------------------------------------------------------------------ --- Changelog.all ----------- Wed Oct 21 03:19:28 UTC 2026 ------ ------------------------------------------------------------------ ------------------------------------------------------------------ ------------------ 2026-10-20 - Oct 20 2026 ------------------- ------------------------------------------------------------------ ++++ openSUSE-Addon-NonOss-release: - automatically generated by openSUSE-release-tools/pkglistgen ------------------------------------------------------------------ ------------------ 2026-9-12 - Sep 12 2026 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.3.1 (upstream tarball dated 2026-09-09): * New -da switch deletes the archive after successful extraction. * New -ed1 switch excludes only empty directories; -ed still excludes all directories and -e+d adds directories only. * The v and l commands accept the a modifier without t, so va and la also list service blocks and NTFS stream names. * Drop the weak time-based RNG fallback: key generation now fails instead of silently using predictable bytes when no randomness source is available. * Harden parsing against crafted archives: out-of-range RAR5 header and redirect types are clamped, PPM decode and ACL sizes gained bounds checks, undersized REV volumes are skipped. * Extracted files lose SUID/SGID and directories lose SUID for non-root users, with a warning if permissions cannot be set. * An existing empty folder can now be replaced by an extracted file after confirmation. - Rename libunrar7_2_7 to libunrar7_3_1: the soname carries the full version (libunrar.so.7.3.1 via soname.patch, applies with no fuzz). The library API version stays at 10 and no package in Factory consumes libunrar, so there is no rebuild scope. ------------------------------------------------------------------ ------------------ 2026-8-26 - Aug 26 2026 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.2.7: * The library API version was raised from 9 to 10 and a new ROADOF_SHARED flag was added to RAROpenArchiveDataEx: opening an archive in shared mode is now opt-in, where previous versions always opened shared. Applications relying on the old unconditional behaviour have to set the flag explicitly * Treat a link target path containing an empty component, that is two consecutive path separators, as unsafe, so it can no longer slip past the relative symlink check during extraction * Reject a RAR5 recovery volume set whose data and recovery volume counts disagree between volumes instead of trusting the values of the volume read last * Overwrite prompts now clear the attributes of a symbolic link itself rather than those of its target before replacing it * Let -iver override -idc when -idc comes from the configuration file, and terminate the version output with a newline - Rename the shared library subpackage to libunrar7_2_7 following the soname, and update the hardcoded name in baselibs.conf ------------------------------------------------------------------ ------------------ 2026-8-23 - Aug 23 2026 ------------------- ------------------------------------------------------------------ ++++ wine-mono: - updated to 11.3.0 for wine 11.16 ------------------------------------------------------------------ ------------------ 2026-8-4 - Aug 4 2026 ------------------- ------------------------------------------------------------------ ++++ xv: - Enable the EXIF orientation support the 6.1.0/6.2.0 release notes describe: add pkgconfig(libexif) to BuildRequires. Without libexif in the build root the new CMake probe fails and the build prints "Disabling EXIF Support", so the feature the update is named for was silently absent - Install the desktop file directly and drop the deprecated update-desktop-files/%%suse_update_desktop_file pair; the categories now live in xv.desktop itself, which also sheds the obsolete Encoding key - Remove pre_checkin.sh: it was a hook of the retired autobuild system, nothing has executed it for years, and its job -- stripping the non-redistributable Adobe EPSF specification document src/docs/formats/epsf.ps from the tarball -- had therefore silently stopped happening, so the file is present in the 6.0.4 and 6.2.0 tarballs currently packaged - Generate the source with _service from the upstream v6.2.0 tag and strip that file there, rather than shipping a hand-modified copy of the upstream release tarball. The tag differs from the release tarball only in CI plumbing, which is excluded too, and a generated top-level ChangeLog that is not packaged; the CHANGELOG that ships is src/CHANGELOG, which the tag carries ------------------------------------------------------------------ ------------------ 2026-8-2 - Aug 2 2026 ------------------- ------------------------------------------------------------------ ++++ xv: - Update to 6.2.0 (2026-02-27) based on xv-3.10a * Add orientation support to WebP images. * Add