Hi there,
just wanted to let you guysome days ago I wondered what the default java
version would be. It should be Java 11. So I've installed a clean leap
beta installation.
I've installed java-openjdk-10, java-openjdk-11, java-openjdk-1_8_0.
Same with the equivalent devel packages. The default java version is
Java 11 both with "java" and "javac" via update-alternatives.
So everything's fine. I've updated the wiki page accordingly
(https://en.opensuse.org/Features_15.1#Java).
Does anyone know why there is no Apache Maven available in the default
packages? There is this "maven-local", which I think is not the maven
program itself.
Cheers,
Bernd
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org
Hi,
last month's status:
https://lists.opensuse.org/opensuse-factory/2018-12/msg00171.html
Last months' r-b project updates (including my work):
https://reproducible-builds.org/blog/posts/195/https://reproducible-builds.org/blog/posts/194/https://reproducible-builds.org/blog/posts/193/https://reproducible-builds.org/blog/posts/192/
I uploaded https://rb.zq1.de/compare.factory-20190125/ today
and rbstats are:
total-packages: 11298
build-tried: 11297
build-failed: 37
build-n-a: 107
build-succeeded: 11153
build-official-failed+na: 85
build-compare-failed: 283
build-compare-succeeded: 10870
bit-by-bit-identical: 10605
not-bit-by-bit-identical: 538
Fixed core packages since last month:
breeze5-icons dolphin libqt5-qtwebkit wireshark syntax-highlighting:
Qt rcc/qrc fix merged in Factory
https://build.opensuse.org/request/show/663360
also fixed dozens others like bitcoin.
opa-ff
CPU-detection via -march=native
https://build.opensuse.org/request/show/661771
gengetopt
https://build.opensuse.org/request/show/661735
nearly fixed:
pcre2
PGO/parallelism https://build.opensuse.org/request/show/668163
perl:
ASLR-induced randomness
https://build.opensuse.org/request/show/668211
--- ring0 ---
acl
gcc7
gcc8
--- ring1 ---
MozillaFirefox
MozillaThunderbird
ant
bsf
colord
emacs
firebird
gconf2-branding-openSUSE
gdb
gimp
gnome-documents
go1.10
go1.11
groff-full
grub2
hamcrest
installation-images
java-11-openjdk
java-1_8_0-openjdk
jing-trang
jtidy
junit
junitperf
kernel-debug
kernel-default
kernel-vanilla
kubernetes
libkolabxml
libqt5-qtscript
libreoffice
mono-core
mozilla-nss
pcp
php7
python-base
python3-base
qdox
release-notes-openSUSE
ruby2.5
rubygem-gem2rpm
rust
scons
transfig
virtualbox
xmlbeans
yodl
If you are interested in why they vary:
acl:
date+time in /usr/share/locale/en(a)boldquot/LC_MESSAGES/acl.mo
-PO-Revision-Date: 2018-10-23 01:45+0000
+PO-Revision-Date: 2033-11-24 15:01+0000
gcc7 gcc8:
indeterminism from PGO/parallelism + mtime. See also
https://github.com/bmwiedemann/theunreproduciblepackage/tree/master/pgo
MozillaFirefox MozillaThunderbird:
date+time, rust, other
has bug around update.locale symlink
/usr/lib64/firefox/libxul.so varies from
https://github.com/rust-lang/rust/issues/57041
.../browser/extensions/langpack-ca(a)xxxxxxxxxxxxxxxxxxx/manifest.json
- "version": "20181009013946"
+ "version": "20331110172641"
apache-commons-lang3 apache-pdfbox dom4j hsqldb icu4j javassist
jing-trang jtidy junitperf jython objectweb-asm qdox tomcat xerces-j2
xpp2 xpp3:
date + mtime
in .jar + javadoc html
can be normalized by strip-nondeterminism
bsh2 cglib:
/usr/share/maven-metadata/bsh2.xml has ASLR order issues
date + mtime in .jar + javadoc html
colord
some randomness from uninitialized memory
maybe from glib-compile-resources
16-byte random profileID in .icc files from cd-create-profile
plus an uncommitted date/time fix in lib/colord/cd-it8.c:
priv->enable_created = FALSE
ecj
ASLR + date?
/usr/share/maven-metadata/ecj.xml has alias entries in random order
emacs
dumps lisp interpreter memory to create its binaries
(similar to clisp)
causes variations in /usr/bin/emacs-*
firebird:
ships unreproducible database
http://tracker.firebirdsql.org/browse/CORE-5548
gconf2-branding-openSUSE
embeds mtime values in
/etc/gconf/gconf.xml.vendor/%gconf-tree.xml
gdb
contains testresults
https://bugzilla.opensuse.org/show_bug.cgi?id=1110708
gimp
ASLR
12 byte differ in bKGD header
from gegl
GEGL_USE_OPENCL=no GEGL_SWAP=ram /usr/bin/gegl
../../icons/Symbolic/64/gimp-texture.png -o 64/gimp-texture.png --
gegl:invert-gamma
gnome-documents
gnome-documents-getting-started.pdf has random ID from inkscape
go1.10 go1.11:
variations in /usr/lib64/go/1.10/pkg/obj/go-build/*/*-a
groff-full
date+time + unknown reason?
.ps files vary
.html files have CreationDate
grub2
mtime + readdir
https://savannah.gnu.org/bugs/index.php?54841
hamcrest
java .class files vary from
build/temp/hamcrest-core/generated-code
/org/hamcrest/CoreMatchers.java written by ant
javadoc html varies
installation-images
many variations from mtimes + filesys/readdir and %post scripts
java-1_8_0-openjdk java-10-openjdk java-11-openjdk
various .jar .zip .html .jmod
ordering in /usr/lib64/jvm/java-10-openjdk-10/lib/classlist
kernel-debug kernel-default kernel-vanilla
date+time ; random keys?
"Build time autogenerated kernel key0
..181009012108Z..21180915012108Z0.1,0"
kubernetes:
fixed upstream: order in man-pages
https://github.com/kubernetes/kubernetes/pull/68983
maybe fixed upstream: random build-ids
libkolabxml
unknown/ASLR?
from build/kolabformat-xcal-schema.cxx
created by compiled/xsdbin.cxx
libqt5-qtscript
filesys order
libreoffice
various .jar .so .dat/.bau (.zip) javadoc_log.txt
mono-core
date+time ; other
mozilla-nss
DSA random temp-key from shlibsign
https://bugzilla.opensuse.org/show_bug.cgi?id=1081723
pcp
/var/lib/pcp/testsuite/perfevent/perfevent_coverage has random diffs
from gcov / .gcno files causing diff in .o ?
php7
date / EPOCH timestamps
e.g. in /usr/share/php7/PEAR/.channels/__uri.reg
python-base python3-base:
PGO
varies .o files that go into /usr/lib64/libpython3.6m.so.1.0
.pyc files vary
python-base shows influence from date+hostname (in PGO?)
python-numpy
1 .pyc file varied
release-notes-openSUSE
partial fix in https://github.com/openSUSE/daps/issues/482
date+time in .pdf ; needs work on fop java code
random id values in .html
ruby2.5
2 gemspec files have date
created.rid varies
rubygem-gem2rpm
mtime ?
/usr/lib64/ruby/gems/2.5.0/cache/checksums.yaml varies
rust
asm diffs in cargo and others from llvm's llc
- filed at https://github.com/rust-lang/rust/issues/57041
some progress made here with the switch to llvm7
scons
hostname in various places
tigervnc
date+time+randomness in
/usr/share/vnc/classes/META-INF/TIGERVNC.RSA
from SignJar.cmake calling jarsigner with temporary private key
partial fix merged https://github.com/TigerVNC/tigervnc/pull/765
transfig
date+time
in sample-presentation.pdf /CreationDate /ModDate
from pdflatex
virtualbox
tar + random
https://www.virtualbox.org/ticket/16854
.so files have random NT_GNU_BUILD_ID (unique build ID bitstring)
maybe from out/linux.amd64/release/obj/webservice/gsoapH_from_gsoap.h
that has date+time in comment
/usr/share/virtualbox/extensions/VNC-5.2.16.vbox-extpack
unhandled gzip content: POSIX tar archive (GNU)
-13343137165.010505. 5...
