Packages changed:
  curl
  fcitx5-gtk (5.1.1 -> 5.1.3)
  gcc13 (13.2.1+git8761 -> 13.3.0+git8781)
  glibc
  kf6-qqc2-desktop-style
  libarchive
  libcap-ng (0.8.4 -> 0.8.5)
  llvm18 (18.1.5 -> 18.1.6)
  lvm2
  lvm2-device-mapper
  openssl-3
  pangomm1_4 (2.46.3 -> 2.46.4)
  patterns-desktop
  permissions (1699_20240513 -> 1699_20240521)
  polkit-default-privs (1550+20240430.5327266 -> 1550+20240522.4ba9229)
  qqc2-desktop-style (5.116.0 -> 5.116.1)
  speech-dispatcher (0.12.0~rc2 -> 0.12.0~rc3)
  suse-module-tools (16.0.43 -> 16.0.44)
  udisks2 (2.10.0 -> 2.10.1)
  vlc
  xen (4.18.2_02 -> 4.18.2_04)
  zsh

=== Details ===

==== curl ====
Subpackages: libcurl4

- Add split-provides for libcurl-devel -> libcurl-devel-doc.
- Spin documentation off to libcurl-devel-doc, this saves buildroots
  495 files and time (mandb is run in %posttrans).

==== fcitx5-gtk ====
Version update (5.1.1 -> 5.1.3)

- update to 5.1.3
  * Add <algorithm> for std::max
  * Also use SLIDE_Y for xdg_popup window

==== gcc13 ====
Version update (13.2.1+git8761 -> 13.3.0+git8781)
Subpackages: cpp13 gcc13-locale libgccjit0-gcc13 libstdc++6-devel-gcc13

- Update to GCC 13.3 release

==== glibc ====
Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd

- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)
- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- glibc-fix-cve-2024-33599.patch: renamed
- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)
- utmp-time-bits.patch: login: structs utmp, utmpx, lastlog _TIME_BITS
  independence (BZ #30701)
- elf-parse-tunables.patch: elf: Only process multiple tunable once (BZ
  [#31686])

==== kf6-qqc2-desktop-style ====
Subpackages: kf6-qqc2-desktop-style-lang

- Update qqc2-desktop-style-lang obsoleted version

==== libarchive ====

- Fix bsdunzip test failing due to a locale issue
  * fix-bsdunzip-test.patch

==== libcap-ng ====
Version update (0.8.4 -> 0.8.5)

- Update to version 0.8.5:
  * Remove python global exception handler since it's deprecated
  * Make the utilities link against just built libraries
  * Remove unused macro in cap-ng.h
- Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more.

==== llvm18 ====
Version update (18.1.5 -> 18.1.6)
Subpackages: clang-tools clang18 libLLVM18 libclang-cpp18 libclang13 llvm18-gold

- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.

==== lvm2 ====
Subpackages: liblvm2cmd2_03

- Use %patch -P N instead of deprecated %patchN syntax.

==== lvm2-device-mapper ====
Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03

- Use %patch -P N instead of deprecated %patchN syntax.

==== openssl-3 ====
Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3

- Security fix: [bsc#1224388, CVE-2024-4603]
  * Check DSA parameters for excessive sizes before validating
  * Add openssl-CVE-2024-4603.patch

==== pangomm1_4 ====
Version update (2.46.3 -> 2.46.4)

- Update to version 2.46.4:
  + Coverage: Don't use deprecated pango_coverage_ref/unref()
  + Documentation:
  - Doxyfile.in: Don't hide undocumented classes
  - Remove AUTHORS, HACKING, README.SUN; add general info to
    README.md.
  + Meson build:
  - Detect if we build from a git subtree
  - Don't copy files with configure_file()
  - Fix the evaluation of is_git_build on Windows
  - Don't fail if warning_level=everything
- Enable check section: run meson test (no tests defined as of
  now).

==== patterns-desktop ====
Subpackages: patterns-desktop-books patterns-desktop-imaging patterns-desktop-mobile patterns-desktop-multimedia

- No longer recommend tlp: we have three (conflicting) power tuners
  by now, each is recommended by some pattern/feature:
  + tuned is recommended by the base patterns (installed on all
    systems)
  + power-daemon-profiles is recommended by GNOME and Plasma (GUI
    controlled)
  + tlp recommended by laptop pattern (tlp conflicts explicitly
    with the other two though).

