Removed rpms
============


Added rpms
==========


Package Source Changes
======================

MozillaFirefox
+- Firefox Extended Support Release 102.9.0 ESR
+  Placeholder changelog-entry (bsc#1209173)
+
-  Placeholder changelog-entry (bsc#1208144)
+  * Fixed: Various security fixes.
+  MFSA 2023-06 (bsc#1208144)
+  * CVE-2023-25728 (bmo#1790345)
+    Content security policy leak in violation reports using
+    iframes
+  * CVE-2023-25730 (bmo#1794622)
+    Screen hijack via browser fullscreen mode
+  * CVE-2023-25743 (bmo#1800203)
+    Fullscreen notification not shown in Firefox Focus
+  * CVE-2023-0767 (bmo#1804640)
+    Arbitrary memory write via PKCS 12 in NSS
+  * CVE-2023-25735 (bmo#1810711)
+    Potential use-after-free from compartment mismatch in
+    SpiderMonkey
+  * CVE-2023-25737 (bmo#1811464)
+    Invalid downcast in SVGUtils::SetupStrokeGeometry
+  * CVE-2023-25738 (bmo#1811852)
+    Printing on Windows could potentially crash Firefox with some
+    device drivers
+  * CVE-2023-25739 (bmo#1811939)
+    Use-after-free in
+    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
+  * CVE-2023-25729 (bmo#1792138)
+    Extensions could have opened external schemes without user
+    knowledge
+  * CVE-2023-25732 (bmo#1804564)
+    Out of bounds memory write from EncodeInputStream
+  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
+    bmo#1812338)
+    Opening local .url files could cause unexpected network loads
+  * CVE-2023-25742 (bmo#1813424)
+    Web Crypto ImportKey crashes tab
+  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
+    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
+  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
+    Memory safety bugs fixed in Firefox ESR 102.8
NetworkManager
+- Update to version 1.38.6 (bsc#1208631):
+  + Fix honoring DNS priority.
+  + Decline DHCPv6 lease when DAD fails.
+  + Various bugfixes.
+- Changes from version 1.38.4:
+  + Fix DAD for DHCPv6 addresses.
+  + Wi-Fi: improvements for OWE networks.
+  + Support EC private keys.
+  + Fix nmcli tab completion support for embedded quote characters.
+  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
+  + Various bugfixes.
+
cyrus-sasl
-- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store
-  in plugins/sql.c (bsc#1196036)
-  o add upstream patch:
-    0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch
+- drop optional opie dependency
+
+- Do not set directories inside doc/ mode 644; otherwise the
+  directories are set 644 as well, which means no files inside are
+  accessible. This resulted in the past in doc/ actually not being
+  added to the devel package.
+
+- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
+  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
+- drop cyrus-sasl-bug587.patch (upstream)
+
+- cyrus-sasl: prevent fail of %pre when berkely db utils are
+  not installed (seems like we want to use this only for upgrade
+  so no Prereq added)
+- move license to licensedir
+- remove use of RPM_BUILD_ROOT
+- minimal spec cleanups
+- avoid bashisms
+- Fix build: Do not build libsasl2-3 in the bdb package. This will
+  not be linked to berkely db. libsasl2-3 is now defined as
+  %BuildRequires and %Requires
+
dracut
+- Update to version 055+suse.353.g5603b001:
+  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
+  * fix(nvmf): move connect logic to initqueue script
+  * fix(nvmf): don't assume prefix lenth 64 by default
+  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
+  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
+  * fix(network-legacy): always include af_packet
+  * fix(network): don't assume prefix lenth 64 by default
+  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses
+
gnutls
+- FIPS: PBKDF2 additional requirements [bsc#1209001]
+  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
+  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
+  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
+  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
+  * Add regression tests for the new PBKDF2 requirements.
+  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch
+
+- libgnutls: Increase the limit of TLS PSK usernames from 128 to
+  65535 characters. [bsc#1208237, jsc#PED-1562]
+  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
+  * Add gnutls-increase-TLS-PSK-username-limit.patch
+
+- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
+  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch
+
jitterentropy
+- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)
+
kernel-default
+- bnxt_en: Avoid order-5 memory allocation for TPA data
+  (bsc#1209079).
+- bnxt_en: Fix mqprio and XDP ring checking logic (bsc#1209079).
+- bnxt: Do not read past the end of test names (bsc#1209079).
+- bnxt: make sure we return pages to the pool (bsc#1209079).
+- bnxt_en: Fix HDS and jumbo thresholds for RX packets
+  (bsc#1209079).
+- bnxt_en: Fix first buffer size calculations for XDP multi-buffer
+  (bsc#1209079).
+- bnxt_en: Fix XDP RX path (bsc#1209079).
+- bnxt_en: Simplify bnxt_xdp_buff_init() (bsc#1209079).
+- commit 776d314
+
+- netlink: prevent potential spectre v1 gadgets (bsc#1209547
+  CVE-2017-5753).
+- commit 82fdaab
+
+- ppc64le: HWPOISON_INJECT=m (bsc#1209572).
+- commit 3d2007b
+
+- Update references in
+  patches.suse/media-dvb-usb-az6027-fix-null-ptr-deref-in-az6027_i2.patch
+  (git-fixes bsc#1209291 CVE-2023-28328).
+- commit eeabf0f
+
+- s390/kexec: fix ipl report address for kdump (bsc#1207529).
+- commit a28d6d2
+
+- rds: rds_rm_zerocopy_callback() correct order for
+  list_add_tail() (CVE-2023-1078 bsc#1208601).
+- rds: rds_rm_zerocopy_callback() use list_first_entry()
+  (CVE-2023-1078 bsc#1208601).
+- commit 590edab
+
+- kABI workaround for struct fb_deferred_io changes (bsc#1208266).
+- commit 4c272e6
+
+- fbdev: Fix incorrect page mapping clearance at
+  fb_deferred_io_release() (bsc#1208266).
+- commit a4b869b
+
+- Move upstreamed fbdev fix into sorted section
+- commit 322351e
+
+- rpm/group-source-files.pl: Deal with {pre,post}fixed / in location
+  When the source file location provided with -L is either prefixed or
+  postfixed with forward slash, the script get stuck in a infinite loop
+  inside calc_dirs() where $path is an empty string.
+  user@localhost:/tmp> perl "$HOME/group-source-files.pl" -D devel.files -N nondevel.files -L /usr/src/linux-5.14.21-150500.41/
+  ...
+  path = /usr/src/linux-5.14.21-150500.41/Documentation/Kconfig
+  path = /usr/src/linux-5.14.21-150500.41/Documentation
+  path = /usr/src/linux-5.14.21-150500.41
+  path = /usr/src
+  path = /usr
+  path =
+  path =
+  path =
+  ... # Stuck in an infinite loop
+  This workarounds the issue by breaking out the loop once path is an
+  empty string. For a proper fix we'd want something that
+  filesystem-aware, but this workaround should be enough for the rare
+  occation that this script is ran manually.
+  Link: http://mailman.suse.de/mlarch/SuSE/kernel/2023/kernel.2023.03/msg00024.html
+- commit 6d65136
+
+- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).
+  When -b is specified the script is prefixed with KMP_NEEDS_MKINITRD=1
+  which sets the variable for a simple command.
+  However, the script is no longer a simple command. Export the variable
+  instead.
+- commit 152a069
+
+- Refresh
+  patches.suse/ice-Do-not-skip-not-enabled-queues-in-ice_vc_dis_qs_.patch.
+- Refresh
+  patches.suse/ice-clear-stale-Tx-queue-settings-before-configuring.patch.
+  Fix bug introduced by broken backport (bsc#1208628).
+- commit d43449e
+
+- Move upstreamed ipmi patches into sorted section
+- commit 6815ed5
+
+- xfs: get root inode correctly at bulkstat (git-fixes bsc#1207501
+  ltc#201370).
+- commit cc3c733
+
+- Update config files to enable CONFIG_IMA_DISABLE_HTABLE (bsc#1207301)
+- ppc64le/default, arm64/default, armv7hl/default,s390x/default,
+  x86_64/default
+- commit c4d15e7
+
+- qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable()
+  failure (jsc#PED-1523).
+- commit d6be7f9
+
+- qlcnic: Clean up some inconsistent indenting (jsc#PED-1523).
+- commit 721c552
+
+- drivers: net: qlcnic: Fix potential memory leak in
+  qlcnic_sriov_init() (jsc#PED-1523).
