[opensuse-factory] Leap 15.1 Build 468.4 released!

10 May 2019

      Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&version=15.1&build=468.4&groupid=50
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&query_format=advanced&resolution=---&version=Leap%2015.1

When you reply to discuss some issues, make sure to change the subject.
Please use the test plan at
https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3m...
to record your testing efforts and use bugzilla to report bugs.

Packages changed:
  MozillaFirefox (60.6.1 -> 60.6.2)
  MozillaFirefox-branding-openSUSE
  chromium (73.0.3683.75 -> 74.0.3729.108)
  desktop-translations (84.87.20190409.048e157e -> 84.87.20190504.726deb37)
  gdm
  java-11-openjdk
  kdepim-addons
  kernel-source
  kpat
  plasma5-pk-updates
  python-Jinja2 (2.10 -> 2.10.1)
  sg3_utils (1.43 -> 1.44~763+19.1ed0757)
  yast2-packager (4.1.38 -> 4.1.40)
  yast2-trans (84.87.20190427.78ab7fa405 -> 84.87.20190504.69fe46292b)

=== Details ===

==== MozillaFirefox ====
Version update (60.6.1 -> 60.6.2)
Subpackages: MozillaFirefox-translations-common MozillaFirefox-translations-other

- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.

==== MozillaFirefox-branding-openSUSE ====

- recognize Leap 15 via sle_version (required for >= 15.1)

==== chromium ====
Version update (73.0.3683.75 -> 74.0.3729.108)

- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
- Update to 73.0.3686.103:
  * Various feature fixes
- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch
- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one

==== desktop-translations ====
Version update (84.87.20190409.048e157e -> 84.87.20190504.726deb37)

- Update to version 84.87.20190504.726deb37:
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Russian)
  * Translated using Weblate (Slovak)
  * update translations

==== gdm ====
Subpackages: gdm-lang gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0

- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).

==== java-11-openjdk ====
Subpackages: java-11-openjdk-headless

- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering

==== kdepim-addons ====
Subpackages: kdepim-addons-lang

- Add Fix-Bug-405434.patch to fix a possible crash when enabling
  the AdBlocker (kde#405434)
- Add Fix-Bug-398491.patch to generate a correct filter for the
  "SpamAssassin Daemon" in the Anti-Spam wizard (kde#398491)

==== kernel-source ====
Subpackages: kernel-default kernel-vanilla-base

- kabi/severities: Restore well-known kabi check exceptions
- commit 08632bf
- Delete patches.fixes/ACPICA-Clear-status-of-GPEs-before-enabling-them.patch (bsc#1132943)
  This turned out to cause a regression on Thunderbolt docks.
  Follow the upstream to revert the commit and blacklist them.
- commit 160bf9d
- arch: arm64: acpi: KABI ginore includes (bsc#1117158).
- commit 6316022
- efi/arm: Revert deferred unmap of early memmap mapping
  (bsc#1117158).
- commit ca7c691
- Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in
  h4_recv_buf() (bsc#1133731).
- commit b5208fc
- powerpc/numa: document topology_updates_enabled, disable by
  default (bsc#1133584).
- powerpc/numa: improve control of topology updates (bsc#1133584).
- commit 350fb98

==== kpat ====
Subpackages: kpat-lang

- Add Fix-fc-solve-misbehaving-preset.patch to avoid freezes and/or
  high CPU/RAM usage in the Freecell solver (kde#405187)

==== plasma5-pk-updates ====
Subpackages: plasma5-pk-updates-lang

- Dependency on PackageKit
- Fix summary
- https URL

==== python-Jinja2 ====
Version update (2.10 -> 2.10.1)

- update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341):
  * "SandboxedEnvironment" securely handles "str.format_map" in order
    to prevent code execution through untrusted format strings.  The
    sandbox already handled "str.format".

==== sg3_utils ====
Version update (1.43 -> 1.44~763+19.1ed0757)
Subpackages: libsgutils2-1_43-2

- Update to version 1.44~763+19.1ed0757:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
  (bsc#840054, bsc#1131482)
- Spec file: add fc_wwpn_id to generate by-path links for
  fibrechannel (bsc#1005063)
- Update to version 1.44~763+17.35f525b:
  * Changed versioning scheme (svn r763, pre-release of
    upstream 1.44, plus 16 SUSE patches, SUSE git commit b2fedfa)
  * Code-identical to previous release except for the following:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)

==== yast2-packager ====
Version update (4.1.38 -> 4.1.40)

- Properly handle going back when selecting the modules from the
  Packages DVD medium (bsc#1131968)
- 4.1.40
- Prefer control.xml to ProductFeatures for Community Repositories
  (bsc#1132613)
- 4.1.39

==== yast2-trans ====
Version update (84.87.20190427.78ab7fa405 -> 84.87.20190504.69fe46292b)
Subpackages: yast2-trans-ar yast2-trans-bg yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en yast2-trans-en_GB yast2-trans-en_US yast2-trans-eo yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-ko yast2-trans-lt yast2-trans-nb yast2-trans-nl yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-sk yast2-trans-sl yast2-trans-sv yast2-trans-uk yast2-trans-zh_CN yast2-trans-zh_TW

- Update to version 84.87.20190504.69fe46292b:
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Danish)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Catalan)
  * New POT for text domain 'storage'.
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Japanese)
  * Translated using Weblate (German)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Chinese (Taiwan))
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (Taiwan))
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (German)
  * Translated using Weblate (Persian)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Chinese (Taiwan))
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (German)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (Taiwan))
  * Translated using Weblate (Persian)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Czech)
  * New POT for text domain 'update'.
  * New POT for text domain 'storage'.
  * New POT for text domain 'packager'.
  * New POT for text domain 'control'.
  * New POT for text domain 'autoinst'.
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Italian)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Italian)
  * Translated using Weblate (German)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Japanese)
  * Translated using Weblate (German)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Lithuanian)
  * New POT for text domain 'firewall'.
  * New POT for text domain 'cluster'.
  * New POT for text domain 'bootloader'.

-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org
To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

[opensuse-factory] Leap 15.1 Build 468.4 released!

Ludwig Nussel