Packages changed:
  gettext-runtime
  mozilla-nspr
  ncurses (6.6.20260815 -> 6.6.20260912)
  poppler (26.07.0 -> 26.09.0)
  poppler-qt6 (26.07.0 -> 26.09.0)
  selinux-policy (20260910 -> 20260914)
  timezone (2026c -> 2026d)
  vmaf (3.2.0 -> 3.2.1)
  xz (5.8.3 -> 5.8.4)

=== Details ===

==== gettext-runtime ====
Subpackages: envsubst libtextstyle0

- Fix for automake1.19: Update patch
  0001-msgcat-Add-feature-to-use-the-newest-po-file.patch
  with Makefile.in so the build doesn't try to regenerate this file
  with automake-1.18

==== mozilla-nspr ====

- Add Make-x86-assembly-files-compatible-with-SHSTK-IBT.patch to
  support -fcf-protection in assembly sources.

==== ncurses ====
Version update (6.6.20260815 -> 6.6.20260912)
Subpackages: libncurses6 ncurses-utils terminfo-base

- Work around common name in certificate of www.invisible-island.net
- Add ncurses patch 20260912
  + build-fix for sizeof(mmask_t) configure check (cf:20260829).
  + review/fix teraterm* (report by Jakub Horky)
  + modify flash for vt525 to use DECRARA (patch by Branden Robinson)
  + update config.guess, config.sub
- Add ncurses patch 20260905
  + modify endwin() and doupdate() to save/restore keypad and meta modes
    (report by Ferenc Wagner).
  + improve range-checks for xterm X10 and SGR mouse protocol.
  + correct modifier-masking for buttons 6-11 in mouse version 3
    (report by Ravi Arnan Irianto).
  + build-fix for Ada95 with ABI 7 (report by Branden Robinson)
- Add ncurses patch 20260829
  + add configure check to ensure that mmask_t is large enough for the
    configured mouse version (report by Ravi Arnan Irianto)
  + add mouse-parsing for extended buttons with mouse version 3 (report
    by Ravi Arnan Irianto).
- Add ncurses patch 20260822
  + add a limit-check in wborder (patch by Bjoern Foersterling).
  + improve limit-checks for trace calls in read_entry.c (report by Yeo
    JooHo).
  + improve tic warnings regarding the empty smir/rmir strings which
    may be added in dump_entry.c for termcap if ich/ich1 are present but
    smir/rmir are not.
  + add sun+fkeys -TD
  + add dtterm-sk, dtterm+sk -TD
  + add ich1 to several entries, providing for support of non-curses
    applications via termcap only -TD
  + add dch/dch1 to rxvt-basic -TD
  + drop redundant xterm=setaf2 (patch by Branden Robinson)
  + documentation improvements (patches by Branden Robinson).
    + improve color discussion in man pages
    + improve formatting/style of man pages
  > improve wide-character support with UCRT (patches by Liu Hao)
    + use UCRT's wcrtomb rather than _nc_wctomb
    + skip trailing cells of double-width characters

==== poppler ====
Version update (26.07.0 -> 26.09.0)

- Update to version 26.09.0:
  + core:
  - Subset fonts when saving changes in Annotations and Forms
    when using fontconfig
  - NSS: Don't infinite loop on wrong password
  - Internal code improvements
  - Fix crashes in malformed documents
  + utils:
  - pdftotext: Add -urls option to print link URLs next to their
    text
  - pdftohtml: Improve speed by ignoring tiling patterns earlier
  - pdfimages: Fix typo in manpage
  + glib: Remove G_GNUC_CONST in enum _get_type funcs
  + build system: harfbuzz is now required for font subsetting
- Changes from version 26.08.0:
  + core:
  - GPG based signature improvements
  - Internal code improvements
  + utils:
  - pdftohtml: Fix crash when using dataurls.
  - pdfimages: Add min-height and min-width options
  + glib: Stop using G_GNUC_CONST in _get_type funcs
  + build system:
  - Slight increase in compilation of utils folder
  - Fix -Wunused-command-line-argument when using clang
  - Use cmake modern way to check for linker support
- Bump soname following upstream changes.
- Use ldconfig_scriptlets macro for post(un) handling.
- Add pkgconfig(harfbuzz) BuildRequires: New dependency.