+- commit 821568b
+
libX11
+- U_Don-t-try-to-destroy-NULL-condition-variables.patch
+  * fixes regression introduced with security update for
+    CVE-2022-3555 (bsc#1204425, bsc#1208881)
+
libqt5-qtbase
+- Update to version 5.15.8+kde183:
+  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
+  * QAbstractItemView: don't access invalid indexes on copy-key
+  * Apply CVE-2023-24607-qtbase-5.15.diff
+  * QXcbConnection::getTimestamp: do not return stale timestamp
+  * QToolButton: Elide text when constraints prevent from showing whole text
+  * correctly set up ref counting in QThreadPool::tryStart(std::function)
+  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
+  * Fix deletion order also for QImageReader/Writer::setDevice()
+  * Fix deletion order in QImageReader/Writer destructors
+  * QNetworkReply: Fix typos in the documentation
+  * Doc: Fix typo in the online documentation template
+  * Doc: Link to page documenting Qt trademarks in the copyright footer
+  * [doc] Fix typo in QBuffer::setBuffer() description
+  * qwindowsdrag: Fix typo in documentation
+  * openglblacklists: Fix typo in description
+  * qxcbscreen: Fix typo in documentation
+  * Fix typos in SQL driver documentation
+  * qxcbwindow.cpp: Fix sign-compare and another warnings
+  * QToolButton: reimplement the fix for QTBUG-95255
+  * QSysInfo::prettyProductName(): Add macOS Ventura product name
+  * QSysInfo::prettyProductName(): add missing macOS product names
+  * xcb: correctly disconnect xsettings callbacks
+  * ibus: add SetCursorLocationRelative in InputContext.xml
+
+- Drop the mechanism for supporting systems without SSE2. glibc removed
+  support for looking up libraries in sse2/ subdirectories and
+  qtdeclarative without SSE2 crashes Plasma (boo#1208188)
+
+- Update to version 5.15.8+kde160, rebased upstream:
+  * Set geometry property in QXcbWindow after checking minimum size
+  * Fix potential corruption with image format conversion on arm neon
+  * TLS backend SecureTransport: properly clear SSLContextRef
+  * Widgets: Use effect region bounds when drawing with repaint manager
+  * Revert "xcb: stablilize xkb state when keymap updated"
+  * forkfd/linux: add support for LoongArch
+  * Fix default QT_ARCHS for non-universal builds
+  * Add the missing -mfpu=neon CXX flag
+  * Fix missing characters or assert with certain font sizes
+  * tst_containerapisymmetry: test ranged ctors with pure input_iterator types
+  * qmake/Xcode: Mark "Qt Preprocess" build phase as always out of date
+  * Windows QPA: Fix cursors getting out of sync after restoring override cursors on native windows
+  * evdevkeyboard: Try opening as read-write first
+  * QVarLengthArray: add some basic checks for default-ctor
+  * QTableWidget doc: remove wrong comment for itemExpanded()
+  * Blacklist tst_QTimer::zeroTimer on Ubuntu 20.04
+  * Use Yu Gothic UI as the main fallback font for Japanese
+  * qxkbcommon: UCS-4-encode surrogate characters in QKeyEvent::key()
+  * Replace CopyrightFile entry in libjpeg qt_attribution.json
+  * androiddeployqt: Fix signing of paths with spaces
+  * OpenSSL: handle renegotiate errors by comparing certs
+  * Update latest qt license agreement
+  * QFontDatabase: unify relevant documentation pieces
+  * wasm: Fix assert/crash when tooltip window is closed and mouse moved
+  * Freetype: adjust underlinePosition to match our expectations
+  * SignalTransition: guard against deleted object
+  * tst_QSslSocket: QSKIP the test that is known to fail with SecureTransport
+  * QStringView: fix split(QRegularExpression) returning invalid data
+  * Check that QStringView::split() w/rvalue QRegularExpression returns valid data
+  * Teach QOpenGLTextureBlitter about GL_TEXTURE_RECTANGLE textures
+  * Doc build: fix conflicting response file with moc
+  * QTextDocument: fix an off-by-one in the changed signal for lists
+  * Fix warnings due to enums in QSizePolicy
+  * Android: Set sem_wait m_terminateSemaphore behind an atomic flag
+  * QGraphicsItem: Update input context after InputMethod event
+  * QSharedPointer: fix counter-productive QT_PREPEND_NAMESPACE use in qHash() impl
+  * tst_qhashfunctions: check qHashRange{,Commutative}() find hidden friend qHash()
+  * xcb: stablilize xkb state when keymap updated
+  * Stabilize tst_QAccessibilityMac
+  * Handle macOS 11 issues in softHyphens test
+  * QVERIFY_EXCEPTION_THROWN: re-throw unknown exceptions
+  * QAuthenticator: Filter out algorithms we don't support
+  * QNX: QNX7.1 updates
+  * Blacklist tst_QTcpServer::linkLocal on macOS ARM
+  * Blacklist problematic network auto-tests on macOS ARM
+  * Blacklist and skip failing tests on macOS ARM
+  * Windows QPA: Fix multi-touch support in some devices
+  * freetype/no-fc: Disambiguate fonts with different widths
+  * Skip disabled proxy widgets when (back)tabbing
+  * Explicitly use libc++ when creating machtest stubs
+  * Don't pass CXXFLAGS when creating machtest stubs
+  * QFontComboBox don't response qApp fontDatabaseChanged()
+  * Update architectures in machtest to arm64+x86_64, removing i386 and ppc
+  * Android: bump default QT_ANDROID_API_VERSION to 31
+  * macOS: Disable PCRE JIT when running under Rosetta
+  * macOS: Add helper function to check whether we're running under Rosetta
+  * testlib: Disable automatic backtrace when test crashes on macOS on ARM
+  * macOS: Hard-code NEON and SSE/SSE2 when building universal builds
+  * macOS: Always disable pixman NEON drawhelpers
+  * macOS: Scope Haswell arch flags to x86_64 compilation units
+  * Guard AVX parts of qfloat16 helpers instead of emitting error
+  * Granularily disable PCRE2 JIT on macOS ARM
+  * Avoid claiming F16C support on non-x86 platforms
+  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS by building for all those archs
+  * qmake: Pick default architecture on macOS based on uname
+  * macOS: Don't hard-code x86_64 as the architecture when using qmake
+  * qmake: Support Visual Studio 2022
+  * Avoid painting outside boundaries when printing QGraphicsProxyWidget
+  * wasm:  fix network reply status attribute
+  * Update Gradle to 7.2.0 and Android Gradle Plugin to 7.0.2
+  * wasm: fix size of QDialogs
+  * plaintextEdit draw text with clipRect should consider cusorWidth
+  * iOS: Hide UIWindow before restoring mirror mode
+  * iOS: Defer restoring screen mirroring until next runloop pass
+  * macOS: Bump max supported SDK version to 12
+  * iOS: Don't try to initialize a11y for views that have no platform window
+  * qnsview_mouse, scrollWheel: do not assume zero deltas on Ending phase
+  * PCRE2: upgrade to 10.39
+  * wasm: fix deadlock when thread calls exit
+  * Fix version number when warning about Apple platform SDK mismatch
+  * Doc: Add styling for note/warning/important admonitions
+  * wasm: disable the canvas resize observer
+  * wasm: fix window activation
+  * Fix show()/hide() for child windows on xcb
+  * Add warning about QCoreApplication deferred delete
+  * Fix performance regression when avoiding scrollbar flipping
+  * wasm: fix changing cursor shape
+  * QSKIP tst_qgl:closeAndThenShow() because of flaky crashes
+  * Calculate effect bounds when drawing widget graphics effect
+  * Fix treemodelcompleter example
+  * gl: Try the local CacheLocation when the shared one fails
+  * Android: set EXTRA_TITLE to the initially selected file in save dialog
+  * qmake/vcxproj: Fix malformed <Message> tags
+  * qmake/vcxproj: Fix "CONFIG += combine" extra compilers
+  * Android: set allowNativeHeapPointerTagging to false in the manifest
+  * Update windows version detection
+  * Don't link against pthread when using cxx11_future on vxworks
+  * Accessibility Linux: Fix caps lock state
+  * Don't render widget to backing store if its parent has graphics effect
+  * Handle DPR in QPainter's drawing methods taking a brush parameter
+  * XCB: Silence clipboard warning "SelectionRequest too old"
+  * QVector: Don't require default-constructible types with insert()
+  * Android: Hide the keyboard when the height is less than 0
+  * When filling a pixmap after an assignment ensure the set DPR is not lost
+  * Fix high DPI position of foreign child windows on Windows
+  * QOpenSSLBackend: Properly load 3.0 when compiled with 3.0
+  * Take overshoot into account when laying out QAbstractScrollArea
+  * Add suffixes to loop variables for Q_FOREACH
