Packages changed: 389-ds (3.2.2+4b41542b2 -> 3.3.1+8c2711bd6) aurorae6 (6.7.4 -> 6.7.5) bluedevil6 (6.7.4 -> 6.7.5) breeze6 (6.7.4 -> 6.7.5) breeze6-gtk (6.7.4 -> 6.7.5) discover6 (6.7.4 -> 6.7.5) drkonqi6 (6.7.4 -> 6.7.5) flatpak-kcm6 (6.7.4 -> 6.7.5) kactivitymanagerd6 (6.7.4 -> 6.7.5) kde-cli-tools6 (6.7.4 -> 6.7.5) kde-gtk-config6 (6.7.4 -> 6.7.5) kdecoration6 (6.7.4 -> 6.7.5) kdeplasma6-addons (6.7.4 -> 6.7.5) kgamma6 (6.7.4 -> 6.7.5) kglobalacceld6 (6.7.4 -> 6.7.5) kinfocenter6 (6.7.4 -> 6.7.5) kmenuedit6 (6.7.4 -> 6.7.5) knighttime6 (6.7.4 -> 6.7.5) kpipewire6 (6.7.4 -> 6.7.5) kscreen6 (6.7.4 -> 6.7.5) kscreenlocker6 (6.7.4 -> 6.7.5) ksshaskpass6 (6.7.4 -> 6.7.5) ksystemstats6 (6.7.4 -> 6.7.5) kwayland-integration6 (6.7.4 -> 6.7.5) kwayland6 (6.7.4 -> 6.7.5) kwin6 (6.7.4 -> 6.7.5) layer-shell-qt6 (6.7.4 -> 6.7.5) libkscreen6 (6.7.4 -> 6.7.5) libksysguard6 (6.7.4 -> 6.7.5) libpcap (1.10.6 -> 1.10.7) libplasma6 (6.7.4 -> 6.7.5) milou6 (6.7.4 -> 6.7.5) nvme-cli (3.0~b.4 -> 3.0+6.g1ac60ca4b) ocean-sound-theme6 (6.7.4 -> 6.7.5) openSUSE-release (20260909 -> 20260910) pam_kwallet6 (6.7.4 -> 6.7.5) plasma5support6 (6.7.4 -> 6.7.5) plasma6-activities (6.7.4 -> 6.7.5) plasma6-activities-stats (6.7.4 -> 6.7.5) plasma6-browser-integration (6.7.4 -> 6.7.5) plasma6-desktop (6.7.4 -> 6.7.5) plasma6-disks (6.7.4 -> 6.7.5) plasma6-integration (6.7.4 -> 6.7.5) plasma6-nm (6.7.4 -> 6.7.5) plasma6-openSUSE plasma6-pa (6.7.4 -> 6.7.5) plasma6-print-manager (6.7.4 -> 6.7.5) plasma6-systemmonitor (6.7.4 -> 6.7.5) plasma6-thunderbolt (6.7.4 -> 6.7.5) plasma6-workspace (6.7.4 -> 6.7.5) polkit-kde-agent-6 (6.7.4 -> 6.7.5) postfix (3.11.6 -> 3.11.7) powerdevil6 (6.7.4 -> 6.7.5) qqc2-breeze-style6 (6.7.4 -> 6.7.5) sddm-kcm6 (6.7.4 -> 6.7.5) spectacle (6.7.4 -> 6.7.5) systemsettings6 (6.7.4 -> 6.7.5) wacomtablet-kcm6 (6.7.4 -> 6.7.5) xdg-desktop-portal-kde6 (6.7.4 -> 6.7.5) === Details === ==== 389-ds ==== Version update (3.2.2+4b41542b2 -> 3.3.1+8c2711bd6) Subpackages: lib389 libsvrcore0 - CVE-2026-18922 - During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be installed on a connection following a subsequent, unrelated successful bind - CVE-2026-19843 - The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string - CVE-2026-76560 - A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN - CVE-2026-18355 - A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). - bsc#1275302 - CVE-2026-18663 - pre-authentication double-free in get_ldapmessage_controls_ext() via critical Session Tracking control - bsc#1273133 - CVE-2026-11770 - pre-auth LDAP filter injection in CleanAllRUV status check - bsc#1279572 - CVE-2026-18453 - pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search - bsc#1273132 - CVE-2026-15722 - pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing - Update to version 3.3.1+8c2711bd6: * Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759) * Issue 7796 - A large received replicaID can overflow the storage buffer (#7797) * Bump version to 3.3.1 * Security fix for CVE-2026-76560 * Security fix for CVE-2026-19843 * Security fix for CVE-2026-18922 * Security fix for CVE-2026-18453 * Security fix for CVE-2026-18355 * Issue 7806 - Preserve dsEntryDN case on modify (#7807) * Issue 7808 - CI - harden online_import_nosync_test (#7809) * Bump fast-uri from 3.1.5 to 3.1.7 in /src/cockpit/389-console * Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs (#7792) * Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) * Issue 7785 - Downstream release automation using Packit (#7786) * Issue 2779 - Streamline SPEC file for potential inclusion in Fedora (#7784) * Issue 7769 - Password may wrongly be reported as expired (#7777) * Update Rust crate uuid to v1.26.0 * Update dependency eslint to v10.9.1 * Update github-actions * Reject mismatched cn in dynamic certificate add requests (#7680) * Fix expiration time check (#7718) * Issue 7722 - Switch to `logconv.py` as default (#7778) * Issue 6176 - Add sysusers.d support and modernize systemd path detection (#7776) * Issue 7774 - Add backport action (#7775) * Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771) * CVE-2026-11770 - Fix StartReplicationRequest auth gate response format * Security fix for CVE-2026-11770 * Issue 7595 - Run PR tests when the nightly gate is skipped (#7766) * Issue 7760 - CI - harden dsconf_task_test.py * Update rust-dependencies to v1.4.4 * Issue 7764 - Remove stale Cargo.lock (#7765) * Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730) * Update github/codeql-action digest to db488dd * Update cockpit-389-ds-npm * Issue 7723 - Range search returns an empty result when its start key is removed (#7724) * Issue 7728 - bdb: Fix nsslapd-db-compactdb-interval: 