+16773576625.010527. 5...
xmlbeans
index.xsb varies from filesystem
created in org.apache.xmlbeans.impl.tool.SchemaCompiler
yodl
pdf from latex/ghostscript/dvips/ps2pdf
additionally, on the SLE15 list
===============================
gnuplot
date+time in pdf from pdflatex
golang-github-prometheus-prometheus
date+time+random build-id
hawk2
https://bugzilla.opensuse.org/show_bug.cgi?id=1112159
ibus-libzhuyin libpinyin libzhuyin
random bytes - maybe uninitialized memory
perf
random filesys order
from nftw call in ./linux-*/tools/perf/pmu-events/jevents.c
python-keystoneauth1
https://bugs.launchpad.net/keystoneauth/+bug/1796899
Hi.
We as toolchain team are working on enablement of LTO in Factory:
LTO stands for Link Time Optimization and it is a GCC optimization
technique that improves speed and reduces size of binaries. According
to our measurements, ELF binaries will be about 5% smaller and debug
info packages by 15%. Now, there are various interesting packages that
have been LTO in Factory right now: libreoffice, MozillaFirefox, python3,
gcc9.
Our goal is to extend the scope to as many packages as possible. We'll achieve
that via a new RPM macro: _lto_cflags. We expect that about 5% of packages will
have LTO disabled due to various reasons. A new META bug has been created for that
and will link all these packages:
https://bugzilla.opensuse.org/show_bug.cgi?id=1133084
I'm also planning to collect all relevant information for package maintainers
on the following WIKI page:
https://en.opensuse.org/openSUSE:LTO
Note that Debian and Gentoo are also trying to adopt LTO in their corresponding
ecosystems:
https://wiki.debian.org/LTOhttps://github.com/InBetweenNames/gentooLTO
Martin
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org
SUSE will blacklist a number of legacy and/or less frequently used
file systems by default on SLES for security reasons.
The proposed list can be seen here:
https://github.com/openSUSE/suse-module-tools/pull/5/commits/8cb42fb6658f21…
The question is now whether we should do the same for openSUSE.
I figure that while the above list is probably not controversial for
enterprise customers, openSUSE users may have objections to some
items on the list. Please speak up if you do.
In any case, note that even if we do this, you can re-enable the
filesystems you need by simply commenting out lines in the blacklist
file.
Regards,
Martin
--
Dr. Martin Wilck <mwilck(a)suse.com>, Tel. +49 (0)911 74053 2107
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton
HRB 21284 (AG Nürnberg)
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org
I recently tried to migrate from SuSEfirewall2 to FirewallD on my
Tumbleweed desktop. The automatic migration failed completely. No
single port from my SuSEfirewall2 configuration was opened in FirewallD
after the migration.
Now I plan to migrate an openSUSE Leap server (from 42.3 over 15.0 to 15.1).
Networking on both computers (desktop and server) is very similar. Both
computers have a network interface eno1 and a bridge br0, which connects
the hardware interface eno1 with the KVM machines. There are additional
network interfaces to docker containers (docker0) and KVM machines
(br-<something>).
All docker containers and KVM machines need client access to the
Internet. That's why the firewall for the host needs a routing
configuration.
I found some blog articles about FirewallD configuration for routing.
But the blog articles I found only mention FirewallD direct rules for
configuring IPTables FORWARD rules. I can't find more high level
configuration tips.
How are you configuring routing with FirewallD?
Greetings,
Björn
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org
Hi,
There are currently 175 requests waiting for a legal auto review (295 with the
automated review from one of the 'Cloud:Platform' repo).
The oldest requests are 2 months old, one is 2 months old (SR#690389).
The legal-auto 'group' contains 2 persons, the bus factor is critically low.
Are there plans to improve the situation?
Thanks.
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
cppcheck (1.85 -> 1.86)
cups-filters (1.21.4 -> 1.21.6)
elementary-xfce-icon-theme (0.13.1+20181113.14732d1b -> 0.13.1~git6.c377da86)
festival
flatpak-builder (1.0.0 -> 1.0.1)
fwupd
gnu-unifont-bitmap-fonts (11.0.02 -> 11.0.03)
gstreamer-plugins-bad
health-checker
kernel-firmware (20181026 -> 20181218)
kernel-source (4.19.8 -> 4.19.11)
libassuan
libinput (1.12.3 -> 1.12.4)
libmtp
libyui-qt-pkg (2.45.24 -> 2.45.25)
llvm (6.0.1 -> 7.0.0)
llvm4
llvm6
llvm7
multipath-tools (0.7.9+58+suse.0790830 -> 0.7.9+85+suse.766b95e)
openldap2 (2.4.46 -> 2.4.47)
osinfo-db
postfix
protobuf
python-PySocks
python-Pygments
python-SecretStorage
python-base
python-ipaddr
python-ndg-httpsclient
python-parso
python-passlib
python-rpm-macros
python-urlgrabber
qqc2-desktop-style (5.52.0 -> 5.53.0)
systemd-presets-common-SUSE
tracker
=== Details ===
==== cppcheck ====
Version update (1.85 -> 1.86)
- Update to 1.86
* Many fixes in the template simplifier
* Several fixes in the abstract syntax tree.
Checking improvements:
* New check: passing address of char to function that expects a
strz
* New check: shadow variables
* Improved lifetime checking
* Improved STL iterators checking
* Improved data flow analysis
New libraries:
* zlib
* googletest
Addons:
* misra.py: Fixes for suppressions and exclusions
* namingng.py: New addon to check naming conventions. Rules are
specified in json file.
==== cups-filters ====
Version update (1.21.4 -> 1.21.6)
- Update to version 1.21.6:
* Bug fix release, mainly for cups-browsed to avoid crashes and
infinite printer removal/re-creation loops and spurious local
queues for local CUPS printers. Also expanded PostScript
interpreter bug workaround to more Apple LaserWriter models.
* cups-browsed: To find out whether a DNS-SD-discovered printer
is from the local machine, use not only the flags in the Avahi
lookup result but also check the host name.
* cups-browsed: When a local CUPS queue pointing to a remote CUPS
printer was removed and re-created to make it a permanent
queue, on_printer_deleted() was triggered by cupsd's
notification to re-create a lost queue. Now
on_printer_deleted() checks whether the queue is really gone
and only re-creates then.
* cups-browsed: When updating the CUPS queues, also removed and
unregistered queues and not only created queues got checked for
HTTP timeouts, which caused crashes on shutdown.
* pdftops: Use the PS interpreter of Poppler for all Apple
LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
seem to not work with Ghostscript's PS output.
* cups-browsed: On shutdown queues got removed even if they still
had jobs.
- Changes from version 1.21.5:
* Bug fix release, to build with Poppler 0.71 and with
cups-browsed converting temporary CUPS queues reliably to
permanent queues.
* cups-browsed: We cannot reliably determine whether a CUPS queue
is temporary, so we apply the procedure to make a temporary
queue permanent to any unshared queue.
* pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
Poppler-specific "GBool", "gFalse", "gTrue" any more, as
Poppler has switched to standard "bool", "false", "true" in
version 0.71.0.
==== elementary-xfce-icon-theme ====
Version update (0.13.1+20181113.14732d1b -> 0.13.1~git6.c377da86)
- Update to version 0.13.1~git6.c377da86:
* Add yast specific package-* icons
- Renamed version
==== festival ====
- Do not ignore errors from useradd/groupadd.
==== flatpak-builder ====
Version update (1.0.0 -> 1.0.1)
- Update to version 1.0.1:
+ Run appstream-util mirror-screenshots in the sandbox, rather
than on the host, as the host might not have a new enough
appstream-glib.
+ Fix build cache when a module has uncommon characters in the
name.
==== fwupd ====
Subpackages: fwupd-lang libfwupd2
- Add pesign-obs-integration to BuildRequires and add fwupd*.efi to
BRP_PESIGN_FILES to get it signed
- Add LC_IMAGES and use efivar only if %{with efi_fw_update}
+ Also update the version requirement of efivar
- Disable Redfish and NVME plugins if %{without efi_fw_update}
since those two plugins require efivar
- Remove fwup from BuildRequires since fwupdate is already merged
into fwupd.
==== gnu-unifont-bitmap-fonts ====
Version update (11.0.02 -> 11.0.03)
- unifont 11.0.03:
* Add Nushu glyphs
* Final forms for Kana placeholder glyphs
* other minor changes to single glyphs
==== gstreamer-plugins-bad ====
Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbadvideo-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgsturidownloader-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0
- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
with libfdk-aac 2.0.0.