+  * Android: Fix handling of cursor position when stop composing
+  * Windows QPA: Fix mouse event position for QWindows with Qt::WindowTransparentForInput
+
+- Update to version 5.15.7+kde177:
+  * Fix wrong to linear conversion
+  * QKeySequence: Add missing modifier names
+  * Scale BMP color samples with periodic bit expansion
+  * Send accessible focus event after list view has focus
+  * update function argument of SSL_CTX_set_options
+  * Openssl backend: reinsert a missing C in qCDebug
+  * Annotate QMutex with TSAN annotations
+  * Handle allocation failure in QImage rotate 90/180/270 functions
+  * xcb: Replace qCWarning by qCDebug in QXcbConnection::printXcbError()
+  * a11y: support GetAccessibleId for at-spi
+- Drop patches, now upstream:
+  * 0001-Fix-wrong-to-linear-conversion.patch
+
+- Add patch to fix text rendering on 16bit X11 surfaces (boo#1205585):
+  * 0001-Fix-wrong-to-linear-conversion.patch
+
+- Update to version 5.15.7+kde167, rebased upstream:
+  * offer an opt out of automatic xdg-desktop-portal use
+  * Send string to Atspi DBus interface on name/description changed
+  * Send string to Atspi DBus interface on value changed for comboboxes
+  * iOS: Use generic simulator device for building apps via xcodebuild
+  * xcode: Allow automatic provisioning updates when calling xcodebuild
+  * Revert "[Android] Remove signal and slot mechanism to listen states in editor's"
+  * Android: fix error when signing bundles
+  * Doc: Fix notes in QObject
+  * Allow dragging of a floating dockwidget on macOS with a custom titlebar
+  * Http/2 - handle PADDED flag correctly
+  * QTlsBackend (OpenSSL) : detect incompatible versions
+  * Reduce the width of a hfw-widget if scrollbar would be flipping
+  * QCocoaWindow: Make window key if the app's modal window is hidden
+  * Doc: clarify case sensitivity in QCompleter
+  * Doc: Note that qmake's CONFIG values are case-sensitive
+  * Clear up QWindow::isActive() documentation
+  * QWinRtFunctions::await() - introduce early exit condition
+  * rhi: metal: Use the layer as the single source of truth
+  * Include <QHash> explicitly
+  * Update PCRE2 to 10.38
+  * Add testing of QPdfWriter output to QPainter lancelot test
+  * Update the COPYRIGHT.txt file
+  * QTranslator: Fix loading of meta catalogs from absolute .qm path
+  * tst_qtranslator: Simplify extraction of test data
+  * Cocoa: Don't call makeKeyAndOrderFront for native app-modal dialogs
+  * Fix querying font aliases that share name with other fonts
+  * Update bundled libjpeg-turbo to version 2.1.1
+  * macOS: Compute NSWindow background color without checking styleMask
+  * SQLite: Update SQLite to v3.36.0
+  * Android: Fix path of qmake_qmake_immediate.qrc in single_abi with qmake
+  * qmake: Print error when iOS simulator device could not be found
+  * Fix loading of OpenSSL on macOS versions that ship its own OpenSSL
+  * QWidgetWindow: Stabilize test on Xcb
+  * Blacklist flaky test
+  * Fix license information for libjpeg-turbo
+  * Don't unload libraries on Darwin-based operating systems
+  * QThreadPool: Fix restarting of expired threads
+  * Make test pass on machines with many cores
+  * Blacklist tst_QSocks5SocketEngine::simpleConnectToIMAP() because of flakiness
+  * Blacklist tst_qgl:closeAndThenShow() because of flakiness
+  * Update Android default SDK from 29 to 30
+  * Make clear why QTestLog::addB?XFail() don't add to counters
+  * Fix .qm file name calculation in lrelease.prf
+  * qmake/xcode: Do not create OBJECTS_DIR
+  * QSslCertificate(OpenSSL plugin): fix memory leaks in extension 'parser'
+  * OpenSSL: Let people opt-in to use TLS 1.3 PSK callback
+  * tst_http2: Fix flaky authentication test
+  * Cocoa: Make sure we can display multiple sheets for the same NSWindow
+  * Fix QTextCodec::canEncode() for ICU codec
+  * wasm: fix network data URI scheme
+  * Doc: add more notes about full screen windows on macOS
+  * macOS: Don't rely on invalidateCursorRectsForView when mouse is over view
+  * Doc: add note that hiding a window doesn't close a full screen space
+  * qlocale_win: Fix non-standalone month names
+  * androiddeployqt: Check if apk is already aligned
+  * Fix corner case in QTimeZonePrivate::dataForLocalTime()
+  * Improve lancelot test of dashed line painting
+  * qmake: Add support for C17/C18
+  * qmake/vcxproj: Read C language standard from QMAKE_CFLAGS
+  * qmake/vcxproj generator: Handle C standard compiler flags
+  * qmake: Make it possible to set CONFIG += c11 with MSVC 19.28
+  * qmake: Recognize MSVC 16.x as VS 2019 in the VS project generator
+  * Doc: Replace the example for QFileInfo::setFile
+  * QMetaEnum: avoid quadratic behavior in valueToKeys()
+  * QGraphicsProxyWidget: forward Window(De)Activate events
+  * QDashStroker: cap the number of repetitions of the pattern
+  * Fix bug with NoFontMerging when font does not support script
+  * Android: Fix unnecessary clipboard data access
+  * macOS: Don't wipe NSWindowStyleMaskFullSizeContentView if set manually
+  * Fix broken build when LTTng tracing is enabled
+  * Attempt to unwedge tst_QThread::wait3_slowDestructor()
+  * macOS: close popups on mousedown within the window frame
+  * Use a scope-guard to take care of process deletion in a test
+  * QVarLengthArray: add missing default-ctor documentation
+- Commits dropped by the rebase:
+  * Fix compile of tst_qimage in Qt5
+
+- Update to version 5.15.6+kde178:
+  * ANGLE: Fix compilation on GCC 11
+
+- Update to version 5.15.6+kde177, rebased upstream:
+  * QStringIterator: fix UB [2/2]: use std::less to compare pointers
+  * QStringIterator: fix UB [1/2]: use has{Next,Previous}() more
+  * Assert validity in QStringIterator's unchecked methods
+  * eglfs: Fix crash when painting the mouse cursor in a multiscreen setup
+  * xcb: fix the build of native painting
+  * QNetworkReplyFileImpl: Don't emit 'finished' in the ctor
+  * Fix typo in code
+  * Fix typo in QAbstractItemModelTester
+  * sqldrivers: Fix typo in error message
+  * network: Fix typos in messages
+  * Remove XCB_EVENT_MASK_RESIZE_REDIRECT for Qt:WindowTransparentForInput
+  * Fix build without dbus support
+  * Revert "Remove the dead code for blocking methods from QtConcurrent"
+  * QAIV: Reset double-click flag in mousePressEvent
+  * Fix possible undefined behavior in clear_thread_data
+  * Revert "xcb: implement missing bits from ICCCM 4.1.4 WM_STATE handling"
+  * 3rdparty: apply a fix to the last zlib fix
+  * add color picking support on wayland using the XDG desktop portal
+  * Use class scope to refer to static function
+  * fix AT_SPI_BUS_ADDRESS actually working
+  * 3rdparty/zlib: backport the fix to CVE-2022-37434
+  * widgets: avoid setting X11BypassWindowManagerHint in QToolBar
+  * Don't access QObjectPrivate::declarativeData unguarded
+  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
+  * xcb: Update _NET_SUPPORTED when the window manager changes it
+  * Revert "CUPS: Add support for accessible IPP printers"
+  * QtConcurrent::ReduceKernel: fix race conditions
+  * Fix crash in QKmsDevice::createScreenForConnector
+  * Fix compile with MinGW-W64 9.0.0: Redefinition of 'struct _FILE_ID_INFO'
+  * Fallback to another file dialog implementation when XDP is inaccessible
+  * Add QXdgDesktopPortalFileDialog::useNativeFileDialog()
+  * qmake: Ignore stderr when determining the macOS SDK version
+  * Fix QDBusInterface crashing with empty path on construction
+  * Network: Update expired cert
+  * Android: guard getStateCount() with correct VERSION.SDK_INT
+  * Add note on selecting the device which is used to run tests on Android
+  * fc: Clean up current config on shutdown
+  * Doc: Add see also links to operator== and operator!=
+  * Fix framework dependencies in .la files
+  * Fix Style java code format and warnings
+  * wasm: fix network crash on abort
+  * Update bundled Freetype to 2.10.4
+  * CMake: Prevent multiple creation of the targets 'aab' and 'apk'
+  * Android: Fix fullscreen bottom bar hide issues
+  * xkb.compose: get locale from user env settings
+  * xcb: implement missing bits from ICCCM 4.1.4 WM_STATE handling
+  * macOS: Fix leaked NSMutableArray in applicationActivationChanged
+  * StyleSheet: Use rule for ComboBox in embedded QLineEdit
+  * Fix hidden API access for Android style
+  * Fix memory leak if eXIf has incorrect crc
+  * Fix invalid snippet reference in qtnetwork-index.html
