February 2019 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] backup-rpmdb.service needed? (was Re: Raspi3 boot times)
by Ludwig Nussel 06 Feb '19

06 Feb '19

Axel Braun schrieb: > [...] > Raspi are heavily depending on the kind of 'hard disk' you are using, > whether it is a SD card (connected via USB2) or an internal SSD Here > is the result of a Raspi using a Leap 15 LXQT image: > > /home/test # systemd-analyze blame > 1min 30.071s display-manager.service > 1min 18.481s backup-rpmdb.service Did anyone ever rely on that rpm database backup the last decade? Maybe it's time to retire that service? cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

15 32

[opensuse-factory] Leap 15.1 Build 406.2 released!
by Ludwig Nussel 06 Feb '19

06 Feb '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=15.1&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: Mesa (18.3.1 -> 18.3.2) Mesa-drivers (18.3.1 -> 18.3.2) PackageKit accountsservice apparmor (2.12 -> 2.12.2) bcm43xx-firmware binutils ceph (14.0.1.1555+g42662f72f4 -> 14.0.1.2789+g6c941e4d76) digikam dnsmasq gdb ghostscript (9.26 -> 9.26a) glib2 gsl (2.4 -> 2.5) gstreamer-plugins-bad hdf5 (1.10.1 -> 1.10.4) iproute2 kcm_tablet (3.0.0 -> 3.1.1) kernel-firmware (20180525 -> 20190118) libapparmor (2.12 -> 2.12.2) libdrm (2.4.96 -> 2.4.97) libraw libvirt (4.10.0 -> 5.0.0) metis openssl-1_1 python-libvirt-python (4.10.0 -> 5.0.0) qemu rpm shadow (4.5 -> 4.6) snapper (0.8.1 -> 0.8.2) systemd thunar (1.8.2 -> 1.8.4) tigervnc util-linux (2.31.1 -> 2.33.1) util-linux-systemd (2.31.1 -> 2.33.1) xfce4-panel-plugin-pulseaudio (0.4.0 -> 0.4.1) xorg-x11-server yast2-apparmor (4.1.5 -> 4.1.6) yast2-update (4.1.7 -> 4.1.8) zypper (1.14.19 -> 1.14.21) === Details === ==== Mesa ==== Version update (18.3.1 -> 18.3.2) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to 18.3.2 * In this release candidate we have added more PCI IDs for AMD Vega devices and a number of fixes for the RADV Vulkan drivers. * On the Intel side we have a selection ranging from quad swizzles support for ICL to compiler fixes. * The nine state tracker has also seen some love as do the Broadcom drivers. * To top it all up, we have a healthy mount of build system fixes. - redisabled support for tegra, since it just got disabled upstream in git master ... - Enable the surfaceless platform, which is needed by KDE CI environment for testing (https://phabricator.kde.org/T10245) - Add etnaviv, imx and tegra supports for %arm and arch64 ==== Mesa-drivers ==== Version update (18.3.1 -> 18.3.2) Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2 - Update to 18.3.2 * In this release candidate we have added more PCI IDs for AMD Vega devices and a number of fixes for the RADV Vulkan drivers. * On the Intel side we have a selection ranging from quad swizzles support for ICL to compiler fixes. * The nine state tracker has also seen some love as do the Broadcom drivers. * To top it all up, we have a healthy mount of build system fixes. - redisabled support for tegra, since it just got disabled upstream in git master ... - Enable the surfaceless platform, which is needed by KDE CI environment for testing (https://phabricator.kde.org/T10245) - Add etnaviv, imx and tegra supports for %arm and arch64 ==== PackageKit ==== Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Add PackageKit-systemd-timers.patch: Migrate from cron to systemd timer (bsc#1115410). ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Add accountsservice-read-root-user-cache.patch: Read root user cache file (bsc#1114292 glfo#accountsservice/accountsservice#65). ==== apparmor ==== Version update (2.12 -> 2.12.2) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang perl-apparmor python3-apparmor - apparmor-lessopen-profile.patch: Change of path of rpm in lessopen.sh (boo#1082956, boo#1117354) - add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.12.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2 for the detailed upstream changelog - update to AppArmor 2.12.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - add support for conditional includes ("include if exists") - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1 for detailed upstream release notes - remove upstream(ed) patches: - parser-write-cache-warn-only.diff - disable-cache-on-ro-fs.diff - add-dovecot-stats.patch - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - fix-samba-profiles.patch - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-enable-profile-cache.diff and apparmor-samba-include-permissions-for-shares.diff - Backport dnsmasq fix: 025c7dc6 ("dnsmasq: Add permission to open log files") dnsmasq-Add-permission-to-open-log-files.patch (bsc#1111345) - add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099) - Set flags for profiles represented by glob set-flags-for-profiles-represented-by-glob.patch (bsc#1086154) fix-regression-in-set-flags.patch - Add dovecot stats in dovecot profiles add-dovecot-stats.patch (bsc#1089787) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26 - do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170) - update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diff - add apparmor-abstractions-no-multiline.diff: change all multiline rules into one line. Needed for yast2-apparmor (bnc#900013) - add apparmor-profiles-ntpd-pid-location.diff to cover new ntpd pid location (bnc#899746) - update to AppArmor 2.8.97 (aka 2.9 beta3 aka r2721) - several bugfixes in python and C tools - rename "__unused" to "unused" in apparmor_parser to fix compilation on openSUSE <= 13.1 x86_64 (bnc#895495) - usr.lib.dovecot.auth profile: allow access to auth-token-secret.dat - various small profile improvements - update and add several testcases - drop upstreamed patch apparmor-profiles-dnsmasq-iface-mtu.patch - re-number remaining patches - split apparmor-profiles package into -profiles and -abstractions - update to AppArmor 2.8.96 (aka 2.9 beta2 aka r2652) - add unix abstract sockets, ptrace, and signal policy generation - several bugfixes in the python tools and elsewhere - move program-chunks/postfix-common to abstractions/ - drop upstreamed patches: - apparmor-profiles-clustered-samba.diff - perl-apparmor-fix-bare-network-keyword-handling.diff - perl-apparmor-handle-bare-capability-keyword.diff - perl-apparmor-properly-handle-bare-file-keyword.diff - re-enable installation of perl modules - move python modules to python3-apparmor package - create symlinks without aa- prefix only for tools existing in 2.8.x, but not for new tools added in 2.9 - make utils filelist explicit to ensure we have the right set of files without aa- prefix in sbindir - switch easyprof python module location to python3 - drop unused defines APPARMOR_DOC_DIR and JNI_SO - refresh patches: - apparmor-utils-string-split (file moved) - apparmor-profiles-dnsmasq-iface-mtu.patch - apparmor-2.5.1-edirectory-profile (prepared Thu Mar 20 23:35:03 UTC 2014 in home project) - update to AppArmor 2.8.95 (aka 2.9 beta1) - complete rewrite of the aa-* tools in python - new tools: aa-cleanprof, aa-mergeprof - extra profiles moved to /usr/share/apparmor/extra-profiles/ (bnc#713647) - and much more, but there's no upstream changelog yet - drop upstreamed patches and files: - usr.sbin.winbindd - usr.lib.dovecot.*, tunables-dovecot, apparmor-profiles-dovecot-bnc851984.diff - apparmor-init.py-gsoc.diff - apparmor-2.8.2-nm-dnsmasq-config.patch - add %bcond_with perl and disable the perl subpackage temporarily (the perl modules will be back in beta2) - drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages (they were disabled since a long time, and upstream no longer ships their code) and the apparmor-profile-editor.desktop and apparmor-profile-editor.png files - drop apparmor-utils-subdomain-compat patch (was only included for <= 12.1) - remove libimmunix Provides/Obsoletes (libimmunix was a compat wrapper and got finally dropped) - refresh apparmor-samba-include-permissions-for-shares.diff and apparmor-2.5.1-edirectory-profile - add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq read access to interface mtu in /proc/sys/net/ipv6/conf/<ifacename>/mtu (bnc#892374) - usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading plaintext password files (bnc#874094) - Rename rpmlintrc to %{name}-rpmlintrc. Follow the packaging guidelines. - add perl-apparmor-fix-bare-network-keyword-handling.diff: perl-apparmor: Fix handling of network (or network all) (bnc#889650) - add perl-apparmor-handle-bare-capability-keyword.diff: perl-apparmor: Fix handling of capability keyword (bnc#889651) - add perl-apparmor-properly-handle-bare-file-keyword.diff: perl-apparmor: Properly handle bare file keyword (bnc#889652) - add apparmor-profiles-clustered-samba.diff to permit clustered Samba access to CTDB socket and databases (bnc#885317) - fix problems with dovecot and managesieve * usr.lib.dovecot.managesieve-login: network inet6 stream * usr.lib.dovecot.managesieve: +#include <tunables/dovecot> /usr/lib/dovecot/managesieve { [#]include <abstractions/base> + capability setgid, + capability setuid, + network inet stream, + network inet6 stream, + @{DOVECOT_MAILSTORE}/ rw, + @{DOVECOT_MAILSTORE}/** rwkl, - add #include <abstractions/wutmp> to usr.lib.dovecot.auth - update usr.sbin.winbindd profile (bnc#870607) - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/ - update usr.sbin.winbindd profile (bnc#870607) - treat passdb.tdb.tmp as passdb.tdb - allow rw access to /var/tmp/ - add Recommends: libnotify-tools to apparmor-utils (aa-notify -p needs notify-send) - update to AppArmor 2.8.3 (r2122) bugfix release - fix some cache clearing bugs in apparmor_parser - various fixes in mod_apparmor - several profile updates, most of them were already included as patches (except abstractions/winbind (bnc#863226), abstractions/fonts and abstractions/p11-kit) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details - update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch - remove upstream(ed) patches - apparmor-2.8.2-fix-ntpd-profile.diff - apparmor-abstractions-r2089-r2090.diff - apparmor-abstractions-ssl_certs.diff - apparmor-fix-url-in-manpages-r2093.diff - apparmor-no-perl-smartmatch-r2088.diff - apparmor-profiles-dnsmasq.diff - apparmor-profiles-ntpd-r2103.diff - apparmor-profiles-samba-create-dirs.diff - apparmor-profiles-samba4.diff - apparmor-unconfined-lang-r2094.diff - apparmor-utils-po-de-r2091.diff - use current ruby macros, the rb_sitearch is obsolete since at least 12.1 - update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file and supplemental config directory (by develop7) - update apparmor-profiles-dovecot-bnc851984.diff: - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary - add abstractions/mysql - allow execution of some more /usr/lib/dovecot/* binaries - better restrict access to /var/spool/postfix/private/ - update usr.lib.dovecot.auth to allow to read mysql config files - update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp: add abstractions/nameservice instead of allowing more and more files - add Recommends: net-tools to apparmor-utils (needed by aa-unconfined) - update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*, /{var/,}run/dovecot/mounts, deny capability block_suspend) - add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config created by recent NetworkManager (see http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669… for update details) - add apparmor-profiles-samba-create-dirs.diff to allow samba to mkdir /var/run/samba and /var/cache/samba (bnc#856651) - add abstractions/samba to usr.sbin.winbindd profile - add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131) - update dovecot profiles to support dovecot 2.x, and add profiles for the parts of dovecot that were not covered yet (bnc#851984) NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs. (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*) - %restart_on_update (in parser %postun) is "translated" to stop/start by the systemd wrapper, which removes AppArmor protection from running processes. Fixed by using a custom script instead (bnc#853019) NOTE: The %postun from the previously installed apparmor-parser package will remove AppArmor protection from running processes a last time. Run aa-status to get a list of processes you need to restart, or reboot your computer. - reload profiles in %post of the apparmor-profiles package - add apparmor-abstractions-ssl_certs.diff to allow access to certificates in /var/lib/ca-certificates/ (bnc#852018) - add apparmor-profiles-ntpd-r2103.diff with updated driftfile location for ntpd (bnc#850374) - apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile updates for samba 4.x and kerberos (bnc#846586#c12 and #c15) - add apparmor-profiles-dnsmasq.diff - add missing permissions for libvirt-generated files to dnsmasq profile (bnc#848215) - apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile updates for samba 4.x (bnc#846054#c5) - add apparmor-profiles-samba4.diff - various profile additions for samba 4.x (bnc#845867, bnc#846054) - update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054) - update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py - add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages - add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work in all languages - fix ntp by allowing read access to openssl.cnf - add apparmor-utils-po-de-r2091.diff: fix some (mis)translations - add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch) - p11-kit needs access to /usr/share/p11-kit/modules - allow reading /etc/machine-id in the dbus-session abstraction - add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for the new tools developed in GSoC - add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental in perl 5.18 again - use grep instead (upstream 2.8 branch r2088) - fix ruby requires - update to AppArmor 2.8.2 - several fixes for python3 compability - various profile improvements: - various additions to abstractions/fonts - move poppler's cMaps from gnome to fonts; gnome includes fonts - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base (bnc#824577) - update pulseaudio directory and cookie file paths - add missing permissions to the nscd profile (bnc#807104) - deny capability block_suspend to nscd (bnc#807104) - MariaDB compatability in abstractions/mysql (bnc#798183) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details - removed upstream(ed) patches - apparmor-abstractions-mysql-path.diff - apparmor-profiles-nscd.diff - apparmor-python3-r2052.diff - swig for python3 is broken on openSUSE 12.2 - build python-apparmor (for python2) instead on 12.2 - add python3-apparmor subpackage (currently py2 OR py3 package can be build, but not both at the same time) - add upstream apparmor-python3-r2052.diff to fix various python3 issues - Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277) - do not package directories as %config - especially not as noreplace - enable python and ruby subpackages (using %bcond_without) - update/fix paths in %files for python and ruby subpackages - add Requires: insserv to parser package (needed by initscript) - nscd profile: add missing permissions and deny capability block_suspend (bnc#807104, apparmor-profiles-nscd.diff) - Add missing files to SRPM (bnc#777471) - update abstractions/mysql with correct paths and add MariaDB paths (bnc#798183) - update to AppArmor 2.8.1 (=2.8 branch r2069) Bugfix release, http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_1 Most important changes are: - add various missing parts to profiles and abstractions - fix a possible x conflict with hats or child profiles in apparmor_parser - fix and speedup stdin handling in aa-decode - various other bugfixes - add pkgconfig support to libapparmor - remove upstream(ed) patches - verify tarball with gpg-offline - fix directory flags for /etc/apparmor.d to be in sync between - parser and -profiles subpackage - remove %stop_on_removal for no longer existing aaeventd (bnc#781564) - don't hide TeX output when building the parser and techdoc - clear and update inconsistent profile cache (bnc#774529) - abstractions/bash: update /bin/ls to also match /usr/bin/ls (usrMerge) - Add required fonts for new TeXLive 2012 - update /bin/ping profile to also match /usr/bin/ping (usrMerge) - update to AppArmor 2.8.0 (= r2047) - new utility aa-easyprof - templated profile generation tool (the resulting profile may be less strict than profiles generated with genprof/logprof) - various small bugfixes - removed upstreamed patches - add apparmor-techdoc.patch to remove traces of the build time in PDF files - update to AppArmor 2.8 beta5 (= 2.7.103 / r2031) - new utility aa-exec to confine a program with the specified AppArmor profile - add support for mount rules - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8 for full upstream changelog - removed upstreamed and backported patches - remove outdated autobuild and "disable repo" patches that were disabled since the AppArmor 2.7 package - create the Immunix::SubDomain compat perl module only for openSUSE <= 12.1 (bnc#720617 #c7) - replace patch for dnsmasq profile with upstream patch (bnc#738905) - add apparmor-r2022-log-parser-network-bnc755923.patch - logprof didn't create network rules because of changed log format (bnc#755923, lp#800826) - add profile for samba winbindd (bnc#748499) - fix dnsmasq profile (bnc#738905) - add 0001-fix-for-lp929531.patch to allow reading /sys/devices/system/cpu/online in abstractions/base (lp#929531) - Update to AppArmor 2.7.2 (= 2.7 branch / r1894) - move various permissions from httpd2-prefork profile to abstractions/apache2-common. Backward-incompatible change: *.htaccess files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT - allow access for more /usr/lib*/samba/ files for smbd (bnc#725967#c5) - allow various .conf files for dovecot (lp#458922) - disallow wl for *.so in @{HOME}/.pki/nssdb/ in abstractions/private-files and abstractions/private-files-strict (lp#911847) - update abstractions/kde, private-files* and ubuntu-browsers.d/user-files to use ~/.kde4, not only ~/.kde (bnc#741592) - block write access to ~/.kde{,4}/env in abstractions/private-files (lp#914190) - allow write access for personal dictionary etc. in abstractions/aspell (lp#917859) - when using genprof for a script, include read access to the script itsself - automatically include abstractions/python or abstractions/ruby for python/ruby scripts - add profile for smbldap-useradd and allow smbd to call it (bnc#738041) - allow creation of the .config directory in abstractions/enchant (lp#914184) - allow TFTP read-only access in dnsmasq profile (lp#905412) - allow capability dac_read_search for syslog-ng (bnc#731876) - add p11-kit abstraction and include it in abstractions/authentification (lp#912754, lp#912752) - add audacity to abstractions/ubuntu-media-players (lp#899963) - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and /dev/nvidia* in abstractons/ubuntu-browsers.d/* (lp#662906, lp#562831, lp#890894, lp#890894, lp#884748) - fix typo for multiarch gconf-modules in abstractions/base (lp#904548) - allow avahi to do dbus introspection (lp#769148) - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992) - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062) - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in abstractions/cups-client (lp#887992) - allow read access of /etc/python{2,3}.