==== health-checker ====
- Split the CaaSP plugin into a MicroOS and CaaSP part
==== kernel-firmware ====
Version update (20181026 -> 20181218)
Subpackages: ucode-amd
- Update to version 20181218:
* Revert "amdgpu: update vega10 fw for 18.50 release"
* brcm: Add 4330 NVRAM for the Prowise PT301 tablet
* brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
* brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
* brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
* brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
* brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
* brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
* brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
* WHENCE: Put quotes around brcmfmac NVRAM filenames
* check_whence.py: Add support for filenames with spaces in them
* rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS
- Update to version 20181217:
* iwlwifi: update firmwares for 8000 series
* iwlwifi: add -43.ucode for 9000 series
* iwlwifi: update -41.ucode for 9000 series
* brcm: provide new firmwares for BCM4366 chipset
* Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
* cavium: Update firmware for CNN55XX crypto driver
* amdgpu: update vega12 fw for 18.50 release
* amdgpu: update vega10 fw for 18.50 release
* amdgpu: update raven fw for 18.50 release
* amdgpu: update polaris11 fw for 18.50 release
* amdgpu: update polaris10 fw for 18.50 release
* amdgpu: add firmware for vega12
* amdgpu: Add new polaris MC firmwares
* amdgpu: Add new polaris SMC firmwares
* linux-firmware: Update AMD cpu microcode
* nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
* microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
* linux-firmware: intel: Update Cannonlake audio firmware.
* firmware/huc/bxt: Add huC Update for BXT
* nfp: update Agilio SmartNIC firmware to rev 2.1.16
* cxgb4: update firmware to revision 1.21.5.0
==== kernel-source ====
Version update (4.19.8 -> 4.19.11)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms
- Linux 4.19.11 (bnc#1012628).
- sched/pelt: Fix warning and clean up IRQ PELT config
(bnc#1012628).
- scsi: raid_attrs: fix unused variable warning (bnc#1012628).
- staging: olpc_dcon: add a missing dependency (bnc#1012628).
- slimbus: ngd: mark PM functions as __maybe_unused (bnc#1012628).
- i2c: aspeed: fix build warning (bnc#1012628).
- ARM: dts: qcom-apq8064-arrow-sd-600eval fix graph_endpoint
warning (bnc#1012628).
- drm/msm: fix address space warning (bnc#1012628).
- pinctrl: sunxi: a83t: Fix IRQ offset typo for PH11
(bnc#1012628).
- aio: fix spectre gadget in lookup_ioctx (bnc#1012628).
- scripts/spdxcheck.py: always open files in binary mode
(bnc#1012628).
- fs/iomap.c: get/put the page in iomap_page_create/release()
(bnc#1012628).
- userfaultfd: check VM_MAYWRITE was set after verifying the
uffd is registered (bnc#1012628).
- arm64: dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing
(bnc#1012628).
- block/bio: Do not zero user pages (bnc#1012628).
- ovl: fix decode of dir file handle with multi lower layers
(bnc#1012628).
- ovl: fix missing override creds in link of a metacopy upper
(bnc#1012628).
- MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310
(bnc#1012628).
- mmc: core: use mrq->sbc when sending CMD23 for RPMB
(bnc#1012628).
- mmc: sdhci-omap: Fix DCRC error handling during tuning
(bnc#1012628).
- mmc: sdhci: fix the timeout check window for clock and reset
(bnc#1012628).
- fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns
ENOSYS (bnc#1012628).
- ARM: mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt (bnc#1012628).
- ARM: dts: bcm2837: Fix polarity of wifi reset GPIOs
(bnc#1012628).
- dm thin: send event about thin-pool state change _after_
making it (bnc#1012628).
- dm cache metadata: verify cache has blocks in
blocks_are_clean_separate_dirty() (bnc#1012628).
- dm: call blk_queue_split() to impose device limits on bios
(bnc#1012628).
- tracing: Fix memory leak in create_filter() (bnc#1012628).
- tracing: Fix memory leak in set_trigger_filter() (bnc#1012628).
- tracing: Fix memory leak of instance function hash filters
(bnc#1012628).
- media: vb2: don't call __vb2_queue_cancel if vb2_start_streaming
failed (bnc#1012628).
- powerpc/msi: Fix NULL pointer access in teardown code
(bnc#1012628).
- powerpc: Look for "stdout-path" when setting up legacy consoles
(bnc#1012628).
- drm/nouveau/kms: Fix memory leak in nv50_mstm_del()
(bnc#1012628).
- drm/nouveau/kms/nv50-: also flush fb writes when rewinding
push buffer (bnc#1012628).
- Revert "drm/rockchip: Allow driver to be shutdown on
reboot/kexec" (bnc#1012628).
- drm/i915/gvt: Fix tiled memory decoding bug on BDW
(bnc#1012628).
- drm/i915/execlists: Apply a full mb before execution for
Braswell (bnc#1012628).
- drm/amdgpu/powerplay: Apply avfs cks-off voltages on VI
(bnc#1012628).
- drm/amdkfd: add new vega10 pci ids (bnc#1012628).
- drm/amdgpu: add some additional vega10 pci ids (bnc#1012628).
- drm/amdgpu: update smu firmware images for VI variants (v2)
(bnc#1012628).
- drm/amdgpu: update SMC firmware image for polaris10 variants
(bnc#1012628).
- dm zoned: Fix target BIO completion handling (bnc#1012628).
- commit 096f733
- Linux 4.19.10 (bnc#1012628).
- tcp: lack of available data can also cause TSO defer
(bnc#1012628).
- bpf: fix off-by-one error in adjust_subprog_starts
(bnc#1012628).
- IB/hfi1: Fix an out-of-bounds access in get_hw_stats
(bnc#1012628).
- ALSA: hda/realtek - Fix the mute LED regresion on Lenovo X1
Carbon (bnc#1012628).
- ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA
with ALC294 (bnc#1012628).
- ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with
ALC294 (bnc#1012628).
- ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS
X542UN (bnc#1012628).
- ALSA: hda/realtek - Fixed headphone issue for ALC700
(bnc#1012628).
- ALSA: fireface: fix reference to wrong register for clock
configuration (bnc#1012628).
- dax: Check page->mapping isn't NULL (bnc#1012628).
- flexfiles: enforce per-mirror stateid only for v4 DSes
(bnc#1012628).
- ocfs2: fix potential use after free (bnc#1012628).
- initramfs: clean old path before creating a hardlink
(bnc#1012628).
- kernel/kcov.c: mark funcs in __sanitizer_cov_trace_pc() as
notrace (bnc#1012628).
- proc: fixup map_files test on arm (bnc#1012628).
- debugobjects: avoid recursive calls with kmemleak (bnc#1012628).
- hfsplus: do not free node before using (bnc#1012628).
- hfs: do not free node before using (bnc#1012628).
- mm/page_alloc.c: fix calculation of pgdat->nr_zones
(bnc#1012628).
- ocfs2: fix deadlock caused by ocfs2_defrag_extent()
(bnc#1012628).
- ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized
pointer value (bnc#1012628).
- nvme-rdma: fix double freeing of async event data (bnc#1012628).
- nvme: flush namespace scanning work just before removing
namespaces (bnc#1012628).
- nvme: warn when finding multi-port subsystems without
multipathing enabled (bnc#1012628).
- fscache, cachefiles: remove redundant variable 'cache'
(bnc#1012628).
- cachefiles: Explicitly cast enumerated type in put_object
(bnc#1012628).
- fscache: fix race between enablement and dropping of object
(bnc#1012628).
- afs: Fix validation/callback interaction (bnc#1012628).
- pstore/ram: Correctly calculate usable PRZ bytes (bnc#1012628).
- pvcalls-front: fixes incorrect error handling (bnc#1012628).
- Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
(bnc#1012628).
- xen: xlate_mmu: add missing header to fix 'W=1' warning
(bnc#1012628).
- drm/ast: fixed reading monitor EDID not stable issue
(bnc#1012628).
- drm/amdgpu: Add delay after enable RLC ucode (bnc#1012628).
- net: hisilicon: remove unexpected free_netdev (bnc#1012628).
- ixgbe: recognize 1000BaseLX SFP modules as 1Gbps (bnc#1012628).
- igb: fix uninitialized variables (bnc#1012628).