sample WebP image with EXIF orientation flags set. * Make EXIF orientation support generic rather than being tied to JPEG. * Add orientation support for WebP images. - from version 6.1.0 (2025-11-30) based on xv-3.10a * Add support for EXIF orientation tags. * Add support for depth 30, or 10bit/color, for compatibility with mode. * Fix wasJpegUp → wasJp2kUp. ------------------------------------------------------------------ ------------------ 2026-7-1 - Jul 1 2026 ------------------- ------------------------------------------------------------------ ++++ wine-mono: - updated to 11.2.0 for wine 11.12 ------------------------------------------------------------------ ------------------ 2026-6-14 - Jun 14 2026 ------------------- ------------------------------------------------------------------ ++++ nmap: - fix build with updated python, do not install po/pot ++++ veracrypt: - veracrypt 1.26.29: * Add Argon2id as an alternative memory-hard KDF for non-system volumes * CPU feature detection and crypto implementation edge cases, including AVX2/leaf 7 detection, BLAKE2s/Argon2 no-SSE2 x86 fallback paths, Camellia SSSE3 dispatch, Twofish x64 multiblock tail handling and Whirlpool alignment. * Add support for building against FUSE3 * Add in-kernel NTFS driver selection for NTFS mounts, including - -filesystem=kernel-ntfs and -m kernelntfs. - -filesystem=ntfs3 now pins the kernel ntfs3 driver and bypasses mount helpers such as mount.ntfs3. * Add emergency cleanup for stale unmounts. * Parallelize header KDF autodetection. * Honor nokernelcrypto during external formatting. * Add support for reproducible Linux builds, including SOURCE_DATE_EPOCH handling * Various UI updates, documentation updates * Code hardening improvements - build with fuse3 (boo#1242079) ------------------------------------------------------------------ ------------------ 2026-6-2 - Jun 2 2026 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.2.6: * Bug fixes and minor improvements - Spec cleanup: * Add explicit make BuildRequires * Drop obsolete Group tags ------------------------------------------------------------------ ------------------ 2026-5-27 - May 27 2026 ------------------- ------------------------------------------------------------------ ++++ stream: - Refresh spec file against current openSUSE packaging guidelines: * Update copyright year to 2026 * Switch bugs URL to https * Add explicit BuildRequires: gcc (was relying on transitive pull-in from gcc-fortran) * Add %check section running both binaries and verifying the "Solution Validates" output * Drop Group: tag (no longer required by openSUSE Factory) - Build stream_f with -fmax-stack-var-size=0: stream.f's PROGRAM- scope 3 x 2M double arrays (~48 MB) overflow the default 8 MB stack on aarch64 and SIGSEGV at startup; pushing locals into BSS/heap fixes the runtime crash and lets %check pass. ------------------------------------------------------------------ ------------------ 2026-5-2 - May 2 2026 ------------------- ------------------------------------------------------------------ ++++ wine-mono: - updated to 11.1.0 for wine 11.8 ------------------------------------------------------------------ ------------------ 2026-3-24 - Mar 24 2026 ------------------- ------------------------------------------------------------------ ++++ unrar: - update to 7.2.5: * No upstream changelog available ------------------------------------------------------------------ ------------------ 2026-3-14 - Mar 14 2026 ------------------- ------------------------------------------------------------------ ++++ nmap: - Update to version 7.98 * Fixed an issue in FTP bounce scan where a single null byte is written past the end of the receive buffer. The issue is triggered by a malicious server but does not cause a crash with default builds. * [GH#3130]Fix a crash (stack exhaustion due to excessive recursion) in the parallel DNS resolver. Additionally, improved performance by processing responses that come after the request has timed out. * [GH#2148]Fix the error, "Assertion failed: (datalink == DLT_EN10MB), function begin_sniffer, file scan_engine_raw.cc" when using Nmap with certain VPN interfaces. * [GH#2757]Fix a crash in traceroute when using randomly- enerated decoys: "Assertion `source->ss_family == AF_INET' failed". * [GH#2899]When IP protocol scanning on IPv6 (-sO -6), skip protocol numbers that are registered as Extension Header values. When the --data option was used, these would fail the assertion "len == (u32) ntohs(ip6->ip6_plen)". * [GH#3086]Prevent TCP Connect scan (-sT) from leaking one socket per hostgroup, which led to progressively slower scans and assertion failures in other scan phases. * [NSE][GH#3133]Fix the error "nse_nsock.cc:637: void receive_callback(nsock_pool, nsock_event, void*): Assertion `lua_status(L) == 1' failed." when reading from an SSL connection. * [NSE]Added NSE bindings for more libssh2 