+  * Doc: Fix QList<T>::fromVector example in QList<T> documentation
+  * Turn off feature timezone for emscripten
+  * QXpmHandler: actually limit characters-per-pixel to four
+  * QXpmHandler: fix re-entrancy bug in xpm_color_name
+  * QObject: cleanup the orphaned connection lists on destruction
+  * Fix crash in concurrent disconnect
+  * cleanOrphanedConnectionsImpl: Allow to skip locking
+  * QOrderedMutexLocker: Disable copy and provide explicit dismiss function
+  * Handle even more include in enum cases
+  * macOS: Stop relying on balanced CGDisplay reconfiguration callbacks
+  * QFuture: fix result reporting in the filter mode
+  * Doc: Minor cleanup in QWidget docs
+  * Don't report results when the results list is empty
+  * Windows QPA: Fix coordinates reported through UI Automation
+  * Make QSqlRecord benchmarks non-fatuous
+  * Halve the data-set size of tst_QSqlRecord::benchmarkRecord()
+  * Update deprecated NSAccessibility method
+  * H2: emit encrypted for at least the first reply, similar to H1
+  * QFile benchmark: only set up and tear down the data directory once
+  * Unify and clean up two identical tst_qfile::*_data() functions
+  * Move QSKIP()s to _data() functions in QFile benchmark
+  * Scale image with MDI icons using the correction factor
+  * QNetworkDiskCache: Fix tracking of size during storeItem()
+  * Always update the input method when QLineEdit receives focus
+  * Fix qdbusperformance and qprocess benchmarks
+  * QListView: don't scroll if selected items are removed
+  * macOS: Detect sandboxed state for command line apps
+  * Update obsoleted functionality in preparation for Qt 6
+  * Change QCollator's default locale to QLocale().collation()
+  * QDuplicateTracker: reserve() for at least Prealloc elements
+  * Point out that QTreeView's expandAll/expandToDepth don't fetch data
+  * QDuplicateTracker: fix the static buffer size calculation
+  * macOS: Don't make frameless tool windows miniaturizable
+  * macOS: Don't mangle QByteArray settings with @ prefix by decoding as UTF-8
+  * tst_QtConcurrentThreadEngine: fix the threadCount() test
+  * Fix QTextFormat::FullWidthSelection for right-to-left text layouts
+  * Fix auto completion in QFileDialog on Windows
+  * QFile benchmark: always use Unbuffered for QFSFileEngine tests
+  * Fix QDirIterator benchmark to actually find its test data
+  * macOS: Keep NSWindow alive after handling windowShouldClose callback
+  * Windows QPA: Fix dock widget drag&drop failure
+  * Remove the dead code for blocking methods from QtConcurrent
+  * QtConcurrent: call the non-blocking versions in blocking ones
+  * macOS 10.15: Fix focus frame for combo boxes
+  * Fix placement of placeholder text in QLineEdits with action icons
+  * macOS: fix separator actions not showing in menus
+  * QIcc: Update test for invalid values
+  * Doc: Use https for links to unicode.org
+  * Doc: Add a note about a limitation in QDockWidget on macOS
+  * macOS: Notify socket notifier on connection error
+  * QGlobalStatic: fix warning when using cv-qualified types
+  * Fix right-to-left text with DirectWrite engine + QPainterPath
+  * Fix mapping between Han and other CJK scripts
+  * Doc: Improve QTransform documentation
+  * Documentation: Remove section advertising Amazon
+  * Fix linking of debug projects against release Qt on Darwin platforms
+  * Extend documentation for QFile:copy()
+  * macOS: Unregister screen notification handlers on QGuiApplication shutdown
+  * macOS 11: Fix positioning of focus frame around combobox
+  * QString: Respect precision when reading data for %.*s format string
+  * Fix leak of transaction context handle in QSql's OCI driver
+  * macOS: Allow programatically minimizing frameless windows
+  * Doc: Move overrideCursor() from QApplication to QGuiApplication
+  * Doc: Add note to Qt::MatchFlags about implementation dependent behavior
+  * Update md4c to 0.4.8
+  * Android: fix mimetype/namefilters handling for FileDialog
+  * Enable glyph cache workaround for Apple M-family of GPUs
+  * Fix rendering of text checkboxes when text is selected
+  * Update public suffix list
+  * iOS: cleanup connection when a screen disconnects
+  * Windows: Read page size and orientation from setup dialog
+  * qmake: Enable response files for WASM on Windows
+  * QTextDocumentFragment: fix ifdef range
+  * Update CLDR qt_attribution.json
+  * Hangul composition: use < base + count checks, not <= checks
+  * Doc: Fix snippet for QRandomGenerator64 docs
+  * Fix date parsing when local time lacks the start of the day
+  * Fix misplacement of placeholder text in QLineEdit with RTL content
+  * Fix unaligned specialData formats
+  * QWidgetTextControl: ignore GroupSwitchModifier for BackSpace
+  * QFlags::testFlag: clarify the behavior in the docs
+  * Android: Fix build error issue in examples
+  * Silence misleading exception print in setQtContextDelegate
+  * Fix scrolling of tab bar when the visible tab is wider than the visible space
+  * Fix augmentation of UI language list
+  * Calculate space requirement of menu items based on widest elements
+  * Correct examples for int validation in QValidator documentation
+  * tst_QTimer::remainingTime(): get rid of QTest::currentTestFailed()
+  * macOS: allow Qt::AA_DontShowShortcutsInContextMenus overrides
+  * Fix conversion of swap interval from QGLFormat to QSurfaceFormat
+  * Fix rearranging of icons in listview via drag'n'drop
+  * Fix flaky QTimer::remainingTime() test
+  * tst_QDateTimeEdit::editingRanged(): use QScopedPointer
+  * QAbstractItemView: don't block dragging after double click
+  * xcb: Add more debug info for XCB_INPUT event
+  * QPageSize: make PageSizeId ctor non-explicit
+  * QtGui/math3d : Fix QQuaternion::getEulerAngles
+- Commits dropped by the rebase:
+  * Restore C++11 compatibility of QSharedPointer code
+- Refresh 0001-Add-remote-print-queue-support.patch
+
+- Update to version 5.15.5+kde166:
+  * Drop call to setPlatformScreen in QHighDpiScaling::setScreenFactor
+    (kde#450443)
+
+- Update to version 5.15.5+kde165, rebased upstream:
+  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
+  * Fix compile of tst_qimage in Qt5
+  * SQLite driver: fix crash when binding a QByteArray/QString
+  * H2: remove a rather useless limit on the number of streams
+  * Revert "Qt xcb: remove false detects of Qt::GroupSwitchModifier"
+  * Revert "Windows: Add synthesized fonts also when there is a style name"
+  * Revert "Android: Place cursor correctly on screen when editing"
+  * QAbstractButton/QComboBox/QGroupBox: static_cast event->key() to Qt::Key
+  * Widgets: use QPlatformTheme::ButtonPressKeys for pressing buttons
+  * QBuffer: add missing <limits> include
+  * QBuffer: fail early in seek() beyond QByteArray's max capacity
+  * xcb: fix cursorTheme update issue
+  * QDBusMenuConnection: Close open D-Bus connection
+  * Fix QGuiApplication command line options documentation for X11
+  * QColorSpace: Guard against division by zero
+  * Preserve QImage metadata when converting format with color table
+  * Unicode: fix the grapheme clustering algorithm
+  * Ignore window icon in XCB when its size exceeds maximum request length
+  * QAbstractItemDelegate: fix rect given to tooltip handing
+  * QXmlStreamReader: fix integer truncation (qint64 → int)
+  * QShader: fix memory leak in detach()
+  * QDesktopServices: fix ABA problem in QOpenUrlHandlerRegistry
+  * Unix: Correctly update options pane for PDF printer
+  * JSON: When clearing duplicate object entries, also clear containers
+  * Remove unused internal flag from raster painting engine
+  * CUPS: Add support for accessible IPP printers
+  * Initialize m_exclusive in QGtk3MenuItem constructor
+  * Fix data race in QCoreApplicationPrivate::sendThroughApplicationEventFilters()
+  * Fix a leak of fallback dialog helper in xdgdesktopportal
+  * QCOMPARE/QVERIFY: fix huge pessimisation in QTestResult
+  * QPushButton/fusion style: don't ignore QIcon::On icon
+  * QAbstractItemModel: fix persistent index corruption when moving columns
+  * Fix data race in QObject::moveToThread()
+  * QReadWriteLock: fix data race in stateForWaitCondition()
+  * QReadWriteLock: fix another data race in stateForWaitCondition()
+  * QReadWriteLock: fix data race in dtor
+  * Revert "a11y: Do not cache classes that don't have a factory plugin"
+  * Prevent crashing when FcFontList fails