- cachefiles: Fix page leak in cachefiles_read_backing_file
while vmscan is active (bnc#1012628).
- fscache: Fix race in fscache_op_complete() due to split
atomic_sub & read (bnc#1012628).
- cachefiles: Fix an assertion failure when trying to update a
failed object (bnc#1012628).
- ALSA: usb-audio: Add vendor and product name for Dell WD19 Dock
(bnc#1012628).
- netfilter: nf_tables: deactivate expressions in rule replecement
routine (bnc#1012628).
- usb: gadget: u_ether: fix unsafe list iteration (bnc#1012628).
- net: thunderx: fix NULL pointer dereference in nic_remove
(bnc#1012628).
- x86/kvm/vmx: fix old-style function declaration (bnc#1012628).
- KVM: x86: fix empty-body warnings (bnc#1012628).
- KVM: VMX: Update shared MSRs to be saved/restored on
MSR_EFER.LMA changes (bnc#1012628).
- netfilter: nf_conncount: remove wrong condition check routine
(bnc#1012628).
- netfilter: nat: fix double register in masquerade modules
(bnc#1012628).
- netfilter: add missing error handling code for register
functions (bnc#1012628).
- IB/mlx5: Fix page fault handling for MW (bnc#1012628).
- netfilter: ipv6: Preserve link scope traffic original oif
(bnc#1012628).
- drm/meson: add support for 1080p25 mode (bnc#1012628).
- thunderbolt: Prevent root port runtime suspend during NVM
upgrade (bnc#1012628).
- USB: omap_udc: fix rejection of out transfers when DMA is used
(bnc#1012628).
- USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
(bnc#1012628).
- USB: omap_udc: fix omap_udc_start() on 15xx machines
(bnc#1012628).
- USB: omap_udc: fix crashes on probe error and module removal
(bnc#1012628).
- USB: omap_udc: use devm_request_irq() (bnc#1012628).
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
(bnc#1012628).
- fsi: master-ast-cf: select GENERIC_ALLOCATOR (bnc#1012628).
- bpf: fix check of allowed specifiers in bpf_trace_printk
(bnc#1012628).
- RDMA/hns: Bugfix pbl configuration for rereg mr (bnc#1012628).
- exportfs: do not read dentry after free (bnc#1012628).
- ASoC: omap-dmic: Add pm_qos handling to avoid overruns with
CPU_IDLE (bnc#1012628).
- ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns
with CPU_IDLE (bnc#1012628).
- ASoC: omap-mcbsp: Fix latency value calculation for pm_qos
(bnc#1012628).
- tools: bpftool: fix potential NULL pointer dereference in
do_load (bnc#1012628).
- RDMA/rdmavt: Fix rvt_create_ah function signature (bnc#1012628).
- RDMA/bnxt_re: Avoid accessing the device structure after it
is freed (bnc#1012628).
- RDMA/bnxt_re: Fix system hang when registration with L2 driver
fails (bnc#1012628).
- RDMA/core: Add GIDs while changing MAC addr only for registered
ndev (bnc#1012628).
- RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR (bnc#1012628).
- Btrfs: send, fix infinite loop due to directory rename
dependencies (bnc#1012628).
- ARM: dts: at91: sama5d2: use the divided clock for SMC
(bnc#1012628).
- phy: qcom-qusb2: Fix HSTX_TRIM tuning with fused value for
SDM845 (bnc#1012628).
- phy: qcom-qusb2: Use HSTX_TRIM fused value as is (bnc#1012628).
- objtool: Fix segfault in .cold detection with
- ffunction-sections (bnc#1012628).
- objtool: Fix double-free in .cold detection error path
(bnc#1012628).
- ASoC: acpi: fix: continue searching when machine is ignored
(bnc#1012628).
- PCI: imx6: Fix link training status detection in link up check
(bnc#1012628).
- perf tools: Restore proper cwd on return from mnt namespace
(bnc#1012628).
- hwmon: (w83795) temp4_type has writable permission
(bnc#1012628).
- netfilter: xt_hashlimit: fix a possible memory leak in
htable_create() (bnc#1012628).
- aio: fix failure to put the file pointer (bnc#1012628).
- bpf: allocate local storage buffers using GFP_ATOMIC
(bnc#1012628).
- hwmon: (mlxreg-fan) Fix macros for tacho fault reading
(bnc#1012628).
- spi: omap2-mcspi: Add missing suspend and resume calls
(bnc#1012628).
- ASoC: dapm: Recalculate audio map forcely when card instantiated
(bnc#1012628).
- ASoC: omap-abe-twl6040: Fix missing audio card caused by
deferred probing (bnc#1012628).
- hwmon: (ina2xx) Fix current value calculation (bnc#1012628).
- s390/cpum_cf: Reject request for sampling in event
initialization (bnc#1012628).
- ASoC: qcom: Set dai_link id to each dai_link (bnc#1012628).
- ASoC: Intel: Power down links before turning off display audio
power (bnc#1012628).
- ASoC: wm_adsp: Fix dma-unsafe read of scratch registers
(bnc#1012628).
- ASoC: rockchip: add missing slave_config setting for I2S
(bnc#1012628).
- hwmon: (raspberrypi) Fix initial notify (bnc#1012628).
- hwmon (ina2xx) Fix NULL id pointer in probe() (bnc#1012628).
- s390/cio: Fix cleanup when unsupported IDA format is used
(bnc#1012628).
- s390/cio: Fix cleanup of pfn_array alloc failure (bnc#1012628).
- netfilter: nf_tables: fix use-after-free when deleting compat
expressions (bnc#1012628).
- netfilter: xt_RATEEST: remove netns exit routine (bnc#1012628).
- perf tools: Fix crash on synthesizing the unit (bnc#1012628).
- selftests: add script to stress-test nft packet path vs. control
plane (bnc#1012628).
- netfilter: nf_tables: don't skip inactive chains during update
(bnc#1012628).
- netfilter: nf_conncount: fix unexpected permanent node of list
(bnc#1012628).
- netfilter: nf_conncount: fix list_del corruption in conn_free
(bnc#1012628).
- netfilter: nf_conncount: use spin_lock_bh instead of spin_lock
(bnc#1012628).
- sysv: return 'err' instead of 0 in __sysv_write_inode
(bnc#1012628).
- arm64: dts: sdm845-mtp: Reserve reserved gpios (bnc#1012628).
- ASoC: sun8i-codec: fix crash on module removal (bnc#1012628).
- tools: bpftool: prevent infinite loop in get_fdinfo()
(bnc#1012628).
- ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
(bnc#1012628).
- ARM: dts: am3517-som: Fix WL127x Wifi interrupt (bnc#1012628).
- ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1
(bnc#1012628).
- ARM: dts: LogicPD Torpedo: Fix mmc3_dat1 interrupt
(bnc#1012628).
- ARM: dts: am3517: Fix pinmuxing for CD on MMC1 (bnc#1012628).
- staging: rtl8723bs: Fix the return value in case of error in
'rtw_wx_read32()' (bnc#1012628).
- ASoC: qdsp6: q6afe-dai: Fix the dai widgets (bnc#1012628).
- ASoC: qdsp6: q6afe: Fix wrong MI2S SD line mask (bnc#1012628).
- ASoC: rsnd: fixup clock start checker (bnc#1012628).
- ARM: OMAP2+: prm44xx: Fix section annotation on
omap44xx_prm_enable_io_wakeup (bnc#1012628).
- net: fix XPS static_key accounting (bnc#1012628).
- net: restore call to netdev_queue_numa_node_write when resetting
XPS (bnc#1012628).
- sctp: update frag_point when stream_interleave is set
(bnc#1012628).
- net: phy: sfp: correct store of detected link modes
(bnc#1012628).
- virtio-net: keep vnet header zeroed after processing XDP
(bnc#1012628).
- tun: forbid iface creation with rtnl ops (bnc#1012628).
- tcp: fix NULL ref in tail loss probe (bnc#1012628).
- tcp: Do not underestimate rwnd_limited (bnc#1012628).
- sctp: kfree_rcu asoc (bnc#1012628).
- rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER
devices (bnc#1012628).
- Revert "net/ibm/emac: wrong bit is used for STA control"
(bnc#1012628).
- net: use skb_list_del_init() to remove from RX sublists
(bnc#1012628).
