Packages changed: LibVNCServer at-spi2-core (2.60.3 -> 2.60.4) atkmm1_6 (2.28.4 -> 2.28.5) aws-lc (1.72.0 -> 5.0.0) gdm (50.0 -> 50.1) gjs (1.88.0 -> 1.88.0.g4) gnome-control-center (50.1 -> 50.2) gnome-session (50.0 -> 50.1) gnome-shell (50.1 -> 50.2) gnome-user-docs (50.0 -> 50.2) gnome-user-share (48.2 -> 48.3) graphviz (14.1.2 -> 15.0.0) gssdp (1.6.4 -> 1.6.5) gtk4 (4.22.4 -> 4.22.4+11) gupnp (1.6.9 -> 1.6.10) gupnp-av (0.14.4 -> 0.14.5) gvfs hwdata (0.406 -> 0.407) libadwaita (1.9.0 -> 1.9.1) libdrm (2.4.133 -> 2.4.134) libjxl libjxl-gtk libsoup m17n-db (1.8.9 -> 1.8.10) nautilus (50.1 -> 50.2.2) openSUSE-release (20260529 -> 20260530) orca (50.1 -> 50.2) salt tesseract-ocr xscreensaver (6.09 -> 6.15) === Details === ==== LibVNCServer ==== - added patches CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write [bsc#1266459] * LibVNCServer-CVE-2026-44988.patch ==== at-spi2-core ==== Version update (2.60.3 -> 2.60.4) Subpackages: at-spi2-core-lang libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Update to version 2.60.4: + AtspiDeviceA11yManager: Make use of pid when returned by queryPointer + Fix deregistering application-specific event listeners ==== atkmm1_6 ==== Version update (2.28.4 -> 2.28.5) - Update to version 2.28.5: + Documentation: - Don't link to removed parts of gnome.org - Replace gtkmm.org by gtkmm.gnome.org - Remove obsolete FSF (Free Software Foundation) address - codegen/extradefs/generate_extra_defs_atk.cc: The license is GNU General Public License, version 2, as said in COPYING.tools. - README.win32.md: Mention Visual Studio 2026 - Visual Studio builds: Update build information + Meson build: - Require python3 >= 3.7. That's what Meson requires. - Require meson >= 0.60.0. - subprojects/atk.wrap points at at-spi2-core. GNOME/atk moved to GNOME/at-spi2-core long ago. - Use the Python installation that Meson uses. - Meson and NMake builds: Distinguish Visual Studio 2026 builds from Visual Studio 2022 builds. - NMake Makefiles: Consolidate items and improve flexibility. - NMake Makefiles: Make build process more robust. - NMake Makefiles: Update .m4 installation - Don't require the 'dot' command to build the documentation ==== aws-lc ==== Version update (1.72.0 -> 5.0.0) Subpackages: libcrypto-awslc0 libssl-awslc0 - Update to version 5.0.0: + Test key import in EVPTest a bit more extensively + Add OPENSSL_cleanse to zero stack secrets before return + Fix: Apply COHABITANT_HEADERS logic to location of tool binaries + Fix wherelen handling in BIO_ADDR_rawmake AF_UNIX path + Harden PKCS7 and OCSP error handling + Reject len < -1 in ASN1_mbstring_ncopy + Free existing union arm by current type in PKCS7_set_type + Ensure no trailing data for PKCS8 EVP_parse_private_key + Include trailing NUL in BIO_ADDR_rawaddress AF_UNIX length + Reject negative pass_len in PEM_ASN1_write_bio + Check parameters before comparing pqdsa public keys + Free existing responderId union arm in OCSP_RESPID setters + Release cipher_data on error path too for EVP_CTRL_INIT and EVP_CTRL_COPY + ci: declare contents: read on zig compiler workflow + Add new review workflow + Log versioning and library names druing cmake build step + Tighten OCSP_parse_url URL parsing + Add SHRT_MAX caps to bound iteration and input lengths + Fix correctness findings from penpal testing + Document new versioning scheme and bump mainline to v5.0.0 + Decouple the FIPS version number from the AWS-LC version number + Bump the github-actions group with 2 updates + Bump time from 0.3.36 to 0.3.47 in /tests/ci/lambda + tool-openssl/s_client: default SNI to -connect host to match OpenSSL + Reject undersized buffer in pkey_dsa_sign + Drop obsolete test_pkey_rsa.rb hunk from Ruby 3.4 patch + Enable Windows 7 compat path on MinGW builds + Add getauxval availability detection with /proc/self/auxv fallback for uclibc targets + Prefer CRLs with specific IDP match + Fix manylinux1 build: O_CLOEXEC fallback in getauxval shim + Gate Linux specific code to fix compilation on AIX + BoringSSL: Harden nc_email name constraint checking + Fix python 3.13 patch + Make rustfmt optional for Rust bindings generation + Skip MariaDB socket conflict test unable to run as root + use /map: linker flag to avoid running a binary to capture the hash + Add inline documentation for API contracts + ML-DSA support as a TLS 1.3 signature scheme + Make FIPS compiler wrapper unconditional ==== gdm ==== Version update (50.0 -> 50.1) Subpackages: gdm-lang gdm-schema gdm-systemd gdm-xdm-integration libgdm1 typelib-1_0-Gdm-1_0 - Update to version 50.1: + Fixed issue where GDM failed to properly terminate conflicting graphical sessions started outside of GDM (e.g. ThinLinc, TigerVNC). GDM now queries logind directly to find and terminate all conflicting sessions + Fixed plymouth hanging indefinitely on headless systems or systems without monitors, which prevented the system from reaching graphical.target + Fixed XDG_DATA_DIRS construction to prevent gnome-shell from failing to find its files when /usr/share had higher precedence than /usr/local/share + Fixed bug where GDM would set XDG_SESSION_TYPE=wayland on X11 sessions + Updated translations. - Drop gdm-fix-duplicate-dirs.patch: Fixed upstream. - Add gdm-fix-duplicate-dirs.patch: launch-environment: Fix XDG_DATA_DIRS construction. ==== gjs ==== Version update (1.88.0 -> 1.88.0.g4) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.88.0.g4: + maint: Check for NULL before dereferencing error_out pointer + Gio: Restore old arg order of GjsDBusImplementation::handle-method-call + GObject: Fix bug in GObject.Value with flags type - Split out new gjs-tests subpackage, stop passing installed_tests=false to meson setup. Following this, add more typelibs to global exclude. - Add fdupes and libxml2-tools BuildRequires, remove duplicate files and add the optional xmllint dependency. ==== gnome-control-center ==== Version update (50.1 -> 50.2) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users - Update to version 50.2: + Device Security: Make labels fit in mobile width + Global Shortcuts: Relas app-id validation requirements + Notifications: Fix "Show Content" notification setting + System: Give "Software Updates" row a "button" accessible role + Wellbeing: Make lables fit into mobile width + Updated translations. - Update vendored libgxpd sub-project. ==== gnome-session ==== Version update (50.0 -> 50.1) Subpackages: gnome-session-lang - Update to version 50.1: + Fix double-free bug + Updated translations. - Drop gnome-session-fix-double-free-GError.patch: Fixed upstream. ==== gnome-shell ==== Version update (50.1 -> 50.2) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 50.2: + Fix extending screenshot area selection to monitor edges + Fix faulty German translations of several date/time formats + Don't notify dash elements twice to screen reader + Add rate control to VA-API H.264 screencast pipelines + Fix showing “Install Updates” checkbox in power-off/restart dialog + Fix autorun notification for connected USB drives + Fix spinner resetting on each key press in overview search + Fix reapplying layout on `xkb-options` changes + Fix wiggle feedback on non-password auth failures + Open session/a11y menu on login screen on either button + Only show audio input icon when actually recording + Misc. bug fixes and cleanups + Updated translations. - Update vendored sub-project libgnome-volume-control. ==== gnome-user-docs ==== Version update (50.0 -> 50.2) - Update to version 50.2: + Updated translations. ==== gnome-user-share ==== Version update (48.2 -> 48.3) Subpackages: gnome-user-share-lang - Update to version 48.3: + Removed the translatable string of realm that caused client authentication errors with passwords + Updated translations. ==== graphviz ==== Version update (14.1.2 -> 15.0.0) Subpackages: libcdt6 libcgraph8 libgvc7 libpathplan4 libxdot4 - License change from EPL (Eclipse Public License) Version 1 to Version 2 - Drop libgraphviz6 construct. Looks like a helper dependency which, if ever used (I could not find any user), should be rather broken due to the stuck library version no 6 for years. - Update to 15.0.0 * The MinGW packages no longer have libgd-dependent components enabled. * **Breaking**: The `diffimg` utility has been