==== permissions ====
Version update (1699_20240513 -> 1699_20240521)
Subpackages: permctl permissions-config

- Update to version 1699_20240521:
  * permctl: return special exit code in --warn mode if entries need fixing

==== polkit-default-privs ====
Version update (1550+20240430.5327266 -> 1550+20240522.4ba9229)

- Update to version 1550+20240522.4ba9229:
  * whitelist gnome-remote-desktop (bsc#1222159)

==== qqc2-desktop-style ====
Version update (5.116.0 -> 5.116.1)
Subpackages: qqc2-desktop-style-lang

- Update to 5.116.1
- Changes since 5.116.0:
  * Extract translations into qqc2desktopstyle_qt5.pot
  * Really fix the translation file

==== speech-dispatcher ====
Version update (0.12.0~rc2 -> 0.12.0~rc3)
Subpackages: libspeechd2 python311-speechd speech-dispatcher-module-espeak

- Update to version 0.12.0~rc3:
  * Detect module failures from generic module.
  * Make the fallback espeak-ng and dummy modules hardcoded.
  * Better detect generic module failures to disable them.
  * pulse: Use asynchronous API to avoid buffer underruns.
  * generic: Make stripping punctuation use locale charset.
- Add speech-dispatcher-missing-return-vals.patch: add missing
  return statements.

==== suse-module-tools ====
Version update (16.0.43 -> 16.0.44)
Subpackages: suse-module-tools-scriptlets

- Update to version 16.0.44:
  * Include unblacklist in initramfs (bsc#1224320)
  * regenerate-initrd-posttrans: run update-bootloader --refresh for XEN
    (bsc#1223278)

==== udisks2 ====
Version update (2.10.0 -> 2.10.1)
Subpackages: libudisks2-0 libudisks2-0_btrfs udisks2-bash-completion udisks2-lang udisks2-zsh-completion

- update to version 2.10.1
  - Update Ukrainian translation
  - tests: Wipe used devices for LVM2 RAID tests
  - tests: Settle down before checking the LVM RAID MissingPhysicalVolumes property
  - tests: Rescan vdevs after lvm raid tests
  - Update German translation
  - tests: Mark UDF fstab filesystem tests as unstable
  - tests: Add offline and online filesystem grow tests
  - doc: Clarify the Filesystem.Size property presence
  - udiskslinuxfilesystem: Force native tools for mounted XFS fs size retrieval
  - udiskslinuxfilesystem: Refactor internal whitelists
  - tests: Fix Python class invocation in nvme tests
  - udisksctl: Add "--no-partition-scan" option for "loop-setup" command
  - tests: Fix regex escaping
  - integration-test: Fix invalid escaping
  - tests: Mark LVM RAID tests as unstable
  - tests: Fix LSM drive objects crawl
  - iscsi: Fix login on firmware-discovered nodes
  - udiskslinuxmanager: Properly handle disabled modules
  - tests: Replace deprecated unittest assert calls
  - udisksctl: Guard object lookup
  - Update ka.po
  - udiskslinuxloop: Avoid warnings on empty loop devices
  - Update Polish translation
  - Limit getting filesystem size only to Ext and XFS
  - build: Check for gobject-introspection m4 macro presence
  - tests: start the polkitd mock with the corresponding user if it exists
  - Drop merged upstream patches:
    0001-doc-Clarify-the-Filesystem.Size-property-presence.patch
    0001-udiskslinuxfilesystem-Force-native-tools-for-mounted.patch
    0001-udiskslinuxfilesystem-Refactor-internal-whitelists.patch
    0001-tests-Mark-UDF-fstab-filesystem-tests-as-unstable.patch
    0001-tests-Add-offline-and-online-filesystem-grow-tests.patch

==== vlc ====
Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau

- Add 770789f2.patch: Fix missing cast in chromaprint
  (boo#1223909).

==== xen ====
Version update (4.18.2_02 -> 4.18.2_04)
Subpackages: xen-libs xen-tools xen-tools-domU

- bsc#1221984 - VUL-0: CVE-2023-46842: xen: x86 HVM hypercalls may
  trigger Xen bug check (XSA-454)
  6617d62c-x86-hvm-Misra-Rule-19-1-regression.patch
- Upstream bug fixes (bsc#1027519)
  6627a4ee-vRTC-UIP-set-for-longer-than-expected.patch
  6627a5fc-x86-MTRR-inverted-WC-check.patch
  662a6a4c-x86-spec-reporting-of-BHB-clearing.patch
  662a6a8d-x86-spec-adjust-logic-to-elide-LFENCE.patch
  663090fd-x86-gen-cpuid-syntax.patch
  663a383c-libxs-open-xenbus-fds-as-O_CLOEXEC.patch
  663a4f3e-x86-cpu-policy-migration-IceLake-to-CascadeLake.patch
  663d05b5-x86-ucode-distinguish-up-to-date.patch
  663eaa27-libxl-XenStore-error-handling-in-device-creation.patch

==== zsh ====

- Use %patch -P N instead of deprecated %patchN.