functions: channel_request, channel_request_pty_ex, channel_shell, and userauth_keyboard_interactive. ssh-brute will now use keyboard-interactive auth if password auth is not offered. * [NSE][GH#3014]Fix dns-zone-transfer to handle nontraditional TLDs. * Fix a bug that was causing Nmap to send empty DNS packets for each target that was not found up instead of just skipping them for reverse DNS. * [NSE]Fix/update/enhance tls.lua for newer TLSv1.3 ciphers, including post-quantum ciphersuites. * [Ndiff][GH#3115]Have configure script check for PyPA 'build' module. * [Zenmap]Updated Spanish and Chinese language strings for Zenmap to cover latest strings. * [Zenmap][GH#2718]Zenmap language translation (i18n) files were not being installed. * [Zenmap][GH#3066]Fix Zenmap error "ValueError: I/O operation on closed file" when Nmap crashes or fails. * [Zenmap][GH#3084][GH#3127]Fix UnicodeDecodeError issues in ScriptMetadata and UmitConfigParser. * [NSE][GH#3123]WS-Discovery parsing would error out if the MessageID UUID was not prefixed with "urn:". - Drop not longer needed patch: * zenmap-fix-locale-install.patch ------------------------------------------------------------------ ------------------ 2026-2-21 - Feb 21 2026 ------------------- ------------------------------------------------------------------ ++++ unrar: - update to 7.2.4: * No upstream changelog available ++++ wine-mono: - updated to 11.0.0 for wine 11.3 ------------------------------------------------------------------ ------------------ 2026-1-3 - Jan 3 2026 ------------------- ------------------------------------------------------------------ ++++ unrar: - update to 7.2.3: * No upstream changelog available ------------------------------------------------------------------ ------------------ 2025-12-17 - Dec 17 2025 ------------------- ------------------------------------------------------------------ ++++ wattwaechter: - Initial checkin ------------------------------------------------------------------ ------------------ 2025-12-7 - Dec 7 2025 ------------------- ------------------------------------------------------------------ ++++ wine-mono: - updated to 10.4.0 for wine 11.0-rc1 ------------------------------------------------------------------ ------------------ 2025-11-19 - Nov 19 2025 ------------------- ------------------------------------------------------------------ ++++ wine-mono: - updated to 10.3.0 for wine 10.17 ------------------------------------------------------------------ ------------------ 2025-11-16 - Nov 16 2025 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.2.1 * No upstream changelog available ------------------------------------------------------------------ ------------------ 2025-9-12 - Sep 12 2025 ------------------- ------------------------------------------------------------------ ++++ veracrypt: - drop compiler settings no longer needed - drop preun ------------------------------------------------------------------ ------------------ 2025-9-10 - Sep 10 2025 ------------------- ------------------------------------------------------------------ ++++ veracrypt: - update to 1.26.24 (boo#1249129) * Fix Whirlpool implementation for big-endian platforms * Rename "Dismount All" to "Unmount All" in UI. Use ALT+u as new accelerator key instead of ALT+s. * Update translations * Fix absolute path of `true` command not being used when checking if sudo session is active. * Add support for /run/media/veracrypt as default mount prefix when /media is not available. - update upstream signing key - mark license as LicenseRef-TrueCrypt-3.0 AND Apache-2.0 due to the fork from TrueCrypt under a non-OSI approved license ------------------------------------------------------------------ ------------------ 2025-9-1 - Sep 1 2025 ------------------- ------------------------------------------------------------------ ++++ xv: - Update to 6.0.4 (2025-08-21) based on xv-3.10a * Fix crash when freeing JPEG comments (PR #37). * Updated URLs for the xv website. ------------------------------------------------------------------ ------------------ 2025-8-12 - Aug 12 2025 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.1.10 * No upstream changelog available ------------------------------------------------------------------ ------------------ 2025-7-28 - Jul 28 2025 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.1.9 * No upstream changelog available ------------------------------------------------------------------ ------------------ 2025-6-22 - Jun 22 2025 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.1.7 * No upstream changelog available ------------------------------------------------------------------ ------------------ 2025-6-20 - Jun 20 2025 ------------------- ------------------------------------------------------------------ ++++ wine-mono: - updated to 10.1.0 for wine 10.10 - remove fix.patch ------------------------------------------------------------------ ------------------ 2025-5-14 - May 14 2025 ------------------- ------------------------------------------------------------------ ++++ nmap: - Update to 7.97: * Fixed an issue with the parallel forward DNS resolver: it had not been consulting /etc/hosts, nor did it correctly handle the 'localhost' name. ------------------------------------------------------------------ ------------------ 2025-5-7 - May 7 2025 ------------------- ------------------------------------------------------------------ ++++ nmap: - Update to 7.96: * [Nping] Promoted Nping version number from a 0.7.95 alpha release to the same release version as Nmap. * Fixed an issue preventing the Nmap OEM 7.95 uninstaller from correctly uninstalling Nmap OEM. * [Zenmap] Fixed a Zenmap crash in DiffViewer when Ndiff exits with error. * [Zenmap] Fixed several UnicodeDecodeError or UnicodeEncodeError crashes throughout Zenmap. * [Zenmap] Fixed an issue preventing Zenmap from launching if nmap was not in the PATH. The issue primarily affected macOS users. [Daniel Miller] * Fixed a couple of issues with parsing the argument to the -iR option. * [NSE] Added TLS support to redis.lua and improved -sV detection of redis. * [Zenmap] Added dark mode, accessed via Profile->Toggle Dark Mode or window::dark_mode in zenmap.conf. [Daniel Miller] * Upgraded included libraries: Lua 5.4.7, libssh2 1.11.1, libpcap 1.10.5, libpcre 10.45 * [NSE] New script targets-ipv6-eui64 generates target IPv6 addresses from a user-provided file of MAC addresses, using the EUI-64 method. [Daniel Miller] * [NSE] New service probes and scripts for MikroTik's WinBox router admin service. mikrotik-routeros-version queries the 'info' and 'list' files to get the RouterOS version. mikrotik-routeros-username-brute brute-forces usernames for the router using CVE-2024-54772. [deauther890, Daniel Miller] * Fix 2 potential crashes in parsing IPv6 extension headers discovered using AFL++ fuzzer. [Domen Puncer Kugler, Daniel Miller] * [Nping] Bind raw socket to device when possible. This was already done for IPv6, but was needed for IPv4 L3 tunnels. [ValdikSS] * [Ncat] Ncat in connect mode no longer defaults to half-closed TCP connections. This makes it more compatible with other netcats. The -k option will enable the old behavior. See https://seclists.org/nmap-dev/2013/q1/188 [Daniel Miller] * [Nsock] Fix an issue affecting Ncat where unread bytes in the SSL layer's buffer could not be read until more data arrived on the socket, which could lead to deadlock. [Daniel Miller] * [Ncat] New Ncat option -q to delay quit after EOF on stdin, the same as traditional netcat's -q option. [Daniel Miller] * [Ncat] Ncat in listen mode with -e or -c correctly handles error and EOF conditions that had not been being delivered to the child process. * [Ncat][Windows] All Nsock engines now work correctly. The default is still 'select', but others can be set with --nsock-engine=iocp or --nsock-engine=poll [Daniel Miller] * [NSE] SSH NSE scripts now catch connection errors thrown by the libssh2 Lua binding, providing useful output instead of a backtrace. [Joshua Rogers, Daniel Miller] * [NSE] Several fixes and extensions to the libssh2 NSE bindings: fixed libssh2.channel_read_stderr, which was reading stdout instead; add binding for libssh2_userauth_publickey_frommemory; allow open_channel to avoid allocating a pty; * [Nsock][Windows] Fixed the IOCP Nsock engine, which had been demoted since Nmap 7.91 due to unresolved issues around SSL sockets and IPv6. [Daniel Miller] * [Nsock] Improvements for platforms without selectable pcap handles (e.g. Windows). Interleaved pcap and socket events were favoring pcap reads, possibly resulting in timeouts of the socket events. [Daniel Miller] * [Nsock] Improved memory performance of poll engine on Windows. [Daniel Miller] * [Nsock] Improvements to Nsock event list management, fixing errors like "could not find 1 of the purportedly pending events on that IOD." [Daniel Miller] * Fixed the issue where TCP Connect scans (-sT) on Windows would show 'filtered' instead of 'closed', due to differences in understanding timeouts. * Nmap will now allow targets to be specified both on the command line and in an input file with -iL. Previously, if targets were provided in both places, only the targets in the input file would be scanned, and no notice was given that the command-line targets were ignored. [Daniel Miller] * Nmap now performs forward DNS lookups in parallel, using the same engine that has been reliably performing reverse-DNS lookups for nearly a decade. Scanning large lists of hostnames is now enormously faster and avoids the unresponsive wait for blocking system calls, so progress stats can be shown. In testing, resolving 1 million website names to both IPv4 and IPv6 took just over an hour. The previous system took 49 hours for the same data set! [Daniel Miller] * When Nmap is used with --disable-arp-ping, a