[0-7]*/sitecustomize.py in abstractions/python (lp#860856) - various updates to the sshd profile (lp#817956) - (and some more changes I already included in the apparmor-2.7-branch.diff) - Update to AppArmor 2.7.0 (= r1858) - make traceroute6 work (bnc#733312) - allow access to pyconfig.h in abstractions/python (lp#840734) - fix logprof/genprof for hex-encoded program filenames (= filenames containing space etc.) - add apparmor-2.7-branch.diff with some upstreamed fixes: - usr.sbin.smbd needs read access for /etc/netgroup (bnc#738041) - create /etc/apparmor.d/tunables/multiarch.d as directory, not as file - fix syntax error in abstractons/python - changed a $ -> % (typo) - package subdomain.conf only in -parser, not in -utils package - package libapparmor.so and libimmunix.so only in libapparmor-devel, not in libapparmor1 - make Provides for perl-libapparmor versioned to avoid self-Obsoletes - move libapparmor.a and libimmunix.a from libapparmor1 to libapparmor-devel package - update to AppArmor 2.7.0 rc2 Most of the changes since rc1 were already included as patches. Additional changes: - fix logprof/genprof to recognize "mknod" in audit.log - fix libapparmor python bindings to compile with python 3 - fix wrong status message in initscript if apparmor-utils are not installed - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS - fix some warnings in utils/Makefile - remove 4 upstreamed patches - remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now - update line numbers in 2 patches - make abstractions/winbind working on 64bit systems - allow loading the libraries for samba "vfs objects" also on 32bit systems (bnc#725967) - allow loading the libraries for samba "vfs objects" (bnc#725967) - include autogenerated profile sniplet for samba shares (bnc#688040) - more helpful error message for "aa-notify -p" if the user is not in the configured group - update to AppArmor 2.7.0 rc1 - aa-notify: add --display option and warn if $DISPLAY is not set (important for usage with sudo on openSUSE) - fix syntax error on "rcapparmor stop" - allow read access to /proc/*/mounts in the dovecot profile - add patch with upstream changes since 2.7.0 beta2 release - add example parser.conf - print warning if profile cache directory doesn't exist - remove initscript for no longer existing aa-eventd (bnc#720617) - set correct $HOME in aa-notify - enable caching of profiles (= massive speedup) (bnc#689458) - add comments for patches in .spec and comments in some patches - run spec-cleaner - add libtool as buildrequire to make the spec file more reliable - update to AppArmor 2.7.0 beta2 - includes fixes for bnc#717707, bnc#678749, bnc#685674, bnc#679182, bnc#691072, bnc#705319, bnc#713728 - add some missing perl module Requires to perl-apparmor - update to AppArmor 2.7.0 beta1, for details see http://wiki.apparmor.net/index.php/ReleaseNotes_2_7 - removed lots of patches I pushed upstream - disabled apparmor-2.5.1-unified-build (patch to use automake, does not apply to 2.7 and probably won't be accepted upstream) - disabled build of tomcat_apparmor (doesn't build, deprecated upstream) - run spec-cleaner - remove *.la files - move usr.sbin.nscd profile back to apparmor-profiles package - Update patch apparmor-profiles-usr.sbin.dnsmasq to include /var/lib/libvirt/dnsmasq/*.leases (bnc#694197). - install SubDomain.pm compat module (bnc#713408) - Update to 2.6.1. - One patch eliminated - Lots of minor fixes - Split out more common abstractions - Add check_for_apparmor() helper. - dhcpd: Fix apparmor profile (bnc#692428) - Add apparmor-securityfs-systemd.patch: do not mount securityfs when running under systemd, just access the directory, systemd will automount it (bnc#704460). - Fixed typos in descriptions and summaries of apparmor.spec - Fixed building of pam_apparmor to properly link libpam (bnc#696553). - Fixed building of apache2-mod_apparmor to properly link (bnc#701821). - move the requires and prerequires to the right package - make the -doc and -profiles subpackages noarch (again) - Added alias from Immunix::SubDomain to Immunix:AppArmor to allow older users of perl-apparmor to work properly. - Properly re-created links to old utility names. - Added /etc/ethers and /var/run/dnsmasq-forwarders to usr.sbin.dnsmasq (bnc#678749) - Update to 2.6.0 - 19 patches eliminated - Lots of minor fixes. - Split out more common abstractions - Added more local includes - Additional libvirt related fixes in usr.sbin.dnsmasq (bnc#675867) - Added 'network packet raw' to dhclient profile. - Add Requires for used perl packages (bnc#670650). - Updated dhclient profile and added dhclient-script profile (bnc#561152). - Added ability to completely disable repositories. - Properly indent sub-profiles after genprof completion (bnc#480795). - Inherit flags in sub-profiles when generating profiles (bnc#496204). - Stop treating profiles shipped with the package as config files. - /etc/apparmor.d will still be treated specially. - Add support for parsing network operation events (bnc#665483) - Fix for sbin.klogd profile using kernel versions >= 2.6.38-rc1. - Update to apparmor-2.5 r1445. - Includes 3 of the fixes below. - Several testsuite fixes. - Update for Thunderbird profile. - Add support for libvirt in usr.sbin.dnsmasq (bnc#666090) - fix rm call for nscd profile to avoid file conflict - profiles: Add openssl abstraction (bnc#623886). - Added support for sys_nice to ntpd profile (bnc#657054). - apparmor-utils: Support newer auditd formatted messages. - Fix two x transition conflict bugs. (bnc#662928) - Splitted ldap related things from nameservice into separate profile and added some missing paths (bnc#662761) - Fixed pod2man macros with older versions of GNU make - Fixed building of perl and ruby SWIG modules. The former is required for apparmor-utils to work properly. - Fixed use-after-free issue in apparmor_parser. - Added fixes for logprof issuing uninitialized variable errors while encountering audit messages for unconfined processes. - Updated cupsd profile (bnc#539401) - Fix {proc} vs {PROC} macro usage in firefox profile (bnc#436262) - Added support for eDirectory nameservice (bnc#621394) - Fixed incorrect /proc/*/sys usage in usr.sbin.ntpd profile (bnc#634801) - Added fix for another case of whitespace affecting profile removal (bnc#510740) - Added support for unified build, which massively simplified the packaging. - Fix for syslog-ng profile to allow upgrade to v3.2 - add mysql support to syslog-ng profile - Added support for enabling/disabling the module automatically during installation/removal (bnc#623246) - Converted archive to tar.bz2. - Updated to 2.5.1-final. - Lots of testcase updates. - Initial packaging of AppArmor 2.5 - Now contained in a single archive so built from a single spec file ==== bcm43xx-firmware ==== - Remove files that are now present in kernel-firmware (fate#326215). - Delete softlink creation for this files. (bsc#1098041). - Add bluetooth firmware for RPi 3 B+ (bsc#1103587) - Update brcmfmac43430-sdio.txt and brcmfmac43455-sdio.txt: * Improved brcmfmac BT coexistence parameters - Switch BCM43430A1.hcd to official source: * No changelog available - Use %license - Run spec-cleaner - Add brcmfmac4356-pcie.txt for BCM 4356 PCI (bsc#1099149) - Add support for RPi 3 B+ (bcm43455, bsc#1085262) - Add Supplements for Raspberry Pi 3 (bsc#1041823) - Resolve NUL char warning on modprobe for Tumbleweed by properly iterating over zero-separated DT compatible strings - Require kernel-firmware, suggested by fvogt. (bsc#1033137) Don't require version 20161005 or later, to remain compatible with older distributions. - Bump version to today's date. This will allow other packages such as kernel-firmware to conflict against our older version. - Add brcmfmac4339-sdio-vega-s95-telos.txt - Add vendor prefix for CuBox-i compatible string - Reorder by board name - Add brcmfmac4329-sdio-cubox-i.txt and brcmfmac4330-sdio-cubox-i.txt. - Dropped brcmfmac43430-sdio.bin (in kernel-firmware now) - Move %post script to install-brcmfmac.sh, add 50-brcmfmac.conf. This avoids workarounds for Kiwi images. (tiwai) - Renamed package from bcm43430-firmware to bcm43xx-firmware (duwe) - Renamed brcmfmac43430-sdio.txt to brcmfmac43430-sdio-rpi3.txt and added post-install script to symlink * Added brcmfmac43362-sdio-{cubietruck,bananapi-{m1+,m2}}.txt - Renamed package from brcm43430-firmware to bcm43430-firmware - Make Source: URLs absolute - Update brcmfmac43430-sdio.bin to 7.45.41.26 - Add initial package ==== binutils ==== - Add s390-relro.diff to improve relro support on s390 [fate#326356] - Fix the fix for PR23919 [bsc#1118644]: rename handle-ELF-compressed-header-alignment-correctly-by-.patch to fix-pr23919-1.diff and add fix-pr23919-2.diff and fix-pr23919-3.diff . - Add handle-ELF-compressed-header-alignment-correctly-by-.patch: PR23919. ==== ceph ==== Version update (14.0.1.1555+g42662f72f4 -> 14.0.1.2789+g6c941e4d76) Subpackages: librados3 libradospp1 librbd1 - Update to 14.0.1-2789-g6c941e4d76: + rebase on top of upstream master branch, SHA1 c70a3d8e30be84ea8db41e7329ed1577aeee9ab9 * MON now supports Kerberos authentication * MGR now works with Cython >= 0.29 * spec: add xmlsec1 dependency for dashboard make check * spec: change rbd-mirror and ceph-radosgw runtime dependency from ceph-common to ceph-base to address http://tracker.ceph.com/issues/37620 ==== digikam ==== Subpackages: digikam-doc digikam-lang kipi-plugins kipi-plugins-lang libdigikamcore5 showfoto - Add upstream git commits to fix build with exiv2-0.27: * add-support-for-Exiv2-0.27.patch * be-compatible-with-backward-0.26.patch * adjust-find-cmake-script-to-exiv2-0.27-RC1.patch * first-patch-to-be-compatible-with-Exiv2-0.27.patch * f27ab9c1051bd0a0.patch * fix-compile.patch - Add fix-black-Welcome-page-by-clicking-on-a-link.patch to fix the Welcome page getting black when clicking on a link that opens a new browser window (with QtWebEngine) - Add Add-QtWebEngine-support.patch to allow building with QtWebEngine instead of QtWebKit - Use QtWebEngine on platforms where it is available - Add some necessary build requirements to avoid relying on other packages pulling them in - Remove unused libqca-qt5-devel BuildRequires - Add Lower-minimum-exiv2-version.patch to make it build on Leap 42.3 - Remove some build requirements that are not used anymore since a long time - Remove unnecessary ENABLE_OPENCV3 and ENABLE_MYSQLSUPPORT cmake options, they are ON by default since 5.7.0 - Remove obsolete ENABLE_LCMS2 option, LCMS2 is mandatory since 5.0 - Disable libkvkontakte support, it's dead - Require libQt5Sql5-sqlite (boo#1095688) - Use %license ==== dnsmasq ==== - enabled lua scripting interface (FATE#327143). ==== gdb ==== - Backport upstream fix for assertion failure `SYMBOL_LANGUAGE (sym) == DICT_LANGUAGE (dict)->la_language' [swo#23712, rh#1560010] patches: gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-1of5.patch gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-2of5.patch gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-3of5.patch gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-4of5.patch gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-5of5.patch * Add patches from fedora 29 @ 4513f72 * Add gdb-fix-multidictionary.exp-for-gdb-8.2.patch to fix multidictionary.exp test-case - Add power8-registers.diff for implementing access to more POWER8 registers. [fate#326120, fate#325178] - Run tests with -fno-PIE/-no-pie and -fPIE/-pie. ==== ghostscript ==== Version update (9.26 -> 9.26a) Subpackages: ghostscript-x11 - Version upgrade to 9.26a The version 9.26a is a special security bugfix version to fix * CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators https://bugs.ghostscript.com/show_bug.cgi?id=700317 https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319 ==== glib2 ==== Subpackages: glib2-lang glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 - Enable systemtap (fate#326393 bsc#1090047). ==== gsl ==== Version update (2.4 -> 2.5) Subpackages: libgsl23 libgslcblas0 - Convert package to _multibuild - Add HPC build macros and evironment modules * (FATE#324138) - Add master packages for libraries and devel package - Remove BLAS build dependency - Remove useless --with-pic only useful for static libs. - Fix RPM groups, diversify summaries, trim long descriptions. - Trim bias from descriptions. - updated license tags in spec file - gsl 2.5: * doc bug fix in binomial distribution figure * added Wishart distribution * added new module for digital filtering (gsl_filter); current filters include: Gaussian filter median filter recursive median filter impulse detection filter * added new module for moving window statistics (gsl_movstat) * added statistics functions: gsl_stats_median() gsl_stats_select() gsl_stats_mad() gsl_stats_mad0() gsl_stats_Sn_from_sorted_data() gsl_stats_Qn_from_sorted_data() gsl_stats_gastwirth_from_sorted_data() gsl_stats_trmean_from_sorted_data() * added Romberg integration (gsl_integration_romberg) * bug fix in deprecated functions gsl_multifit_wlinear_svd and gsl_multifit_wlinear_usvd (reported by Vlad Koli) * documention corrected to state that gsl_sf_legendre functions do not include Condon-Shortley phase by default * bug fix in exponential fitting example when using larger number of points * changed internal workspace inside gsl_spmatrix to a union to avoid casting * bug fixes in ode-initval2 for very rare solver crashing cases * add histogram2d figure to manual * bug fix in gsl_spmatrix_add for duplicate input arguments * add support for negative arguments nu in gsl_sf_bessel_Jnu and gsl_sf_bessel_Ynu (Konrad Griessinger) * better texinfo documentation for gsl_sf_hyperg functions * fix vector and matrix fread/fwrite testing on windows systems when tmpfile() fails - drop rstat_test.patch, is upstream - temporarily disable unit tests on i586 (boo#1092530) ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbadbase-1_0-0 libgstbadvideo-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstgl-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgsturidownloader-1_0-0 libgstwayland-1_0-0 - Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility with libfdk-aac 2.0.0 (boo#1120299). ==== hdf5 ==== Version update (1.10.1 -> 1.10.4) - Reenable 'serial' build for SLE: this build creates hdf5-devel-data. - Do not build non-HPC on SLE: This helps to save some build cycles. - Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros. - Also build for regular openmpi2 and openmpi3 - Build HDF5 C++ bindings also for the MPI variants, there is no reason not to do it. - Enable sz2 support also for MPI variants. - Replace git-archive generated by downloaded tar-ball. - Update to 1.10.4: https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.4/src/hd… * Update Disable-phdf5-tests.patch * Replace and update hdf5-buildcompare.patch by hdf5-Remove-timestamps-from-binaries.patch - Remove lib*_cpp and lib*_hl_cpp dependencies for MPI for the time being. - Create main master package, fix dependencies. - Update to 1.10.3: https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.3/src/hd… - Update to 1.10.2: https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.2/src/hd… - Bump soversions (101 -> 103) for libhdf5 and libhdf5_cpp - Drop Fix-warnings-for-missing-returns.patch, fixed upstream - Add 0001-Fix-return-value-in-test_libver_bounds_open.patch - Rebase patches (tab / space conversion): * PPC64LE-Fix-long-double-handling.patch * hdf5-buildcompare.patch * hdf5-mpi.patch - Rebase Disable-phdf5-tests.patch - Handle license file using %license where applicable. - Package example package also for HPC build and create a master file for it. ==== iproute2 ==== - VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003): ip-Add-violation-counters-to-VF-statisctics.patch - RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003): sync-UAPI-header-copies-with-SLE15-SP1.patch bpf-remove-obsolete-samples.patch json_writer-add-new-json-handlers-null-float-with-fo.patch rdma-Move-per-device-handler-function-to-generic-cod.patch rdma-Rename-free-function-to-be-rd_cleanup.patch rdma-Rename-rd_free_devmap-to-be-rd_free.patch rdma-Move-link-execution-logic-to-common-code.patch rdma-Add-option-to-provide-sign-for-the-port-number.patch rdma-Make-visible-the-number-of-arguments.patch rdma-Set-pointer-to-device-name-position.patch rdma-Add-filtering-infrastructure.patch rdma-Add-resource-tracking-summary.patch rdma-Add-QP-resource-tracking-information.patch rdma-Avoid-memory-leak-for-skipper-resource.patch rdma-Add-CM_ID-resource-tracking-information.patch rdma-Add-CQ-resource-tracking-information.patch rdma-Add-MR-resource-tracking-information.patch rdma-Add-PD-resource-tracking-information.patch rdma-Print-net-device-name-and-index-for-RDMA-device.patch rdma-print-driver-resource-attributes.patch rdma-sync-some-IP-headers-with-glibc.patch rdma-Fix-for-ineffective-check-in-add_filter.patch rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch rdma-Refresh-help-section-of-resource-information.patch rdma-Introduce-command-execution-helper-with-require.patch rdma-Add-an-option-to-rename-IB-device-interface.patch rdma-Add-print-of-link-CapabilityMask2-flags.patch - add more follow-up fixes up to upstream 4.20 (bsc#1085669) bridge-fix-typo-in-hairpin-error-message.patch iproute-Abort-if-nexthop-cannot-be-parsed.patch iplink_vrf-Save-device-index-from-response-for-retur.patch devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch ip-route-Fix-segfault-with-many-nexthops.patch rdma-Fix-representation-of-PortInfo-CapabilityMask.patch macsec-fix-off-by-one-when-parsing-attributes.patch ip-route-Fix-for-memleak-in-error-path.patch ip-route-Fix-parse_encap_seg6-srh-parsing.patch tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch ip-route-Fix-nexthop-encap-parsing.patch rdma-Fix-broken-32-bit-compilation.patch rdma-Fix-incorrectly-handled-NLA-validation.patch - refresh all patches - spec file cleanup - fix misplaced patch tags: patches/lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch patches/rdma-Ignore-unknown-netlink-attributes.patch patches/tc-fix-command-tc-actions-del-hang-issue.patch - normalize patches: remove git specific artefacts to reduce noise on future refreshes and updates ==== kcm_tablet ==== Version update (3.0.0 -> 3.1.1) Subpackages: kcm_tablet-lang - Update to version 3.1.1 * Some translation related fixes - Update to version 3.1.0 - Major changes: * LibWacom support. This should get our number of supported tablets out of the box on par with GNOME. Right now built-in database and user-configured database still take preference over libwacom, but this should change in the future releases. * Calibration improvements: calibration of Cintiq devices should be vastly improved, UI now has options to lock mapped area proportions and manually fine-tune area's coordinates. Also, the dialog should now open on the correct screen and look fine with dark themes too. * Support for devices that report different USB IDs for touchscreen and may be detected as two different devices (e.g. Cintiq Companion Hybrid). These devices need to be described via Wacom Tablet finder tool first, though. - Other changes: * Logging has been ported to QLoggingCategory (so now users have to enable it in kdebugsettings). * Status LED support improvements (Vangelis Tasoulas, Jason Gerecke). * Touchscreen rotation should now follow tablet rotation. - New devices in built-in database: * Wacom Intuos Pro L (PTH-860, 2017) (Melvin Vermeeren) * Lenovo Yoga 520 (Felipe Abrahao) * ThinkPad Yoga 460 definition (Albert Astals Cid) * Wacom Intuos Pro 2 M (Jeff H) - Requires Qt 5.7.0 or higher now to compile successfully ==== kernel-firmware ==== Version update (20180525 -> 20190118) Subpackages: ucode-amd - Remove brcm RPi f/w that are already included in the upstream tree - Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289): * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+ * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B * amdgpu: add raven2 fw for 18.50 release * amdgpu: add picasso fw for 18.50 release * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+" * linux-firmware: Update firmware file for Intel Bluetooth,8265 * linux-firmware: Update firmware patch for Intel Bluetooth 8260 * linux-firmware: Update firmware file for Intel Bluetooth,9260 * linux-firmware: Update firmware file for Intel Bluetooth,9560 * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+ * linux-firmware: update Marvell USB8801 B0 firmware image * iwlwifi: update firmwares for 9000 series * cxgb4: update firmware to revision 1.22.9.0 - Fix firmware for bcm43430 and bcm43455 (fate#326215) * rename brcmfmac43450 and brcfmac43455 to the compatible name used by brcmf_of_probe * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream - Add firmware for bcm43430 and bcm43455 (fate#326215) * brcmfmac43430-sdio.raspberrypi-rpi.txt * brcmfmac43455-sdio.clm_blob * brcmfmac43455-sdio.raspberrypi-rpi.txt - Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294) * Revert "amdgpu: update vega10 fw for 18.50 release" * brcm: Add 4330 NVRAM for the Prowise PT301 tablet * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck * WHENCE: Put quotes around brcmfmac NVRAM filenames * check_whence.py: Add support for filenames with spaces in them * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS - Update to version 20181217: * iwlwifi: update firmwares for 8000 series * iwlwifi: add -43.ucode for 9000 series * iwlwifi: update -41.ucode for 9000 series * brcm: provide new firmwares for BCM4366 chipset * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622 * cavium: Update firmware for CNN55XX crypto driver * amdgpu: update vega12 fw for 18.50 release * amdgpu: update vega10 fw for 18.50 release * amdgpu: update raven fw for 18.50 release * amdgpu: update polaris11 fw for 18.50 release * amdgpu: update polaris10 fw for 18.50 release * amdgpu: add firmware for vega12 * amdgpu: Add new polaris MC firmwares * amdgpu: Add new polaris SMC firmwares * linux-firmware: Update AMD cpu microcode * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs * linux-firmware: intel: Update Cannonlake audio firmware. * firmware/huc/bxt: Add huC Update for BXT * nfp: update Agilio SmartNIC firmware to rev 2.1.16 * cxgb4: update firmware to revision 1.21.5.0 - Update to version 20181026: (bsc#1122456) * qed: Add 8.37.7.0 firmware image * amdgpu: add raven dmcu firmware * amdgpu: update raven firmware to 18.40 * amdgpu: update fiji firmware to 18.40 * amdgpu: update tonga firmware to 18.40 * amdgpu: update carrizo firmware to 18.40 * amdgpu: update polaris10 firmware to 18.40 * amdgpu: update vega10 firmware to 18.40 * linux-firmware: add firmware for mt7650e * linux-firmware: add MC firmware for NXP DPAA2 SoCs * linux-firmware: liquidio: fix GPL compliance issue * linux-firmware: Update firmware file for Intel Bluetooth,8265 * linux-firmware: Update firmware patch for Intel Bluetooth 8260 * linux-firmware: Update firmware file for Intel Bluetooth,9260 * linux-firmware: Update firmware file for Intel Bluetooth,9560 * linux-firmware: add firmware for mt7610e * Update Intel OPA hfi1 firmware * ath10k: QCA9984 hw1.0: update board-2.bin * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003 * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041 * ath10k: QCA9888 hw2.0: update board-2.bin * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140 * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041 * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1 * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1 * ath10k: QCA4019 hw1.0: update board-2.bin * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140 * nfp: Add Agilio BPF firmware rev 2.0.6.124 * rtw88: Add firmware file for driver rtw88 * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37 * iwlwifi: add -41.ucode firmwares for 9000 series * iwlwifi: update firmwares for 9000 series * iwlwifi: update firmwares for 7000, 8000 and 9000 series * nfp: update Agilio SmartNIC firmware to rev 2.1.13 - Update to version 20181001: * ti-connectivity: add firmware for CC2560(A) Bluetooth * linux-firmware: mediatek: add firmware for mt7668u Bluetooth * nvidia: add GV100 signed firmware * firmware/icl/dmc: Add v1.07 of DMC for Icelake * linux-firmware: add Marvell SD8997 firmware image * qca: update BT firmware files for QCA ROME chip. - Update to version 20180913: * brcm: update firmware for bcm43362 sdio * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4 * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108) - Update to version 20180825: * amdgpu: sync up polaris10 firmware with 18.30 release * amdgpu: sync up vega10 firmware with 18.30 release * amdgpu: sync up raven firmware with 18.30 release * amdgpu: sync up polaris12 firmware with 18.30 release * amdgpu: sync up tonga firmware with 18.30 release * amdgpu: sync up polaris11 firmware with 18.30 release * amdgpu: sync up fiji firmware with 18.30 release * linux-firmware: add firmware for mhdp8546 * qed: Add firmware 8.37.7.0 - Update to version 20180814: * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1) * linux-firmware: Update firmware file for Intel Bluetooth,9560 * linux-firmware: Update firmware file for Intel Bluetooth,9260 * linux-firmware: Update firmware file for Intel Bluetooth,8265 * linux-firmware: Update firmware patch for Intel Bluetooth 8260 * linux-firmware: add firmware for mt76x0 * qcom: update venus firmware files for v5.2 * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31 - Update to version 20180730: * linux-firmware: add firmware for mt76x2u * wl18xx: update firmware file 8.9.0.0.79 * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6 * WHENCE: Remove reference to amdgpu/vegam_me_2.bin * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file * brcm: add 43430 based AP6212 and 1DX NVRAM * linux-firmware: update Marvell USB8801 B0 firmware image - Remove useless check_whence.py that leads to unnecessary python dependency (bsc#1101818); also removing the python3 hack at prep, too - Update to version 20180717: * amdgpu: update copyright date * amdgpu: add initial VegaM firmware * amdgpu: sync up vega10 firmware with 18.20 release * amdgpu: sync up raven firmware with 18.20 release * amdgpu: sync up polaris12 firmware with 18.20 release * amdgpu: sync up polaris11 firmware with 18.20 release * amdgpu: sync up polaris10 firmware with 18.20 release * amdgpu: sync up verde firmware with 18.20 release * amdgpu: sync up pitcairn firmware with 18.20 release * amdgpu: sync up tahiti firmware with 18.20 release * amdgpu: sync up oland firmware with 18.20 release * amdgpu: sync up hainan firmware with 18.20 release * amdgpu: sync up kaveri firmware with 18.20 release * amdgpu: sync up mullins firmware with 18.20 release * amdgpu: sync up kabini firmware with 18.20 release * amdgpu: sync up hawaii firmware with 18.20 release * amdgpu: sync up bonaire firmware with 18.20 release * WHENCE: Fix typo Version * cxgb4: update firmware to revision 1.20.8.0 - Update to version 20180606: * brcm: update firmware for bcm4356 pcie * brcm: update firmware for bcm4354 sdio * brcm: update firmware for bcm43362 sdio * brcm: update firmware for bcm43340 sdio * brcm: update firmware for bcm43430 sdio * Update Cypress license termination clause * amdgpu: update vega10 VCE firmware to version 55.3 * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D0) * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1) * qcom: add venus firmware files for v5.2 * linux-firmware: liquidio: update vswitch firmware to v1.7.2 - Use the upstream version of AMD ucode for family 17h (CVE-2017-5715, bsc#1095735) - Update to version 20180525: * Update AMD cpu microcode for family 15h (CVE-2017-5715, bsc#1095735) * linux-firmware: Update firmware patch for Intel Bluetooth 8260 * qed: Add firmware 8.37.2.0 - Update to version 20180518: * linux-firmware: Update firmware file for Intel Bluetooth,8265 * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B5/B6) * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B3/B4) * linux-firmware: Update firmware file for Intel Bluetooth,9260 * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1) * linux-firmware: Update firmware file for Intel Bluetooth,9560 * linux-firmware: Update AMD cpu microcode * amdgpu: sync up polaris12 firmware with 18.10 release * amdgpu: sync up polaris11 firmware with 18.10 release * amdgpu: sync up polaris10 firmware with 18.10 release * amdgpu: sync up vega10 firmware with 18.10 release * amdgpu: sync up carrizo firmware with 18.10 release * amdgpu: sync up topaz firmware with 18.10 release * amdgpu: sync up stoney firmware with 18.10 release * amdgpu: sync up tonga firmware with 18.10 release * amdgpu: sync up fiji firmware with 18.10 release * amdgpu: sync up raven firmware with 18.10 release * nfp: Add symlink for Agilio CX 1x40GbE flower firmware * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.16 * linux-firmware: liquidio: update firmware to v1.7.2 - Update to version 20180507: * linux-firmware: update Marvell USB8997 firmware image to add WPA2 vulnerability fix * linux-firmware: update Marvell SD8897-B0 firmware image to add WPA2 vulnerability fix * Update Intel OPA hfi1 firmware * qed: Add firmware 8.33.12.0 * linux-firmware: Add firmware file for Intel Bluetooth,9560 * linux-firmware: Add firmware file for Intel Bluetooth,9260 * linux-firmware: Update firmware file for Intel Bluetooth,8265 * cxgb4: update firmware to revision 1.19.1.0 * nfp: add symlink for mixed mode Agilio CX 2x25GbE cards * nfp: update Agilio SmartNIC flower firmware to rev 5701 - Update to version 20180416: * linux-firmware: update wil6210 firmware to 5.2.0.18 * linux-firmware: rsi: update firmware images for Redpine 9113 chipset * iwlwifi: update firmwares for 3160, 3168 and 7265 * iwlwifi: add some new FW versions and update older ones - fixed new style modalias detection too for AMD CPUs in ucode-amd, it can only use 1 : (bsc#1084687) - Update to version 20180402: * amdgpu: update vce firmware for Polaris * linux-firmware: Add firmware file for Intel Bluetooth,9560 * linux-firmware: Add firmware file for Intel Bluetooth,9260 * linux-firmware: Update firmware file for Intel Bluetooth,8265 * linux-firmware: Update firmware patch for Intel Bluetooth 8260 * nfp: update Agilio SmartNIC firmware to rev 2.0.7 * cxgb4: update firmware to revision 1.18.9.0 * linux-firmware: intel: Update Geminilake audio firmware * linux-firmware: intel: Update Kabylake audio firmware * linux-firmware: intel: Update Broxton audio firmware * linux-firmware: intel: Update Skylake audio firmware - Update to version 20180320: * BCM-0bb4-0306: Update to Cypress license in WHENCE * linux-firmware: intel: Update Kabylake audio firmware - detect new style modalias too for AMD CPUs in ucode-amd (bsc#1084687) - Update to version 20180312: * Mellanox: Add new mlxsw_spectrum firmware 13.1620.192 * qed: Add firmware 8.33.11.0 * BCM-0bb4-0306: Cypress Bluetooth firmware for HTC Vive * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1) * qed: Add firmwares 8.20.0.0 8.18.9.0 and 8.14.6.0 * iwlwifi: update firmware version 34 for 9000 series - Update to version 20180222: * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053 * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00037 * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.5.3-00053 * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00037 * ath10k: QCA9377 hw1.0: update firmware-5.bin to WLAN.TF.1.0-00002-QCATFSWPZ-5 * ath10k: QCA6174 hw3.0: update board-2.bin * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00079-QCARMSWPZ-1 * ath10k: QCA4019 hw1.0: update board-2.bin * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053 * rtl_bt: Add firmware and configuration files for the Bluetooth parts of RTL8821C and RTL8723D * qed: Add firmwares 8.30.12.0 and 8.10.9.0 * nfp: update Agilio SmartNIC firmware to rev 2.0.4 - Update to version 20180201: * linux-firmware: Add firmware file for Intel Bluetooth,9560 * linux-firmware: Add firmware file for Intel Bluetooth,9260 * linux-firmware: Update firmware file for Intel Bluetooth,8265 * wl127x/wl128x: update PLT firmwares * linux-firmware: intel: Update Kabylake audio firmware - Mark license files as such - Update to version 20180119: * amdgpu: update uvd firmware for polaris asics * amdgpu: update vce firmware for Fiji * amdgpu: update vcn firmware for raven * amdgpu: update vce and uvd firmware for Vega10 * mediatek: update MT8173 VPU firmware to 1.0.8 [decoder h264] Fix h264 decoder output delay for some low latency bitstreams * cxgb4: update firmware to revision 1.17.14.0 * linux-firmware: update Marvell PCIe-USB8897/8997 firmware image to add WPA2 vulnerability fix * linux-firmware: intel: Update Geminilake audio firmware - Update to version 20180104: * wl18xx: update firmware file 8.9.0.0.76 * wl127x/wl128x: update firmwares * rtlwifi: rtl8723de: Add firmware for new driver/device * linux-firmware: DMC firmware for cannonlake v1.07 - Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715) - Update to version 20171221: * nvidia: add GP108 signed firmware * linux-firmware: liquidio: add v1.7.0 vswitch firmware * brcm: add CYW4373 firmwares and Cypress license file * linux-firmware: Update firmware patch for Intel Bluetooth 8260 * linux-firmware: Update firmware file for Intel Bluetooth 8265 * linux-firmware: Add firmware file for Intel Bluetooth 9260 * linux-firmware: Add firmware file for Intel Bluetooth 9560 * Revert commits a42f895, c113d33, 041aff8, 73d13b5 * linux-firmware: Update firmware patch for Intel Bluetooth 8260 * linux-firmware: Update firmware file for Intel Bluetooth 8265 * linux-firmware: Add firmware file for Intel Bluetooth 9260 * linux-firmware: Add firmware file for Intel Bluetooth 9560 * linux-firmware: intel: Add Cannonlake audio firmware * nfp: add firmware for tc-flower * nfp: change firmware directory layout * nfp: update firmware for Agilio CX SmartNICs - Update to version 20171204: * amdgpu: add firmware for Raven * amdgpu: update vega10 vce firmware * linux-firmware: DMC firmware for skylake v1.27 - Change the shebang of check_whence.py (installed as a non-executable) to point to python3. - Update to version 20171125: * brcm: update firmware for bcm4358 * brcm: update firmware for bcm4356 * brcm: update firmware for bcm4354 * brcm: introduce firmware for bcm43430 revision 0 * brcm: update firmware for bcm4339 * Mellanox: Add new mlxsw_spectrum firmware 13.1530.152 * WHENCE: Add missing entry for mlxsw_spectrum firmware * WHENCE: Fix typo in entry for iwlwifi-8265-34.ucode * s2255drv: f2255usb: firmware version 1.2.8 * amdgpu: add new CP firmware for polaris chips * qed: Add firmware 8.33.1.0 * qcom: add venus firmware files for v4.2 * qcom: add firmware files for Adreno a530 * iwlwifi: add firmware version 34 for new 9000 series * linux-firmware: liquidio: update firmware to v1.7.0 * linux-firmware: intel: Update Geminilake audio firmware * iwlwifi: add firmware version 33 for new 9000 series * iwlwifi: add new firmware version 34 for 8000C and 8265 * iwlwifi: update firmwares for 3160, 3168, 7260, 7265 and 7265D * iwlwifi: update firmwares for 3160, 3168, 7265D, 8000C and 8265 * linux-firmware: DMC firmware for kabylake v1.04 * linux-firmware: update Marvell PCIe-USB8997 firmware image * linux-firmware: GuC firmware for kabylake v9.39 * linux-firmware: GuC firmware for Broxton v9.29 * linux-firmware: GuC firmware for Skylake v9.33 * linux-firmware/i915: Add Cannonlake DMC version 1.06 * linux-firmware/i915: Add Geminilake DMC version 1.04 * WHENCE: Add new qed firmware * WHENCE: Add new radeon firmware * WHENCE: Fix syntax error for iwlwifi-8265-31.ucode entry * Revert "ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2" * ath10k: QCA6174 hw3.0: update board-2.bin * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00051-QCARMSWP-1 * cxgb4: update firmware to revision 1.16.63.0 * linux-firmware: update Marvell PCIe-USB8997 firmware image * linux-firmware: update Marvell PCIe-USB8897-A2 firmware image * Drop intel wifi firmwares and WHENCE-iwlwifi-update.patch as they are upstreamed - Remove iwlwifi-*-34.ucode since they seem breaking with 4.13.x TW kernel (bsc#1068838) - Update Intel WiFi firmwares: the files are still not included in linux-firmware.git, hence applied individually. * For security updates (CVE-2017-13080 CVE-2017-13081 bsc#1066295) * For new chipset models (FATE#322675) iwlwifi-3160-17.ucode iwlwifi-3168-29.ucode iwlwifi-7260-17.ucode iwlwifi-7265-17.ucode iwlwifi-7265D-29.ucode iwlwifi-8000C-31.ucode iwlwifi-8000C-34.ucode iwlwifi-8265-31.ucode iwlwifi-8265-34.ucode iwlwifi-9000-pu-b0-jf-b0-33.ucode iwlwifi-9260-th-b0-jf-b0-33.ucode WHENCE-iwlwifi-update.patch - Update to version 20171009 (bsc#1024476, bnc#1052392): * cxgb4: update firmware to revision 1.16.63.0 * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00051-QCARMSWP-1 * ath10k: QCA6174 hw3.0: update board-2.bin * Revert "ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2" - Update to version 20170906: * Update Intel OPA hfi1 firmware * amdgpu: update psp and acg_smu firmware for vega10 * rtlwifi: rtl8822be: Add firmware for new driver/device * qcom: add firmware files for Adreno A3xx - Update to version 20170823: * Update Intel OPA hfi1 firmware * iwlwifi: update -27 firmware for 3168, 7265D, 8000C and 8265 * iwlwifi: add new firmware for 3168, 7265D, 8000C and 8265 * linux-firmware: intel: Add Kabylake IPU3 firmware * linux-firmware: intel: Update Kabylake audio firmware * linux-firmware: intel: remove old skylake firmware * linux-firmware: intel: remove old broxton firmware * linux-firmware: liquidio: update firmware to v1.6.1 * amdgpu: add initial vega10 firmware * amdgpu: add initial uvd and vce firmware for vega10 * cavium: Add firmware for CNN55XX crypto driver. - Do not do any supplements or deduplication of files between kernel-binary and kernel-firmware (bsc#1054239). * remove firmware.sh - Update to version 20170622: * ath10k: QCA4019 hw1.0: update board-2.bin * ath10k: QCA4019 hw1.0: update firmware to 10.4-3.4-00082 * ath10k: QCA6174 hw3.0: update board-2.bin * ath10k: QCA6174 hw3.0: add WLAN.RM.4.4-00022-QCARMSWPZ-2 * ath10k: QCA9377 hw1.0: update board-2.bin * ath10k: QCA9887 hw1.0: update firmware to 10.2.4-1.0-00029 * ath10k: QCA9888 hw2.0: update board-2.bin * ath10k: QCA9888 hw2.0: update firmware to 10.4-3.5.1-00014 * ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2 * ath10k: QCA9984 hw1.0: update board-2.bin * ath10k: QCA9984 hw1.0: update firmware to 10.4-3.4-00082 * ath10k: update year in license - Update to version 20170615: * Mellanox: Add firmware for mlxsw_spectrum * linux-firmware: add firmware image for Redpine 9113 chipset * linux-firmware: liquidio: update firmware to v1.6.0 * qcom: add venus firmware files for v1.8 * linux-firmware: intel: Update Kabylake audio firmware * qla2xxx: Update firmware version to 8.07.00 * firmware: tegra: Add VIC firmware * imx: Add SDMA firmware for Freescale i.MX6/7 SoCs. * linux-firmware: wilc1000: Add unified firmware for wilc1000 WLAN - Run spec-cleaner * Correct uppercase license information * Remove duplicite entries for iwl1000-ucode - Remove exclude i586 and s390 that was carried from SLE package, which results in breaking i586 imaging. - Cleanup spec file to reduce superfluous lines (bsc#1041354). - Remove the superfluous isci/* devel sources - Sync changelogs with SLE (bsc#1041354) - Update qlogic qla2xxx firmware to 08.04.00 (bsc#993846) - Exclude i586 and s390 builds on OBS as well - Update to version 20170530 (bsc#1039310): * linux-firmware: add wil6210 firmware 4.1.0.55 * cxgb4: update firmware to revision 1.16.45.0. - Update to version 20170522 (commit df40d15d6ad6) (bsc#1039785): * Update firmware for 3168 * qed: Add firmware 8.20.0.0 * Update Intel OPA hfi1 firmware (fate#319251) - Update to version 20170511: * cxgb4: update firmware to revision 1.16.43.0 * linux-firmware: add Marvell USB8997 firmware image * iwlwifi: update -22 firmware for 3168 - Remove hfi1_platform.dat manually (fate#321476 and 321477) - Update to version 20170422: * linux-firmware: liquidio: update firmware to v1.5.1 * linux-firmware: update Marvell SD8887 firmware image * linux-firmware: update Marvell SD8897-B0 firmware image * rtl_bt: Update firmware for BT part of rtl8822be - Update to version 20170404 (fate#321702): * linux-firmware: intel: Update Broxton audio firmware * nfp: Add firmware 0.6.1 * mediatek: update MT8173 VPU firmware for unsupported VP9 profiles * nvidia: add GP10B signed firmware * nvidia: fix GP107 signed firmware - Add kernel-firmware-rpmlintrc as some firmware is binary - Update to version 20170314: * linux-firmware: update Marvell SD8897-B0 firmware image * linux-firmware: update Marvell PCIe-USB8997 firmware image * linux-firmware: update Marvell PCIe-USB8997 wifi-only firmware image * linux-firmware: Update firmware patch for Intel Bluetooth, 7265 * linux-firmware: Update firmware patch for Intel Bluetooth,8260 * linux-firmware: Update firmware file for Intel Bluetooth,8265 * brcm: update firmware for BCM43340/1 SDIO devices * ath10k: QCA6174 hw3.0: update board-2.bin * qed: Add firmware 8.15.3.0 - Update to version 20170303: * linux-firmware/i915: Fix Corrupted GuC files. * cxgb4: update firmware to revision 1.16.33.0 * nvidia: add GM20B PMU firmware * nvidia: add GP102/GP104/GP106/GP107 signed firmware * linux-firmware: intel: Add Geminilake audio firmware - Update to version 20170223: * amdgpu: add smc firmware for new polaris variants * Revert "amdgpu: update VI smc/mc firmware" * Revert "amdgpu: update VI gfx/sdma firmware" - Update to version 20170217: * linux-firmware: liquidio: update firmware to v1.4.2 * iwlwifi: update -17 firmware for 3260, 7260 and 7265 * iwlwifi: update -22 firmware for 7265D and up * iwlwifi: add -27 firmware for 3168, 7265D, 8000C and 8265 * linux-firmware/i915: Add HuC 1.07.1398 for SKL * linux-firmware/i915: Add HuC 1.07.1398 for broxton * linux-firmware/i915: HuC on 2.0.1810 for Kabylake * linux-firmware/i915: GuC firmware for Broxton v8.7 * linux-firmware/i915: GuC firmware for Kabylake v9.14 * radeon/amdgpu: update license copyright dates * radeon: add new firmware for SI chips * rtlwifi: rtl8723bs: Add firmware for new driver * qla2xxx: Update firmware version to 8.06.00 * amdgpu: add firmware for polaris12 asics * amdgpu: update VI gfx/sdma firmware * amdgpu: update VI smc/mc firmware * update WHENCE for new amdgpu/polaris12_*.bin firmware * linux-firmware: add firmware for mt76x2 - Update to version 20170113 (FATE#321353): * WHENCE: Add new amdgpu firmware * WHENCE: Add new snd_intel_sst_core * LICENCE.siano: Add copyright years * linux-firmware: update firmware file for atusb * Update Intel OPA hfi1 firmware * cxgb4: Update firmware to revision 1.16.26.0. * linux-firmware: intel: Update Skylake audio firmware * linux-firmware: intel: Update Broxton audio firmware * linux-firmware: Fix DDC file format for Intel Bluetooth 8260/8265 * brcm: add firmware for the BCM4356 SDIO device * brcm: add firmware for the BCM4358 PCIe device. * wl127x/wl128x: update firmwares * atusb: Document that dfu-util needs to be run before device enters runtime mode * Fix permissions on ti-connectivity firmware from 05e9fe59 - Update to version 20161130 (bsc#1010690): * linux-firmware: update BYT audio firmware * rtlwifi: Add updates for RTL8723BE and RTL8821AE * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (C0) * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1) * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B5/B6) * linux-firmware: Update firmware file for Intel Bluetooth 8260 * linux-firmware: Update firmware file for Intel Bluetooth 8265 - Update to version 20161121: * mediatek: update MT8173 VPU firmware for idle state * amdgpu: add new smc firmware for newer tonga and iceland chips * linux-firmware: rockchip: update dptx firmware to v3.1 * rockchip/dptx: update WHENCE to version 3.1 - Update to version 20161005: * Remove unused 'LICENCE.mwl8335' * WHENCE: Adjust some licence file references to satisfy check_whence.py * WHENCE: Fix metadata for snd-soc-skl firmware * WHENCE: List new radeon CI and SI smc firmware * WHENCE: List symlink 'qat_mmp.bin' * WHENCE: Add reference to 'qca/NOTICE.txt' * README: Say that files must be listed in WHENCE, and how to check it * radeon: update SMC firmware for SI parts * radeon: update SMC firmware for CI parts * amdgpu: update SMC firmware for VI parts - Add Provides for brcmfmac43430-sdio.bin formerly in bcm43xx-firmware - Package new GPL-2 file - Update to version 20160913: * linux-firmware: update Marvell 8897-B0 firmware images to 7.p66 * linux-firmware: update Marvell 8897-B0 firmware images to 7.p77 * ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.54 * ath10k: QCA6174: update board files * rt2870sta: Update rt3071.bin to match rt2870.bin * rtl_bt: Add firmware and config file for RTL8822BE * mediatek: Update firmware for decoder and MDP * linux-firmware: add Marvell PCIe8997 firmware images * linux-firmware: update WHENCE file for Marvell firmware versions * amdgpu: update UVD firmware for VI devices - Update to version 20160824: * linux-firmware/i915: Restore DMC 1.23 * linux-firmware: intel: Update Kabylake audio firmware * linux-firmware: intel: Update Broxton audio firmware * linux-firmware: rockchip: update dptx firmware to v2.9 * usb: host: xhci-rcar: update firmware for R-Car H3 and M3-W * qed: Add firmware 8.10.10.0 * ath10k: QCA4019 hw1.0: add firmware and board files * ath10k: QCA9887 hw1.0: add firmware and board files * ath10k: QCA9888 hw2.0: add firmware and board files * ath10k: QCA9984 hw1.0: add firmware and board files * ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.54 * ath10k: QCA6174: update board files - Update qlogic qed/qede - update FW to version 8.10.5.0 (bsc#993873). - Update to version 20160804: * usbdux: usbduxsigma: created matching binary of the firmware * linux-firmware: rockchip: update dptx firmware to v2.6 * amdgpu: update stoney UVD firmware * linux-firmware: intel: Update Skylake audio firmware - Update to version 20160712: * nvidia: Add GP100 signed firmware * iwlwifi: add new -17 firmware for iwlmvm devices * iwlwifi: add new -22 firmware for 7265D and up * amdgpu: update vce firmware for VI asics * linux-firmware: intel: Add Kabylake audio firmware * Add dptx firmware for rockchip rk3399 - Update to version 20160628: * wl18xx: update firmware file * linux-firmware: intel: Update Skylake audio firmware * linux-firmware: Add firmware file for Intel Bluetooth 8265 * amdgpu: Update UVD firmware for Polaris * amdgpu: update polaris ucode - Update to version 20160609: * linux-firmware: update audio firmware for Braswell platform * radeon: add new CI smc firmware * radeon: add new SI smc firmware * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1) * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (C0/D0) * linux-firmware: Update firmware file for Intel Bluetooth 8260 - Update to version 20160602: * qed: Add FW 8.10.5.0 * linux-firmware: intel: Add Broxton audio firmware * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B3/B4) * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B5/B6) - Update Chelsio cxgb4 firmware to version 1.15.37.0 (bsc#975328) - Update to version 20160516git / commit 80d463be829a (fate#320305). - Intel SKL audio update - rt2800usb / rt2800pci update - amdgpu update - Obsolete the SP1 compat-wireless-firmware package (bsc#975894). - Update to version 20160516: * linux-firmware: intel: Update Skylake audio firmware * linux-firmware: update rt2860.bin, rt2800pci driver * linux-firmware: update rt2870.bin, rt2800usb driver * amdgpu: update firmware - Update to version 20160503 : * radeon: update CIK UVD firmware * ath10k: QCA6174 hw2.1: update firmware-5.bin to SW_RM.1.1.1-00157-QCARMSWPZ-1 * ath10k: QCA6174 hw2.1: add board-2.bin * ath10k: QCA6174 hw3.0: add board-2.bin * ath10k: QCA9377 hw1.0: add firmware and board files - Update to version 20160421 (fate#fate#320305): * amdgpu: update CZ to new UVD fw that supports 40 sessions * linux-firmware: Update firmware file for Intel Bluetooth 8265 - Update to version 20160412: * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1) * usb: host: xhci-plat: add firmware for the R-Car M3-W xHCI controllers - Update to version 20160330 (fate#fate#320305): * wl18xx: update firmware file * linux-firmware: intel: Update Skylake audio firmware * linux-firmware/i915: Major GuC release for Skylake - ver 6.1 * linux-firmware: Update AMD microcode patch firmware * Update radeon ucode images * Update amdgpu ucode images * Add amdgpu ucode images for Polaris family asics * radeon: revert last kaveri mec ucode update - Add _service to make updating more easy - Update to version 20160112git (commit 40e9ae8) (fate#320305): * Update firmware patch for Intel Bluetooth 7265 (D1) * rtlwifi: v35 firmware for rtl8723bu * qed: Add firmware 8.7.3.0. * Clarified licensing terms for the current ath9k_htc firmware * brcm: add firmware for BCM4350 rev 5 * fix permissions on brcm/brcmfmac4371-pcie.bin * add a symlink from qat_mmp.bin to its new file name * add fw for new qat devices * WHENCE: Add version information for hfi1 * Update Skylake audio firmware * moxa: Refer to LICENCE.moxa for mxuport driver * moxa: Add firmware for Moxa 11x0 USB Serial devices * iwlwifi: replace 7265D-10.ucode by 7265-10.ucode * Update Intel OPA hfi1 firmware * update Marvell USB8797-B0 firmware image * update Marvell 8897-B0 firmware images to 7.p53 * update Marvell 8897-B0 firmware images to 7.p18 * add Marvell SD/USB8801 B0 firmware images - Fix the Supplements dependency of ucode-amd. - Update to version 20151207git (commit bbe4917) * WHENCE: use https://linuxtv.org for LinuxTV URLs * Add firmware for mt7601u. version 34. * brcm: add initial firmware for bcm4371 11ac wifi device * brcm: update firmware for bcm43602 device * WHENCE: Remove claim that qed and bfa/bna firmware came from kernel source * WHENCE: Correct filename of qed firmware * fix permissions on qed_init_values_zipped-8.4.2.0.bin * qla2xxx: Update firmware version to 8.03.00 * bnx2x: Add FW 7.13.1.0. * Merge tag 'iwlwifi-fw-2015-11-18' * iwlwifi: add new -16 firmware for iwlmvm devices * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (C0/D0) * qed: Add FW 8.4.2.0 * fix WHENCE, which for some reason became executable - Use of spec-cleaner - Fix boo#961416 - Added complete instructions for contributors how to get the tar.xz done - Fix dependencies for initrd macros (boo#958562) - Fix missing dependency for ucode-amd, too (boo#958562) - Call missing initrd macro at postun (boo#958562) - Updat to version 20151109git (commit bfeee58b5020) * radeon/amdgpu: update to latest firmware * remove executable bit from some firmware * add Skylake audio firmware * brcm: update firmware for the BCM4356 PCIe device * brcm: adding firmware for BCM4350 PCIe device * New minor DMC release for Skylake - ver1_23 (already existed in the package, old tarball dropped) * Removing old Skylake DMC * Add FW binary used by mwlwifi driver * ath10k: QCA99X0 hw2.0: add firmware 10.4.1.00030-1 and board.bin * ath10k: QCA6174 hw3.0: add WLAN.RM.2.0-00180-QCARMSWPZ-1 * ath10k: QCA6174 hw2.1: add firmware WLAN.RM.1.1-00141 and board.bin * ath10k: QCA988X hw2.0: add firmware 10.2.4.70.9-2 * ath10k: QCA988X hw2.0: add board.bin * Add firmware patch for Intel Bluetooth 7265 (D1) * brcmfmac: firmware refresh for BCM43602 PCIE devices * add support for the R-Car H3 xHCI controllers * Refresh / fix WHENCE and license descriptions - Update Skylake DMC firmware to 1.23 (boo#952134) - Update toversion 20150925git (commit f88e5c2e2) * Intel Bluetooth 7260/7265 f/w updates * qmss accumulator pdsp firmware for keystone SoCs * New minor DMC release for Skylake - ver1_22 * New minor DMC release for Broxton - ver1_06 - cxgb4: update firmware to revision 1.14.4.0 for T4 and T5 (bsc#945218) - Replaced cxgb4-update-firmware-to-revision-1.13.32.0-for-T4-a.patch with cxgb4-update-firmware-to-revision-1.14.4.0.patch - Replaced t4fw-1.13.32.0.bin and t5fw-1.13.32.0.bin with t4fw-1.14.4.0.bin and t5fw-1.14.4.0.bin - Update to version 20150907git (commit 6ebf5d57) (boo#944661): * amdgpu: add firmware for VI asics * ar3k: add to support AR3012 v2.1 firmware * Add Intel OPA hfi1 firmware * New major GuC/DMC releases for Skylake * New minor DMC release for Broxton - ver1_05 * update firmware to revision 1.14.4.0 * tegra: Update XHCI firmware to v50.10 for T210 * wilc1000: add firmware for wilc1000 802.11n driver * usbdux: usbduxsigma firmware updates * Update to QAT dh895xxcc UOF firmware and a new QAT MMP FW * rtl_bt: correct RTL8723A firmware file * bnx2x: Update to FW version 7.12.30 * tegra: add GK20A FECS/GPCCS firmware - Update symlinks in cxgb4 subdirectory. (bsc#924378 FATE#318565) - Update Chelsio cxgb4 firmware to revision 1.13.32.0 for T4 and T5 (bsc#924378 FATE#318565) - Add t4fw-1.13.32.0.bin and t5fw-1.13.32.0.bin - Update to version 20150715git (commit 69640304) (boo#937628): * Intel BT 8260 firmware * Add firmware for Cavium LiquidIO 210NV, 210SV, and 410NV cards * Audio firmware for Braswell * qca: add BT firmware files to support QCA ROME chips * cxgb4: Add BT adapter PHY firmware * add firmware for atusb driver * radeon: add firmware for VCE1.0 hardware * iwlwifi: add new -13 firmware for iwlmvm devices * i915 Skylake DMC/GuC firmwares - Update QLogic bna firmware (bsc#922050, FATE#318601) + ctfw-3.2.5.1.bin, ct2fw-3.2.5.1.bin - Exclude i586 and s390 - Update to version 20150616git (commit 3161bfa479d5) (boo#934932): Update firmware patch for Intel Bluetooth 7260 (B3/B4) Update firmware patch for Intel Bluetooth 7260 (B5/B6) Update firmware patch for Intel Bluetooth 7265 (C0/D0) Update firmware patch for Intel Bluetooth 7265 (C0/D0) wl18xx: update firmware file, remove conf file Add Realtek Bluetooth HCD firmware brcm: add brcmfmac43241b5-sdio.bin to WHENCE Fix nvidia/tegra210/xusb.bin permissions brcm: add firmware for BCM4324(1) B5 chipset brcm: replace non-working firmware for BCM4339 brcm: add firmware for BCM43570 PCIe device brcm: add firmware for BCM43569 USB device iwlwifi: update -12.ucode for 3160 / 7260 / 7265 / 7265D ath3k: update AR3012 2.2.1 firmware with v.170 WHENCE: note nvidia xusb.bin firmware versions tegra: Add XHCI firmware v50.07 for T210 cxgb4: update firmware to revision 1.13.32.0 for T4 and T5 brcm: add firmware for BCM43340/1 SDIO devices brcm: add firmware for BCM4339 SDIO device brcm: add firmware for BCM43455 SDIO device brcm: add firmware files for BCM43602 PCIe device brcm: add firmware for BCM4356 PCIe device brcm: add firmware for BCM43242 USB device radeon: Update Kaveri MEC firmware to #396 ath10k: add firmware 10.2.4.45 as firmware-4.bin Add v1.4.0 firmware for ath9k_htc. ath9k_htc: revert versions in WHENCE to 1.3.1 iwlwifi: update -10.ucode for 3160 / 7260 / 7265 / 7265D firmware: tegra: Add XHCI firmware v45.46 for T124 ath9k_htc: update versions in WHENCE rtl_nic: update firmware for RTL8168H and RTL8107E Fix qat_895xcc.bin permissions Add QLogic BR Series Adapter Firmware Fix firmware files with executable permission set iwlwifi: update -10.ucode for 3160 / 7260 / 7265 / 7265D - Fix the filelist of amd-ucode. - David Woodhouse is not maintaining this all by himself any more, switch to proper upstream repository and get a fresh snapshot. (bumping version to 20150209git) - Require coreutils for %pre scripts. In some instances (mainly kiwi builds) this package can end up being installed before coreutils, having some errors spit in the %pre phase. - Updated to git snapshot 20141122: Realtek WiFi and Ethernet updates and Intel BT updates (bnc#906212) - Add ast_dp501_fw.bin (bnc#871134 & bnc#895608) file generated from an array in a header file of xf86-video-ast: MIT/X11 License - Sync with SLE12 package * Includes previously cherry-picked QLogic firmware (bnc#879633) * Intel BT firmware updates * cxgb4 firmware update to revision 1.11.27.0 * bnx2x firmware version 7.10.51 (bnc#887382) * dvb-fe-xc5000c-4.1.30.7.fw for xc5000 (bnc#884321) * Drop the obsoleted mkinitrd scripts * Use standard macros, posttrans for initrd updates - Update to git snapshot 20140903: * Another Intel BT firmware updates (bnc#894810) - Drop firmware signatures (bnc#867199) - Updated to git snapshot 20140624: including previous intel firmware files - Add Intel 7265 BT firmware (FATE#316958): ibt-hw-37.8.10-fw-1.10.2.27.d.bseq ibt-hw-37.8.bseq - Regenerate the initrd in %posttrans (fate#313506) - Sign firmware files in the buildservice (bnc#867199) - Add Intel 7265 WiFi firmware (FATE#316958) - Update to git snapshot 20140319 (bnc#869039,bnc#869180) * brcm: add firmware for the BCM43362 WLAN device * iwlwifi: update firmware for 7260 / 3160 devices * WHENCE: Fix oddly capitalised instances of 'File' * wl18xx: add version 3 of the wl18xx firmware * rtlwifi: Add firmware for rtl8192ee * myri10ge: update firmware to 1.4.57 * bnx2x: Update to FW 7.8.19 * Remove executable permissions from firmware files * rtlwifi: Add firmware for rtl8821ae * radeon: add ucode for HAWAII GPUs * rtlwifi: Add firmware for r8723au * iwlwifi: update firmware for 7260 / 3160 devices * iwlwifi: update firmware for 7260 / 3160 devices * linux-firmware: 3.2.3.0 Firmware for Brocade Adapters * cxgb4: Updated T4 firmware, add T5 firmware * qla2xxx: Update ql2{4,5}00_fw.bin to version 7.01.00 * linux-firmware: Update Intel Bluetooth devices firmware patch files * firmware: cw1200: Add firmware for the ST-E CW1200 WLAN chipset. * emi62: Provide the correct bitstream * linux-firmware: add Marvell SD8897-B0 firmware combo image * linux-firmware: update Marvell PCIe/USB 8897-B0 firmware combo image * rtlwifi: Add new firmware files for rtl8188eu * rtlwifi: Add new firmware files for rtl8192cu * brcm: add firmware file for the BCM4335 SDIO chipset * brcm: add firmware for newer version of BCM43241 SDIO chipset * brcm: add firmware file for BCM43241 SDIO chipset * brcm: rename firmware names expressing host interface type * ti-connectivity: add wl1251 firmware and license * linux-firmware: Add Brocade FC/FCOE Adapter firmware files * radeon: add ucode for KAVERI GPUs * radeon: add smc ucode for BONAIRE * linux-firmware: Add firmware patch file for Intel Bluetooth device(3160) * linux-firmware: add version information for Intel Bluetooth firmware * cw1200: Add SDD file for the Sagrad SG901-1091/1098 