+  * Fix race condition in futex-based QSemaphore
+  * Fix a QDBusConnection crash with pending calls when connection is closed
+  * Revert "Support family names that end/start with space"
+  * QProcess/Unix: ensure we don't accidentally execute something from CWD
+  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
+  * testlib/qasciikey: Add keypad navigation keys
+  * QGnomeTheme: remove unneeded Q_D
+  * QGnomeTheme: Allow Space, Return, Enter and Select to press buttons
+  * QPA: add ButtonPressKeys ThemeHint
+  * Update bundled zlib to version 1.2.12
+  * QAction: Add NOTIFY changed declaration to priority property
+  * QHostInfo/Unix: Fix resolv never unloading
+  * QCompleter: fix crash when setting the same model twice
+  * Windows: use QSystemLibrary instead of LoadLibrary directly
+  * Qt namespace: fix QT_Q_FLAG declaration for Qt::MouseEventFlags
+  * Sync QPrinter orientation when PageSetup Orientation selected
+  * When clearing QPixmapCache, stop its flushing timer
+  * QLabel::setPixmap(): remove the no-op self-masking
+  * QFreeList: replace a Q_ASSERT(false) with Q_UNREACHABLE()
+  * [qgenericunixservices] Consider kde-open5 for opening URLs
+  * Fix check for malformed input when decoding translations
+  * Test for nullptr before dereferencing the screen
+  * Check for null driver() before trying to exec()
+  * Fix crash when text shaping fails
+  * Make QCursor::setPos() use the correct screen
+  * Close leak of QOCIDateTime object
+  * Fix UI mismatch when QPrinter::setDuplex
+  * xcb: fix a typo for WindowTypes
+  * QPkmHandler: make const what it never modified
+  * Respect AT_SPI_BUS_ADDRESS env var on Linux
+  * Fix integer overflow for broken QPainterPaths
+  * QDesktopServices: fix UB (data race on handlers)
+  * Make indicator-application hack work in flatpak
+  * Fix infinite loop in dash stroker
+  * QVersionNumber: remove "pure" declaration from fromString()
+  * Android: Fix Application becomes unresponsive issue
+  * Fix the crashes when animated QTreeWidgetItems are hidden
+  * Add test for QTranslator::load() translation file lookup algorithm
+  * QComboBox: add space for scrollbar if needed after showing popup
+  * QComboBox: propagate style change on widget to internal container
+  * QLocalSocket: fix inclusions in namespaced builds
+  * PCRE2: upgrade to 10.37
+  * minor: Clean up areMetricsTooLarge() conditions
+  * wasm: fix unicode keyboard handling
+  * Blacklist tst_QAccessibilityMac::notificationsTest
+  * Let the h2 test server both send and receive DATA frames
+  * Android: Reset m_usePrimaryClip when clearing the clip data
+  * Android: Remove NoSuchMethodException error
+  * QVector: fix compilation failure in C++20 mode w/strict iterators
+  * macOS: respect underline attribute in menu item fonts
+  * macOS: don't show invisible separator items
+  * iOS: Accessibility: Don't cut off the last character from the text value
+  * iOS: Accessibility: Set the correct traits for EditableText
+  * tst_moc: fix returning-reference-to-local warning
+  * Allow for arguments that have an equals as part of it
+  * Write out the HTML correctly for nested lists
+  * QSqlTableModel::orderByClause(): Quote the table name
+  * macOS: Fix synthesized bold
+  * SQLite: Update SQLite to v3.35.5
+  * Qt xcb: remove false detects of Qt::GroupSwitchModifier
+  * Do not remove non-widget items when removeWidget() called with nullptr
+  * QFileSystemModel fails to locate a host from root's visible children
+  * CMake: Fix automatic default linking of static svg plugins
+  * Blacklist tst_QGestureRecognizer::panGesture
+  * Moc: parse trailing return type
+  * Extend tst_QGL::graphicsViewClipping blacklisting
+  * Fix antialiasing of rotated non-smooth scaled images
+  * Fix QUrl::fromLocalFile with long path prefix
+  * Fix QStringView::mid() to behave as documented when passed -1 for length
+  * QDockWidget, macOS: don't drag on native widgets
+  * Add note about the risk of setting min-width/height in a style sheet
+  * cocoa: be more careful about rejecting frame strut events
+  * iOS: Keep undo/redo widgets enabled on the undo shortcut bar after undo
+  * QTestlib: Fix formatting of pointers in QCOMPARE
+  * Cherry-pick upstream patch for non-gcc/clang/msvc compilers
+  * Windows: Add synthesized fonts also when there is a style name
+  * Windows: Work-around misreporting of Script and Roman
+  * Extend blacklisting of tst_QNetworkReply::ioHttpRedirectPolicy
+  * Extend blacklisting of tst_QWidget::focusProxyAndInputMethods
+  * Android: fix wrong position of cursor hander in split screen
+  * Android: handle ImEnterKeyType flag
+  * Apply the Core compile definitions to the big resource targets
+  * Update bundled libjpeg-turbo to version 2.1.0
+  * QSpdyProtocolHandler: don't rely on device being available
+  * QVnc: clip requested screen region to available screen image
+  * Simplify bundled libjpeg build
+  * Blacklist tst_QWidget::multipleToplevelFocusCheck() on SLES 15
+  * Apply specialData font capitalization to non-rawFont text
+  * Avoid fast transform paint path on values it can't handle
+  * Blacklist tst_QTimeLine::interpolation on Windows in general
+  * QMdiArea: Fix top level window title when using DontMaximizeSubWindowOnActivation
+  * Don't draw focus frame if widget has style rules that affect border
+  * Fix rare integer overflow in text shaping
+  * Blacklist tst_qnetworkreply::ioHttpRedirectMultipartPost on Linux
+  * Android: Fix screen flicker issues
+  * [Android]: Fix exception when using Qt to create a service on Android
+  * Update CLDR-derived data to newly-released v39
+  * QSsl: fix UB pointer use
+  * uic/Python: Add comments for mypy to ignore star imports
+  * HTTP/2 authentication required
+  * Windows: Update the hasFrame setting when changing window flags
+  * Fix mix-guided use of const reference variable
+  * Android: Fix Touch event position depending on Surface
+  * macOS: Don't override action set during drop handling
+  * [Android] Fix select handles misplacement on QDialog
+  * wasm: fix timestamp for events
+  * Do not access internal allThreads data unlocked
+  * SQLite: Handle tables and fields with a dot in the name correctly
+  * Doc: Mark QSet::toList, QSet::fromList, QList::toSet, QList::fromSet as obsolete
+  * Unicode: fix the extended grapheme cluster algorithm
+  * Android: fix for isSoftwareKeyboard method
+  * [Android] Remove signal and slot mechanism to listen states in editors
+  * Fix prl generation with static dependencies take 2
+  * QNetworkDiskCache: Drop the file mmap-ing
+  * QFile::copy: call syncToDisk on destination
+  * Read DPI from X Settings initially as well
+  * Fix prl generation with static dependencies take 2
+  * Re-add horizontal offsets around QPushButton
+  * Fix ARM and MIPS runtime CPU feature flags
+  * Minor robustness improvement of text code
+  * Add null pointer check
+  * Don't parse XML symbols longer than 4096 characters
+  * Make POSIX transition rule parser more robust
+  * Extend blacklisting for SLES 15
+  * Doc: Improve deprecation messages for functions using  QString::SplitBehavior
+  * Don't disable menu items that belong to the active modal window
+  * Doc: Fix return type of QCursor::shape()
+  * QPainterPath: fix handling of fill rules
+  * Windows QPA: Fix accessibility focus event for table/tree/list
+  * Fix invalid pointer return with QGridLayout::itemAt(-1)
+  * qmake: Improve error message when detecting macOS platform SDK upgrade
+  * Assert that pointer is not nullptr before dereferencing
+  * QLocalSocket/Win: fix possible UB in _q_pipeClosed()
+  * tst_qapplication: Prevent desktopaware test from deactivating main test
+  * iOS: Disable three-finger-tap editing interaction menu when there's no focus object
+  * Fix read-only pseudo-state in QPlainTextEdit stylesheet
+  * QTextHtmlParserNode: Limit colspan to avoid segfault
+  * Don't judge other people's writing systems
+  * macOS: Don't draw scrollbar handle when there is no range
+  * QSystemSemaphorePrivate: Fix a call to tr() to translate()
+  * Fix condition that adds resources for each Android ABI
+  * Avoid int overflow in QImage rotate90/180/270
+  * Return the result we have already when getting an object with no name
+  * Avoid attempting to parse insanely long texts as zone names
+  * Doc: Fix typo in publisherid for WINRT_MANIFEST