0 not disabling auto compaction * Issue 7639 - Move log compression outside of global write lock * Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7717) * Issue 7631 - Don't install bpftrace by default (#7726) * Issue 7735 - Heap overflow when parsing objectclass superior (#7736) * Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734) * Update rust-dependencies * Issue 3555 - UI - Fix audit issue with npm - fast-uri, js-yaml, nanoid (#7700) * Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708) * Issue 7679 - Add layered agent docs, task skills, and guides (#7686) * Issue 7688 - BUG - partial address leak in sso token (#7689) * Issue 7705 - With memberOfEntryScope set, deferred memberOf skips MODIFY operations (#7706) * Issue 7698 - Fix silent entry loss in LMDB bulk import waiter handling (#7699) * Issue 7711 - Fix typo in accountpolicy --login-history-size help text (#7713) * Issue 6419 - Error: name 'cockpit_present' is not defined (#7719) * Update github-actions * Issue 7709 - Add EPEL 10 target to Packit COPR builds (#7721) * Issue 7666 - Replication performance degradation during total init on high-latency storage (#7667) * Issue 7645 - Add runtime LeakSanitizer leak check (#7646) * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs * Issue 7709 - Add EPEL 10 target to Packit COPR builds * Issue 7714 - UI - sass import rules are deprecated * Issue 7658 - Heap Buffer Overflow in sasl_io_recv() via Padded SASL UNBIND * Issue 7710 - MemberOf deferred update - Use condvar instead of sleep loop * Issue 7637 - UI - Using Arrow Keys in New Object Wizard Resulted in DOM Reload * Issue 7685 - BUG - Avoid ioblocktimeout (#7687) * Issue 7578 - schema - attribute refcount is not maintained properly * Issue 7468 - RFE - HIBP password breach validation (#7492) * Issue 7605 - Harden CI test ports against ephemeral allocation (#7692) * Issue 7528 - Retry the CI image pull instead of failing the job (#7691) * Backport Issue 7519 — ignore obsolete entrydn when entryrdn is in use (#7657) * Update cockpit-389-ds-npm (#7565) * Issue 7466 - UI - Refactor all TextInput number types to NumberInput * Migrate pwdchan to base64 0.23 Engine API * Update rust-dependencies * Update rust-dependencies (#7669) * Issue 7505 - RFE - CLI - add feature to determine which password policy applies to a user * Issue 7652 - Fix acl_test after fixing anonymous bind with password (#7678) * Update github/codeql-action digest to f205ea1 * Issue 7675 - memory leak in test_libslapd_csngen_clock_failure- #7676 #7676 * Issue 7670 - BDB range searches intermittently fail with err=1 under write load (#7671) * Issue 7652 - change bind result with password but no dn (#7653) * Issue 7284 - Creating local password policy succeeds with incorrect passwordInHistory value (#7662) * Issue 7200 - repl-agmt create doesn't set some parameters (#7663) * Update rust-dependencies (#7472) * Pin dependencies * Update actions/checkout action to v7 * Update Rust crate openssl to v0.10.80 [SECURITY] * Issue 7327 - Unify topology naming in tests (#7650) * Issue 7633 - RFE - Add offline diagnostics for thread pool saturation (#7634) * Issue 7611 - Preserve legacy PBKDF2 hash compatibility (#7649) * Issue 7547 - Heap buffer overflow in ldap_utf8prev() * Issue 7543 - buffer overflow in slapi_dn_find_parent_ext() (#7544) * Issue 7545 - Heap buffer overflow in str2entry_state_information_from_type() (#7546) * Issue 7569 - Reduce noisy CodeQL false-positive alerts (#7629) ... changelog too long, skipping 47 lines ... * Bump version to 3.3.0 ==== aurorae6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: aurorae6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== bluedevil6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: bluedevil6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * i18n: Fix dialog translation for Forget Device * Update version for new release 6.7.5 ==== breeze6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-style-lang breeze6-style-qt5 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Use font metrics to only inset where the text can spare it (kde#523118) * Use ubuntu image for Qt5 CI * Update version for new release 6.7.5 ==== breeze6-gtk ==== Version update (6.7.4 -> 6.7.5) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== discover6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-lang discover6-notifier - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 * Add missing Qt::Qml link * Fix updates being stuck when fwupd is unavailable (kde#521682) * fwupd: Regression, do not mistake an update for needsReboot * SnapBackend: signal completion of update check with zero upgradeable snaps (kde#524077) * DiscoverObject: Address quitting with concurrent KJobs (kde#497419,kde#522245,kde#522815,kde#518264) * rpmostree: Fix crash in notifier * rpmostree notifier: Do not query null pointers * kcm/updates: Fix incorrect text when changing update type * Update version for new release 6.7.5 ==== drkonqi6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: drkonqi6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * coredump: don't process crashes of our own binaries (kde#524048) * launcher.service: ensure it doesn't participate in session management (kde#524213) * Update version for new release 6.7.5 ==== flatpak-kcm6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: flatpak-kcm6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Add missing Qt::Qml link ==== kactivitymanagerd6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kactivitymanagerd6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * QSet is not ordered, use contains instead of binary_search * StatsPlugin: Do not crash with wrong dbus calls * Update version for new release 6.7.5 ==== kde-cli-tools6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kde-cli-tools6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kde-gtk-config6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kde-gtk-config6-gtk3 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kdecoration6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: libkdecorations3-6 libkdecorations3-6-lang libkdecorations3private2 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kdeplasma6-addons ==== Version update (6.7.4 -> 6.7.5) Subpackages: kdeplasma6-addons-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * applets/weather: don't process pending events inside ioncontrol_p destructor (kde#524929) * kameleon-qmk-helper: Update zbus_polkit to 5.1.0 in Cargo.lock * applets/weather: properly hide info button when it won't work (kde#519676) * kickerdash, notes: update BugReportUrl * Update version for new release 6.7.5 - Reintroduce _service, got deleted by accident ==== kgamma6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kgamma6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kglobalacceld6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: libKGlobalAccelD6-0 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kinfocenter6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kinfocenter6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kmenuedit6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kmenuedit6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== knighttime6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: libKNightTime0 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kpipewire6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWire6-lang libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kscreen6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kscreen6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * kcm: fix the check for showing the calibration button (kde#524507) * Update version for new release 6.7.5 ==== kscreenlocker6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kscreenlocker6-lang libKScreenLocker6 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== ksshaskpass6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: ksshaskpass6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== ksystemstats6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: ksystemstats6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Fix i915 PMU path for discrete Intel GPUs (kde#517334) * osinfo: Provide some fallbacks for the version property (kde#523727) * Update version for new release 6.7.5 ==== kwayland-integration6 ==== Version update (6.7.4 -> 6.7.5) - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kwayland6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: libKWaylandClient6 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== kwin6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: kwin6-lang libkwin6 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Too many changes to list here - Drop patches, now upstream: * 0001-wayland-Increase-global-removal-timer-timeout-to-1-d.patch ==== layer-shell-qt6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: libLayerShellQtInterface6 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== libkscreen6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: libKF6Screen8 libKF6Screen8-lang libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== libksysguard6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-lang libksysguard6-plugins - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== libpcap ==== Version update (1.10.6 -> 1.10.7) - Update to 1.10.7: * General: - Free p->opt.device on close, not on cleanup (issue #1615). * Source code: - Deprecate bpf_filter(). * Packet filtering: - Initialize the scratch memory store to 0. - In "net mask " catch ENOMEM for the "m" too. - CVE-2026-0799: Access M[] safely in the BPF interpreter (bsc#1279782) - CVE-2026-31912: Mind the program bounds in pcap_offline_filter() (bsc#1279593) - CVE-2026-31911: Fail opcodes safely in the BPF interpreter (bsc#1279588) - CVE-2026-6244: Avoid division by zero via pcap_offline_filter() (bsc#1279595) - CVE-2026-6554: Limit "ja L" looping in pcap_offline_filter() (bsc#1279584) - Validate BPF opcodes stricter. - For "lsh" and "rsh" guard "#k" as well. * rpcap: - CVE-2026-18313: Fix a memory leak in rpcapd (bsc#1279784) - CVE-2026-18238: Fix RPCAP_MSG_PACKET validation (bsc#1279783) * Documentation: - Remove list of OSes that support "ipv6-icmp"; all the ones we support appear to do so. - Fix pcap_next_ex(3PCAP) man page to clarify the PCAP_ERROR_BREAK return value. * Building and testing: - CMake: Disable remote capture support on Windows by default. - RDMA: Avoid valgrind errors when calling rdmasniff_findalldevs(). - Autoconf: Add QNX support to AC_LBL_LIBRARY_NET(). - capturetest: Treat SA_RESTART as optional. * QNX: - Disable zero-copy BPF to work around portability issues. * DAG: - Fix packet filtering with low snaplen. * SNF: - Fix packet filtering with low snaplen. * Netmap: - Set packet captured length based on the snapshot length and return value of the capture filter. * Update upstream libpcap.keyring * Rebase libpcap-1.0.0-ppp.patch ==== libplasma6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: libPlasma6-lang libPlasma7 libplasma6-components libplasma6-desktoptheme - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== milou6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: milou6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== nvme-cli ==== Version update (3.0~b.4 -> 3.0+6.g1ac60ca4b) Subpackages: libnvme3-1 nvme-cli-bash-completion nvme-cli-zsh-completion - drop the 'v' from the version string - Update to version v3.0+6.g1ac60ca4b: * tests: make the fabrics mock IPC wire format explicit little-endian * tests: make the fabrics mock work on 32-bit time64 architectures * tests: fix native-endian struct.pack in fabrics discovery mock * build: show CFLAGS/LDFLAGS in the meson configuration summary * build: cross-test on i386 to catch 32-bit time_t truncation bugs - Update to version v3.0+1.g56361dc25: * shared: fix time_t truncation in shr_format_ts() on 32-bit archs - Update to version 3.0: * Release v3.0 * doc: Regenerate all docs for v3.0 * scripts: handle NEWS.md update on release * completions: update the shell completions * libnvme: return an empty string for missing namespace attributes * nvme-types-base: fix kernel-doc-check warnings * log: check if etdas setting supported or not * log: add force option to report data area 4 * ioctl-win: add support for dsm command with deallocate attribute * ocp: add missing case 6 fields to ocp smart log v2 json output * completions: move completion install rules into completions/meson.build * completions: regenerate from a full build * completions: wire generation and drift-check into the build * ioctl-win: extend data out buffer fix to all write commands with no data * ioctl-win: differentiate between io and admin storage protocol commands * ioctl-win: fix ns delete handling * ctrl-map: make Windows pci address detection locale-independent * libnvme: use the shared validators in the config parser * shared: check the month and character set in an NQN * tests: use valid NQNs in test fixtures * libnvme: validate the host NQN and host identifier on read * shared: add NQN and UUID string validators * libnvme: do not scan the topology when creating a GlobalCtx * libnvme: expose scan_topology() in the Python bindings * libnvme: let GlobalCtx() take the host identity * libnvme/fabrics: fix to check dctype string NULL pointer * doc: fix ocp documentations asciidoc failures * doc: add feat and ocp commands to meson.build * doc: add feat commands remainted * nvme-print: fix null pointer dereference in strset_iterate_sorted_ * libnvme: flag read=none members in the generated SWIG interface * libnvme: build the host identity Python objects with Py_BuildValue() * libnvme: document the ctx default in the host identity docs * nvme-discoverd: take a time span for the give-up horizon * shared: add shr_parse_time() * ocp: remove logically dead code in parse_event_fifo() * libnvme: simplify file existence check in test_creates_missing_directory() * tests: use pathlib in the e2e test cases * tests: use pathlib in the e2e runner * registry: fix unchecked