WLAN modules. * Fix filename for Intel Bluetooth firmware * linux-firmware: update Intel Bluetooth firmware patch file * moxa: Fix firmware file names. * moxa: Add firmware for some of the Moxa USB-Serial hubs * radeon: add ucode for KABINI GPUs * radeon: add ucode for BONAIRE GPUs * radeon: add smc ucode for radeon GPUs - Remove obsoleted iwlwifi-4965 and carl9170w sources - linux-firmware: 3.2.3.0 Firmware for Brocade Adapters (bnc#855232 FATE#315938) Limited to the bna firmware. - fixed last submission to actually build. - Add mkinitrd script to add AMD microcode to initrd. This is needed because microcode driver is built in or gets loaded automatically via udev early. Therefore the microcode has to be available in initrd already. This must not be mixed up with early micorcode loading. This feature will not be implemented via mkinitrd. Dracut is doing early microcode loading. - bnc#847158 - mkinitrd scripts: - mkinitrd_setup-amd_microcode.sh Adding microcode to the initrd - mkinitrd_boot-amd_microcode.sh Triggering the reload at boot - Correct Supplements string so that the package gets correctly installed on machines with AMD CPUs bnc#847158 - Use qlogic firmware from linux-firmware instead of the separate archive (bnc#846629). - Updated to git snapshot 2013/07/14 - Radeon ucode update: - radeon: add ucode for KABINI GPUs - radeon: add ucode for BONAIRE GPUs - radeon: add smc ucode for radeon GPUs - Moved amd-ucode from microcode_ctl into new ucode-amd package. - Remove carl9170fw source files from package - Updated to git snapshot 2013/7/10 - Add AMD microcode patch firmware files - Add Intel Bluetooth firmware patch files - Add firmware files for Creative CA0132 HD-audio codec - Add firmware files for mtk mt7630/mt7650 chipsets - Add firmware for mwl8k 8764 chip - Add go7007 firmware. - Add symlinks for old go7007 firmware filenames - Fix formatting of LICENCE.ca0132 - Increment ap firmware API for mwl8k 8366 chip - Move sd8688*.bin images into mrvl/ tree - Revert "carl9170: Add checksum during installation, as preferred by the driver" - add Marvell PCIe8897-B0 WLAN firmware image - add Marvell SD8797-B0 firmware image - ar3k: add Bluetooth support for QCA98XX/QCA24XX - bnx2x: update fw to 7.8.17 - cx231xx/cx23885: Remove incorrect Conexant CX23885 firmware - iwlwifi: add firmware for 7260 / 3160 devices - netxen_nic: Add FTP location of phanfw.bin in WHENCE file - netxen_nic: Update QLogic phanfw.bin to version 4.0.590 - radeon: add ucode for OLAND GPUs - radeon: add ucode for SUN/HAINAN GPUs - radeon: add updated ucode for UVD - rp2: Initial commit of Comtrol RocketPort 2 microcode - rtl_nic: Add firmware rtl8168g-3 - rtl_nic: add firmware rtl8106e-2 - rtl_nic: add firmware rtl8411-2 - rtl_nic: update firmware for RTL8168G - rtlwifi/rtl8188ee: Add firmware for new driver - tg3: Add EEE support firmware for 57766 cards - update Marvell SD8797-B0 firmware image - wl127x/wl128x: update firmwares - wl18xx: add default configuration binary - wl18xx: add version 2 of the wl18xx firmware - fix previous fix to build on factory/12.3 - Updated to git snapshot 2013/1/14 - carl9170: add firmware - qla2xxx: Update ql2400_fw.bin and ql2500_fw.bin to version 5.08.00 - brcm: Add ucode support for bcm4313 iPA variant - linux-firmware: Add Marvell USB8797-B0 firmware image, Version 14.69.11.p179 - s5p-mfc: Add s5p-mfc.fw for Exynos4 series - s5p-mfc: Add s5p-mfc-v6.fw for Exynos5 series - ar5523: Add firmware for new driver - Update patch and syscfg files for QCA9564 - rtl_nic: Update firmware for RTL8168G to Version: 0.0.3 - cxgb4: Update firmware to revision 1.6.2.0 - bnx2x: Update fw to 7.8.2 - r8712u: Revert to firmware from vendor driver v7_0.20100831 - Update rampatch file for AR9462 - netxen_nic: Update QLogic phanfw.bin to version 4.0.588 - rtl8723e: Add firmware for new driver - ath6k: add firmware for AR6004 hw1.3 - Marvell SD8787: update to v14.66.9.p96 - Marvell SD8686: update to v9.70.20.p0 - iwlwifi: update firmware for 6205 to version 18.168.6.1 - Package also license files (bnc#776576) - Updated to git snapshot 2012/7/19 - brcm: add bcm4334 firmware for brcmfmac - r8712u: Update to latest firmware - rtl_nic: update firmware for RTL8168G - Add syscfg and patch files for AR3002 2.2.1 - rtl_nic: add new firmware for RTL8168G, RTL8106E, RTL8411, RTL8168F - ar3k: add patch and sysconfig for Qualcomm Atheros AR9462 - rtlwifi: rtl8192ce: rtl8192se: rtl8192de: Update to rtl_92ce_92se_92de_linux_mac80211_0004.0816.2011 driver - wl18xx: add firmware for WiLink8 WLAN chips - wl127x/wl128x: add new firmware series as version 5 - rt2800pci:Firmware update v1 - cxgb4: update firmware to revision 1.4.23.0 - add carl9170-1.fw (bnc#763568) - Updated to git snapshot 2012/5/21 - Many updates and additions - Replaced by git version: - iwlwifi-105-6.ucode - iwlwifi-135-6.ucode - iwlwifi-2000-6.ucode - iwlwifi-2030-6.ucode - bnx2/bnx2-mips-06-6.2.3.fw - bnx2/bnx2-mips-09-6.2.1b.fw - t4fw.bin (also updated to 1.4.16.0) - Removed: - brcm/bcm4329-fullmac-4.txt (was a development board) - mwl8335_duplex.fw (driver never included) - Renamed: - libertas/lbtf_usb.bin -> lbtf_usb.bin (as requested by driver) - Add 4 iwlwifi firmware files. (bnc#760857) iwlwifi-105-6.ucode iwlwifi-135-6.ucode iwlwifi-2000-6.ucode iwlwifi-2030-6.ucode - Add 2 new bnx2 firmware files. (bnc#746686) bnx2/bnx2-mips-06-6.2.3.fw bnx2/bnx2-mips-09-6.2.1b.fw - as spdx.org has no concept of firmware, we decided to mark it as SUSE-Firmware - update from git, ftp.kernel.org is stil down. Some smaller updates - fix supplements generation with rpm-4.9 - add provides/obsoletes for ath3k-firmware - Update to 20110731: * iwlwifi-6000g2a-5.ucode: Updated to v17.168.5.3 * ath6kl - Atheros support for AR6003 WiFi-Bluetooth combo module * drxk - Micronas DRX-K demodulator driver * ene-ub6250 -- ENE UB6250 SD card reader driver - update qlogic firmware to 5.06.00 (bnc#702696) - add iwlwifi-4965-1.ucode (was additionally in iwl4965-ucode package before) - Add latest firmware (1.3.10.0) for cxgb4 from Chelsio git (bnc#711432) - Remove the PE520.cis symlink, it was only needed for SLE11-SP2. - add provides/obsoletes for iwl100-ucode, iwl1000-ucode, iwl6000-ucode, iwl6050-ucode, iwl6000g2-ucode - Add symlink for cis/PE520.cis (bnc#707960#c8) - update to 20110709: * provides more stable iwlwifi drivers * remove the need for symlinking bcm43xx-0.fw - Revert the workaround for bnc#673054, the files exist in the tarball now. - Fix firmware.sh for 3.0 - create symlinks for Broadcom driver (bnc#673054) - Add scm service for automatical updates - update to 20101214 version for 2.6.37+ kernel - update to 20101113 tarball for 2.6.36+ kernel - update to the 20100617 tarball, which has lots of updates that the 2.6.34 kernel needs (bnc#619225). - Do not install files already installed by the kernel (bnc#598624). - firmware-supplements.sh: Fallback to the last installed kernel. - Run firmware-supplements.sh at build time. It's not a perfect solution, because kernel-default has a different set of modules among architectures, but better than a manually updated file. - Update firmware-supplements.txt using module aliases from kernel-desktop-2.6.34-5.2.i586 (bnc#598624). - Silence the firmware-supplements.sh script. - hacking find_supplements macro - update supplements.txt - update to 20100227 snapshot (no changelog provided) - update to 20091215 snapshot - added RealTek 8192E firmware - provide/obsolete iwl1000-ucode. - Add a script to semi-automatically generate modalias supplements. - provide obsoleted packages. - update to 20090821 * includes newer iwlwifi firmware (bnc#537112) - use fdupes - add obsoletes for ralink-firmware (bnc#503836) - initial package ==== libapparmor ==== Version update (2.12 -> 2.12.2) - update to AppArmor 2.12.2 - no changes in libapparmor - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2 for the detailed upstream changelog - update to AppArmor 2.12.1 - fix: remove empty LD_RUN_PATH from libapparmor-perl - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1 for detailed upstream release notes ==== libdrm ==== Version update (2.4.96 -> 2.4.97) Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - Update to version 2.4.97 * amdgpu: update to latest marketing names from 18.50 * amdgpu/test: Add illegal register and memory access test v2 * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs. * amdgpu/test: Enable deadlock test for CI family (gfx7) * amdgpu: add VM test to exercise max/min address space * doc: Rename README&CONTRIBUTING to .rst * Avoid hardcoded strlens in drmParseSubsystemType(). * drm: Attempt to parse SPI devices as platform bus devices. * xf86drmHash: remove unused loop variable * meson: fix typo in compiler flag * tests: skip drmdevice test if the machine doesn't have any drm device * freedreno: remove always-defined #ifdef * xf86atomic: #undef internal define * README: reflow the project description to improve readability * xf86drm: implement drmParseSubsystemType for DragonFly * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly * tests/amdgpu/vcn: fix the nop command in IBs * gitignore: sort file * gitignore: add _build * amdgpu: update amdgpu_drm.h * amdgpu: add a faster BO list API * android: Fix 32-bit app crashing in 64-bit Android - Enable aarch64 build for: etnaviv, exynos and tegra - Fix --enable-freedreno option as it is not experimental anymore - Add etnaviv support - Add exynos support (used by Arndale board and Samsung Chromebook) ==== libraw ==== - security update * CVE-2018-20337 [bsc#1120519] + libraw-CVE-2018-20337.patch * CVE-2018-20365 [bsc#1120500] CVE-2018-20364 [bsc#1120499] CVE-2018-20363 [bsc#1120498] + libraw-CVE-2018-20363,20364,20365.patch * CVE-2018-5817 [bsc#1120515] CVE-2018-5818 [bsc#1120516] CVE-2018-5819 [bsc#1120517] + libraw-CVE-2018-5817,5818,5819.patch * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195 + libraw-half-size-allocation-buffer-overflow.patch - asan_build: build ASAN included - debug_build: build more suitable for debugging - security update * CVE-2018-5816 [bsc#1097975] + libraw-CVE-2018-5816.patch - security update * CVE-2018-5813 [bsc#1103200] + libraw-CVE-2018-5813.patch * CVE-2018-5815 [bsc#1103206] + libraw-CVE-2018-5815.patch ==== libvirt ==== Version update (4.10.0 -> 5.0.0) Subpackages: libvirt-client libvirt-daemon libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-gluster libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-qemu libvirt-libs - apparmor: add support for named profiles and convert libvirtd profile to a named profile 70c2933d-apparmor-named-profiles.patch, a3ab6d42-apparmor-conv-libvirtd-named-profile.patch boo#1118952 - libxl: save current memory value after successful balloon 11c8aca9-libxl-set-mem-after-balloon.patch bsc#1120813 - Noun phrase for %description doc. - Remove idempotent %if..%endif pair around %package bash-completion. - Reduce hard requirements on bash-c and documentation. - Enable bash completion in Leap15/SLE15 and newer - Update to libvirt 5.0.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Remove UML hypervisor driver - Dropped patches: de09ae2f-libxl-support-openvswitch.patch, 0a1b5653-xenconfig-support-openvswitch.patch - FATE#320928, FATE#325817, FATE#326380, FATE#326698 - Requires: ncurses expands to Requires: libncurses5, which is not required by any component of this package. Remove it along with the BuildRequires: ncurses-devel ==== metis ==== - Remove dependency to a non-existing module package for HPC. - Edit description to put time-sensitive wording into context. - General spec file clean up. - Touch-up to the HPC build. - Implemented suse-hpc packaging - Added metis-makefile-c-directives.patch - Provides cflags option to help provide metis native build process ==== openssl-1_1 ==== Subpackages: libopenssl1_1 libopenssl1_1-32bit - Fix FIPS RSA generator (bsc#1118913) * import fixed openssl-1.1.0-fips.patch from Fedora * drop openssl-CVE-2018-0737-fips.patch which got merged into openssl-1.1.0-fips.patch * refresh openssl-fips-rsagen-d-bits.patch - The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951) * https://github.com/openssl/openssl/issues/7739 * add patch openssl-Bleichenbachers_CAT.patch ==== python-libvirt-python ==== Version update (4.10.0 -> 5.0.0) - Update to 5.0.0 - Add all new APIs and constants in libvirt 5.0.0 - FATE#320928, FATE#325817, FATE#326380, FATE#326698 ==== qemu ==== Subpackages: qemu-block-curl qemu-block-rbd qemu-block-ssh qemu-guest-agent qemu-ipxe qemu-ksm qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-sdl qemu-vgabios qemu-x86 - Tweak Xen interface to be compatible with upcoming v4.12 Xen 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0054-linux-user-make-pwrite64-pread64-fd.patch (bsc#1121600) ==== rpm ==== Subpackages: rpm-32bit - Add kmod(module) provides to kernel and KMPs (FATE#326579). ==== shadow ==== Version update (4.5 -> 4.6) - btrfs-subvolumes.patch: implement support for creating user home directories on btrfs subvolumes (fate#316134) - Add empty /etc/sub{u,g}id files. useradd and usermod add entries for users only when those files exist. Having those entries is a requirement to create user namespaces, for instance, when running podman as a non-root user. - Update to 4.6: * Newgrp: avoid unnecessary lookups * Make language less binary * Add error when turning off man switch * Spelling fixes * Make userdel work with -R * newgidmap: enforce setgroups=deny if self-mapping a group * Norwegian bokm�l translation * pwck: prevent crash by not passing O_CREAT * WITH_TCB fixes from Mandriva * Fix pwconv and grpconv entry skips * Fix -- slurping in su * add --prefix option - Remove CVE-2018-7169.patch: upstreamed - Remove shadow-4.1.5.1-pam_group.patch: upstreamed - Update userdel-script.patch: change due to prefix - Update useradd-mkdirs.patch: change due to prefix Additionally changed in that patch (bsc#1106914): * Test for strdup() failure * Directory to 0755 instead 0777 - Add shadow-4.6.0-fix-usermod-prefix-crash.patch: Fixes crash in usermod when called with --prefix. See https://github.com/shadow-maint/shadow/issues/110 - Use %license (boo#1082318) - Added CVE-2018-7169.patch: Fixed an privilege escalation in newgidmap, which allowed an unprivileged user to be placed in a user namespace where setgroups(2) is allowed. (CVE-2018-7169 bsc#1081294) - bsc#1061838: Revert: Requires: group(mail) Introduced circular dependency - Revert accidentalied prerequisites. Use PreReq for permissions - Prequire group(shadow), group(root), user(root) - bsc#1061838: Add Requires for group(mail) - boo#1048645: Set suid bit for newuidmap and newgimap - Revert the changes for bsc#1023895 back Pulls in too many deps into ring0. Next version of shadow plans to have no conditional man pages. - run spec-cleaner - bsc#1023895: man page contained invalid options because they depend on compile flags and we shipped pre built ones. New BuildRequires: docbook-xsl-stylesheets docbook_4 xml2po xsltproc - Adjust requires (we need user/group root instead of aaa_base now) - New upstream version 4.5 - Refreshed patches: * shadow-login_defs.patch * chkname-regex.patch * getdef-new-defs.patch * useradd-mkdirs.patch - Upstreamed patches: * shadow-4.1.5.1-manfix.patch * shadow-4.1.5.1-errmsg.patch * shadow-4.1.5.1-backup-mode.patch * shadow-4.1.5.1-audit-owner.patch * shadow-4.2.1-defs-chroot.patch * shadow-4.2.1-merge-group.patch * Fix-user-busy-errors-at-userdel.patch * useradd-clear-tallylog.patch - shadow-4.1.5.1-pam_group.patch dynamically added users via pam_group are not listed in groups databases but are still valid - shadow.keyring: update keyring with current maintainer's keyid only - Serge Hallyn 'F1D08DB778185BF784002DFFE9FEEA06A85E3F9D' - disable_new_audit_function.patch: Disable newer libaudit functionality for older distributions - useradd: call external program "/sbin/pam_tally2" to reset failed login counter in "/var/log/tallylog" (bsc#980486, useradd-clear-tallylog.patch) - add keyring, three public keys from https://pkg-shadow.alioth.debian.org/download.php - bsc#1002975: Use permissions according to permissions package and dont try to manipulate them in %files section. - boo#994486: Include shadow.5 manpage Previously this was provided by man-pages package in the man-pages-addons tarball which got removed later on. - Add package dependency for aaa_base, fixing bnc#899409 (was done by tbehrens(a)suse.com but not submitted to Factory) - shadow 4.2.1 requested by fate#320422 - bsc#979069: Dont include shadow-4.1.5.1-bug935203-manpage.patch - Dont set SUID bit yet. Once bsc#979282 is through, which will adapt the permissions package, we can enable the SUID bits. Remove the files used to circumvent the check. - Remove: * shadow-rpmlintrc * shadow-subids * shadow-subids.easy * shadow-subids.secure * shadow-subids.paranoid - Update to shadow-4.2.1: - add support for subuids/subgids via newuidmap/newgidmap - Rename chkname-regex.diff to chkname-regex.patch - Rename encryption_method_nis.diff to encryption_method_nis.patch - Rename getdef-new-defs.diff to getdef-new-defs.patch - Rename shadow-login_defs.diff to shadow-login_defs.patch - Rename userdel-scripts.diff to userdel-script.patch - Rename useradd-script.diff to useradd-script.patch - Rename useradd-default.diff to useradd-default.patch - Rename useradd-mkdirs.diff to useradd-mkdirs.patch - Add fixes from Red Hat/Fedora: - shadow-4.1.5.1-audit-owner.patch.patch: - log owner changes for home directory - shadow-4.1.5.1-userdel-helpfix.patch.patch: - give a hint about what happens when you force the removal of a user - shadow-4.2.1-defs-chroot.patch.patch: - initialize uid_t uid_min and uid_t uid_max not before we need them - shadow-4.2.1-merge-group.patch.patch: - simplify by using a single call to snprintf() - Add upstream fix - Fix-user-busy-errors-at-userdel.patch: - call sub_uid_close() - Moved call from %verifyscript into %post: * Caused call to %service_add_post shadow.service shadow.timer during rpm -qV shadow - Add systemd unit files to continuously check password & groupfile integrity * Idea from Arch Linux * pending request to systemd-presets-branding-openSUSE to enable by default - Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts of the path - Stop any systemd user manager instance in case a user entry will be deleted (bnc#849870). Nevertheless a running process requires the option --force for the userdel command. - Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff) - Add some fixes from Fedora: - shadow-4.1.5.1-backup-mode.patch: open backup file with correct permissions. - shadow-4.1.5.1-logmsg.patch: fix error message - shadow-4.1.5.1-errmsg.patch: print error reason - shadow-4.1.5.1-manfix.patch: fix manual page - Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006] - Fix getdef default variables (getdef-new-defs.diff) - Fix default group value in /etc/default/useradd (useradd-default.diff) - Implement CHARACTER_CLASS support (chkname-regex.diff) - Add support for useradd.local (useradd-script.diff) - Fix spec file - Adjust login.defs (shadow-login_defs.diff) - Add userdel*.local script support and scrips (userdel-scripts.diff) - Initial package [FATE#314473] ==== snapper ==== Version update (0.8.1 -> 0.8.2) Subpackages: libsnapper4 snapper-zypp-plugin - adapted to libbtrfs changes to resurrect special btrfs directory comparison (bsc#1111414) - version 0.8.2 - avoid deadlock for special btrfs directory comparison (bsc#1049574) ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd-32bit systemd-bash-completion systemd-sysvinit udev - Import commit 9874ecb0457fd43cdde01085a878acdf2fa5af36 96313ee86a pull: initialize libgcrypt before calling any functions provided by libgcrypt 08870024dc hwdb: remove stray 'i' in hwdb match string for the HP Spectre (#9571) f09d3f3648 cryptsetup: Add dependency on loopback setup to generated units 3dfe6375a9 journal-gateway: use localStorage["cursor"] only when it has valid value 44af6bc697 journal-gateway: explicitly declare local variables a780ac41ce analyze: actually select longest activated-time of services f57d448ff8 sd-bus: fix implicit downcast of bitfield reported by LGTM 02e8443486 install: fix error handling in is_symlink_with_known_name() 5d4d445912 resolve: fix return value type of dns_answer_has_dname_for_cname() 4bfb5d31d5 resolve: dns_scope_network_good() does not returns negative errno c7028bd00a core: free lines after reading them 63b4e1c44b pam_systemd: reword message about not creating a session (boo#1111498) 7811bf8e80 pam_systemd: suppress LOG_DEBUG log messages if debugging is off (boo#1111498) - Import commit b3fe3bed57dbf0a8c280caa4b45323e689f683e2 e3666c6e3e journal-remote: set a limit on the number of fields in a message (CVE-2018-16865 bsc#1120323) a6d9216e7a journal-remote: verify entry length from header 6d319eb61e journald: set a limit on the number of fields (1k) (CVE-2018-16865 bsc#1120323) f9c666991a coredump: fix message when we fail to save a journald coredump 2ad2d953c7 journald: do not store the iovec entry for process commandline on stack (bsc#1120323 CVE-2018-16864) 10f19f0bbf journald: remove unnecessary {} eec4fdb05c coredump: remove duplicate MESSAGE= prefix from message - Import commit 8f7529bfb001e99ebaab8f50d611ab750b96917d (CVE-2018-6954 bsc#1080919) 61043b6fd3 Add macro for checking if some flags are set c15f0a33a2 test: Run qemu/nspawn tests with "set -e" 2c818c539a test: Factorize common integration test functions (#6540) aa07d4eef4 test: Write state and log files into $BUILD_DIR 0207cea661 tmpfiles: fold five lines into two 9b622de3ad tmpfiles: "e" takes globs 2f1f321b26 tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753) 32bc657d2b tmpfiles: use fd_get_path() even less excessively c0a4ee798f test: make TEST-22 easier to debug, by outputting to /dev/console 4e6c4d3147 test: don't use "nobody:nogroup" for tests 1c22e03b53 tmpfiles: return correct error variable after fd_reopen() 3147f8b81b tmpfiles: reindent one comment less weirdly 52c5e3dcce tmpfiles: use correct error variable 34395ac640 tmpfiles: clarify that we ignore file attribute setting errors 2e68b99078 tmpfiles: add log message where we previously failed silently 4b4025ebf4 tmpfiles: use fd_get_path() less excessively f004d24b2a tmpfiles: add more tests a516490b24 test: don't send image building output to /dev/null (#8886) d827068b53 tmpfiles: don't follow unsafe transitions in path_set_*() f38c092871 fs-util: add new CHASE_NOFOLLOW flag to chase_symlinks() 0fd2349ec9 tmpfiles: make create_fifo() safe 0c40e5f0fd fs-util: introduce mkfifoat_atomic() helper cfaa792ef9 fileio: make tempfn_random_child() accept empty string as path 842dcb66f7 tmpfiles: introduce create_fifo() 37aac5922d tmpfiles: introduce empty_directory() a3ee4deb69 tmpfiles: introduce create_directory() and create_subvolume() and make them safe c46af42ca2 basic/stat-util: introduce is_dir_fd() 15c9a82bce btrfs-util: unfuck tmpfiles' subvol creation 56728ebf2c btrfs-util: introduce btrfs_subvol_make_fd() 6c125e3be7 basic/label: introduce mkdirat_label()/mkdirat_errno_wrapper() helpers 18fe67c959 selinux: introduce mac_selinux_create_file_prepare_at() 1b711db4b6 path-util: introduce new safe_getcwd() wrapper d770b8db30 smack: introduce mac_smack_fix_at() 0ffb1013bc smack: make mac_smack_fix() deal somewhat sensible with non-absolute paths 55e7a0cd2a Fix compilation w/o smack (#8593) 84e8ac537b label: rework label_fix() implementations (#8583) 3686673f0a tmpfiles: introduce create_directory_or_subvolume() 1a2573fadf tmpfiles: make create_device() safe 5c9a660957 tmpfiles: introduce create_device() c177df34c8 tmpfiles: make copy_files() safe 06a5290c63 tmpfiles: introduce copy_files() routine 6d641c23a8 tmpfiles: make write_one_file() safe 1782e90f3d tmpfiles: make truncate_file() safe 5101dfbff7 tmpfiles: introduce truncate_file() which deals with 'F' exclusively 1886d7636f tmpfiles: introduce create_file() which deals with 'f'/'F' exclusively c7f0d990b5 tmpfiles: make the stat struct parameter in fd_set_*() optional 04ce630755 tmpfiles: stat file in item_do() rather than in its callers 04883c43b7 tmpfiles: set only default acls to folders #9545 (#9599) e6720dda59 tree-wide: some O_NDELAY ? O_NONBLOCK fixes 8f2444bccd tmpfiles: fix up and complain paths referring to /var/run (instead of /run) automatically 92cafeb3ab tmpfiles: 'e' is supposed to accept shell-style globs 0ad95b0f9a tmpfiles: 'e' is supposed to operate on directory only a1ba1e298b fs-util: introduce fchmod_opath() 6774858c3e tmpfiles: remove spurious curly braces in create_item() ff7b2a2149 tmpfiles: create parent directories if they are missing for more line types 4d225f603f fd-util: introduce fd_reopen() helper for reopening an fd bcec6544d6 test: add tests for systemd-tmpfiles 281d06a8fa tmpfiles: don't resolve pathnames when traversing recursively through directory trees 69a3a957d4 tmpfiles: fstat() works with fd opened with O_PATH since Linux 3.6 5e2146a435 tmpfiles: make hardlink_vulnerable() argument constant f871a58fe7 tmpfiles: make "f" lines behaviour match what the documentation says 3583d83776 tmpfiles: shortcut path_set_perms() if there's nothing to do 465416b058 tmpfiles: fix check for figuring out whether to call chmod() baf3ea541c tmpfiles: avoid using wrong type for strlen() result a8d6590e17 basic/fs-util: remove logically dead code 3768f894ed fs-util: add new CHASE_STEP flag to chase_symlinks() cd09a3129d macro: introduce new TAKE_FD() macro 0feee55455 macro: introduce TAKE_PTR() macro 58987f02cb fs-util: add shortcut for chase_symlinks() when it is called like open(O_PATH) 662fe953fb fs-util: chase_symlinks(): support empty root accfcc9d5c fs-util: refuse taking a relative path to chase if "root" is specified and CHASE_PREFIX_ROOT is set 6caab72812 fs-util: extra chase_symlink() safety check on "path" parameter 996c2c2fa6 fs-util: extra safety checks on chase_symlinks() root parameter 1252ee00da fs-util: remove comment about non-existing function b42e2bb5f9 nspawn: make sure we don't leak the fd in chase_symlinks_and_update 41fff37ee3 fs-util: add new chase_symlinks() flag CHASE_OPEN 67f388cc93 user-util: add UID_NOBODY defines that resolve to (uid_t) 65534 4b036c36a1 fs-util: use _cleanup_close_ attribute 0390eb2077 fs-util: chase_symlinks(): prevent double free 4c495215e3 fs-util: add new CHASE_SAFE flag to chase_symlinks() 9242f48c29 fs-util: chase_symlinks(): remove unnecessary slash at the head 17ae72b9b0 Move mkdir_label() to mkdir-label.c 581192d868 Move selinux-related stuff from btrfs-util.c to label.c 008a35deb6 Add mkdir_errno_wrapper() and use instead of mkdir() in various places fa77d89b43 mkdir: introduce follow_symlink flag to mkdir_safe{,_label}() b8c314823d mkdir: chmod_and_chown() returns errors as "return -errno", not in errno itself e9231b19eb tmpfiles: check if not too many symbolic links. (#7423) 48a7365e7f tmpfiles: with "e" don't attempt to set permissions when file doesn't exist (#6682) ad2c7f6a04 basic/macros: add STRLEN() to get length of string literal as constant expression - Import commit c7f08cbe22b95d97a0eea4832991c8390cc86866 c152c950d4 vconsole-setup: fonts copy will fail if the current terminal is in graphical mode (bsc#1114933) 827dc868bd 6647 - use path_startswith("/dev") in cryptsetup (#6732) (bsc#1119971) 5d1e170e05 logind: stop managing VT switches if no sessions are registered on that VT (bsc#1101591) 07fc858f25 terminal-util: introduce vt_release() helper eee33c6e5d terminal-util: introduce vt_restore() helper a133c368a4 terminal: unify code for resetting kbd utf8 mode a bit (#6692) 2a487a79ea terminal reset should honour default_utf8 kernel setting (#6606) a33d12fd73 logind: make session_restore_vt() static ef799fb7ec udev/net-id: check all snprintf return values 46343b3248 core: don't include libmount.h in a header file (#8580) 2763be9d36 udev: downgrade message when we fail to set inotify watch up (bsc#1005023) f66ba2d179 namespace: always use a root directory when setting up namespace (bsc#1045723) 98d173e12e core: ReadWritePaths= and friends assume '+' prefix when BindPaths= or freinds are set 5d581cee2f namespace: properly handle bind mounts from the host 7b0b2e418b namespace: create /dev, /proc, /sys when needed 84736215a4 coredump: only install coredump.conf when ENABLED_COREDUMP=true - Fix the test for figuring out if /etc/machine-id is writable in %post (bsc#1117063) "test -w" always returns true for root user even if the writable mode bits are not set. Fix this by testing the file mode bit value instead. - udev: ignore the exit code of systemd-detect-virt for memory hot-add (bsc#1076696) In 80-hotplug-cpu-mem.rules on SLE12-SP3, there have a memory hot-add rule uses systemd-detect-virt to detect non-zvm environment. The systemd-detect-virt returns exit failure code when it detected _none_ state. The exit failure code causes that the hot-add memory block can not be set to online. See: https://www.spinics.net/lists/systemd-devel/msg00341.html ==== thunar ==== Version update (1.8.2 -> 1.8.4) Subpackages: libthunarx-3-0 thunar-lang - fixed bug trackers in latest changelog - Update to 1.8.4 * Emergency release, triggerd by some trouble with the added support for org.freedesktop.FileManager1.service in thunar 1.8.3 * Renamed org.freedesktop.FileManager1.service.in to org.xfce.Thunar.FileManager1.service.in to avoid name clashes (bxo#12414) * Dont exit when name org.freedesktop.filemanager1 lost on message-dbus (bxo#15088) * Translation updates - Update to 1.8.3: * Thunar sometimes mounts USB drives with root permission (bxo#14719) * FreeBSD -Thunar crash due to passing null to strcmp() (bxo#15059) * Add support for org.freedesktop.FileManager1 (bxo#12414) * Still 8sec delay on logout when there is an open thunar window (bxo#15008) * Thunar does not recover directories opened in a previous session (bxo#14969) * Thunar utilizes 100%CPU when the parent directory is not readable (bxo#14900) * Add support for CTRL+Z in rename dialog (bxo#14956) * Thunar rarely freezes when switching to tree-view (bxo#14960) * Crash in tree-view when multiple windows are open (bxo#14714) * Improve description of UCA command parameters (bxo#14720) * Fixed some Warnings and GLib-GObject-CRITICAL messages * Translation updates - added %license macro - added Recommends: catfish for file search ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - Switch websocket dependency to python3. (bsc#1119737) - Do not build xorg-x11-Xvnc-module on s390. It fails to build because macros.xorg-server is incomplete on s390 and the module would be useless without real X server anyway. ==== util-linux ==== Version update (2.31.1 -> 2.33.1) Subpackages: libblkid1 libblkid1-32bit libfdisk1 libmount1 libmount1-32bit libsmartcols1 libuuid1 libuuid1-32bit util-linux-lang - Update to version 2.33.1: * agetty fixes (drop util-linux-agetty-smart-reload-10.patch, util-linux-agetty-smart-reload-11.patch, util-linux-agetty-smart-reload-12.patch). * Other minor fixes and documentation updates. - Drop rfkill-block@.service and rfkill-unblock@.service that functionally conflict with systemd-rfkill@.service (boo#1092820#c13). - Update to version 2.33 (FATE#326844): * choom: new command to adjust and display the current OOM-killer score. * libsmartcols has been improved to differentiate between numbers, booleans and strings in JSON output. * fstrim(8): trim all mounted filesystems from /etc/fstab (-A|--fstab), new command line option --dry-run. * hwclock(8) new command line option --delay. * mount umount, libmount allow to mount and umount filesystem in another namespace. * rename(1) new command line option --interactive. * setarch(8) does not require architecture when modify personality like ADDR_NO_RANDOMIZE. The architecture argument is optional now. * command su(1) new command line option --whitelist-environment. * setpriv(1) new command line option --reset-env and --pdeathsig. * fdisk(8), sfdisk(8): print disk model name to simplify device identification. * column --table-empty-lines" allows to use empty lines in formatted output. * wipefs improved to postpone BLKRRPART ioctl until all magic strings are wiped. * script(1) extended to store more information about terminal size and type to the typescript header. New command line option --output-limit. * libblkid provides BitLocker and basic APFS detection now. * lsblk is possible to execute against /sys and /proc dumps with - -sysroot is specified. * agetty(8) reload issue only if it is really needed (bsc#1085196). * cal(1) has been improved and extended. * libblkid has been extended to support LUKS2, Micron mpool, VDO and Atari partition table. * rfkill(8) has been moved to /usr/sbin. * dmesg(1) provides better support for multi-line messages, new command line option --force-prefix. * fallocate(1) --dig-holes is faster and more effect now. * fdisk(8) provides access to Protective MBR accessible from main menu. Sun label support has been improved. * lscpu(1) provides more details about ARM CPUs now (FATE#326453). * lsmem(1) supports memory zone awareness now (FATE#324252, drop util-linux-lsmem-memory-zone-1.patch, util-linux-lsmem-memory-zone-2.patch, util-linux-lsmem-memory-zone-3.patch). * lsns(8) provides netnsid and nsfs columns now. * rtcwake(8) waits stdin to settle down before entering a system sleep. * Many fixes and improvements, see https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes (drop util_linux_bigendian.patch, util-linux-cramfs.patch, util-linux-fincore-count.patch, util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch, util-linux-libmount-umount-a-segfault.patch, util-linux-libmount-mount-a-nfs-bind-mount.patch, util-linux-lscpu-chcpu-new-cpu-macros.patch, util-linux-chcpu-cpu-count.patch, util-linux-bash-completion-umount-CVE-2018-7738.patch). - agetty: Fixes for reload issue only if it is really needed (bsc#1085196, util-linux-agetty-smart-reload-10.patch, util-linux-agetty-smart-reload-11.patch, util-linux-agetty-smart-reload-12.patch). - agetty BEHAVIOR CHANGE: Terminal switches to character mode when entering logname; echo is generated by the agetty itself. (In past, logname echo was generated locally by the terminal, using the canonical line editing mode.) - Fix runstatedir path (to /run) (boo#1113188#c1). - Create empty /etc/issue.d for the new agetty feature. - Switch python-libmount to python3-libmount. ==== util-linux-systemd ==== Version update (2.31.1 -> 2.33.1) - Update to version 2.33.1: * agetty fixes (drop util-linux-agetty-smart-reload-10.patch, util-linux-agetty-smart-reload-11.patch, util-linux-agetty-smart-reload-12.patch). * Other minor fixes and documentation updates. - Drop rfkill-block@.service and rfkill-unblock@.service that functionally conflict with systemd-rfkill@.service (boo#1092820#c13). - Update to version 2.33 (FATE#326844): * choom: new command to adjust and display the current OOM-killer score. * libsmartcols has been improved to differentiate between numbers, booleans and strings in JSON output. * fstrim(8): trim all mounted filesystems from /etc/fstab (-A|--fstab), new command line option --dry-run. * hwclock(8) new command line option --delay. * mount umount, libmount allow to mount and umount filesystem in another namespace. * rename(1) new command line option --interactive. * setarch(8) does not require architecture when modify personality like ADDR_NO_RANDOMIZE. The architecture argument is optional now. * command su(1) new command line option --whitelist-environment. * setpriv(1) new command line option --reset-env and --pdeathsig. * fdisk(8), sfdisk(8): print disk model name to simplify device identification. * column --table-empty-lines" allows to use empty lines in formatted output. * wipefs improved to postpone BLKRRPART ioctl until all magic strings are wiped. * script(1) extended to store more information about terminal size and type to the typescript header. New command line option --output-limit. * libblkid provides BitLocker and basic APFS detection now. * lsblk is possible to execute against /sys and /proc dumps with - -sysroot is specified. * agetty(8) reload issue only if it is really needed (bsc#1085196). * cal(1) has been improved and extended. * libblkid has been extended to support LUKS2, Micron mpool, VDO and Atari partition table. * rfkill(8) has been moved to /usr/sbin. * dmesg(1) provides better support for multi-line messages, new command line option --force-prefix. * fallocate(1) --dig-holes is faster and more effect now. * fdisk(8) provides access to Protective MBR accessible from main menu. Sun label support has been improved. * lscpu(1) provides more details about ARM CPUs now (FATE#326453). * lsmem(1) supports memory zone awareness now (FATE#324252, drop util-linux-lsmem-memory-zone-1.patch, util-linux-lsmem-memory-zone-2.patch, util-linux-lsmem-memory-zone-3.patch). * lsns(8) provides netnsid and nsfs columns now. * rtcwake(8) waits stdin to settle down before entering a system sleep. * Many fixes and improvements, see https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes (drop util_linux_bigendian.patch, util-linux-cramfs.patch, util-linux-fincore-count.patch, util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch, util-linux-libmount-umount-a-segfault.patch, util-linux-libmount-mount-a-nfs-bind-mount.patch, util-linux-lscpu-chcpu-new-cpu-macros.patch, util-linux-chcpu-cpu-count.patch, util-linux-bash-completion-umount-CVE-2018-7738.patch). - agetty: Fixes for reload issue only if it is really needed (bsc#1085196, util-linux-agetty-smart-reload-10.patch, util-linux-agetty-smart-reload-11.patch, util-linux-agetty-smart-reload-12.patch). - agetty BEHAVIOR CHANGE: Terminal switches to character mode when entering logname; echo is generated by the agetty itself. (In past, logname echo was generated locally by the terminal, using the canonical line editing mode.) - Fix runstatedir path (to /run) (boo#1113188#c1). - Create empty /etc/issue.d for the new agetty feature. - Switch python-libmount to python3-libmount. ==== xfce4-panel-plugin-pulseaudio ==== Version update (0.4.0 -> 0.4.1) Subpackages: xfce4-panel-plugin-pulseaudio-lang - update to version 0.4.1 * Translation updates ==== xorg-x11-server ==== Subpackages: xorg-x11-server-extra xorg-x11-server-wayland - provide/obsolete no longer existing xf86-video-ast, xf86-video-cirrus on sle15 (bsc#1120282) ==== yast2-apparmor ==== Version update (4.1.5 -> 4.1.6) - Permit new aa-status parser also for one earlier aa-status version (bsc#1123258) - 4.1.6 ==== yast2-update ==== Version update (4.1.7 -> 4.1.8) - Added URL tag to the spec file (bsc#1097957) - 4.1.8 ==== zypper ==== Version update (1.14.19 -> 1.14.21) Subpackages: zypper-aptitude zypper-log - Fixed broken argument parsing for --reposd-dir (bsc#1122062) - version 1.14.21 - Fix wrong zypp::indeterminate use (bsc#1120463) - version 1.14.20 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] dozens of unwanted packages !
by Daniele 06 Feb '19