- net: Prevent invalid access to skb->prev in __qdisc_drop_all
(bnc#1012628).
- net: phy: don't allow __set_phy_supported to add unsupported
modes (bnc#1012628).
- net/mlx4_en: Change min MTU size to ETH_MIN_MTU (bnc#1012628).
- net/mlx4_core: Correctly set PFC param if global pause is
turned off (bnc#1012628).
- net: 8139cp: fix a BUG triggered by changing mtu with network
traffic (bnc#1012628).
- ipv6: sr: properly initialize flowi6 prior passing to
ip6_route_output (bnc#1012628).
- neighbour: Avoid writing before skb->head in neigh_hh_output()
(bnc#1012628).
- ipv6: Check available headroom in ip6_xmit() even without
options (bnc#1012628).
- ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize
changes (bnc#1012628).
- commit 9284d89
- Linux 4.19.9 (bnc#1012628).
- media: vicodec: lower minimum height to 360 (bnc#1012628).
- media: cec: check for non-OK/NACK conditions while claiming a LA
(bnc#1012628).
- media: omap3isp: Unregister media device as first (bnc#1012628).
- media: ipu3-cio2: Unregister device nodes first, then release
resources (bnc#1012628).
- iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
(bnc#1012628).
- brcmutil: really fix decoding channel info for 160 MHz bandwidth
(bnc#1012628).
- mt76: fix building without CONFIG_LEDS_CLASS (bnc#1012628).
- iommu/ipmmu-vmsa: Fix crash on early domain free (bnc#1012628).
- scsi: ufs: Fix hynix ufs bug with quirk on hi36xx SoC
(bnc#1012628).
- can: ucan: remove set but not used variable 'udev'
(bnc#1012628).
- can: rcar_can: Fix erroneous registration (bnc#1012628).
- test_firmware: fix error return getting clobbered (bnc#1012628).
- HID: input: Ignore battery reported by Symbol DS4308
(bnc#1012628).
- batman-adv: Use explicit tvlv padding for ELP packets
(bnc#1012628).
- batman-adv: Expand merged fragment buffer for full packet
(bnc#1012628).
- amd/iommu: Fix Guest Virtual APIC Log Tail Address Register
(bnc#1012628).
- bnx2x: Assign unique DMAE channel number for FW DMAE
transactions (bnc#1012628).
- qed: Fix PTT leak in qed_drain() (bnc#1012628).
- qed: Fix overriding offload_tc by protocols without APP TLV
(bnc#1012628).
- qed: Fix rdma_info structure allocation (bnc#1012628).
- qed: Fix reading wrong value in loop condition (bnc#1012628).
- usb: dwc2: pci: Fix an error code in probe (bnc#1012628).
- Revert "usb: gadget: ffs: Fix BUG when userland exits with
submitted AIO transfers" (bnc#1012628).
- s390/ism: clear dmbe_mask bit before SMC IRQ handling
(bnc#1012628).
- nvme-fc: resolve io failures during connect (bnc#1012628).
- bnxt_en: Fix filling time in bnxt_fill_coredump_record()
(bnc#1012628).
- drm/amdgpu: Add amdgpu "max bpc" connector property (v2)
(bnc#1012628).
- drm/amd/display: Support amdgpu "max bpc" connector property
(v2) (bnc#1012628).
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
(bnc#1012628).
- net/mlx4_core: Fix uninitialized variable compilation warning
(bnc#1012628).
- net/mlx4: Fix UBSAN warning of signed integer overflow
(bnc#1012628).
- drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo
(bnc#1012628).
- gpio: pxa: fix legacy non pinctrl aware builds again
(bnc#1012628).
- gpio: mockup: fix indicated direction (bnc#1012628).
- tc-testing: tdc.py: ignore errors when decoding stdout/stderr
(bnc#1012628).
- tc-testing: tdc.py: Guard against lack of returncode in executed
command (bnc#1012628).
- mtd: rawnand: qcom: Namespace prefix some commands
(bnc#1012628).
- cpufreq: ti-cpufreq: Only register platform_device when
supported (bnc#1012628).
- Revert "HID: uhid: use strlcpy() instead of strncpy()"
(bnc#1012628).
- HID: multitouch: Add pointstick support for Cirque Touchpad
(bnc#1012628).
- mtd: spi-nor: Fix Cadence QSPI page fault kernel panic
(bnc#1012628).
- net: ena: fix crash during failed resume from hibernation
(bnc#1012628).
- NFSv4: Fix a NFSv4 state manager deadlock (bnc#1012628).
- qed: Fix bitmap_weight() check (bnc#1012628).
- qed: Fix QM getters to always return a valid pq (bnc#1012628).
- net/ibmnvic: Fix deadlock problem in reset (bnc#1012628).
- riscv: fix warning in arch/riscv/include/asm/module.h
(bnc#1012628).
- net: faraday: ftmac100: remove netif_running(netdev) check
before disabling interrupts (bnc#1012628).
- iommu/vt-d: Use memunmap to free memremap (bnc#1012628).
- NFSv4.2 copy do not allocate memory under the lock
(bnc#1012628).
- flexfiles: use per-mirror specified stateid for IO
(bnc#1012628).
- ibmvnic: Fix RX queue buffer cleanup (bnc#1012628).
- ibmvnic: Update driver queues after change in ring size support
(bnc#1012628).
- team: no need to do team_notify_peers or team_mcast_rejoin
when disabling port (bnc#1012628).
- net: amd: add missing of_node_put() (bnc#1012628).
- usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
(bnc#1012628).
- usb: appledisplay: Add 27" Apple Cinema Display (bnc#1012628).
- USB: check usb_get_extra_descriptor for proper size
(bnc#1012628).
- USB: serial: console: fix reported terminal settings
(bnc#1012628).
- ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support
(bnc#1012628).
- ALSA: hda: Add support for AMD Stoney Ridge (bnc#1012628).
- ALSA: pcm: Fix starvation on down_write_nonblock()
(bnc#1012628).
- ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
(bnc#1012628).
- ALSA: pcm: Fix interval evaluation with openmin/max
(bnc#1012628).
- ALSA: hda/realtek - Fix speaker output regression on Thinkpad
T570 (bnc#1012628).
- ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer
Aspire U27-880 (bnc#1012628).
- ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset
mic (bnc#1012628).
- ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G
(bnc#1012628).
- ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton
Z4860G/Z6860G (bnc#1012628).
- media: gspca: fix frame overflow error (bnc#1012628).
- media: vicodec: fix memchr() kernel oops (bnc#1012628).
- Revert "mfd: cros_ec: Use devm_kzalloc for private data"
(bnc#1012628).
- parisc: Enable -ffunction-sections for modules on 32-bit kernel
(bnc#1012628).
- virtio/s390: avoid race on vcdev->config (bnc#1012628).
- virtio/s390: fix race in ccw_io_helper() (bnc#1012628).
- vhost/vsock: fix use-after-free in network stack callers
(bnc#1012628).
- arm64: hibernate: Avoid sending cross-calling with interrupts
disabled (bnc#1012628).
- SUNRPC: Fix leak of krb5p encode pages (bnc#1012628).
- dmaengine: dw: Fix FIFO size for Intel Merrifield (bnc#1012628).
- Revert "dmaengine: imx-sdma: Use GFP_NOWAIT for dma allocations"
(bnc#1012628).
- Revert "dmaengine: imx-sdma: alloclate bd memory from dma pool"
(bnc#1012628).
- dmaengine: imx-sdma: implement channel termination via worker
(bnc#1012628).
- dmaengine: imx-sdma: use GFP_NOWAIT for dma descriptor
allocations (bnc#1012628).
- dmaengine: cppi41: delete channel from pending list when stop
channel (bnc#1012628).
- ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE
(bnc#1012628).
- xhci: workaround CSS timeout on AMD SNPS 3.0 xHC (bnc#1012628).
- xhci: Prevent U1/U2 link pm states if exit latency is too long
(bnc#1012628).
- arm64: dts: rockchip: remove vdd_log from rock960 to fix a
stability issues (bnc#1012628).
- Revert "x86/e820: put !E820_TYPE_RAM regions into
memblock.reserved" (bnc#1012628).
- cifs: Fix separator when building path from dentry
(bnc#1012628).
- staging: rtl8712: Fix possible buffer overrun (bnc#1012628).
- Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting
errors and an off-by-one mistake in core/rtw_mlme_ext.c"
(bnc#1012628).
- crypto: do not free algorithm before using (bnc#1012628).
- drm/amdgpu: update mc firmware image for polaris12 variants
(bnc#1012628).
- drm/lease: Send a distinct uevent (bnc#1012628).
- drm/msm: Move fence put to where failure occurs (bnc#1012628).
- drm/amdgpu/gmc8: update MC firmware for polaris (bnc#1012628).
- drm/amdgpu/gmc8: always load MC firmware in the driver
(bnc#1012628).
- drm/i915: Downgrade Gen9 Plane WM latency error (bnc#1012628).
- kprobes/x86: Fix instruction patching corruption when copying
more than one RIP-relative instruction (bnc#1012628).
- x86/efi: Allocate e820 buffer before calling
efi_exit_boot_service (bnc#1012628).
- Drivers: hv: vmbus: Offload the handling of channels to two
workqueues (bnc#1012628).
- tty: serial: 8250_mtk: always resume the device in probe
(bnc#1012628).
- tty: do not set TTY_IO_ERROR flag if console port (bnc#1012628).
- gnss: sirf: fix activation retry handling (bnc#1012628).
- kgdboc: fix KASAN global-out-of-bounds bug in
param_set_kgdboc_var() (bnc#1012628).
- libnvdimm, pfn: Pad pfn namespaces relative to other regions
(bnc#1012628).
- cfg80211: Fix busy loop regression in ieee80211_ie_split_ric()
(bnc#1012628).
- mac80211_hwsim: Timer should be initialized before device
registered (bnc#1012628).
- mac80211: fix GFP_KERNEL under tasklet context (bnc#1012628).
- mac80211: Clear beacon_int in ieee80211_do_stop (bnc#1012628).
- mac80211: ignore tx status for PS stations in
ieee80211_tx_status_ext (bnc#1012628).
- mac80211: fix reordering of buffered broadcast packets
(bnc#1012628).
- mac80211: ignore NullFunc frames in the duplicate detection
(bnc#1012628).
- HID: quirks: fix RetroUSB.com devices (bnc#1012628).
- Update config files.
- commit 2f28da6
- Refresh
patches.rpmify/x86-build-Fix-compiler-support-check-for-CONFIG_RETP.patch.
Update upstream status.
- commit ceaabb8
==== libassuan ====
- qemu-disable-fdpassing-test.patch: remove
==== libinput ====
Version update (1.12.3 -> 1.12.4)
Subpackages: libinput-udev libinput10
- Update to new upstream release 1.12.4
* Three hardware-specific quirks for the HP Spectre x360
(touchpad pressure thresholds), the Macbook Pro 11,2 (palm
thresholds) and the Lenovo T480s (missing
INPUT_PROP_BUTTONPAD) were added.
==== libmtp ====
Subpackages: libmtp-udev libmtp9
- Small packaging cleanup
==== libyui-qt-pkg ====
Version update (2.45.24 -> 2.45.25)
- Make icons pop out from any background (boo#1115949)
- 2.45.25
==== llvm ====
Version update (6.0.1 -> 7.0.0)
- Update to llvm 7.0.0
* For details, see the release notes:
https://llvm.org/releases/7.0.0/docs/ReleaseNotes.htmlhttps://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.htmlhttps://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.h…https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
==== llvm4 ====
Subpackages: clang4-checker libLLVM4 libclang4
- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros.
==== llvm6 ====
Subpackages: libLLVM6 libclang6
- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros.
==== llvm7 ====
Subpackages: libc++-devel libc++1 libc++abi-devel libc++abi1
- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros.
==== multipath-tools ====
Version update (0.7.9+58+suse.0790830 -> 0.7.9+85+suse.766b95e)
Subpackages: kpartx
- Update to version 0.7.9+85+suse.766b95e:
* upstream patch series to make verbosity level 3
less verbose and thus better usable (bsc#1118937)
* fix for handling device size mismatch in coalesce_paths()
(bsc#1037379)
* libmultipath: fix false removes in dmevents polling code
(bsc#1116272)
* Spec file: remove build dependency on dracut which causes
build errors for some distributions
==== openldap2 ====
Version update (2.4.46 -> 2.4.47)
Subpackages: libldap-2_4-2 libldap-2_4-2-32bit libldap-data openldap2-client openldap2-devel
- Update to upstream release 2.4.47
- Removed obsolete patches:
* 0006-No-Build-date-and-time-in-binaries.dif
(upstream now uses SOURCE_DATE_EPOCH for reproducable builds)
* 0012-ITS8051-sockdnpat.patch
* 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch
OpenLDAP 2.4.47 Release (2018/12/19)
Added slapd-sock DN qualifier for subtrees to be processed (ITS#8051)
Added slapd-sock ability to send extended operations to external listeners (ITS#8714)
Fixed liblber to avoid incremental access to user-supplied bv in dupbv (ITS#8752)
Fixed libldap dn to domain parsing with bad input (ITS#8842)
Fixed slapd slapcat to correctly honor -g option (ITS#8667)
Fixed slapd to correctly handle NO_SUCH_OBJECT with dynamic groups (ITS#8923)
Fixed slapd to check status of rdnNormalize (ITS#8932)
Fixed slapd cn=config when modifying slapo-syncprov config (ITS#8616)
Fixed slapd sasl authz-policy "all" behavior (ITS#8909)
Fixed slapd sasl minor typo (ITS#8918)
Fixed slapd to correctly hide hidden DBs in the rootDSE (ITS#8912)
Fixed slapd domainScope control to match Microsoft specification (ITS#8840)
Fixed slapd-bdb/hdb/mdb to not convert certain IDLs to ranges (ITS#8868)
Fixed slapo-accesslog deadlock during cleanup (ITS#8752)
Fixed slapo-memberof cn=config modifications (ITS#8663)
Fixed slapo-ppolicy with multimaster replication (ITS#8927)
Fixed slapo-syncprov with NULL modlist (ITS#8843)
Build Environment
Added slapd reproducible build support (ITS#8928)
Fixed missing includes with OpenSSL 1.0.2 (ITS#8809)
Contrib
Fixed slapo-pbkdf2 hash generation (ITS#8878)
Documentation
admin24 fixed minor typo (ITS#8887)
==== osinfo-db ====
- Add correct release date for SLE12-SP4
add-sle12sp4-support.patch
==== postfix ====
Subpackages: postfix-doc
- binary hardening: link with full RELRO
==== protobuf ====
Subpackages: libprotobuf-lite17 libprotobuf17
- Add maven pom files to the protobuf-java package
==== python-PySocks ====
- Remove superfluous devel dependency for noarch package
==== python-Pygments ====
- Remove superfluous devel dependency for noarch package
==== python-SecretStorage ====
- Remove superfluous devel dependency for noarch package
==== python-base ====
Subpackages: libpython2_7-1_0 libpython2_7-1_0-32bit python-xml
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros.
==== python-ipaddr ====
- Remove superfluous devel dependency for noarch package
==== python-ndg-httpsclient ====
- Remove superfluous devel dependency for noarch package
==== python-parso ====
- Remove superfluous devel dependency for noarch package
==== python-passlib ====
- Use noun phrase in summary. Trim filler wording from description.
- Remove superfluous devel dependency for noarch package
==== python-rpm-macros ====
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros.
- Include license and readme.