return value from libnvmf_registry_attr_for_each * exclusion: fix insecure temporary file creation in excl_edit() * libnvme: fix unchecked return value of sscanf in ctrl_instance() * libnvme: check return value of sscanf in libnvme_ns_generic_to_blkdev() * keys: print check command results only with --verbose * shared: fix resource leaks on early return in table tests * mem: remove unnecessary type cast * mem: fix integer overflow in allocation rounding * plugins/solidigm: Improve Telemetry debug info parsing * doc: fix to add copy command namespace-id option description * tests: probe both stdout and stderr for _probe_command * completions: regenerate from the alphabetized generator * completions: update test for alphabetical output * completions: alphabetize bash and zsh command and option lists * doc: add power mgmt command * feat: fix to add err-recovery command nsid option checking * doc: add err-recovery command * doc: add num-queues command * doc: add host-behavior-support command * doc: add lba-range-type command * feat: add lba-range-type command * utils: fix resource leak in copy_opt_val on strdup failure * ocp: print physical media units written/read as 128-bit decimal value * libnvme: python: decode discovery log page fields the way C does * tests: add CLI tests for samsung vs-internal-log * plugins/samsung: add Samsung vendor specific extensions plugin * shared: add shr_dir_prefix_len() * shared: handle a path with no file name in shr_mkdir_from_fname() * shared: fix tautological range check in DEFINE_SHR_PARSE_CSV_FUNC * libnvme: expose the top-level host identity * libnvme: python: expose the top-level connection defaults * Release v3.0-rc3 * completions: regenerate bash, zsh, and PowerShell completions for v3.0-rc3 * doc: Regenerate all docs for v3.0-rc3 * nvme: fix improper value passed to libnvme_strerror in identify_ctrl * libnvme: leave registry ownership alone on a reused connection * nvme: make --quiet suppress informational output * libnvme: carry the fabrics context credentials into the controller * doc: nvme-fabrics.conf is shared by the nvme-cli tools, not by everyone * fw: fix improper value passed to libnvme_strerror in fw_commit_support_mud * shared: fix improper use of negative row id in test_multi_type_and_centered * tests: fix improper use of negative return value in test_shr_table_print() * shared: fix missing negative-return check in test_invalid_format_type * shared/tests: fix improper use of negative row id in test_basic_table * libnvme: python: stop freeing tree-owned objects in destructors * nvme-cmds: fix status code type check for get log dynamic chunk retry * ioctl-win: use generic passthru for get log with non-NVM CSI values * ioctl-win: retry skipped log pages with generic passthrough * libnvme: pass the global context to the host ID generators * nvme: list every exclusion list and flag invalid entries ... changelog too long, skipping 414 lines ... - undone the missing man pages change from b4 in the spec file ==== ocean-sound-theme6 ==== Version update (6.7.4 -> 6.7.5) - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== openSUSE-release ==== Version update (20260909 -> 20260910) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pam_kwallet6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: pam_kwallet6-32bit pam_kwallet6-common - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== plasma5support6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: libPlasma5Support6 libPlasma5Support6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== plasma6-activities ==== Version update (6.7.4 -> 6.7.5) Subpackages: libPlasmaActivities7 plasma6-activities-imports - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== plasma6-activities-stats ==== Version update (6.7.4 -> 6.7.5) Subpackages: libPlasmaActivitiesStats1 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== plasma6-browser-integration ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-browser-integration-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== plasma6-desktop ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-desktop-emojier plasma6-desktop-lang plasma6-kimpanel-ibus - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 * applets/kicker: don't launch favorites twice on Space * emojier: go back to search field on Arrow Up * Add missing Qt::Qml link * containments/desktop: respect type-ahead setting in widget (kde#523053) * applets/kickoff: disable reusing items in KickoffGridView (kde#515229) * applets/taskmanager: correct for initial spacer in RtL (kde#504898) * applets/taskmanager: make task progress bar follow rtl (kde#524112) * applets/kicker: don't allow dragging categories * applets/kicker: fix highlight while dragging * emojier: make window large enough for sidebar (kde#523090) * containments/panel: strip mnemonics from tooltip (kde#488578) * applets/taskmanager: Fix "cannot read property width of undefined" warnings * Only link discover to deb files on deb-based distros * applets/taskmanager: Ask for a thumbnail when window is ready for painting * Panel: expose reorderApplets() function for scripting * desktop: Do not overwrite wallpaper-provided accent color (kde#514656) * minimizeall, showdesktop, folder: update BugReportUrl * kcms/landingpage: Fix color bleed through at the corners (kde#522042) * spellchecking: do not ask to apply settings if no backend or dictionary exists (kde#521712) * Update version for new release 6.7.5 ==== plasma6-disks ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-disks-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 * Add missing Qt::Qml link * Update version for new release 6.7.5 ==== plasma6-integration ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-integration-plugin plasma6-integration-plugin-lang plasma6-integration-plugin-qt5 - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * MessageDialogHelper: don't set WA_DeleteOnClose (kde#523039) * Remove linux (Qt5) CI * Update version for new release 6.7.5 ==== plasma6-nm ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-nm-lang plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * secretagent: fix duplicate delete/update jobs * Use dynamically allocated DeletePasswordJob * secretagent: fix missing secrets returned * secretagent: fix crash with multiple requests (kde#521935) * Update version for new release 6.7.5 ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.7.5 ==== plasma6-pa ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-pa-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== plasma6-print-manager ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-print-manager-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== plasma6-systemmonitor ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-systemmonitor-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 * Fix process termination when used in RtL language (kde#522233) * Update version for new release 6.7.5 ==== plasma6-thunderbolt ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-thunderbolt-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * kcm: Add missing Qt::Qml link * CMakeLists.txt: Use COMPONENTS syntax for Qt6/KF6 find_package() ==== plasma6-workspace ==== Version update (6.7.4 -> 6.7.5) Subpackages: plasma6-session plasma6-workspace-lang plasma6-workspace-libs sddm-qt6-branding-openSUSE - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Add missing Qt::Qml link * applets/notifications: Don't invoke default action when a link is hovered * Klipper: Make the Help button in Klipper's config work * Klipper: Make apply work in keyboard shortcuts configuration tab (kde#485460) * InfiniteList: fix current day view * applets/digital-clock: fix tooltip overflow and center time zones (kde#524390,kde#501555) * InfiniteList: fix calendar changing views when dragging it between displays (kde#472360) * 🍒 shell/scripting: fix setOpacity calling wrong method * klipper: Preserve encoded PNG when restoring history entries * Scripting: restore Applet::index property (kde#523675) * applets/digital-clock: Compare agenda dates across time zones (kde#442100) * margins-separator: update BugReportUrl * kcms/nightlight: Add missing non-default highlight (kde#521974) * Update version for new release 6.7.5 ==== polkit-kde-agent-6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: polkit-kde-agent-6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== postfix ==== Version update (3.11.6 -> 3.11.7) - update to 3.11.7 * Bug (introduced: Postfix 3.9, date: 20240106) SMTP smuggling was still possible with smtpd_proxy_filter (disabled by default) when the after-filter SMTP server used the default policy settings "smtpd_forbid_bare_newline_exclusions = $mynetworks" and "smtpd_forbid_bare_newline = normalize". * Bug (introduced: Postfix 3.11, date: 20250917): SMTP smuggling was possible with smtpd_proxy_filter (disabled by default) when the before-filter SMTP server added a "Require-TLS-ESMTP: yes" message header, due to implementation edge cases. Adding this header is enabled with the "requiretls_esmtp_header = yes" default setting. * Bug (defect introduced: Postfix 3.0, date: 20140707): null pointer read error after receiving MAIL FROM, RCPT TO, and VRFY with an UTF8 address but no SMTPUTF8 parameter. This requires "smtputf8_enable = yes" (the default) and "strict_smtputf8 = yes" (not default). With this, the SMTP