==== poppler-qt6 ====
Version update (26.07.0 -> 26.09.0)

- Update to version 26.09.0:
  + core:
  - Subset fonts when saving changes in Annotations and Forms
    when using fontconfig
  - NSS: Don't infinite loop on wrong password
  - Internal code improvements
  - Fix crashes in malformed documents
  + utils:
  - pdftotext: Add -urls option to print link URLs next to their
    text
  - pdftohtml: Improve speed by ignoring tiling patterns earlier
  - pdfimages: Fix typo in manpage
  + glib: Remove G_GNUC_CONST in enum _get_type funcs
  + build system: harfbuzz is now required for font subsetting
- Changes from version 26.08.0:
  + core:
  - GPG based signature improvements
  - Internal code improvements
  + utils:
  - pdftohtml: Fix crash when using dataurls.
  - pdfimages: Add min-height and min-width options
  + glib: Stop using G_GNUC_CONST in _get_type funcs
  + build system:
  - Slight increase in compilation of utils folder
  - Fix -Wunused-command-line-argument when using clang
  - Use cmake modern way to check for linker support
- Bump soname following upstream changes.
- Use ldconfig_scriptlets macro for post(un) handling.
- Add pkgconfig(harfbuzz) BuildRequires: New dependency.

==== selinux-policy ====
Version update (20260910 -> 20260914)
Subpackages: selinux-policy-targeted

- Update to version 20260914:
  * Label charon-nm as ipsec_exec_t (bsc#1278135)
  * Fix corrupted formatting in files.if
  * Allow nsswitch_domain connect to read xdm pid socket files
  * nsresourced fixes for mkosi (bsc#1279902)
  * Allow sshd-session connect to gnome remote desktop port
  * Allow sshd-session to connect to all generic ports
  * Allow sshd-session connect to port 443/tcp (http_port_t)
  * Allow sshd-session connect to tcp/22 (ssh_port_t)
  * Allow rsync to getattr pipes and sockes if rsync_export_all_ro is set (bsc#1279051)
  * Introduce files_getattr_non_auth_sockets
  * Introduce files_getattr_non_auth_pipes interface
  * Allow rsync to read var_t (bsc#1279565)
  * Update udev_manage_pid_files() to include symlinks read
  * Support vfs_snapper to work with samba_share_t (bsc#1265400)
  * vfs_samba uses dbus to communicate with snapper (bsc#1265400)
  * fix NetworkManager dnsmasq-forwarders.conf labeling (bsc#1260038)
  * Allow cupsd_t to communicate with fprintd via dbus (bsc#1268366)
  * Allow kmscon read cocpit's pid files
  * fix vpnc_t setpgid permission for openconnect (bsc#1272934)
  * Allow systemd-sysctl to create /run/sysctl.d
  * Allow systemd to create /run/udev/control
  * Allow systemd-coredumpd to create /run/systemd/coredumpd/kernel
  * Allow bootupcl nnp transition to mount_t
  * Networkmanager: Remove files_manage_etc_files for console_t
  * Networkmanager: Allow NM to manage files under /run
  * Allow login_userdomain read/write kmscon devpts chr_files
  * Support console version of initial-setup
  * ssh-session accesses gitolite ssh config files (bsc#1277259)
  * Allow kmscon use netlink permissions (#3368)
  * Fix NFS mount with xprtsec=tls / xprtsec=mtls (bsc#1275783)
  * Allow ssh_agent_type manage ssh_home_t files and sock_files
  * Allow sshd-session manage ssh_home_t socke files
  * Allow sshd-session X11 forwarding
  * Allow lsmd-plugin read udev pid files
  * Allow virtstoraged domain transition on iscsiadm execution
  * Revert "Allow virtqemud domain transition on iscsiadm execution"
  * Allow rhsmcertd search gconf home data dirs
  * Allow rhsmcertd read gconf home files
  * Revert "Allow rhsmcertd read gconf home files"
  * Allow postmap read aliases
  * Allow lsmd-plugin use libStorageMgmt to provision storage
  * Update dhcpc-hook policy
  * Allow virtqemud domain transition on iscsiadm execution
  * Allow virtqemud domain transition on udev execution
  * Allow virtqemud relabelfrom its private fifo files
  * Support gnome-remote-desktop's smartcard redirection support
  * Allow qatlib manage hugetlbfs directories
  * Allow sanlock the sys_admin capability
  * Allow rhsmcertd read gconf home files
  * Allow rhsmcertd read insights-client config files
  * Allow insights-client read install_t process state
  * Allow insights-client read the process state of the init scripts
  * Allow namespace_init_t execute generic programs in bin directories
  * Update the ssh_server_template() template
  * Add rules for sshd vsock socket read/write
  * Allow dhcpc hook query the chronyd service
  * Allow insights-client read gconf home files
  * Allow login_userdomain mount, remount, unmount all mount points
  * Allow login_userdomain mount on all mount points
  * Revert "Allow userdomain get attributes of files on an nsfs filesystem"
  * Allow accountsd create and use its private tmpfs files
  * Add the anaconda_read_state_install() interface
  * Update qatlib policy
  * Allow rhsmcertd read the file_contexts files
  * rhsmcertd: allow bootc/ostree transient package persistence detection
  * Allow virtproxyd connect to systemd-homed over a unix stream socket
  * Allow system_mail_t read procmail home content
  * Label malware-detection-config.yml with insights_client_etc_rw_t
  * Add bcachefs as a SELinux capable filesystem
  * Allow unconfined_service_t nnp_transition to container_runtime_t
  * Add the files_write_system_conf_files() interface
  * Allow haveged (entropyd_t)  create and use its private tmpfs files
  * Allow ctdbd manage access to Samba PID directories
  * Allow rhsmcertd read selinux config and default file contexts
  * Allow staff_t and user_t execute udev without a domain transition
  * Allow mpd dbus chat with avahi
  * Allow init_t nnp domain transition to mpd_t
  * Update tuned-ppd policy
  * Update policy for virsh_ssh_t to help with live migration
  * Update sysadm policy for encrypted volumes usage
  * Allow bootupd read all passwd sources
  * Allow local login and sshd-session signull cockpit-session
  * Allow sysadm_t read/write kvm devices
  * Allow sysadm user run fail2ban-client
  * Add 2 interfaces helping to handle cloud-what cache files
  * Allow all domains to use inherited sshd-session pipes
  * Dontaudit tlp_t dac_override (bsc#1272935)
- Syncing with upstream rawhide selinux-policy up to:
  * dc63e37474fac5e8f74560acfc1bfdb0f785ec24
- Update embedded container-selinux version to commit:
  * 4ac019955c8885496ffbd978520c905434d4273e (v2.251.0)