==== python-urlgrabber ====
- Remove superfluous devel dependency for noarch package
==== qqc2-desktop-style ====
Version update (5.52.0 -> 5.53.0)
- Update to 5.53.0
* New feature release
* For more details please see:
* https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
* consistent sizing of item compared to QWidgets
* emit activated
* same behavior as qwidgets comboboxes
* fix Menu sizing
* default values for ToolTip
* proper line widths
* make sure flickables are pixelAligned
* Fix compilation
* Support for QGuiApplication-based apps (kde#396287)
* touchscreen text controls
* Size according to specified icon width and height
* Honor flat property of buttons
* Remove qt include prefix
* Fix issue where there's only one element on the menu
==== systemd-presets-common-SUSE ====
- Eanble new mdadm timers mdcheck_start.timer and mdmonitor-oneshot.timer
(bsc#1115407)
==== tracker ====
Subpackages: libtracker-common-2_0 libtracker-control-2_0-0 libtracker-miner-2_0-0 libtracker-sparql-2_0-0 tracker-lang typelib-1_0-Tracker-2_0 typelib-1_0-TrackerControl-2_0
- Extend tracker-sqlte-3.25-rename-tables.patch with two more
commits:
+ libtracker-data: Update FTS if base tables were altered
+ libtracker-data: Reset property table name on cardinality
changes
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
MozillaFirefox (66.0.5 -> 67.0)
kernel-firmware (20190502 -> 20190514)
opus (1.3 -> 1.3.1)
pipewire (0.2.5 -> 0.2.6)
polkit-default-privs (13.2+20190520.a67a2af -> 13.2+20190523.efe368f)
python-kiwi (9.17.37 -> 9.17.39)
python-pexpect (4.6.0 -> 4.7.0)
python-pyasn1-modules (0.2.4 -> 0.2.5)
python-requests (2.21.0 -> 2.22.0)
ruby2.6
spandsp
webkit2gtk3 (2.24.1 -> 2.24.2)
wireshark (3.0.1 -> 3.0.2)
yast2-add-on (4.1.11 -> 4.1.12)
=== Details ===
==== MozillaFirefox ====
Version update (66.0.5 -> 67.0)
Subpackages: MozillaFirefox-translations-common
- Mozilla Firefox 67.0
* Firefox 67 will be able to run different Firefox installs side by side
https://blog.nightly.mozilla.org/2019/01/14/moving-to-a-profile-per-install…
* Tabs can now be pinned from the Page Actions menu in the address bar
* Users can block known cryptominers and fingerprinters in the
Custom settings or their Content Blocking preferences
* The Import Data from Another Browser feature is now also available
from the File menu
* Firefox will now protect you against running older versions which
can lead to data corruption and stability issues
* Easier access to your list of saved logins from the main menu and
login autocomplete
* We?ve added a toolbar menu for your Firefox Account to provide more
transparency for when you are synced, sharing data across devices
and with Firefox. Personalize the appearance of the menu with your
own avatar
* Enable FIDO U2F API, and permit registrations for Google Accounts
* Enabled AV1 support on Linux
MFSA 2019-13 (boo#1135824)
* CVE-2019-9815 (bmo#1546544)
Disable hyperthreading on content JavaScript threads on macOS
* CVE-2019-9816 (bmo#1536768)
Type confusion with object groups and UnboxedObjects
* CVE-2019-9817 (bmo#1540221)
Stealing of cross-domain images using canvas
* CVE-2019-9818 (bmo#1542581) (Windows only)
Use-after-free in crash generation server
* CVE-2019-9819 (bmo#1532553)
Compartment mismatch with fetch API
* CVE-2019-9820 (bmo#1536405)
Use-after-free of ChromeEventHandler by DocShell
* CVE-2019-9821 (bmo#1539125)
Use-after-free in AssertWorkerThread
* CVE-2019-11691 (bmo#1542465)
Use-after-free in XMLHttpRequest
* CVE-2019-11692 (bmo#1544670)
Use-after-free removing listeners in the event listener manager
* CVE-2019-11693 (bmo#1532525)
Buffer overflow in WebGL bufferdata on Linux
* CVE-2019-7317 (bmo#1542829)
Use-after-free in png_image_free of libpng library
* CVE-2019-11694 (bmo#1534196) (Windows only)
Uninitialized memory memory leakage in Windows sandbox
* CVE-2019-11695 (bmo#1445844)
Custom cursor can render over user interface outside of web content
* CVE-2019-11696 (bmo#1392955)
Java web start .JNLP files are not recognized as executable files
for download prompts
* CVE-2019-11697 (bmo#1440079)
Pressing key combinations can bypass installation prompt delays and
install extensions
* CVE-2019-11698 (bmo#1543191)
Theft of user history data through drag and drop of hyperlinks
to and from bookmarks
* CVE-2019-11700 (bmo#1549833) (Windows only)
res: protocol can be used to open known local files
* CVE-2019-11699 (bmo#1528939)
Incorrect domain name highlighting during page navigation
* CVE-2019-11701 (bmo#1518627)
webcal: protocol default handler loads vulnerable web page
* CVE-2019-9814 (bmo#1527592, bmo#1534536, bmo#1520132, bmo#1543159,
bmo#1539393, bmo#1459932, bmo#1459182, bmo#1516425)
Memory safety bugs fixed in Firefox 67
* CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
bmo#1532465, bmo#1533554, bmo#1541580)
Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
- requires
* rust/cargo >= 1.32
* mozilla-nspr >= 4.21
* mozilla-nss >= 3.43
* rust-cbindgen >= 0.8.2
- rebased patches
- KDE integration for default browser detection is broken in this revision
- Fix armv7 build with:
* mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
==== kernel-firmware ====
Version update (20190502 -> 20190514)
Subpackages: ucode-amd
- Update to version 20190514:
* linux-firmware: Update firmware file for Intel Bluetooth 8265
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 22161
* amlogic: add video decoder firmwares
* iwlwifi: update -46 firmwares for 22260 and 9000 series
* iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
* iwlwifi: add -46.ucode firmwares for 9000 series
==== opus ====
Version update (1.3 -> 1.3.1)
- Update to version 1.3.1
* This release fixes an issue with the analysis on files with
digital silence (all zeros), especially on x87 builds
(mostly affects 32-bit builds).
* Two new features:
+ A new OPUS_GET_IN_DTX query to know if the encoder is in
DTX mode (last frame was either a comfort noise frame or
not encoded at all)
+ A new (and still experimental) CMake-based build system
that is eventually meant to replace the VS2015 build
system (the autotools one will stay).
==== pipewire ====
Version update (0.2.5 -> 0.2.6)
Subpackages: libpipewire-0_2-1 pipewire-modules pipewire-spa-plugins pipewire-spa-tools pipewire-tools
- Update to version 0.2.6:
+ Improve error checking for threads.
+ Fix some memory and fd leaks.
+ Fix compilation with C++ compilers and clang.
+ DISABLE_RTKIT should now not try to use dbus at all.
+ Camera Portal fixes:
- add Camera media.role.
- Rename module-flatpak to module-portal.
- Use the portal permissions store for camera checks.
+ Actually use the passed fd in pipewiresrc.
+ Make properties with "pipewire." prefix read-only.
+ Add security label to client object.
+ Enforce link permissions.
+ Permissions of objects are now combined with parent
permissions.
+ Remove libv4l2 dependency, it is not used.
+ Improve format negotiation in autolink #146.
+ Try to avoid list corruption with event emmission #143.
+ Fix destroy of client-node memory corruption.
+ Various small improvements.
- Remove pkgconfig(libv4l2) BuildRequires: follow upstreams cleanup
of build dependencies.
- Drop avoid-invalid-conversion-error-with-C++.patch: fixed
upstream.
==== polkit-default-privs ====
Version update (13.2+20190520.a67a2af -> 13.2+20190523.efe368f)
- Update to version 13.2+20190523.efe368f:
* polkit profiles: whitelist lightdm-gtk-greeter-settings (bsc#1135695)
==== python-kiwi ====
Version update (9.17.37 -> 9.17.39)
- Bump version: 9.17.38 ? 9.17.39
- Update obs docs per review by Tom
- Disable check-valid-until with repository_gpgcheck
This commit is two fold:
* From one side fixes a wrong use of the `trusted` option for
apt repositories. `trusted=no` does not force to run the gpg checks
it just forces the repository to be considered untrusted regardless
the result of the security checks.
* From the other side it disables the option `check-valid-until` in
case gpg checks are disabled using the `repository_gpgcheck`. It
works at repository level. This enables using unmaintained or
expired repositories for the build.
Fixes #1028
- Simplify shell pipe expression with shell builtin
Replace "echo $var | sed ..." expression with ${var//SEARCH/REPLACE}
shell builtin as suggested by Codacy
- Make mediacheck runtime check arch independent
The check_mediacheck_only_for_x86_arch runtime check fails on
non x86 architectures but the tagmedia toolchain exists independent
of the platform architecture. This Fixes #1091
- Set home as protected path
Along with adding home to the protection list, cleanup
the prepare instance cleanup code in a way that it only
runs if a root_bind object exists which needs to call
its cleanup path
- Extend docs about building multiple profiles on OBS
- Remove FIXME from the runtime configuration file example
- Improve the documentation about building in the Build Service
Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de>
- Turn sphinx warnings into errors
Modify the sphinx Makefile to treat warnings
like undefined references as errors
- kiwi-live-lib: mount live ISO as read-only
During the boot process of a live image, dracut shows this WARNING:
dracut-initqueue: mount: /run/initramfs/live: WARNING: device write-protected, mounted read-only
This is not a problem, as the live ISO image is, indeed, read-only.
