Packages changed: ImageMagick gnome-text-editor (50.0 -> 50.1) ldns (1.8.4 -> 1.9.0) libgpg-error (1.60 -> 1.61) libksba (1.6.8 -> 1.7.0) ncurses (6.6.20260418 -> 6.6.20260509) openSUSE-release (20260511 -> 20260512) python-Twisted (25.5.0 -> 26.4.0) python-cryptography (47.0.0 -> 48.0.0) python-incremental (24.7.2 -> 24.11.0) python-pyOpenSSL (26.1.0 -> 26.2.0) === Details === ==== ImageMagick ==== Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - added patches fix overflow check (CVE-2026-31853, [bsc#1259528]) * ImageMagick-fix-overflow-check.patch ==== gnome-text-editor ==== Version update (50.0 -> 50.1) Subpackages: gnome-text-editor-lang - Update to version 50.1: + Build/CI updates. + Fix high-contrast CSS properties. + Accessibility fix for preferences switch. + Updated translations. ==== ldns ==== Version update (1.8.4 -> 1.9.0) Subpackages: libldns3 - Add missing tarball for 1.9.0 release. - Update to version 1.9.0: * Fix ldns-verify-zone hangs with missing NSEC3 RRs (#287) * Exclude ZONEMD RRs in ldns-compare-zone (PR #220) * More clang static analysis fixes - ldns-1.8.4-swig-3.4.0.patch: removed, included upstream ==== libgpg-error ==== Version update (1.60 -> 1.61) Subpackages: libgpg-error0 libgpg-error0-32bit - Update to 1.61: * Fix possible stack overflow in es_printf for %.100f format (boo#1263054) * Fix out-of-bounds read in vfnameconcat * Add cross compile support for wasm*-*-emscripten target * Update Japanese and Polish translations ==== libksba ==== Version update (1.6.8 -> 1.7.0) - Update to 1.7.0: * Add support for building AuthEnvelopedData * New function ksba_cms_add_attribute * Fix silent truncation of 64 bit length fields * Fix incorrect overflow guard condition in _ksba_ber_read_tl * Interface changes relative to the 1 ksba_cms_add_attribute NEW. ==== ncurses ==== Version update (6.6.20260418 -> 6.6.20260509) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20260509 + modify adjust_cancels() to allow for cancelled boolean extended capabilities. + cancel XF, XT in warp -TD + review kitty -TD + review contour -TD + eliminate vt100-style line drawing from xterm-utf8 -TD - Add ncurses patch 20260502 + add warp -TD + correct loop limit in lib_twait.c (OpenSUSE boo#1262780, cf: 20260411) - Add ncurses patch 20260425 + review screen4 vs screen5 -TD + review some XR/xr pairs -TD + fix a few gcc analyzer warnings. ==== openSUSE-release ==== Version update (20260511 -> 20260512) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-Twisted ==== Version update (25.5.0 -> 26.4.0) Subpackages: python311-Twisted python311-Twisted-tls - Update to 26.4.0: [#]# Security * Prevent a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. (CVE-2026-42304) [#]# Features * twisted.internet.ssl.CertificateOptions has a new constructor argument, contextForServerName, which takes a callback that will get invoked when a client sends a server name indication, with the sent servername, and returns a new OpenSSL.SSL.Context that the connection will switch to. * twisted.internet.endpoints.serverFromString now supports the tls endpoint type, which allows you to do twist web - -listen=tls:.../certbot-dir/config/live pointed at a certbot live configuration directory and have your certbot certificates automatically discovered and served appropriately. * twisted.internet.reactor now has type annotations and will appear to be an object of an appropriate type, allowing for idiomatic common usages with correct type information. * twisted.conch.ssh.SSHUserAuthServer now supports the security key ssh types "sk-ecdsa-sha2-nistp256@openssh.com" and "sk-ssh-ed25519@openssh.com" and extracting the application property from these new key types. [#]# Bugfixes * twisted.mail.smtp will now return a meaningful Failure when TLS validation fails. * TLS version range constraints passed to twisted.internet.ssl.CertificateOptions are now properly respected rather than excluding the version being passed as the desired constraint. * A potential reference cycle that might cause intermittent memory spikes while using