06 Feb '19

Hy guys, TW-20181224 # zypper dup ... The following 118 NEW packages are going to be installed: appres bdftopcf beforelight bitmap editres ffmpegthumbs-lang firewall-macros fonttosfnt fslsfonts fstobdf gtk3-immodule-vietnamese ico kernel-default-4.20.2-1.4 lbxproxy libFS6 libLLVM7 libLLVM7-32bit libXTrap6 libXp6 libXprintUtil1 libXvnc1 libXxf86dga1 libdmx1 libexiv2-27 libidn2-4 libidn2-4-32bit libixion-0_14-0 liblbxutil1 libmariadb3 liborcus-0_14-0 libpoppler83 librevenge-stream-0_0-0 libvapoursynth-45 listres luit mkcomposecache net-snmp oclock openssh-askpass-gnome patterns-base-x11_opt patterns-kde-kde_pim patterns-kde-kde_utilities_opt perl-SNMP perl-Term-ReadKey proxymngr python3-linux-procfs rendercheck rstart samba-libs-python showfont smproxy system-tuning-common-SUSE twm viewres virt-what x11perf xbacklight xbiff xcalc xclipboard xcmsdb xcompmgr xcursor-themes xcursorgen xdbedizzy xditview xdpyinfo xedit xev xeyes xf86-input-vmmouse xf86dga xfd xfindproxy xfontsel xfs xfsinfo xfwp xgamma xgc xinput xkbevd xkbprint xkbutils xkill xload xlogo xlsatoms xlsclients xlsfonts xmag xman xmore xorg-scripts xorg-x11 xorg-x11-Xvnc xorg-x11-Xvnc-module xorg-x11-server-extra xplsprinters xpr xprehashprinterlist xrefresh xrestop xrx xscope xsetmode xsetpointer xsm xstdcmap xterm xtrap xvidtune xvinfo xwd xwininfo xwud yast2-theme yast2-theme-oxygen .... What ?? Ok some doubts about few packages but for sure twm and all xcraps packages are UNWANTED. Please, stop adding craps like xeyes, xload & company. Who do I have to kill? Package/pattern I mean ;) Thanks, Daniele. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

16 31

[opensuse-factory] Keeping TW installation lean (Tumbleweed snapshot 20190201 released!)
by Axel Braun 06 Feb '19

06 Feb '19

Morning all, as we noticed on the weekend, the above snapshot offered a complete rebuild. While running a zypper dup -dl, at a certain point the system suddenly could not load any packages, and the KDE desktop kinda crashed. No warning, no nothing beforehand. After switching to a terminal, df .h showed that the system partition (43G, as shown by parted) was full! OK, some local OBS build environments, but nevertheless. So, removed some btrfs snapshots with snapper, cleaned /tmp and /var/tmp, reboot and all was fine again. First point for my wishlist: Let zypper check the available space before downloading. Download size plus some 10-20% security maybe? The question remains, why is a simple Laptop installation with KDE taking some 27GB? I had a look into various directories. First of all, the journal is eating up some 2.8G journalctl --vacuum-time=30d deletes old log files, which freed up 2.4G. Makes probably sense to add a systemd-timer for this, as it is not touched by sytemd-tmpfiles-clean. /var/cache/zypp/packages has another 1.8G - may be cleaned as well In /usr is some 3GB in total, mostly libs, partly in different versions, e.g. libLLVM.so.5/6/7. Is there a way to determine old/unused libs and remove them? Another 680 MB is in locale, with many locales installed I will never use. I guess most of them could be safely removed? Any other thoughts? Cheers Axel PS: After some clean-up: T520:/home/docb # btrfs filesystem df / Data, single: total=34.05GiB, used=23.26GiB System, single: total=32.00MiB, used=16.00KiB Metadata, single: total=1.00GiB, used=654.92MiB GlobalReserve, single: total=74.53MiB, used=0.00B -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

8 13

Re: [opensuse-factory][PLEASE SPEAK UP] Disabling legacy file systems by default?
by Raphael Lydia Bertoche 06 Feb '19

06 Feb '19

In fact you're right, I was talking about f2fs and not e2fs. On Tue, 5 Feb 2019 at 15:46, Raphael Lydia Bertoche <rbertoche(a)puc-rio.br> wrote: > > Maybe in the enterprise world it makes sense to try to protect your computers from bad flash drives by removing support for things, but I'm sure that's an idea that's opposed to the way most people that work with open or free software think, at least from where I'm standing, even if it has any real effectiveness as a defence against bad flash drives. > > I say it without looking at the list: please get all those file systems back to Tumbleweed. I lost half an hour last night when I soft-bricked my phone to fastboot and suddenly my machine that did mkfs e2fs the other day couldn't mount the SD card with data I needed to repair the phone. But I now realize maybe this wasn't really that of a boomer since now I can present you with this cautionary tale. This is why you shouldn't just break any one of those systems that were for a long time supported on Tumbleweed and are probably in use somewhere, we can never now how often, and so we can't weight the potential damage of breaking it. > > I felt sad at the time because I realized that feature was present some time before and was removed without any consent on my part and without a package removal that would make it explicit. > > Also it would take me a considerable amount of time, even not being a novice Linux user, I've just been busy and never saw any changelogs or notices or more sadly this thread to find out which line I'd have to comment out, and even if it were as easy as a click hidden away somewhere, most users would never get to read this thread or to google it and would probably just think Tumbleweed doesn't support those filesystems any more and move on. Please stop assuming users are experts and don't make more difficult software for those that already don't know how to use it, just because you say it's not that much of them. Remember the user base of OpenSuSE is nothing alike SLES's. > > Please move to the "whitelist" alike approach by default on SLES and leave Tumbleweed with this basic feature for working with any software system, even with those you don't use, even if you're not fond of it or it's old. At least don't do it by default, leave this kind of feature disabling as security measure optional. And of course, making people unable to mount as root as a security measure is just not ok. I'd be glad to see it working again. > > Not to mention that making bad jokes about other users choices or knowledge in a mailing list should really be taken seriously. How come you behave like children in public like this, just because it's "the internet"? "The community" is not an excuse for your bad choices. If you say those things and think you know you user base, then you don't. > > Please be less reckless in the future guys! In that and in not just breaking things. > > With that said, with less of that I'll probably keep using your software for another ten years. > > Best regards, > > Raphael > > Em sex, 1 de fev de 2019 18:13, Felix Miata <mrmazda(a)earthlink.net escreveu: >> >> Jim Henderson composed on 2019-02-01 19:19 (UTC): >> >> > On Fri, 01 Feb 2019 12:26:18 +0100, Liam Proven wrote: >> >> > Well, I've only been using Linux since 1995, but I managed to figure it >> > out with exfat. It isn't rocket science, and with proper documentation, >> > we make it pretty clear for the dozen people who need hpfs because they >> > still want to run OS/2 and Linux on the same box. >> >> You have statistics to back up this "dozen", right? Stuff that has been just working for decades >> doesn't get much press. >> >> >> How do you know that? Do you think a non-expert would know that? >> >> > I think people should be able to figure it out, yes. Why do we assume >> > that people are stupid or unable to ask questions when they run into >> > problems? Isn't that what the community is for? >> >> Remember for most people what computers are for? Saving time, and doing repetitive and difficult or >> otherwise impossible things. When something long working breaks, time saving morphs into time >> gobbling, not the least of which is Google's response to its bad responses feeding captchas instead >> of useful hits, the domino effect of one thing going wrong leading to multiple others before >> finding any light at the end of the tunnel, the kids stop screaming they're hungry, and sunrise >> begins before ever having gotten into bed. >> >> > It just seems silly to me to cater to a relatively small minority of >> > users who have a specific need. >> >> Breaking what works because only some undefined population subset uses it. The voice of tyrannical >> majority speaking. If most don't need something, nobody needs it. >> >> For every action, there is an equal and opposite reaction. 1686, Newton. >> >> TGIF >> -- >> Evolution as taught in public schools is religion, not science. >> >> Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! >> >> Felix Miata *** http://fm.no-ip.com/ >> -- >> To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org >> To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org >> -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] New Tumbleweed snapshot 20190202 released!
by Dominique Leuenberger 05 Feb '19