This patch fix this cosmetic issue being explicit in the mount
options in `mountIso` function.
- Call isolinux-config only on supported archs
- Discard default dependencies for sysroot.mount
This commit makes default dependencies from sysroot.mount to be
explicitly omitted. This fixes potential inconsistencies in
ordering pre-mount.service with local-fs.target. This change is
also applied to upstream sysroot.mount generator here:
https://github.com/systemd/systemd/pull/12281
Fixes #1015
- Fix locale setting
For pre-Leap 15 openSUSE versions KIWI >= 9.12.0 was not completely
setting locale, as it was missingto set the RC_LANG variable from
`/etc/sysconfig/language` file. Current commit enforces to update
locale in `/etc/sysconfig/language` (if the file exists) at the
same time it applies systemd-firstboot configurations.
Fixes #1081
- Cleanup TODO & FIXME from xml_description.rst
- Add GitLab CI pipeline badge to README.rst
- Extend the development documentation
Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de>
- Log thrown exceptions in Compress.get_format()
- Fix documentation of Compress.get_format()
- log exception in SystemPrepare.__del__
- Use yaml.safe_load instead of yaml.load
yaml.load is relatively dangerous when the loaded data comes from untrusted
sources, as it can allow for arbitrary code execution, see:
https://pyyaml.org/wiki/PyYAMLDocumentation#LoadingYAML
safe_load limits the created python objects to the basic Python types like
integers and strings, which is all that we need for the runtime configuration
file.
- Fixing doc source for broken refs and xml syntax
- Document the usage of profiles via the CLI and OBS
- Apply suggestions from @tomschr
Co-Authored-By: dcermak <45594031+dcermak(a)users.noreply.github.com>
- Improve the documentation of the runtime configuration file
Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de>
- Apply suggestions from @tomschr
Co-Authored-By: dcermak <45594031+dcermak(a)users.noreply.github.com>
- Extend the documentation of Custom Disk Volumes
- Add documentation of the XML schema in a tutorial like fashion
Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de>
- Add documentation how to configure VMX build types
- Cleanup warnings in utils/size.py
- use a raw string for the regexp search string
- improve the readability of the returned value
- Make the user.password attribute mandatory
Not providing a user password results in an error when usermod or openssl
is later called by kiwi (depending on the value of `pwdformat`).
This fixes #1061.
- Fixed repo setup for cloud integration test builds
Using the devel:languages:python repos leads to inconsistencies
on the module dependencies
- Bump version: 9.17.37 ? 9.17.38
- Delete obsolete repository types
Deleted red-carpet, slack-site, up2date-mirrors, urpmi and yast2
from the allowed values list of the repository type attribute.
This Fixes #1029
- Fixed build_in_buildservice stale references
Fixed style issues reported on sphinx build. Also deleted
pointers to non existing references
- Delete suseRemovePackagesMarkedForDeletion
Any package removal is controlled by kiwi itself. There is no
need to provide a shell helper method that is rpm specific.
This Fixes #1054
- Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
LICENSES are usually not large and should be kept alongside
of the binaries. Also some firmware files sideload additional
txt files (like for example brcmfmac43430 needs the sdio description
txt files). We should just always include them because they're
not listed as needed files.
Co-Authored-By: Dan ?erm�k <dcermak(a)suse.com>
- Split overview/workflow.rst into multiple files
Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de>
- Update doc/source/building/build_in_buildservice.rst
Co-Authored-By: dcermak <45594031+dcermak(a)users.noreply.github.com>
- Rework documentation about building on OBS
- Added integration test guest image for OpenStack
- Update suse integration tests per Factory changes
The way plymouth themes are provided has changed on suse.
The package plymouth-branding-openSUSE is no longer providing
the theme named openSUSE. In fact the plan is to switch to
the upstream bgrt theme which is provided in another package.
This commit adapts to the changes in the distribution
- Bump copyright year in the docs
==== python-pexpect ====
Version update (4.6.0 -> 4.7.0)
- Update to 4.7.0:
* The :meth:`.pxssh.login` method now no longer requires a username if an ssh config is provided and will raise an error if neither are provided. (:ghpull:`562`).
* The :meth:`.pxssh.login` method now supports providing your own ssh command via the cmd parameter. (:ghpull:`528`) (:ghpull:`563`).
* :class:`.pxssh` now supports the use_poll parameter which is passed into :meth:`.pexpect.spawn` (:ghpull:`542`).
* Minor bug fix with ssh_config. (:ghpull:`498`).
* :meth:`.replwrap.run_command` now has async support via an async_ parameter. (:ghpull:`501`).
* :meth:`.pexpect.spawn` will now read additional bytes if able up to a buffer limit. (:ghpull:`304`).
- Drop merged patch fix-test.patch
==== python-pyasn1-modules ====
Version update (0.2.4 -> 0.2.5)
- Update to 0.2.5:
- Added RFC3560 providing RSAES-OAEP Key Transport Algorithm
in CMS
- Added RFC6019 providing BinaryTime - an alternate format
for representing Date and Time
- RFC3565 superseded by RFC5649
- Added RFC5480 providng Elliptic Curve Cryptography Subject
Public Key Information
- Added RFC8520 providing X.509 Extensions for MUD URL and
MUD Signer
- Added RFC3161 providing Time-Stamp Protocol support
- Added RFC3709 providing Logotypes in X.509 Certificates
- Added RFC3274 providing CMS Compressed Data Content Type
- Added RFC4073 providing Multiple Contents protection
with CMS
- Execute testsuite
==== python-requests ====
Version update (2.21.0 -> 2.22.0)
- Update to 2.22.0:
* Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch
==== ruby2.6 ====
Subpackages: libruby2_6-2_6 ruby2.6-devel
- Move RPM macros to %_rpmmacrodir.
==== spandsp ====
- Disable LTO (boo#1136056).
==== webkit2gtk3 ====
Version update (2.24.1 -> 2.24.2)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles
- Update to version 2.24.2:
+ Fix rendering of emojis copy-pasted from GTK emoji chooser.
+ Fix space characters not being rendered with some CJK fonts.
+ Fix adaptive streaming playback with older GStreamer versions.
+ Set a maximum zoom level for pinch zooming gesture.
+ Fix navigation gesture to not interfere with scrolling.
+ Fix SSE2 detection at compile time, ensuring the right flags
are passed to the compiler.
+ Fix several crashes and rendering issues.
+ Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
+ Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
==== wireshark ====
Version update (3.0.1 -> 3.0.2)
Subpackages: libwireshark12 libwiretap9 libwscodecs2 libwsutil10 wireshark-ui-qt
- Wireshark 3.0.2 (bsc#1136021)
* Wireshark dissection engine crash.
- Further features, bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-3.0.2.html
==== yast2-add-on ====
Version update (4.1.11 -> 4.1.12)
- Fix: Update repository will be registered while installing
an add-on on a running system (bsc#1055126).
- 4.1.12
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org
I placed the URL for videolan leap 15.0 and have vlc installed from that
repository on my Leap 15.1 box.
The rpm command lists the version as 3.0.6-lp151.5.1 and lp151 means
Leap 15.1 right ?
I have played several DVDs successfully.
vlc-qt-3.0.6-lp151.5.1.x86_64
vlc-lang-3.0.6-lp151.5.1.noarch
libvlc5-3.0.6-lp151.5.1.x86_64
vlc-vdpau-3.0.6-lp151.5.1.x86_64
libvlccore9-3.0.6-lp151.5.1.x86_64
vlc-noX-3.0.6-lp151.5.1.x86_64
vlc-codec-gstreamer-3.0.6-lp151.5.1.x86_64
vlc-3.0.6-lp151.5.1.x86_64
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org
All,
Is Videolan providing a repository for 15.1? I has both:
Version: Leap 15.0 http://download.videolan.org/pub/vlc/SuSE/Leap_15.0/
and
Version: Tumbleweed http://download.videolan.org/pub/vlc/SuSE/Tumbleweed/
but I could find nothing for 15.1? Can it be enabled?
--
David C. Rankin, J.D.,P.E.
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org