Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20170724
When you reply to report some issues, make sure to change the subject.
It is not helpful to keep the release announcement subject in a thread
while discussing a specific problem.
Packages changed:
Mesa
audit (2.5 -> 2.7.7)
audit-secondary (2.5 -> 2.7.7)
device-mapper
gettext-runtime
gnome-shell (3.24.2 -> 3.24.3)
gtk2
gtk3 (3.22.16 -> 3.22.17)
jack
java-1_8_0-openjdk (1.8.0.131 -> 1.8.0.141)
libdrm (2.4.81 -> 2.4.82)
libgexiv2 (0.10.4 -> 0.10.6)
librsvg (2.40.17 -> 2.40.18)
linux-glibc-devel
lvm2
lz4 (131 -> 1.7.5)
mutter (3.24.3 -> 3.24.4)
pidgin
polkit-default-privs
publicsuffix (20170622 -> 20170713)
rsync
systemd-presets-branding-openSUSE
texinfo (6.3 -> 6.4)
vcdimager (0.7.24cvs -> 0.7.24+cvs20170719)
=== Details ===
==== Mesa ====
Subpackages: Mesa-dri-devel Mesa-dri-nouveau Mesa-libEGL-devel Mesa-libEGL1 Mesa-libGL-devel Mesa-libGL1 Mesa-libglapi0 Mesa-libglapi0-32bit Mesa-libva libOSMesa8 libOSMesa8-32bit libgbm1 libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon libwayland-egl1 libxatracker2
- u_r600-Add-support-for-B5G5R5A1.patch
* Fixes rendercheck tests when X server accelerates using glamor.
(bnc#1047154)
==== audit ====
Version update (2.5 -> 2.7.7)
Subpackages: audit-devel libaudit1 libaudit1-32bit libauparse0
- Update to version 2.7.7 release
Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog
==== audit-secondary ====
Version update (2.5 -> 2.7.7)
- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
changelog
Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
service (bsc#1042781).
Add config: audit-stop.rules
Refresh patch: audit-allow-manual-stop.patch
Refresh patch: audit-no-gss.patch
==== device-mapper ====
Subpackages: libdevmapper-event1_03 libdevmapper1_03 libdevmapper1_03-32bit
- Require device-mapper-devel rather than recommend. It is really
needed (the .h files are required by the lvm2app and lvm2cmd)
==== gettext-runtime ====
Subpackages: gettext-tools
- Ignore rpm-build's dependency on gettext-tools while building
the -mini variant: before gettext-runtime-mini is built, there is
no provider of this symbol in a bootstrap cycle.
==== gnome-shell ====
Version update (3.24.2 -> 3.24.3)
Subpackages: gnome-shell-browser-plugin gnome-shell-calendar
- Update to version 3.24.3:
+ Bypass proxies for captive portal (bgo#769692).
+ Fix missing icons in freedesktop notifications (bgo#784245).
+ Fix blocked clicks in shutdown dialog (bgo#781738).
+ Implement tablet rings/strips configuration (bgo#782033).
+ Misc. bug fixes: bgo#780215, bgo#782802, bgo#783286,
bgo#784130, bgo#784353, bgo#781471.
+ Updated translations.
- Drop gnome-shell-portalhelper-fixes.patch and
gnome-shell-emulate-click-action.patch: fixed upstream.
==== gtk2 ====
Subpackages: gtk2-data gtk2-devel gtk2-immodule-amharic gtk2-immodule-inuktitut gtk2-immodule-thai gtk2-immodule-vietnamese gtk2-immodule-xim gtk2-tools gtk2-tools-32bit libgtk-2_0-0 libgtk-2_0-0-32bit typelib-1_0-Gtk-2_0
- Migrate %icon_theme_cache_post/postun macro from
hicolor-icon-theme to gtk2-tools file triggers. Any package
installing icons below /usr/share/icons will trigger. Each
package will produce the cache for every icon theme being
updated. The same trigger is also added to gtk3-tools, where only
the one owning the current instance of
/usr/bin/gtk-update-icon-cache update-alternatie link actually
executes the update.
==== gtk3 ====
Version update (3.22.16 -> 3.22.17)
Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0
- Update to version 3.22.17:
+ Add native file chooser support for OS X.
+ Bugs fixed: bgo#766517, bgo#781583, bgo#781935, bgo#781936,
bgo#782040, bgo#782325, bgo#784323, bgo#784723, bgo#784888.
+ Updated translations.