05 Feb '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kanagram kernel-source (4.20.4 -> 4.20.6) libyaml (0.1.7 -> 0.2.1) perl-Encode (2.99 -> 3.00) python-PyYAML python-Twisted python-cryptography (2.4.2 -> 2.5) python-gevent (1.3.5 -> 1.4.0) python-msgpack python-pyasn1 (0.4.4 -> 0.4.5) python-pyasn1-modules (0.2.2 -> 0.2.4) python-tornado python3 python3-base remmina (1.3.1 -> 1.3.2) rtl8812au (5.2.20.2+git20190117.edcd447_k4.20.4_1 -> 5.2.20.2+git20190117.edcd447_k4.20.6_1) virt-manager vm-install (0.10.05 -> 0.10.06) === Details === ==== kanagram ==== Subpackages: kanagram-lang - Update/cleanup build requirements - Add Qt5TextToSpeech BuildRequires to enable text-to-speech ==== kernel-source ==== Version update (4.20.4 -> 4.20.6) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla-base - Linux 4.20.6 (bnc#1012628). - amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs (bnc#1012628). - net: bridge: Fix ethernet header pointer before check skb forwardable (bnc#1012628). - net: Fix usage of pskb_trim_rcsum (bnc#1012628). - net: phy: marvell: Errata for mv88e6390 internal PHYs (bnc#1012628). - net: phy: mdio_bus: add missing device_del() in mdiobus_register() error handling (bnc#1012628). - net: phy: phy driver features are mandatory (bnc#1012628). - net/sched: act_tunnel_key: fix memory leak in case of action replace (bnc#1012628). - net_sched: refetch skb protocol for each filter (bnc#1012628). - openvswitch: Avoid OOB read when parsing flow nlattrs (bnc#1012628). - vhost: log dirty page correctly (bnc#1012628). - mlxsw: pci: Increase PCI SW reset timeout (bnc#1012628). - net: ipv4: Fix memory leak in network namespace dismantle (bnc#1012628). - mlxsw: spectrum_fid: Update dummy FID index (bnc#1012628). - mlxsw: pci: Ring CQ's doorbell before RDQ's (bnc#1012628). - net/sched: cls_flower: allocate mask dynamically in fl_change() (bnc#1012628). - udp: with udp_segment release on error path (bnc#1012628). - ip6_gre: fix tunnel list corruption for x-netns (bnc#1012628). - erspan: build the header with the right proto according to erspan_ver (bnc#1012628). - net: phy: marvell: Fix deadlock from wrong locking (bnc#1012628). - ip6_gre: update version related info when changing link (bnc#1012628). - tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state (bnc#1012628). - ARM: fix the cockup in the previous patch (bnc#1012628). - SUNRPC: Address Kerberos performance/behavior regression (bnc#1012628). - mei: me: mark LBG devices as having dma support (bnc#1012628). - mei: me: add denverton innovation engine device IDs (bnc#1012628). - USB: leds: fix regression in usbport led trigger (bnc#1012628). - USB: EHCI: ehci-mv: add MODULE_DEVICE_TABLE (bnc#1012628). - USB: serial: ftdi_sio: fix GPIO not working in autosuspend (bnc#1012628). - USB: serial: simple: add Motorola Tetra TPG2200 device id (bnc#1012628). - USB: serial: pl2303: add new PID to support PL2303TB (bnc#1012628). - ceph: clear inode pointer when snap realm gets dropped by its inode (bnc#1012628). - ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages (bnc#1012628). - ASoC: rt5514-spi: Fix potential NULL pointer dereference (bnc#1012628). - ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode (bnc#1012628). - clk: zynqmp: Fix memory allocation in zynqmp_clk_setup (bnc#1012628). - clk: socfpga: stratix10: fix rate calculation for pll clocks (bnc#1012628). - clk: socfpga: stratix10: fix naming convention for the fixed-clocks (bnc#1012628). - inotify: Fix fd refcount leak in inotify_add_watch() (bnc#1012628). - ALSA: hda/realtek - Fix typo for ALC225 model (bnc#1012628). - ALSA: hda - Add mute LED support for HP ProBook 470 G5 (bnc#1012628). - ARCv2: lib: memeset: fix doing prefetchw outside of buffer (bnc#1012628). - ARC: adjust memblock_reserve of kernel memory (bnc#1012628). - ARC: perf: map generic branches to correct hardware condition (bnc#1012628). - s390/vdso: correct vdso mapping for compat tasks (bnc#1012628). - s390/mm: always force a load of the primary ASCE on context switch (bnc#1012628). - s390/early: improve machine detection (bnc#1012628). - s390/smp: fix CPU hotplug deadlock with CPU rescan (bnc#1012628). - s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU (bnc#1012628). - misc: ibmvsm: Fix potential NULL pointer dereference (bnc#1012628). - char/mwave: fix potential Spectre v1 vulnerability (bnc#1012628). - mmc: sdhci-iproc: handle mmc_of_parse() errors during probe (bnc#1012628). - mmc: dw_mmc-bluefield: : Fix the license information (bnc#1012628). - mmc: meson-gx: Free irq in release() callback (bnc#1012628). - staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1 (bnc#1012628). - tty: Handle problem if line discipline does not have receive_buf (bnc#1012628). - uart: Fix crash in uart_write and uart_put_char (bnc#1012628). - tty/n_hdlc: fix __might_sleep warning (bnc#1012628). - hv_balloon: avoid touching uninitialized struct page during tail onlining (bnc#1012628). - Drivers: hv: vmbus: Check for ring when getting debug info (bnc#1012628). - vgacon: unconfuse vc_origin when using soft scrollback (bnc#1012628). - CIFS: Fix possible hang during async MTU reads and writes (bnc#1012628). - CIFS: Fix credits calculations for reads with errors (bnc#1012628). - CIFS: Fix credit calculation for encrypted reads with errors (bnc#1012628). - CIFS: Do not reconnect TCP session in add_credits() (bnc#1012628). - smb3: add credits we receive from oplock/break PDUs (bnc#1012628). - Input: xpad - add support for SteelSeries Stratus Duo (bnc#1012628). - Input: input_event - provide override for sparc64 (bnc#1012628). - Input: uinput - fix undefined behavior in uinput_validate_absinfo() (bnc#1012628). - acpi/nfit: Block function zero DSMs (bnc#1012628). - acpi/nfit: Fix command-supported detection (bnc#1012628). - scsi: ufs: Use explicit access size in ufshcd_dump_regs (bnc#1012628). - dm thin: fix passdown_double_checking_shared_status() (bnc#1012628). - dm crypt: fix parsing of extended IV arguments (bnc#1012628). - drm/amdgpu: Add APTX quirk for Lenovo laptop (bnc#1012628). - EDAC, altera: Fix S10 persistent register offset (bnc#1012628). - KVM: x86: Fix single-step debugging (bnc#1012628). - KVM: x86: Fix PV IPIs for 32-bit KVM host (bnc#1012628). - KVM: x86: WARN_ONCE if sending a PV IPI returns a fatal error (bnc#1012628). - kvm: x86/vmx: Use kzalloc for cached_vmcs12 (bnc#1012628). - x86/pkeys: Properly copy pkey state at fork() (bnc#1012628). - x86/selftests/pkeys: Fork() to check for state being preserved (bnc#1012628). - x86/kaslr: Fix incorrect i8254 outb() parameters (bnc#1012628). - x86/entry/64/compat: Fix stack switching for XEN PV (bnc#1012628). - posix-cpu-timers: Unbreak timer rearming (bnc#1012628). - net: sun: cassini: Cleanup license conflict (bnc#1012628). - irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (bnc#1012628). - can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by removing it (bnc#1012628). - can: bcm: check timer values before ktime conversion (bnc#1012628). - can: flexcan: fix NULL pointer exception during bringup (bnc#1012628). - vt: make vt_console_print() compatible with the unicode screen buffer (bnc#1012628). - vt: always call notifier with the console lock held (bnc#1012628). - vt: invoke notifier on screen size change (bnc#1012628). - drm/meson: Fix atomic mode switching regression (bnc#1012628). - bpf: move {prev_,}insn_idx into verifier env (bnc#1012628). - bpf: move tmp variable into ax register in interpreter (bnc#1012628). - nvmet-rdma: Add unlikely for response allocated check (bnc#1012628). - nvmet-rdma: fix null dereference under heavy load (bnc#1012628). - bpf: enable access to ax register also from verifier rewrite (bnc#1012628). - bpf: restrict map value pointer arithmetic for unprivileged (bnc#1012628). - bpf: restrict stack pointer arithmetic for unprivileged (bnc#1012628). - bpf: restrict unknown scalars of mixed signed bounds for unprivileged (bnc#1012628). - bpf: fix check_map_access smin_value test when pointer contains offset (bnc#1012628). - bpf: prevent out of bounds speculation on pointer arithmetic (bnc#1012628). - bpf: fix sanitation of alu op with pointer / scalar type from different paths (bnc#1012628). - bpf: fix inner map masking to prevent oob under speculation (bnc#1012628). - Drivers: hv: vmbus: Remove the useless API vmbus_get_outgoing_channel() (bnc#1012628). - vmbus: fix subchannel removal (bnc#1012628). - Revert "mm, memory_hotplug: initialize struct pages for the full memory section" (bnc#1012628). - usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup (bnc#1012628). - mt76x0: do not overwrite other MT_BBP(AGC, 8) fields (bnc#1012628). - mt76x0: use band parameter for LC calibration (bnc#1012628). - mt76x02: run calibration after scanning (bnc#1012628). - mt76x02: assure we update gain after scan (bnc#1012628). - mt76x0: do not perform MCU calibration for MT7630 (bnc#1012628). - mt76x0: antenna select corrections (bnc#1012628). - mt76x0: phy: unify calibration between mt76x0u and mt76x0e (bnc#1012628). - ide: fix a typo in the settings proc file name (bnc#1012628). - Input: input_event - fix the CONFIG_SPARC64 mixup (bnc#1012628). - Refresh patches.suse/0005-x86-enter-Use-IBRS-on-syscall-and-interrupts.patch. - commit 463cfd2 - config files: set CONFIG_SCSI_MQ_DEFAULT=y (bsc#1122182) Kernel 4.20 and newer use blk_mq for device mapper exclusively. Thus stacking device mapper on SCSI devices fails unless we use blk_mq for SCSI devices as well. - commit 0a5bbbc - Linux 4.20.5 (bnc#1012628). - ipmi:ssif: Fix handling of multi-part return messages (bnc#1012628). - ipmi: Prevent use-after-free in deliver_response (bnc#1012628). - ipmi: msghandler: Fix potential Spectre v1 vulnerabilities (bnc#1012628). - ipmi: Don't initialize anything in the core until something uses it (bnc#1012628). - ipmi: fix use-after-free of user->release_barrier.rda (bnc#1012628). - Bluetooth: Fix unnecessary error message for HCI request completion (bnc#1012628). - drm/amd/display: Fix disabled cursor on top screen edge (bnc#1012628). - mm/memblock.c: skip kmemleak for kasan_init() (bnc#1012628). - mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps (bnc#1012628). - userfaultfd: clear flag if remap event not enabled (bnc#1012628). - mm/swap: use nr_node_ids for avail_lists in swap_info_struct (bnc#1012628). - mm/page-writeback.c: don't break integrity writeback on - >writepage() error (bnc#1012628). - ocfs2: fix panic due to unrecovered local alloc (bnc#1012628). - iomap: don't search past page end in iomap_is_partially_uptodate (bnc#1012628). - scsi: megaraid: fix out-of-bound array accesses (bnc#1012628). - KVM: PPC: Book3S HV: Apply combination of host and l1 pte rc for nested guest (bnc#1012628). - KVM: PPC: Book3S HV: Align gfn to L1 page size when inserting nest-rmap entry (bnc#1012628). - scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown() (bnc#1012628). - ath10k: fix peer stats null pointer dereference (bnc#1012628). - scsi: smartpqi: correct lun reset issues (bnc#1012628). - scsi: mpt3sas: fix memory ordering on 64bit writes (bnc#1012628). - IB/usnic: Fix potential deadlock (bnc#1012628). - sysfs: Disable lockdep for driver bind/unbind files (bnc#1012628). - ALSA: bebob: fix model-id of unit for Apogee Ensemble (bnc#1012628). - Bluetooth: btusb: Add support for Intel bluetooth device 8087:0029 (bnc#1012628). - dm: Check for device sector overflow if CONFIG_LBDAF is not set (bnc#1012628). - clocksource/drivers/integrator-ap: Add missing of_node_put() (bnc#1012628). - quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls (bnc#1012628). - perf tools: Add missing open_memstream() prototype for systems lacking it (bnc#1012628). - perf tools: Add missing sigqueue() prototype for systems lacking it (bnc#1012628). - perf cs-etm: Correct packets swapping in cs_etm__flush() (bnc#1012628). - dm snapshot: Fix excessive memory usage and workqueue stalls (bnc#1012628). - tools lib subcmd: Don't add the kernel sources to the include path (bnc#1012628). - perf stat: Avoid segfaults caused by negated options (bnc#1012628). - dm kcopyd: Fix bug causing workqueue stalls (bnc#1012628). - dm crypt: use u64 instead of sector_t to store iv_offset (bnc#1012628). - x86/topology: Use total_cpus for max logical packages calculation (bnc#1012628). - netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine (bnc#1012628). - netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine (bnc#1012628). - netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set (bnc#1012628). - perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX (bnc#1012628). - perf parse-events: Fix unchecked usage of strncpy() (bnc#1012628). - perf svghelper: Fix unchecked usage of strncpy() (bnc#1012628). - perf tests ARM: Disable breakpoint tests 32-bit (bnc#1012628). - perf intel-pt: Fix error with config term "pt=0" (bnc#1012628). - tools lib traceevent: Fix compile warnings in tools/lib/traceevent/event-parse.c (bnc#1012628). - tty/serial: do not free trasnmit buffer page under port lock (bnc#1012628). - btrfs: improve error handling of btrfs_add_link (bnc#1012628). - btrfs: fix use-after-free due to race between replace start and cancel (bnc#1012628). - btrfs: alloc_chunk: fix more DUP stripe size handling (bnc#1012628). - btrfs: volumes: Make sure there is no overlap of dev extents at mount time (bnc#1012628). - mmc: atmel-mci: do not assume idle after atmci_request_end (bnc#1012628). - kconfig: fix memory leak when EOF is encountered in quotation (bnc#1012628). - kconfig: fix file name and line number of warn_ignored_character() (bnc#1012628). - x86/resctrl: Fix rdt_find_domain() return value and checks (bnc#1012628). - usb: dwc2: Fix disable all EP's on disconnect (bnc#1012628). - bpf: relax verifier restriction on BPF_MOV | BPF_ALU (bnc#1012628). - arm64: Fix minor issues with the dcache_by_line_op macro (bnc#1012628). - clk: imx6q: reset exclusive gates on init (bnc#1012628). - arm64: kasan: Increase stack size for KASAN_EXTRA (bnc#1012628). - selftests: do not macro-expand failed assertion expressions (bnc#1012628). - scsi: target/core: Make sure that target_wait_for_sess_cmds() waits long enough (bnc#1012628). - scsi: target: use consistent left-aligned ASCII INQUIRY data (bnc#1012628). - net: call sk_dst_reset when set SO_DONTROUTE (bnc#1012628). - staging: erofs: fix use-after-free of on-stack `z_erofs_vle_unzip_io' (bnc#1012628). - media: venus: core: Set dma maximum segment size (bnc#1012628). - coresight: tmc: Fix bad register address for CLAIM (bnc#1012628). - ASoC: use dma_ops of parent device for acp_audio_dma (bnc#1012628). - media: firewire: Fix app_info parameter type in avc_ca{,_app}_info (bnc#1012628). - arm64: relocatable: fix inconsistencies in linker script and options (bnc#1012628). - powerpc/pseries/cpuidle: Fix preempt warning (bnc#1012628). - powerpc/xmon: Fix invocation inside lock region (bnc#1012628). - media: uvcvideo: Refactor teardown of uvc on USB disconnect (bnc#1012628). - pstore/ram: Do not treat empty buffers as valid (bnc#1012628). - clk: imx: make mux parent strings const (bnc#1012628). - kbuild: let fixdep directly write to .*.cmd files (bnc#1012628). - jffs2: Fix use of uninitialized delayed_work, lockdep breakage (bnc#1012628). - efi/libstub: Disable some warnings for x86{,_64} (bnc#1012628). - rxe: IB_WR_REG_MR does not capture MR's iova field (bnc#1012628). - drm/amdgpu: Reorder uvd ring init before uvd resume (bnc#1012628). - net: ethernet: ave: Set initial wol state to disabled (bnc#1012628). - scsi: qedi: Check for session online before getting iSCSI TLV data (bnc#1012628). - ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined (bnc#1012628). - arm64: Use a raw spinlock in __install_bp_hardening_cb() (bnc#1012628). - selinux: always allow mounting submounts (bnc#1012628). - fpga: altera-cvp: fix probing for multiple FPGAs on the bus (bnc#1012628). - usb: gadget: udc: renesas_usb3: add a safety connection way for forced_b_device (bnc#1012628). - samples: bpf: fix: error handling regarding kprobe_events (bnc#1012628). - clk: meson: meson8b: fix incorrect divider mapping in cpu_scale_table (bnc#1012628). - clk: meson: meson8b: add support for more M/N values in sys_pll (bnc#1012628). - drm/atomic-helper: Complete fake_commit->flip_done potentially earlier (bnc#1012628). - MIPS: Loongson: Add Loongson-3A R2.1 basic support (bnc#1012628). - arm64: perf: set suppress_bind_attrs flag to true (bnc#1012628). - drm/scheduler: Fix bad job be re-processed in TDR (bnc#1012628). - crypto: ecc - regularize scalar for scalar multiplication (bnc#1012628). - MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur (bnc#1012628). - x86/mce: Fix -Wmissing-prototypes warnings (bnc#1012628). - ALSA: oxfw: add support for APOGEE duet FireWire (bnc#1012628). - bpf: Allow narrow loads with offset > 0 (bnc#1012628). - serial: set suppress_bind_attrs flag only if builtin (bnc#1012628). - writeback: don't decrement wb->refcnt if !wb->bdi (bnc#1012628). - of: overlay: add missing of_node_put() after add new node to changeset (bnc#1012628). - selftests/bpf: enable (uncomment) all tests in test_libbpf.sh (bnc#1012628). - usb: typec: tcpm: Do not disconnect link for self powered devices (bnc#1012628). - e1000e: allow non-monotonic SYSTIM readings (bnc#1012628). - platform/x86: asus-wmi: Tell the EC the OS will handle the display off hotkey (bnc#1012628). - ixgbe: allow IPsec Tx offload in VEPA mode (bnc#1012628). - qtnfmac: fix error handling in control path (bnc#1012628). - drm/amdkfd: fix interrupt spin lock (bnc#1012628). - drm/amd/display: Guard against null stream_state in set_crc_source (bnc#1012628). - ASoC: wm97xx: fix uninitialized regmap pointer problem (bnc#1012628). - gpio: pl061: Move irq_chip definition inside struct pl061 (bnc#1012628). - netfilter: ipset: Allow matching on destination MAC address for mac and ipmac sets (bnc#1012628). - net: clear skb->tstamp in bridge forwarding path (bnc#1012628). - openvswitch: Fix IPv6 later frags parsing (bnc#1012628). - octeontx2-af: Fix a resource leak in an error handling path in 'cgx_probe()' (bnc#1012628). - netlink: fixup regression in RTM_GETADDR (bnc#1012628). - ipv6: Fix dump of specific table with strict checking (bnc#1012628). - ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses (bnc#1012628). - r8169: Add support for new Realtek Ethernet (bnc#1012628). - qmi_wwan: add MTU default to qmap network interface (bnc#1012628). - net, skbuff: do not prefer skb allocation fails early (bnc#1012628). - net: dsa: mv88x6xxx: mv88e6390 errata (bnc#1012628). - mlxsw: spectrum_switchdev: Set PVID correctly during VLAN deletion (bnc#1012628). - mlxsw: spectrum: Disable lag port TX before removing it (bnc#1012628). - ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped address (bnc#1012628). - commit 34ae151 ==== libyaml ==== Version update (0.1.7 -> 0.2.1) - --with-pic is useless without static libs, remove it. - Update RPM groups and descriptions. - Add libyaml-revert-emitter-changes.patch: Revert "This code is not needed and breaks tests" (gh#yaml/libyaml#122). - update to 0.2.1 * Fixed most compiler warnings -Wall -Wextra * Support static and dynamic libraries * Add support for `make test` * Apply old fix for `\/` that is not in master. * Port bug fix from Perl binding * Removed trailing-whitespaces * Fix -Wformat compilation errors in tests * Added missing Cflags path in pkg-config file * Forbid escaped singlequote in doublequotes ==== perl-Encode ==== Version update (2.99 -> 3.00) - updated to 3.00 see /usr/share/doc/packages/perl-Encode/Changes ==== python-PyYAML ==== Subpackages: python2-PyYAML python3-PyYAML - Use %license instead of %doc [bsc#1082318] ==== python-Twisted ==== - test-mktime-invalid-tm_isdst.patch: don't pass invalid tm_isdst value to mktime (see also bpo-15750) ==== python-cryptography ==== Version update (2.4.2 -> 2.5) Subpackages: python2-cryptography python3-cryptography - Dependency on python-idna changed to "Recommends" aligned with change in upstream source (see below) - update to 2.5: * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1, but this version removes the default idna dependency as well. If you still need this deprecated path please install cryptography with the idna extra: pip install cryptography[idna]. * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4. * Numerous classes and functions have been updated to allow bytes-like types for keying material and passwords, including symmetric algorithms, AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes. * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a. * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1. * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1. * Added support for X448 key exchange when using OpenSSL 1.1.1. * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1. * Added initial support for parsing PKCS12 files with load_key_and_certificates(). * Added support for IssuingDistributionPoint. * Added rfc4514_string() method to x509.Name, x509.RelativeDistinguishedName, and x509.NameAttribute to format the name or component an RFC 4514 Distinguished Name string. * Added from_encoded_point(), which immediately checks if the point is on the curve and supports compressed points. Deprecated the previous method from_encoded_point(). * Added signature_hash_algorithm to OCSPResponse. * Updated X25519 key exchange support to allow additional serialization methods. Calling public_bytes() with no arguments has been deprecated. * Added support for encoding compressed and uncompressed points via public_bytes(). Deprecated the previous method encode_point(). ==== python-gevent ==== Version update (1.3.5 -> 1.4.0) - Version update to 1.4.0: * generate with cython 0.29 * Refactored the gevent test runner and test suite to make them more reusable. In particular, the tests are now run with python -m gevent.tests. See issue #1293. * Formatting run info no longer includes gevent.local.local objects that have no value in the greenlet. See issue #1275. * Fixed negative length in pywsgi?s Input read functions for non chunked body. Reported in issue #1274 by tzickel. * Fix opening files in text mode in CPython 2 on Windows by patching libuv. See issue #1282 reported by wiggin15. * gevent now depends on greenlet 0.4.14 or above. * gevent.local.local subclasses correctly supports @staticmethod functions. Reported by Brendan Powers in issue #1266. - Do NOT bundle c-ares and libev ==== python-msgpack ==== - Use %license ==== python-pyasn1 ==== Version update (0.4.4 -> 0.4.5) Subpackages: python2-pyasn1 python3-pyasn1 - update to 0.4.5 * Debug logging refactored for more efficiency when disabled and for more functionality when in use. Specifically, the global LOG object can easily be used from any function/method, not just from codec main loop as it used to be. * More debug logging added to BER family of codecs to ease encoding problems troubleshooting. * Copyright notice extended to the year 2019 * Fixed defaulted constructed SEQUENCE component initialization. ==== python-pyasn1-modules ==== Version update (0.2.2 -> 0.2.4) - update to version 0.2.4 Revision 0.2.4: - Added modules for RFC8226 implementing JWT Claim Constraints and TN Authorization List for X.509 certificate extensions - Fixed bug in `rfc5280.AlgorithmIdentifier` ANY type definition Revision 0.2.3: - Added modules for RFC5083 and RFC5084 (CMS) - Copyright notice extended to the year 2019 ==== python-tornado ==== - Add patch to skip tests failing with openss-1.1.1; this happens only when using TLS 1.3 so if user wants to use tornado they can hand disable the TLS and continue: * skip-failing-tests.patch - Import necessary dependencies on Red Hat platforms ==== python3 ==== Subpackages: python3-curses python3-dbm - Put LICENSE file where it belongs (bsc#1121852) - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746. An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. ==== python3-base ==== Subpackages: libpython3_7m1_0 - Put LICENSE file where it belongs (bsc#1121852) - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746. An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. ==== remmina ==== Version update (1.3.1 -> 1.3.2) Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc remmina-plugin-xdmcp - Upgraded to 1.3.2 * Change rcw size allocation wait algorithm, see issue #1809 * Fix a couple of VNCI crashes, see issue #1821 * Fix spice authentication, issue #1820 * Update translations script fixes * Add a missing end point in an SSH error message * Translation Updates: fr, it * Cosmetic fixes ==== rtl8812au ==== Version update (5.2.20.2+git20190117.edcd447_k4.20.4_1 -> 5.2.20.2+git20190117.edcd447_k4.20.6_1) - Add fix-backported-ndo_select_queue.patch to fix building with SLE-15-SP1's 4.12 kernel with backported features from 4.19. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1123942 - [XEN][Build157.1] failed to open file '/usr/lib/grub2/x86_64-xen/grub.xen during bootup PV guest virtinst-change-location-for-grub_xen.patch ==== vm-install ==== Version update (0.10.05 -> 0.10.06) - bsc#1123942 - [XEN][Build157.1] failed to open file '/usr/lib/grub2/x86_64-xen/grub.xen during bootup PV guest - Version 0.10.06 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 3

[opensuse-factory] Can't upgrade TW due to borgmatic wanting Python 3.6
by Michael Pujos 05 Feb '19

05 Feb '19

sudo zypper dup --no-allow-vendor-change Loading repository data... Reading installed packages... Warning: You are about to do a distribution upgrade with all enabled repositories. Make sure these repositories are compatible before you continue. See 'man zypper' for more information about this command. Computing distribution upgrade... 2 Problems: Problem: python3-pykwalify-1.6.0-2.1.noarch requires python(abi) = 3.6, but this requirement cannot be provided Problem: borgmatic-1.2.14-1.1.noarch requires python(abi) = 3.6, but this requirement cannot be provided Problem: python3-pykwalify-1.6.0-2.1.noarch requires python(abi) = 3.6, but this requirement cannot be provided deleted providers: python3-base-3.6.5-3.3.x86_64 Solution 1: deinstallation of python3-pykwalify-1.6.0-2.1.noarch Solution 2: keep obsolete python3-base-3.6.5-3.3.x86_64 Solution 3: break python3-pykwalify-1.6.0-2.1.noarch by ignoring some of its dependencies What should I do ? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 3

[opensuse-factory] Cast Your Vote: 2018-2019 openSUSE Board Elections
by election-officials＠opensuse.org 05 Feb '19

05 Feb '19

IMPORTANT: DO NOT REPLY ON THIS LIST!!! IMPORTANT: DO NOT REPLY ON THIS LIST!!! Replies or comments should be made on the openSUSE Project Mailing List. ================ <url>https://news.opensuse.org/2019/02/05/voting-gets-underway-for-the-2018-2019…</url> <url>https://en.opensuse.org/openSUSE:Board_election</url> -- from: The Elections Committee: M. Edwin Zakaria Ish Sookun Gerry Makaro -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Recent update of python from 3.6 to 3.7 broke FreeCAD dependency
by andythe_great 04 Feb '19

04 Feb '19

FreeCAD (3D CAD software) needs libpython 3.6 # zypper in FreeCAD Problem: nothing provides libpython3.6m.so.1.0()(64bit) needed by FreeCAD-0.17.1534399137.9948ee4f1-57.16.x86_64 Thank you, Andy -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 4

[opensuse-factory] Move of resolv.conf to /run not fully implemented or buggy.
by Thorsten Kukuk 04 Feb '19

04 Feb '19

Hi, on all of my machines netconfig is now creating /run/netconfig/resolv.conf, and the file starts with: ### /etc/resolv.conf is a symlink to /var/run/netconfig/resolv.conf ### autogenerated by netconfig! Needless to say, that on none of my openSUSE installations /etc/resolv.conf is a symlink. As result, no nameservers ... Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

7 14