+  * Fix Editable Tree Model example model rowCount and model instance leak
+  * FileChooser portal: send window id in hex
+  * fix windows build when both whatsthis and tooltip are disabled
+  * Fix incorrectly-drawn menu indicator for QPushButton on macOS
+  * Fix label margins for pulldowns with custom styled menu indicator on macOS
+  * Font style name 'Normal' and 'Regular' have the same meaning
+  * QString: improve lastIndexOf(QRegularExpression) docs
+  * eglfs: Newer Nvidia libdrm provide device instead driver module name
+  * Android: KEYCODE_MEDIA_PLAY_PAUSE translated right
+  * iOS: Protect against a possible crash after the window is deleted
+  * Revert "Update commercial license headers to /util files"
+  * Revert "Update commercial license headers to bin, mkspecs, qmake"
+  * Consistently check for nullptr in QGraphicsTextItem::inputMethodQuery
+  * Remove qualification for Julian calendar
+  * Revert "Update commercial license headers"
+  * Revert "Update commercial license headers"
+  * Fix alpha handling of QImage::setPixel
+  * Fix handling of virtual/native pixels in QAndroidPlatformWindow
+  * Revert "Update commercial license headers to src/concurrent and src/corelib"
+  * Revert "Update commercial license headers to src/dbus, src/gui, src/network"
+  * Disable Harfbuzz/CoreText hotfix on older macOS/iOS versions
+  * SQLite: Update to 3.35.2
+  * tst_bench_qmetaobject: Fix test
+  * QAsn1Element: Avoid overflow in QAsn1Element::toInteger
+  * tst_qguimetatype: Avoid deprecated methods
+  * Include minus sign in ImhFormattedNumbersOnly's available keys
+  * MODULE_INCLUDEPATH is supposed to be one path
+  * QEventDispatcher(Win): Always honor interrupted status to avoid races
+  * Android: Place cursor correctly on screen when editing
+  * QStylesheetStyle: fix push button label alignment
+  * Support family names that end/start with space
+  * wasm: fix opengl context stencil and depth buffer handling
+  * wasm: fix screen offset logic
+  * Android: Add grabWindow handling
+  * tst_qdtlscookie: use a proper 'enterLoopMSecs' instead of 'enterLoop'
+  * Update bundled libjpeg-turbo to version 2.0.6
+  * QMenu test: turn tooltip animations off
+  * Android: make calling exit() conditional on an environment variable
+  * Limit value in setFontSizeFromValue()
+  * xcb: unset old states and set new ones for window
+  * Brush up the imageviewer example
+  * Fix out-of-buffer in ICC curv parsing
+  * Fix logic problems with table based grayscale ICC profiles
+  * Reduce warnings from ICC parsing
+  * QEventDispatcherWin32: get rid of the hook procedure
+  * And fix handling and test of QImage::fill(uint) as well
+  * Fix handling of virtual/native pixels in QAndroidPlatformWindow
+  * QLineEdit: Fix editingFinished() not being emitted when pressing the clear button
+  * macOS: don't let windows that are transparent for input become key window
+  * QMdiSubWindow: Set correct ControlLabel size
+  * Doc: Remove styling for hyperlinks from the simplified offline style
+  * Doc: Offline CSS: Reduce excess vertical spacing
+  * Fix parsing of dates with spaces in day or month names
+  * Rework tst_QDateTime::toString_isoDate() to eliminate an XFAIL
+  * Fix tst_QDateTime::systemTimeZoneChange() for 32-bit systems
+  * Extend colorspace testing and fix bug it uncovered
+  * Schannel: Fix incomplete downloads with read buffer restricted
+  * MinGW: fix warning in QMatrix4x4::map functions
+  * QRectF/Documentation: Fix malformed table
+  * Fix QImage::fill with semi-transparent QColor
+  * iOS: close edit menu upon focus transfer
+  * macOS: Fix crash when showing parent-less platform menus
+  * macOS: Remove warning about KVO observers on QNSWindow/QNSPanel
+  * Filter cosmetic lines using transformed, not world coordinates
+  * Fix recently added auto test of text layout overflow
+  * wasm: don’t deadlock on event processing
+  * Fix QNetworkInterface IsUp and IsRunning enum documentation
+  * Clarify QWindowPrivate::maybeQuitOnLastWindowClosed
+  * wasm: fix showing tooltips
+  * Doc: Don’t use note when documenting enum values
+  * macos: Document that Drawer is obsolete
+  * Doc: Update the SQL types documentation with regards to the double types
+  * Doc: link to QScopeGuard in QScopedValueRollback documentation
+  * Doc: Online CSS: Fix image captions overlapping images used in tables
+  * Turn off the dbus examples for qmake-generated VS projects
+  * Don't show focus rect for QCommandLinkButton
+  * Android: Fix the input type for date/time
+  * qmake: Introduce compile_included_sources CONFIG option
+  * Update QPalette() documentation to not mention the application palette
+  * Android: Pass pending state to ResumePauseListener
+  * Fix crash when requesting A32 glyph on Wayland
+  * Android: Fix input method hints for ImhHiddenText
+  * a11y: Report mixed state if QCheckBox is PartiallyChecked
+  * testlib: Only consider major version for macOS 11 and later in blacklists
+  * iOS: hide edit menu if typing on the input panel
+  * xcb: Fix available geometry after rotation
+  * Remove false Q_UNREACHABLE from shaping code
+  * Fix trivial typo in QDateTime::fromString() overload doc
+  * QTreeWidgetItem: fix documentation error for childIndicatorPolicy()
+  * Update to CLDR v38.1, adding Yukon Standard Time
+  * Avoid overflow in text layout
+  * QJsonObject::take: add missing detach() call
+  * macOS: Don't exec file dialogs via runModal unless they are app modal
+  * QMimeDatabase/xml: support both 'xmlstarlet' and 'xml' for minifying XML
+  * Use design metrics when adding text to QPainterPath
+  * QDir/QFileInfo: add doc notes about paths starting with ':'
+  * QSsl: fix OpenSSL DLL names for Windows on ARM
+  * a11y: Do not cache classes that don't have a factory plugin
+  * Update public suffix list to today's latest
+  * Fix QTzTimeZonePrivate::displayName()'s fallback
+  * Fix problems with offset-derived ids for QTimeZone
+  * QLineEdit Cursor show white area
+  * Correct item indent in checkable menus in stylesheet style
+  * Fix read-only pseudo-state in QTextEdit/Browser stylesheet
+  * Hold references to zone IDs alive during use
+  * Correct string comparison in Android's IANA ID matching code
+  * Doc: Add deprecation notice
+  * Change QLineF::setLength() to work whenever length() is non-zero
+  * macOS: Remove DontConfirmOverwrite workaround
+  * macOS: Show system tray icon on mouse button press, not release
+  * macOS: Don't restrict non-modal file dialogs to open-dialogs only
+  * Check date validity in calendar methods taking a QDate
+  * macOS: Only check SDK major version for compatibility
+  * iOS: always hide edit menu when showing the magnifier glass
+  * QInputControl: accept surrogate category character
+  * Set new commandLink variable when initializing QCommandLinkButton
+  * Test QDateTime behavior in DST gap
+  * UndoFramework example: make the background visible
+  * Windows: Fix flicker when resizing translucent windows with QSizeGrip
+  * Windows QPA: Fix crashes when using screen reader with Q(Plain)TextEdit
+  * Avoid int overflow in gradient drawing
+  * macOS: Mark QFileDialog::DontConfirmOverwrite as unsupported
+  * Fix QApplication::font returns the font unstable according to the object
+  * Avoid overflowing QFixed in text layout
+  * iOS: ensure we close the edit menu when the user taps outside the input area
+  * iOS: ensure we hide the edit menu while dragging on the selection handles
+  * Fix logicalDpi() which returns invalid value
+  * Windows: Fix frame margins calculation
+  * Widgets: fix setTabOrder for QAbstractSpinBox-like widgets
+  * macOS: Add more padding to width of non-editable comboboxes
+  * Make QPushButton on macOS use QFocusFrame to fix alignment problems
+  * QTabBar: update index of last visible tab in insertTab
+  * Fix that the placeholdertext of QCombobox is not drawn
+  * Windows: Fix dialog moving up after closing/reshowing
+  * Cocoa: When validating menus, account for modal window only if active
+  * PSQL: Fix the QSqlDatabase test
+  * Move the qmenu_p.h include to the QT_CONFIG(menu) block
+  * Fix compilation of ibase sqldriver plugin, added override
+  * Protect against sign-change of size on 32bit
+  * Fix division by zero
+  * SQLite: Update to 3.34.0
+  * QODBC: Preserve the whole value when using HighPrecision
+  * Set the PlaceholderText color in the palette from the stylesheet as well
