Add diagnostics for XKB keysym coverage. + openvt: make -u process matching more conservative. + setfont: Add setfont --check that checks for setfont availability without logging errors (boo#1212970, obsoletes kbd-setfont-check.patch). * contrib: + Add an XKB keysym coverage diagnostic tool. + Add a VT layout indicator using keyboard LED lock triggers. - Refresh kbd-1.15.5-loadkeys-search-path.patch. - Enable compressed file loading introduced by the upstream in version 2.9.0. - Remove xz from BuildRequires, as it is not needed. ==== kernel-source ==== Version update (7.2.4 -> 7.2.5) Subpackages: kernel-64kb kernel-default - Update patches.kernel.org/7.2.1-001-PCI-host-generic-Fix-NULL-pointer-dereference-o.patch (bsc#1012628 CVE-2026-80917 bsc#1280009). - Update patches.kernel.org/7.2.1-002-Bluetooth-RFCOMM-take-rfcomm_mutex-for-the-defe.patch (bsc#1012628 CVE-2026-80819 bsc#1279607). - Update patches.kernel.org/7.2.1-003-iommu-tegra241-cmdqv-Fix-CMD_SYNC-use-after-fre.patch (bsc#1012628 CVE-2026-80818 bsc#1279695). - Update patches.kernel.org/7.2.1-004-iommu-iommufd-Fix-NULL-pointer-deref-in-iommufd.patch (bsc#1012628 CVE-2026-80817 bsc#1279465). - Update patches.kernel.org/7.2.1-005-ALSA-FCP-Use-a-private-URB-for-the-notification.patch (bsc#1012628 CVE-2026-80816 bsc#1279703). - Update patches.kernel.org/7.2.1-006-ALSA-scarlett2-Use-a-private-URB-for-the-notifi.patch (bsc#1012628 CVE-2026-80815 bsc#1279700). - Update patches.kernel.org/7.2.1-007-rndis_host-add-overflow-check-in-rndis_rx_fixup.patch (bsc#1012628 CVE-2026-80814 bsc#1279705). - Update patches.kernel.org/7.2.1-008-nvmet-fix-NULL-pointer-dereference-in-nvmet_exe.patch (bsc#1012628 CVE-2026-80813 bsc#1279537). - Update patches.kernel.org/7.2.1-009-futex-pi-Reject-cross-mm-private-futex-owners.patch (bsc#1012628 CVE-2026-80778 bsc#1279587). - Update patches.kernel.org/7.2.1-011-futex-pi-Plug-private-futex-exec-race.patch (bsc#1012628 CVE-2026-80777 bsc#1279586). - Update patches.kernel.org/7.2.1-012-futex-Avoid-private-hash-use-after-free-on-fina.patch (bsc#1012628 CVE-2026-80758 bsc#1279469). - Update patches.kernel.org/7.2.1-013-futex-Fix-race-on-the-initial-mm-futex.phash.re.patch (bsc#1012628 CVE-2026-80775 bsc#1279583). - Update patches.kernel.org/7.2.1-016-ALSA-dummy-Check-card-index-validity-at-probe.patch (bsc#1012628 CVE-2026-80812 bsc#1279777). - Update patches.kernel.org/7.2.1-017-io_uring-cmd-fix-iovec-leak-when-the-async-cmd-.patch (bsc#1012628 CVE-2026-80811 bsc#1279712). - Update patches.kernel.org/7.2.1-019-io_uring-rsrc-fix-folio-size-overflow-in-io_vec.patch (bsc#1012628 CVE-2026-80810 bsc#1279789). - Update patches.kernel.org/7.2.1-021-io_uring-defer-eventfd-signaling-when-queued-fr.patch (bsc#1012628 CVE-2026-80920 bsc#1279928). - Update patches.kernel.org/7.2.1-022-ocfs2-fix-missing-metadata-reservation-for-larg.patch (bsc#1012628 CVE-2026-80809 bsc#1279606). - Update patches.kernel.org/7.2.1-024-kcov-fix-data-corruption-and-race-conditions-on.patch (bsc#1012628 CVE-2026-80916 bsc#1279972). - Update patches.kernel.org/7.2.1-025-ext4-stop-retrying-saturated-xattr-cache-entrie.patch (bsc#1012628 CVE-2026-80808 bsc#1279795). - Update patches.kernel.org/7.2.1-026-nilfs2-reject-invalid-block-index-in-GC-ioctl.patch (bsc#1012628 CVE-2026-80807 bsc#1279591). - Update patches.kernel.org/7.2.1-030-ext4-don-t-enable-DAX-on-new-encrypted-files.patch (bsc#1012628 CVE-2026-80806 bsc#1279589). - Update patches.kernel.org/7.2.1-032-xfs-validate-attr-entry-pointer-before-field-ac.patch (bsc#1012628 CVE-2026-80805 bsc#1279580). - Update patches.kernel.org/7.2.1-033-xfs-restore-nofs-context-unconditionally-in-xfs.patch (bsc#1012628 CVE-2026-80804 bsc#1279579). - Update patches.kernel.org/7.2.1-034-nfc-digital-clamp-SENSF_RES-length-to-the-desti.patch (bsc#1012628 CVE-2026-80803 bsc#1279798). - Update patches.kernel.org/7.2.1-035-nfc-fdp-bound-the-device-reported-read-length-a.patch (bsc#1012628 CVE-2026-80802 bsc#1279814). - Update patches.kernel.org/7.2.1-036-nfc-microread-validate-target-discovery-payload.patch (bsc#1012628 CVE-2026-80801 bsc#1279815). - Update patches.kernel.org/7.2.1-037-nfc-llcp-bound-the-connect_sn-TLV-walk-to-the-s.patch (bsc#1012628 CVE-2026-80800 bsc#1279812). - Update patches.kernel.org/7.2.1-038-nfc-llcp-fix-OOB-read-and-u8-offset-wrap-in-TLV.patch (bsc#1012628 CVE-2026-80799 bsc#1279811). - Update patches.kernel.org/7.2.1-039-nfc-llcp-reject-PDUs-shorter-than-the-LLCP-head.patch (bsc#1012628 CVE-2026-80798 bsc#1279809). - Update patches.kernel.org/7.2.1-040-nfc-pn533-purge-fragmented-skbs-during-cleanup.patch (bsc#1012628 CVE-2026-80797 bsc#1279808). - Update patches.kernel.org/7.2.1-041-nfc-st21nfca-validate-ATR_REQ-length-against-th.patch (bsc#1012628 CVE-2026-80823 bsc#1279608). - Update patches.kernel.org/7.2.1-042-nfc-nci-add-data_len-bound-checks-to-activation.patch (bsc#1012628 CVE-2026-80796 bsc#1279807). - Update patches.kernel.org/7.2.1-043-nfc-nci-fix-out-of-bounds-write-in-nci_target_a.patch (bsc#1012628 CVE-2026-80795 bsc#1279805). ... changelog too long, skipping 1291 lines ... - commit e841c45 ==== lrzip ==== Version update (0.660 -> 0.702) - Rework to version 0.702 with no Epoch (Epoch forbidden per review): upstream 0.7.2 maps to 0.702 (7*100+2), which sorts above 0.660 in rpmvercmp; same mapping holds for 0.7.x/0.8.x/0.10.x - Drop Epoch 1 from the declined submission - Update to version 0.7.2: * New mostly backward compatible file format, except streamed STDIO and encrypted files (see README-NOT-BACKWARD-COMPATIBLE) * Embedded libzpaq 5.00 -> 7.15 and LZMA SDK -> 26.02 for faster and better compression * Default encryption is now AES-256-GCM + PBKDF2-HMAC-SHA512, add - -legacy-encrypt for 0.6-compatible AES-128-CBC * Add -u/ultra mode, lzma filter support, lrztar takes most lrzip options, MacOS build fixes - Add Epoch 1: upstream renumbered 0.660 -> 0.7.x, which sorts older in rpmvercmp, so this keeps the update an upgrade - Switch to the upstream release tarball (ships configure): drop autoconf/automake/libtool/nasm BuildRequires and the autoreconf step - Add perl BuildRequires for pod2man (man pages generate at build time) - Run the upstream regression suite in %check (SKIP_SLOW=1) ==== openSUSE-release ==== Version update (20260912 -> 20260914) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== qt6-declarative ==== Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsPlatform6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsStyleKit6 libQt6LabsSynchronizer6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlMeta6 libQt6QmlModels6 libQt6QmlNetwork6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickVectorImage6 libQt6QuickWidgets6 qt6-declarative-imports - Add upstream change (kde#508377) * 0001-QML-engine-Correctly-compare-composites-when-multipl.patch ==== shotwell ==== Version update (0.32.17 -> 33.0) - Update to version 33.0: + Fix an issue with system information not showing the OS release + Add