==== timezone ====
Version update (2026c -> 2026d)

- Updat to 2026d:
  * Canada’s Northwest Territories moved to permanent -06 on
    2026-08-21
  * Obsolescent settings like TZ="EST5EDT" now conform better to
    POSIX
  * Fix security, performance and porting bugs in zic and localtime

==== vmaf ====
Version update (3.2.0 -> 3.2.1)

- Update to release 3.2.1
  * libvmaf/speed_chroma: remove bilinear prescale index/weight
    computation from per-pixel loop.
  * Add ARM NEON implementation for 8-bit integer motion feature.

==== xz ====
Version update (5.8.3 -> 5.8.4)
Subpackages: liblzma5

- Update to version 5.8.4:
  * Fix an invalid memory access in lzma_alone_decoder(),
    lzma_lzip_decoder(), lzma_auto_decoder(), and
    lzma_microlzma_decoder() after a failed allocation is
    followed by decoder reinitialization; could crash
    (GHSA-5qpq-xqfv-j9pg, CVE pending, affects all versions
    since 5.0.0)
  * Fix wrong error code/assertion failure in
    lzma_stream_buffer_decode() on truncated input
  * Fix a performance issue and a theoretical integer
    overflow in lzma_index_cat(), used by "xz --list"
  * Fix bogus/too-low memory usage reporting in
    lzma_index_decoder()
  * Fix lzma_index_dup() copying the wrong check type
  * Fix a missing synchronization in the threaded .xz
    decoder affecting lzma_get_progress()
  * xz: fix two use-after-free bugs (--files/--files0 via
    XZ_OPT/XZ_DEFAULTS, and --verbose with redirected stderr)
  * Add Landlock ABI 9 support on Linux
  * Fix "xz --list" totals overflow check, an xzgrep option-
    injection quoting bug, and an ARM64/LoongArch unaligned-
    read issue; see upstream's release notes for the full list
- spec-cleaner cleanup: drop Group: tags, convert
  static-devel's Requires to pkgconfig(liblzma)