twisted.internet.defer.inlineCallbacks was removed. * Trial no longer emits the error RuntimeWarning: TestResult has no addDuration method when running PyUnit tests. * twisted.python.rebuild.rebuild() now handles changes to sys.modules gracefully. Prior to the change, it could possibly raise a "dictionary changed size during iteration" error if the module list changed. * twisted.internet.protocol.ReconnectingClientFactory: Don't multiply by factor for initial delay, but use initialDelay directly. * twisted.internet.ssl and twisted.protocols.tls no longer mutate the pyOpenSSL context after creating pyOpenSSL connections, maintaining compatibility with an upcoming version of pyOpenSSL and increasing reliability. * twisted.internet.testing.MemoryReactor.callWhenRunning now invokes the callback immediately, if already started. * Twisted now correctly detects EOF on OpenSSL 4. [#]# Deprecations and Removals * Support for the obsolete TLS "Next Protocol Negotiation" has been removed from twisted.protocols.tls. * Remove support for python3.8. - Dropped patches: * no-test_successResultOfWithFailureHasTraceback.patch, no longer required * py314.patch, merged upstream * createElement.patch, merged upstream - Rebased patches: * skip_MultiCast.patch * 1521_delegate_parseqs_stdlib_bpo42967.patch * no-cython_test_exception_raiser.patch * remove-dependency-version-upper-bounds.patch - Drop unneeded BuildRequires on setuptools and wheel. ==== python-cryptography ==== Version update (47.0.0 -> 48.0.0) Subpackages: python311-cryptography python313-cryptography - update to 48.0.0: * BACKWARDS INCOMPATIBLE: Support for Python 3.8 has been removed. cryptography now requires Python 3.9 or later. * BACKWARDS INCOMPATIBLE: Loading an X.509 CRL whose inner TBSCertList.signature algorithm does not match the outer signatureAlgorithm now raises ValueError. Previously, such CRLs were parsed successfully and only rejected during signature validation. * Added support for :doc:`/hazmat/primitives/asymmetric/mlkem` and :doc:`/hazmat/primitives/asymmetric/mldsa` when using OpenSSL 3.5.0 or later, in addition to the existing AWS-LC and BoringSSL support. This means post-quantum algorithms are now available to users of our wheels. Note: Going forward, we do not guarantee that all functionality in cryptography will be available when building against OpenSSL. See :doc:`/statements/state-of-openssl` for more information. * Note: Going forward, we do not guarantee that all functionality in cryptography will be available when building against OpenSSL. See :doc:`/statements/state-of-openssl` for more information. ==== python-incremental ==== Version update (24.7.2 -> 24.11.0) - update to 24.11.0: * Incremental now provides a CLI script, incremental, allowing you to run it with pipx run incremental. The incremental update subcommand offers the same functionality as python -m incremental.update. * Incremental now depends on packaging instead of setuptools at runtime * Add Python 3.13 and 3.14 to the test matrix. * Build Incremental itself with Hatchling, working around failures with certain versions of setuptools * Incremental's documentation now highlights its primary features: CalVer and indeterminate versions (NEXT). * Incremental's CLI no longer depends on Click, so you no longer need to install incremental[scripts] for it to function. The scripts extra is deprecated. * Drop support for Python 3.8, which has been end-of-life since October 2024. ==== python-pyOpenSSL ==== Version update (26.1.0 -> 26.2.0) Subpackages: python311-pyOpenSSL python313-pyOpenSSL - update to 26.2.0: * Maximum supported cryptography version is now 48.x. * Added OpenSSL.SSL.Connection.set_options to set options on a per-connection basis. * Removed deprecated OpenSSL.crypto.X509Extension, OpenSSL.crypto.X509Req.add_extension, OpenSSL.crypto.X509Req.get_extensions, OpenSSL.crypto.X509.add_extension, OpenSSL.crypto.X509.get_extensions. * It is now an error to calling any mutating method on OpenSSL.SSL.Context after it has been used to create a Connection. - refresh skip-networked-test.patch