system information also to the viewer mode + Fix an issue where "discard" in viewer would not actually discard changes + Updated translations. - Changes from version 33.rc: + Clean-up old data and debug/dead code + Fix toolbar auto-hide in fullscreen mode + Fix icons disappearing in slideshow toolbar + Fix setting desktop backgrounds + Allow pop-up of context menu with keyboard + Fix send-to failing when sending many images + Fix spacing in editing tools dialogs + Fix adding face names + Fix highlighting faces + Fix matching random faces with random probabilities + Export image if OpenCV cannot read the original format + Fix tab navigation + Fix crash when saving import results + Set release name + Add debug information to About dialog + Updated translations. - Changes from version 33.beta: + Rework printing + Work-around lambda memory leaks + Some clean-up of the codebase + Work-arounds for potential crashes + Fix slideshow settings panel + Fix rating filter selection by keyboard + Add a help overview of the keyboard shortcuts + Publishing: - Add "peek password" icon to Piwigo - Move manual Gtk.Builder code to templated - Show the external authentication wait panel everywhere - Replace the dedicated auth helper app with a simple web server on localhost - Changes from version 33.alpha + Port to gtk4 + Changes in dependencies: - GExiv2 >= 0.16.0 - GTK4 >= 4.22 + Other changes: - Forward-port of bugfixes from stable branch - Rename Appdata -> Metainfo - Introduce Toasts to replace simple dialogs - Add support for opening URIs with the viewer - Fix image oversion jumping to top on first use - Remove loads of deprecated GTK api where possible - Remove deprecated calls to GExiv2 - Remove import from application infrastructure - Fix missing default menu on sidebar - Fix showing help when running from build folder - Re-add all drag and drop based features - "Asyncify" a lot of functions - Clean up stray debug output left all over the code - Switch to meson BuildSystem, automatic BuildRequires. ==== thunar ==== Version update (4.20.9 -> 4.20.10) Subpackages: libthunarx-3-0 thunar-lang - Update to 4.20.10 * Use G_POST_ORDER when refiltering the tree model (#1460) * Fix SIGSEGV in Tree View when renaming directories * Translation Updates ==== zchunk ==== Version update (1.5.3 -> 1.5.4) - update to 1.5.4: * memory leak and use-after-free fixes in compression, download range, header and index handling * raise meson BuildRequires floor to 0.54.0 per upstream - drop Group: tags, modernize suse_version conditional (spec-cleaner) ==== zoo ==== Version update (2.10 -> 2.10.1) - Update to version 2.10.1 (upstream 2.10 patchlevel 1). - Upstream behavior changes: * New archives use LZH compression (was LZC); old archives still extract fine. * 'zoo l' shows file modes instead of CRCs. - Dropped patches (superseded by the version bump): * zoo-2.10-tempfile.patch * zoo-2.10-CAN-2005-2349.patch * zoo-2.10-security-infinite_loop.patch - Added patches (dropped ones re-added under versioned names, byte-identical, no content change): * zoo-2.10.1-tempfile.patch * zoo-2.10.1-CAN-2005-2349.patch * zoo-2.10.1-security-infinite_loop.patch - Refreshed patches: * zoo.patch: add the missing makefile linux target with the previous build flags, drop the upstream-merged NOSTRCHR hunk and the stale varargs.h dependency. * zoo-gcc.patch and zoo-gcc14.patch: drop the upstream-merged hunks (signal handler prototypes, ctrl_c/handle_break parameter fixes).