server did an unnecessary MAIL FROM reset without RCPT TO reset. A crafted remote SMTP client could then send a DATA command and crash a Postfix SMTP server process with a null pointer read error. * Bug (defect introduced: Postfix 3.4, date: 20180303): the MySQL client setting "tls_verify_cert = yes" had no effect with Oracle MySQL 8 and later. * Bug (defect introduced: Postfix-beta, date: 19990119): the pipe(8) delivery agent deleted a command-line argument if the argument contained $user AND $user expanded to an empty string, breaking the positional order of arguments. This was a workaround for a problem that hopefully no longer exists. * Bug (defect introduced: Postfix 2.3, date: 20050323): the SMTP client enhanced status code parser could process stale data when a remote SMTP server sent a three-digit reply without other text. * Isolation: stamp Postfix SMTP server TLS session tickets with their master.cf service name. With this, an SMTP server defined in master.cf will no longer accept tickets issued by a different SMTP server defined in the same master.cf file. * The postmap and postalias commands now log a warning when creating a root-owned database file in a directory that is not owned by root. They log that the database source file, indexed file(s), and parent directory should have the same owner, to prevent a privilege-escalation attack. * Bug (introduced: Postfix 2.3, date: 20060629): a malicious Milter or attacker-in-the-middle could trigger a null-terminated heap memory overread in the SMTP daemon while formatting a malformed multiline response. * Bug (defect introduced: Postfix 3.0, date: 20141117): in the postqueue command don't free() text before logging a fatal error message. * Code hygiene: in the SMTP client protocol engine, evaluate a RETURN() macro argument before freeing resources. * (Postfix 3.11) Hardening: in the non-BerkeleyDB migration service, delay the decision between running postmap or postalias until after the database file/directory owner/permission checks. The benefit from making the decision early (better error messages) was not worth the risk. * (Postfix-3.11) Hardened the database parent directory permission checks for automatic re-indexing with the non-Berkeley-DB migration service. * Hardening command-line email submission: the postdrop command now disallows null and line-break characters in queue file envelope records (line-break characters in non-envelope queue file records are already neutralized by default with "cleanup_replace_stray_cr_lf = yes"). * Shut up nagging from multiple AIs and harden the virtual delivery agent against an evil (LDAP or SQL) database. * Code hygiene: myrealloc(ptr, 0) still resulted in a panic. Also adopt a mystrndup() fix from Postfix 3.12. * Portability: OpenBSD does not define NS_INT16SZ. - refreshed patch: % postfix-vda-v14-3.0.3.patch ==== powerdevil6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: powerdevil6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * powerdevil: Clear stale battery warnings after charging * applets/batterymonitor: omit PPD message when there's no PPD * kcm: Fix non-default highlight * Update version for new release 6.7.5 ==== qqc2-breeze-style6 ==== Version update (6.7.4 -> 6.7.5) - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== sddm-kcm6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: sddm-kcm6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Add missing Qt::Qml link * Update version for new release 6.7.5 ==== spectacle ==== Version update (6.7.4 -> 6.7.5) Subpackages: spectacle-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 * Fix annotation options submenu overflowing off top of screen * Fix crash when window is destroyed during window-under-pointer detection * Update version for new release 6.7.5 ==== systemsettings6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: systemsettings6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 * Fix loadModule not resetting subCategoryModel parent for modules w/o a submenu (kde#524340,kde#514006) * Update version for new release 6.7.5 ==== wacomtablet-kcm6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: wacomtablet-kcm6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Update version for new release 6.7.5 ==== xdg-desktop-portal-kde6 ==== Version update (6.7.4 -> 6.7.5) Subpackages: xdg-desktop-portal-kde6-lang - Update to 6.7.5: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.7.5 - Changes since 6.7.4: * Dont try to delete uninitialized DataControlManager * screencasting: Do not leak streams when creation fails * session: release all sessions when the portal frontend disappears (kde#523515) * Update version for new release 6.7.5