Packages changed: freerdp (3.17.0 -> 3.17.2) gimp gnome-shell (49.0+9 -> 49.0+17) mutter (49.0+43 -> 49.0+68) nvidia-open-driver-G06-signed (580.95.05_k6.17.0_1 -> 580.95.05_k6.17.0_2) openSUSE-release (20251005 -> 20251006) opensuse-welcome-launcher === Details === ==== freerdp ==== Version update (3.17.0 -> 3.17.2) Subpackages: libfreerdp3-3 librdtk0-0 libwinpr3-3 - Update to version 3.17.2: + Minor improvements and bugfix release. + Most notably resource usage (file handles) has been greatly reduced and static build pkg-config have been fixed. For users of xfreerdp RAILS/RemoteApp mode the switch to DesktopSession mode has been fixed (working UAC screen) - Changes from version 3.17.1 + Minor improvements and bugfix release. * most notably a memory leak was addressed * fixed header files missing C++ guards * xfreerdp as well as the SDL clients now support a system wide configuration file * Heimdal kerberos support was improved * builds with [MS-RDPEAR] now properly abort at configure if Heimdal is used (this configuration was never supported, so ensure nobody compiles it that way) - Add 11876.patch: properly set requires fields for pkgconfig and cmake files ==== gimp ==== Subpackages: gimp-plugin-aa gimp-plugin-python3 libgimp-3_0-0 libgimpui-3_0-0 - Add gimp-CVE-2025-10925.patch: Fix GIMP ILBM file parsing stack-based buffer overflow remote code execution vulnerability. (CVE-2025-10925, ZDI-25-914, ZDI-CAN-27793, bsc#1250501) - Add gimp-CVE-2025-10922.patch: Fix GIMP DCM file parsing heap-based buffer overflow remote code execution vulnerability. (CVE-2025-10922, ZDI-25-911, ZDI-CAN-27863, bsc#1250497) - Add gimp-CVE-2025-10920.patch: Prevent overflow attack by checking if output >= max, not just output > max. (CVE-2025-10920, ZDI-25-909, ZDI-CAN-27684, bsc#1250495) ==== gnome-shell ==== Version update (49.0+9 -> 49.0+17) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Add gnome-shell-no-gnome-tour.patch: Do not ask to launch gnome-tour; openSUSE handles the logic in opensuse-welcome-launcher - Update to version 49.0+17: * st/theme-context: Warn instead of crashing on unsupported accent colors * panelMenu: Remove invalid last argument to PopupMenu constructor * notificationDamon: Always send the activation token * data: Do not bundle org.freedesktop.Application interface * data: Remove unused D-Bus interface * overviewControls: Ensure ws thumbnails are expanded before fading in * gdm/authPrompt: Fix key focus handling on choice list * Updated translations. ==== mutter ==== Version update (49.0+43 -> 49.0+68) Subpackages: mutter-lang - Update to version 49.0+68: * window/wayland: Use constrained rect when deciding configuration * wayland/xdg-shell: - Create window after setting resources - Ensure applied window geometry is always non-empty - Make invalid geometry warning more descriptive * tests/wayland: - Add test for invalid geometry with subsurface - Add test case for client with invalid geometry * wayland/shell-surface: Assume geometry empty if no buffer attached * wayland/surface: Make state-applied logs more informative * tests: - Add test checking maximized window position on workspace changes - Add some tests for wl_keyboard behavior * core: Let key presses of special modifiers through * clutter/frame-clock: - Allow scheduling a clock tick despite a pending later tick - For FRR schedule_later update, use next_update_time_us * window: Fixup flagging META_MOVE_RESIZE_RECT_INVALID only when invalid * seat/native: Steal another error before returning in task * wayland: - Check modifier state from event prior to event delivery - Always send configure event after xdg_popup::reposition - Require pointer interaction prior to allowing pointer warp - Add helper to check the order of two serials - Check event type, use CLUTTER_KEY_STATE for modifiers during DnD * udev: Don't leak parent * prefs: Fallback cursor size to 24 when invalid value in settings * cursor-renderer/native: Sanity check texture size before allocating * clutter/gesture: Do not crash on unknown events * Updated translations. - Drop mutter-fix-modifiers.patch: Fixed upstream. ==== nvidia-open-driver-G06-signed ==== Version update (580.95.05_k6.17.0_1 -> 580.95.05_k6.17.0_2) - update non-CUDA variant to 580.95.05 ==== openSUSE-release ==== Version update (20251005 -> 20251006) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== opensuse-welcome-launcher ==== - Be less hacky about the fallback, but rather explicitly assign opensuse-welcome to KDE for now and switch GNOME to gnome-tour. - Require gnome-tour when gnome-session is installed.