removed. - Integrated mainline: D Fix-build-with-non-standard-python-binary.patch - Not needed anymore: D graphviz-smyrna-link_against_glu.patch ==== gssdp ==== Version update (1.6.4 -> 1.6.5) - Update to version 1.6.5: + Block corresponding TCP socket when allocating UDP socket ==== gtk4 ==== Version update (4.22.4 -> 4.22.4+11) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.22.4+11: + window: Fixup pointer focus when unmapping a popover + gpu: Trigger cache GC from dmabuf downloading code + Updated translations. ==== gupnp ==== Version update (1.6.9 -> 1.6.10) - Update to version 1.6.10: + Context: - Reuse allocated TCP socket from GSSDP Client for web server - Do not leak GError in ACL handler + Fix IPv6 host header validation - Temp disable tests, currently times out. ==== gupnp-av ==== Version update (0.14.4 -> 0.14.5) Subpackages: libgupnp-av-1_0-3 - Update to version 0.14.5: + Fix missing chain-up in SearchCriteriaParser ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-gphoto gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Add gvfs-fix-udisks2-crash.patch: Fix crash of cancelled pending operation. (bsc#1261625, glgo#GNOME/gvfs!326) ==== hwdata ==== Version update (0.406 -> 0.407) - Update to version 0.407: * Update pci and vendor ids - Add missing "BuildRequires: make" ==== libadwaita ==== Version update (1.9.0 -> 1.9.1) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.9.1: + Use G_PARAM_STATIC_STRINGS where it wasn't used + Fix a build error in the example + AdwAboutDialog/AdwAboutWindow: - Speed up adding legal sections - Speed up adding credit sections + AdwAlertDialog: - Fix a crash when chaining up in response() - Fix the Since annotation on get_prefer_wide_layout() + AdwButtonRow: Fix availability annotation + AdwClampScrollable: Implement GtkScrollable.get_border() + AdwEntryRow: Fix clicking edit icon + AdwNavigationView: Fix swipe direction + AdwSidebar: - Set tab behavior to 'item' - Fix adding multiple sections at once - Fix a crash when removing multiple items at once + AdwStyleManager: - Use default timeout when talking to the settings portal - Fix gtk-application-prefer-dark-theme warnings with newer GTK + AdwTabView: Fix a deprecation + Stylesheet: Fix bottom padding with .navigation-sidebar + Updated translations. ==== libdrm ==== Version update (2.4.133 -> 2.4.134) Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - update to 2.4.134 * Sync drm_fourcc.h with drm-next * meson: do not mark exynos/omap/tegra as disabled features * omap: stop including linux/types.h * add missing include to util_math.h * amdgpu/modetest: fix discards 'const' qualifier from pointer target type * ci: bump debian from bookworm to trixie * ci: fix indentation ==== libjxl ==== Subpackages: libjxl0_11 libjxl0_11-x86-64-v3 - Add libjxl-CVE-2025-70103.patch: take EC into accound when checking required PNM inmput length (bsc#1266460 CVE-2025-70103). ==== libjxl-gtk ==== - Add libjxl-CVE-2025-70103.patch: take EC into accound when checking required PNM inmput length (bsc#1266460 CVE-2025-70103). ==== libsoup ==== Subpackages: libsoup-3_0-0 libsoup-lang typelib-1_0-Soup-3_0 - Add libsoup-CVE-2026-4271.patch: Protect message io while reading and writing (bsc#1259767, CVE-2026-4271, glgo#GNOME/libsoup#496). ==== m17n-db ==== Version update (1.8.9 -> 1.8.10) Subpackages: m17n-db-lang - update to 1.8.10: * ml-poorna-remington.mim: New input method by Mujeeb Rahman K ==== nautilus ==== Version update (50.1 -> 50.2.2) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 50.2.2: + Bugfixes: Fix app chooser breaking translation domains - Update to version 50.2: + Enhancements: - Flush search results based on time instead of file count - Allow opening multiple files with different extensions + Fixed regressions: Added search entry to applicaton chooser + Bugfixes: - Fix app staying in the background after properties windows are closed - Fix possible crash with properties window - Fix thumbnails not appearing in remote locations - Fix fallback icons not changing size with zoom level - Fix duplicate conflict dialog when moving files across volumes - Handle