+  * Update commercial license headers to bin, mkspecs, qmake
+  * Update commercial license headers to /util files
+  * Update commercial license headers to src/concurrent and src/corelib
+  * Update commercial license headers to src/dbus, src/gui, src/network
+  * Stabilize tst_QListView::internalDragDropMove() on X11
+  * [Android] Fix Text select handle misplaced on QDialog issues
+  * Android: Finish composing text before Key handling
+  * Fix regression with closing and then reopening widgets with QGLWidget
+  * eglfs: Use drmClose in drm/EGLDevice backend
+  * Handle maxImageCount 0 in QVulkanWindow
+  * Make QCalendar's backend registration reentrant-safe
+  * Blacklist flaky QListView::internalDragDropMove case on OpenSuSE
+  * Update commercial license headers
+  * Update commercial license headers
+  * Doc: Link to correct location
+  * Doc: Generalize timer docs
+  * Doc: Explain how boundingRect handles null QRectF
+  * Doc: Add details to QFont::toString
+  * Document QOpenGLWidget limitations without an alpha channel
+  * QTabBar test: refactor: extract checkPositions helper function
+  * Add new special QObjectPrivate::{connect, disconnect} for QML
+  * Add "Q_UNUSED" to (3rdparty) strtod.cc for a 32 bit code path
+  * Android: Fix for accessibility potential crash
+  * QTabBar/Windows: Fix close button icons being too small on high-res screens
+  * Fix missing repaints with QOpenGLWidget in a QDockWidget
+  * QComboBox/Fusion style: elide text when it's too long
+  * Fix qt_alphaVersion and qt_opaqueVersion in the trivial case
+  * Doc: Clarify setLibraryPaths behavior
+  * Fix convertToRGBA64PM for Grayscale16
+  * Fix setting active window as application's focus widget
+  * Send Qt::Key_MediaTogglePlayPause for VK_MEDIA_PLAY_PAUSE
+  * Fix VNC format conversion
+  * Windows font engine: Silence warnings about not being able to enumate font families
+  * Blacklist failing tests for WinRT
+- Commits dropped by the rebase:
+  * Add missing limits include
+- Drop 0001-Revert-Bump-version.patch, it's versioned correctly now
+- Rebase 0001-Add-remote-print-queue-support.patch
+- Drop patches, now upstream:
+  * mitigate-FORTIFY_SOURCE-3.patch
+  * 0001-H2-remove-a-rather-useless-limit-on-the-number-of-st.patch
+  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
+
libqt5-qtsvg
+- Update to version 5.15.8+kde8, rebased upstream:
+  * No code changes
+
+- Update to version 5.15.7+kde9, rebased upstream:
+  * No code changes
+
+- Update to version 5.15.6+kde9, rebased upstream:
+  * Fix assert with wrong number of argument to animateTransform
+  * Avoid undefined behavior when painter transform goes oob
+
+- Update to version 5.15.5+kde10, rebased upstream:
+  * Revert "Update commercial license headers"
+  * Update commercial license headers
+- Drop 0001-Revert-Bump-version.patch, it's versioned correctly now
+
libqt5-qttranslations
+- Update to version 5.15.8+kde0, rebased upstream:
+  * No code changes
+
+- Update to version 5.15.7+kde0, rebased upstream:
+  * Update simplified chinese translation
+  * update dutch translations
+  * Update Catalan translations for Qt 5.15.2
+
+- Update to version 5.15.6+kde2, rebased upstream:
+  * No code changes
+
+- Update to version 5.15.5+kde2, rebased upstream:
+  * Revert "Update commercial license headers"
+  * Update commercial license headers
+- Drop 0001-Revert-Bump-version.patch, it's versioned correctly now
+
libsolv
+- fix "keep installed" jobs not disabling "best update" rules
+- do not autouninstall suse ptf packages
+- ensure duplinvolvedmap_all is reset when a solver is reused
+- special case file dependencies in the testcase writer
+- support stringification of multiple solvables
+- new weakdep introspection interface similar to ruleinfos
+- support decision reason queries
+- support merging of related decissions
+- support stringification of ruleinfo, decisioninfo and decision reasons
+- support better info about alternatives
+- new '-P' and '-W' options for testsolv
+- bump version to 0.7.23
+
libstorage-ng
+- merge gh#openSUSE/libstorage-ng#918
+- allow trailing space when parsing btrfs version (bsc#1209252)
+- 4.5.85
+
+- merge gh#openSUSE/libstorage-ng#917
+- extended error logging
+- 4.5.84
+
+- Translated using Weblate (Swedish) (bsc#1149754)
+- 4.5.83
+
+- Translated using Weblate (Czech) (bsc#1149754)
+- 4.5.82
+
+- Translated using Weblate (Catalan) (bsc#1149754)
+- 4.5.81
+
+- Translated using Weblate (Slovak) (bsc#1149754)
+- 4.5.80
+
+- Translated using Weblate (Dutch) (bsc#1149754)
+- 4.5.79
+
+- Translated using Weblate (Japanese) (bsc#1149754)
+
+- Translated using Weblate (French) (bsc#1149754)
+
+- merge gh#openSUSE/libstorage-ng#916
+- updated bindings
+- extended integration tests
+- update pot and po files
+- 4.5.78
+
+- merge gh#openSUSE/libstorage-ng#915
+- rename source files with actions
+- expose some functions of action classes in API
+- extended commit callbacks to include pointer to action
+- 4.5.77
+
+- merge gh#openSUSE/libstorage-ng#914
+- use some actions for different objects
+- more defensive programming
+- 4.5.76
+
+- Translated using Weblate (Swedish) (bsc#1149754)
+- 4.5.75
+
+- merge gh#openSUSE/libstorage-ng#913
+- move Action classes to separate directory
+- 4.5.74
+
+- Translated using Weblate (French) (bsc#1149754)
+- 4.5.73
+
+- Translated using Weblate (Spanish) (bsc#1149754)
+- 4.5.72
+
+- Translated using Weblate (Chinese (Taiwan) (zh_TW)) (bsc#1149754)
+- 4.5.71
+
+- Translated using Weblate (Chinese (China) (zh_CN)) (bsc#1149754)
+- 4.5.70
+
+- Translated using Weblate (Italian) (bsc#1149754)
+
+- Translated using Weblate (Georgian) (bsc#1149754)
+- 4.5.69
+
+- Translated using Weblate (Georgian) (bsc#1149754)
+- 4.5.68
+
+- Translated using Weblate (German) (bsc#1149754)
+- 4.5.67
+
+- Translated using Weblate (German) (bsc#1149754)
+- 4.5.66
+
+- Translated using Weblate (Macedonian) (bsc#1149754)
+- 4.5.65
+
+- merge gh#openSUSE/libstorage-ng#912
+- allow both 'swap' and 'none' as path for swap in fstab
+- added testcase
+- 4.5.64
+
+- merge gh#openSUSE/libstorage-ng#911
+- avoid using existing mount paths in testsuite
+- coding style
+- 4.5.63
+
+- Translated using Weblate (Macedonian) (bsc#1149754)
+- 4.5.62
+
+- merge gh#openSUSE/libstorage-ng#910
+- delay use of json output for qgroup show
+- check creation of json tokener
+- 4.5.61
+
+- merge gh#openSUSE/libstorage-ng#909
+- simplify code
+- 4.5.60
+
+- merge gh#openSUSE/libstorage-ng#908
+- use new json output of btrfs-progs if available
+- 4.5.59
+
+- Translated using Weblate (Indonesian) (bsc#1149754)
+- 4.5.58
+
+- Translated using Weblate (Macedonian) (bsc#1149754)
+- 4.5.57
+
+- merge gh#openSUSE/libstorage-ng#907
+- handle changed output from 'btrfs qgroup show' (bsc#1206090)
+- 4.5.56
+
+- merge gh#openSUSE/libstorage-ng#906
+- use RAII
+- 4.5.55
+
+- Translated using Weblate (Macedonian) (bsc#1149754)
+- 4.5.54
+
libyui
+- Bump version to 4.5.0 (bsc#1208913)
+
libyui:libyui-ncurses
+- Bump version to 4.5.0 (bsc#1208913)
+
libyui:libyui-ncurses-pkg
+- Bump version to 4.5.0 (bsc#1208913)
+
libyui:libyui-qt
+- Bump version to 4.5.0 (bsc#1208913)
+
libyui:libyui-qt-graph
+- Bump version to 4.5.0 (bsc#1208913)
+
+- Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238)
+- build-all: Don't build bindings with --small (-s)
+- More docs for YShortcutManager (FAQ for our QA)
+- Merged PR #88 from krai:
+  libyui-ncurses: Replace off64_t with off_t and stat64 with stat
+- 4.4.9
+
libyui:libyui-qt-pkg
+- Bump version to 4.5.0 (bsc#1208913)
+
+- Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238)
+- build-all: Don't build bindings with --small (-s)
+- More docs for YShortcutManager (FAQ for our QA)
+- Merged PR #88 from krai:
+  libyui-ncurses: Replace off64_t with off_t and stat64 with stat
+- 4.4.9
+
libzypp
+- ProgressData: enforce reporting the INIT||END state
+  (bsc#1206949)
+- ps: fix service detection on newer Tumbleweed systems
+  (bsc#1205636)
+- version 17.31.8 (22)
+
+- Hint to "zypper removeptf" to remove PTFs.
+- Removing a PTF without enabled repos should always fail
+  (bsc#1203248)
+  Without enabled repos, the dependent PTF-packages would be
+  removed (not replaced!) as well. To remove a PTF "zypper install
+  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
+  This will update the installed PTF packages to theit latest
+  version.