local IP that cannot be ARP-resolved will use the "no-route" reason instead of the "unknown-response" reason, since no response was received. * [NSE] Various bug fixes in the mssql NSE library. [johnjaylward, nnposter] * [NSE] Testing for acceptance of SSH keys for a given username caused heap corruption. [Julijan Nedic, nnposter] * [NSE] Scripts were not able to load SSH public keys. from a file. [nnposter] * [NSE] Encryption/decryption performed by the OpenSSL NSE module did not work correctly when the IV started with a null byte. [nnposter] * [NSE] Arbitrary separator in stdnse.tohex() is now supported. Script smb-protocols now reports SMB dialects correctly. [nnposter] * [NSE] ether_type inconsistency in packet.Frame has been resolved. Both Frame:new() and Frame:build_ether_frame() now use an integer. [nnposter] * Nmap is now able to scan IP protocol 255. [nnposter] - Added ndiff_build.patch and ndiff_install.patch ------------------------------------------------------------------ ------------------ 2025-4-15 - Apr 15 2025 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.1.6 * No upstream changelog available ------------------------------------------------------------------ ------------------ 2025-3-18 - Mar 18 2025 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.1.5 * No upstream changelog available ------------------------------------------------------------------ ------------------ 2025-2-5 - Feb 5 2025 ------------------- ------------------------------------------------------------------ ++++ veracrypt: - updated to 1.26.20: * All OSes: - Implement SHA-256 acceleration on ARM64 platforms using CPU instructions. - Update translations. - Replace "Dismount" with "Unmount" across the UI and documentation to align with IT standards (GH #1478) * Linux: - Fix a regression in Linux Mint affecting administrator password authentication. (GH #1473) ------------------------------------------------------------------ ------------------ 2025-1-29 - Jan 29 2025 ------------------- ------------------------------------------------------------------ ++++ veracrypt: - updated to 1.26.18: * All OSes: * Added support for SHA-256 x86 intrinsic to enhance the performance of PBKDF2-HMAC-SHA256. * Added support for AES hardware on ARM64 platforms (e.g. Windows ARM64, macOS on Apple Silicon Mx). * Updated translations * Linux: * CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr) * CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr) * Fixed an assertion issue with the wxWidgets library included in Ubuntu. * Improved directory-opening logic by prioritizing xdg-open and adding fallback mechanisms. * Ensure that volume exists before starting the mount operation. * Fix "Password too long" error message not expanded to include max length (GH #1456) * Simplify sudo session detection logic. ------------------------------------------------------------------ ------------------ 2025-1-21 - Jan 21 2025 ------------------- ------------------------------------------------------------------ ++++ nmap: - Fix dependencies (this is a python 3 app, based on gobject-introspection): + Add gobject-introspection BuildRequires: let the build add the relevant typelib() dependencies. + Drop python-gtk Requires: python2 bindings for GTK. + Replace python-gobject2 Requires with python3-gobject-Gdk: bring this to python3 and gi-bindings. - Drop gtk2-devel: not needed, as the bindings are GTK3 based. - Replace pcre-devel with pcre2-devel: this used to be pulled in by gtk2-devel, masking the fact that pcre-devel is not actually used. ------------------------------------------------------------------ ------------------ 2025-1-5 - Jan 5 2025 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update baselibs.conf ------------------------------------------------------------------ ------------------ 2024-12-7 - Dec 7 2024 ------------------- ------------------------------------------------------------------ ++++ wine-mono: - updated to 9.4.0 for wine 10.0 ------------------------------------------------------------------ ------------------ 2024-12-6 - Dec 6 2024 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.1.2 * No upstream changelog available ------------------------------------------------------------------ ------------------ 2024-12-4 - Dec 4 2024 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update baselibs.conf ------------------------------------------------------------------ ------------------ 2024-11-12 - Nov 12 2024 ------------------- ------------------------------------------------------------------ ++++ veracrypt: - add upstream signing key and verify source signature ------------------------------------------------------------------ ------------------ 2024-11-11 - Nov 11 2024 ------------------- ------------------------------------------------------------------ ++++ unrar: - Update to version 7.1.1 * No upstream changelog available