trailing '.' character for FAT volumes - Fix search recursion for directories with no ID - Fix off-by-one insertion of bookmarks - Fix templates unique naming with a file extension - Fix a thin line of checker pattern appearing in thumbnails - Fix opening files with nautilus itself - Avoid potential crash in list view + Cleanups: - Don't create trash monitor when not needed - Correctly clear name-cell callbacks on disposal + Updated translations. ==== openSUSE-release ==== Version update (20260529 -> 20260530) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== orca ==== Version update (50.1 -> 50.2) Subpackages: orca-lang - Update to version 50.2: + Web: - Fix repetition of previous line when leaving blockquotes. - Handle traceback triggered by Chromium crash. - Fix double-presentation when flat-reviewing Chromium content. + Preferences: - Fix table-navigation-enabled state for app settings. - Fix orphaned key grab. + Updated translations. ==== salt ==== Subpackages: python311-salt salt-master salt-minion - Add 'show_changes' arg to 'file.append/file.prepend" states - Added: * add-show_changes-to-file.append-and-file.prepend-sta.patch ==== tesseract-ocr ==== Subpackages: libtesseract5 libtesseract5-x86-64-v3 tesseract-ocr-common - Modernize spec file: * Drop unused BuildRequires: chrpath (no chrpath calls in spec, no RPATH munging needed) * Drop libtool's --with-gnu-ld configure flag (autodetected on Linux, no functional effect) * Enable parallel build by splitting `make all training doc` into two %make_build invocations (matches upstream CI); the libtool convenience-library race only triggers when those targets are mixed in one make * Strip absolute -L/usr/lib(64) paths from tesseract.pc (fixes rpmlint pkgconfig-invalid-libs-dir error) ==== xscreensaver ==== Version update (6.09 -> 6.15) Subpackages: xscreensaver-data xscreensaver-lang - update to 6.15: * New hacks: worldpieces, bestill, bubblecolors, darktransit, downfall, driftclouds, goldenapollian, noxfire, prococean, rigrekt, trainmandala, trizm and universeball. * mapscroller shows the name of the nearest major city, and has an updated list of available map tile servers. * Higher resolution Earth imagery in glplanet, dymaxionmap, sphereeversion, cubocteversion and platonicfolding. * X11: xscreensaver-settings has a search field. * X11: Excised the last remnants of XLFD-style font parsing. * macOS, iOS: Text in right-to-left languages is rendered properly. * Android: Most things display text properly. - changes from 6.14.1: * macOS: the new shader savers were crashing at startup. - changes from 6.14: * Added the ability to run shadertoy.com programs as screen savers. * New shader-based savers: alienbeacon, batteredplanet, elementalring, fluxcore, gimbalharmonics, hexplasma, logarithmiccircles, neongravity, neontriangulator, protophore, selfreflect, skyline, stardome, starnest, stripeytorus, synthwavecity, topologica and truchetzoom. * Better label wrapping in carousel and photopile. * Fixed glslideshow preferences and title display. * X11: Decrufted PAM, including /etc/pam.d/xscreensaver. - changes from 6.13: * Added a number of historical full chess games to endgame. * Rewrote glslideshow to add more image-transition effects. * Hacks that display images and their filenames will display their titles instead, if the image originated in an RSS feed. * X11: Wayland fixes. - changes from 6.12: * X11: DPMS works on Wayland. * X11: Fading uses GL now which should be more performant. - changes from 6.11: * X11: Now supports Wayland (blanking only, not locking). * X11: More reliable and timely DPMS activation. * X11: Dead keys work in password input. * X11: Fixed a couple of minor Y2038 bugs. - changes from 6.10: * New hacks: dumpsterfire, hopffibration, platonicfolding and klondike. * Rewrote the VT100 emulator for apple2 and phosphor. * BSOD supports systemd and bitlocker. - Add 35 new screensavers to xscreensaver-data-extra.list. - Package the new xshadertoy engine binary and man page (used by the shadertoy-based savers) in the data-extra subpackage. - Rebase xscreensaver-disable-upgrade-nagging-message.patch.