+- version 17.31.7 (22)
+
+- Avoid calling getsockopt when we know the info already.
+  This patch hopefully fixes logging on WSL, getsockopt seems to
+  not be fully supported but the code required it when accepting
+  new socket connections. (for bsc#1178233)
+- Enhance yaml-cpp detection (fixes #428)
+- No need to redirect 'history.logfile=/dev/null' into the target.
+- MultiCurl: Make sure to reset the progress function when
+  falling back.
+- version 17.31.6 (22)
+
+- Create '.no_auto_prune' in the package cache dir to prevent auto
+  cleanup of orphaned repositories (bsc#1204956)
+- properly reset range requests (bsc#1204548)
+- version 17.31.5 (22)
+
+- Do not clean up MediaSetAccess before using the geoip file
+  (fixes #424)
+- version 17.31.4 (22)
+
+- Improve download of optional files (fixes #416)
+- Do not use geoip rewrites if the repo has explicit country
+  settings.
+- Implement geoIP feature for zypp.
+  This patch adds a feature to rewrite request URLs to the repo
+  servers by querying a geoIP file from download.opensuse.org. This
+  file can return a redirection target depending on the clients IP
+  adress, this way we can directly contact a local mirror of d.o.o
+  instead. The redir target stays valid for 24hrs.
+  This feature can be disabled in zypp.conf by setting
+  'download.use_geoip_mirror = false'.
+- Use a dynamic fallback for BLKSIZE in downloads.
+  When not receiving a blocklist via metalink file from the server
+  MediaMultiCurl used to fallback to a fixed, relatively small
+  BLKSIZE. This patch changes the fallback into a dynamic value
+  based on the filesize using a similar metric as the MirrorCache
+  implementation on the server side.
+- Skip media.1/media download for http repo status calc.
+  This patch allows zypp to skip a extra media.1/media download to
+  calculate if a repository needs to be refreshed. This
+  optimisation only takes place if the repo does specify only
+  downloading base urls.
+- version 17.31.3 (22)
+
llvm15
+- update constraints to exclude workers with very slow CPU
+
manpages-l10n
+- Update to version 4.18.0
+  * Updated and added many translations.
+  * Switched from fedora-37 to fedora-38.
+  * Archived some old translations (grub2-rpm-sort.8).
+
purge-kernels-service
+- Change service type to exec (boo#1198668).
+
python-cryptography
+- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
+  * Don't allow update_into to mutate immutable objects
+
python3
+- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
+  which eliminates unnecessary and dangerous calls to
+  PyThread_exit_thread() (bsc#1203355).
+
+- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
+  bsc#1208471) blocklists bypass via the urllib.parse component
+  when supplying a URL that starts with blank characters
+
qemu
+- Fix bsc#1209064
+  * Patches added:
+  s390x-pci-reset-ISM-passthrough-devices-.patch
+  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
+
+- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
+  linux-user-add-more-compat-ioctl-definit.patch and adding
+  Revert-linux-user-fix-compat-with-glibc-.patch
+- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
+  linux-user-drop-conditionals-for-obsolet.patch were added
+  as downstream patches as they were part of a series, but
+  they never made it upstream, so we don't want them here
+  either
+  * Patches dropped:
+  linux-user-add-more-compat-ioctl-definit.patch
+  linux-user-drop-conditionals-for-obsolet.patch
+  meson-enforce-a-minimum-Linux-kernel-hea.patch
+  * Patches added:
+  Revert-linux-user-fix-compat-with-glibc-.patch
+
+- Fixes bsc#1197653, CVE-2022-1050
+  * Patches added:
+  block-Handle-curl-7.55.0-7.85.0-version-.patch
+  hw-pvrdma-Protect-against-buggy-or-malic.patch
+
rpm
+- update pythondeps-python310.diff: replace with minimal fix to
+  support python 3.xx (bsc#1207294)
+
+- add pythondeps-python310.diff
+  and add match-python-version-if-minor.diff:
+  * fix missing python(abi) for 3.XX versions (bsc#1207294)
+
s390-tools
+- Applied a patch (bsc#1209196)
+  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
+
+- Updated cputype (bsc#1208983)
+  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
+    when machine type was found more than once in the /proc/cpuinfo.
+
sg3_utils
+- Update to version 1.47+13.75d23ac:
+  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
+  * rescan-scsi-bus.sh speed testonline()
+  * rescan-scsi-bus.sh: add option --no-lip-scan
+  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
+  * rescan-scsi-bus.sh: fix handling of '-I <secs>' option
+
sudo
+- sudo-dont-enable-read-after-pty_finish.patch
+  * bsc#1203201
+  * Do not re-enable the reader when flushing the buffers as part
+    of pty_finish().
+  * While sudo-observe-SIGCHLD patch applied earlier prevents a
+    race condition from happening, this fixes a related buffer hang.
+
tcl
+- [bsc#1206623], tcl-string-compare.patch:
+  Fix [string compare -length] on big endian and improve
+  [string equal] on little endian.
+
vim
+- Updated to version 9.0 with patch level 1386, fixes the following security problems
+  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
+  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
+  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
+  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
+- for the complete list of changes see
+  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386
+
xorg-x11-server
+- U_Xext-fix-invalid-event-type-mask-in-XTestSwapFakeInp.patch
+  * fixes regression introduced with security update for
+    CVE-2022-46340 (bsc#1205874)
+
xscreensaver
+- Add option --with-app-defaults to configure
+  * fix boo#1199742
+
yast2
+- Revert dropping DnsServerAPI.pm to prevent build failures
+  for yast2-dns-server, yast2-http-server (bsc#1208833)
+- 4.5.25
+
+- Allow dir:///foo to equal dir:/foo (bsc#1207239)
+- 4.5.24
+
+- DnsServerApi: drop module. It should never be in yast2 as it
+  import module from yast2-dns-server. And now dns-server is going
+  to be dropped (bsc#1205363)
+- 4.5.23
+
yast2-add-on
+- Removed unnecessary executable flag from file add-on-workflow.rb
+  (bsc#1209094)
+- 4.5.4
+
yast2-firstboot
+- Removed unnecessary executable flag from several files
+  (bsc#1209094)
+- 4.5.6
+
yast2-installation
+- Removed unnecessary executable flag from file security_proposal.rb
+  (bsc#1209094)
+- 4.5.16
+
yast2-network
+- Fixed a random build failure (introduced by the previous fix for
+  bsc#1207221) (bsc#1208796).
+- 4.5.17
+
yast2-nfs-client
+- Fixed unit test to not read the values from the current system
+  (bsc#1209007)
+- 4.5.2
+
yast2-online-update
+- Fix showing of release notes when we update a rubygem
+  (bsc#1205913)
+- 4.5.3
+
yast2-python-bindings
+- Misc fixes to examples; (bsc#1199343).
+- Fix python2 utf8 handling (python2 code wasn't displaying unicode
+  strings); (bsc#1199348).
+- Change conversion of Py_None to YCP_Void instead of YCP_Null;
+  (bsc#1199344).
+- 4.5.2
+
yast2-security
+- bsc#1208492
+  - do not store empty values in CFA login.defs empty value to
+    avoid crash when parsing according to login.defs lens
+- 4.5.6
+
yast2-storage-ng
+- Removed unnecessary executable flags from files (bsc#1209094)
+- 4.5.18
+
+- Fix comparing ProposalSettings in tests, avoid using Marshal
+  (bsc#1208259)
+- 4.5.17
+
yast2-trans
+- Update to version 84.87.20230306.ba31ff5670:
+  * Fixed string interpolations
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Swedish)
+  * Translated using Weblate (Persian)
+  * New POT for text domain 'control'.
+  * New POT for text domain 'security'.
+  * New POT for text domain 'packager'.
+  * Translated using Weblate (Czech)
+
yast2-transfer
+- Fixed TFTP download, truncate the target file to avoid garbage
+  at the end of the file when saving to an already existing file
+  (bsc#1208754)
+- 4.5.1
+
-- do not use *.spec.in template, use *.spec file with RPM macros
-  instead
-- 3.1.0
-
zypper
+- BuildRequires:  libzypp-devel >= 17.31.7.
+- Provide "removeptf" command (bsc#1203249)
+  A remove command which prefers replacing dependant packages to
+  removing them as well.
+  A PTF is typically removed as soon as the fix it provides is
+  applied to the latest official update of the dependant packages.
+  But you don't want the dependant packages to be removed together
+  with the PTF, which is what the remove command would do. The
+  removeptf command however will aim to replace the dependant
+  packages by their official update versions.
+- patterns: Avoid dispylaing superfluous @System entries
+  (bsc#1205570)
+- version 1.14.59
+
+- Update man page and explain '.no_auto_prune' (bsc#1204956)
+- Allow to (re)add a service with the same URL (bsc#1203715)
+- Explain outdatedness of repos (fixes #463)
+- BuildRequires:  libzypp-devel >= 17.31.5
+- version 1.14.58
+