- Migrate %icon_theme_cache_post/postun macro from
hicolor-icon-theme to gtk3-tools file triggers. Any package
installing icons below /usr/share/icons will trigger. Each
package will produce the cache for every icon theme being
updated. The same trigger is also added to gtk2-tools, where only
the one owning the current instance of
/usr/bin/gtk-update-icon-cache update-alternative link actually
executes the update.
==== jack ====
Subpackages: libjack-devel libjack0
- Modify jack-fixgcc7.patch in line with upstream.
==== java-1_8_0-openjdk ====
Version update (1.8.0.131 -> 1.8.0.141)
Subpackages: java-1_8_0-openjdk-headless
- Upgrade to version jdk8u141 (icedtea 3.5.0)
* Security fixes
- S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
collection
- S8167228: Update to libpng 1.6.28
- S8169209, CVE-2017-10053, bsc#1049305: Improved image
post-processing steps
- S8169392, CVE-2017-10067, bsc#1049306: Additional jar
validation steps
- S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
issue
- S8171539, CVE-2017-10078, bsc#1049308: Better script
accessibility for JavaScript
- S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
execution
- S8172461, CVE-2017-10089, bsc#1049312: Service Registration
Lifecycle
- S8172465, CVE-2017-10090, bsc#1049313: Better handling of
channel groups
- S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
Exceptions
- S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
catalogs
- S8173697, CVE-2017-10107, bsc#1049318: Less Active
Activations
- S8173770, CVE-2017-10074, bsc#1049307: Image conversion
improvements
- S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
- S8174105, CVE-2017-10108, bsc#1049319: Better naming
attribution
- S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
code
- S8174770: Check registry registration location
- S8174873: Improved certificate processing
- S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
operations
- S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
operations
- S8176055: JMX diagnostic improvements
- S8176067, CVE-2017-10116, bsc#1049325: Proper directory
lookup processing
- S8176760, CVE-2017-10135, bsc#1049328: Better handling of
PKCS8 material
- S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
curve support
- S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
constraints implementation
- S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
chain connections
- S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
improvements
- S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
conversion improvements
- S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
arrangements
- bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
subcomponent JAX-WS
- bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
subcomponent deployment
- bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
subcomponent JavaFX
- bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
subcomponent deployment
- bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
subcomponent JavaFX
* New features
- PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
algorithms in the PKCS11 provider
* Import of OpenJDK 8 u141 build 15 (bsc#1049302)
- S8139870: sun.management.LazyCompositeData.isTypeMatched()
fails for composite types with items of ArrayType
- S8155690: Update libPNG library to the latest up-to-date
- S8159058: SAXParseException when sending soap message
- S8162461: Hang due to JNI up-call made whilst holding JNI
critical lock
- S8163889: [macosx] Can't print from browser on Mac OS X
- S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
- S8165367: Additional tests for JEP 288: Disable SHA-1
Certificates
- S8173145: Menu is activated after using mnemonic Alt/Key
combination
- S8173207: Upgrade compression library
- S8175251: Failed to load RSA private key from pkcs12
- S8176329: jdeps to detect MR jar file and output a warning
- S8176536: Improved algorithm constraints checking
- S8176731: JCK tests in api/javax_xml/transform/ spec
conformance started failing after 8172469
- S8176769: Remove accidental spec change in jdk8u
- S8177449: (tz) Support tzdata2017b
- S8178996: [macos] JComboBox doesn't display popup in mixed
JavaFX Swing Application on 8u131 and Mac OS 10.12
- S8179014: JFileChooser with Windows look and feel crashes on
win 10
- S8180582: The bind to rmiregistry is rejected by
registryFilter even though registryFilter is set
- S8181591: 8u141 L10n resource file update
- S8181698: Remove and retag 8u141-b12 tag from source
repository
- S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
- S8182054: Improve wsdl support
- S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
updates source base
* Backports
- S8164293, PR3412, RH1459641: HotSpot leaking memory in
long-running requests
- S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
when -XX:+UseNUMA is used
- S8175887, PR3415: C1 value numbering handling of
Unsafe.get*Volatile is incorrect
- S8179084, PR3409, RH1455694: HotSpot VM fails to start when
AggressiveHeap is set
- S8180048, PR3411, RH1449870: Interned string and symbol table
leak memory during parallel unlinking
- S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
still seen after 8175813
- S8181419, PR3413, RH1463144: Race in jdwp invoker handling
may lead to crashes or invalid results
* AArch64 port
- S7009641, PR3423: Don't fail VM when CodeCache is full
- S8182581, PR3423: aarch64: fix for crash caused by earlyret
of compiled method
* AArch32 port
- PR3391: Revert PR3385 as -Xshare:dump does appear to work on
AArch32
==== libdrm ====
Version update (2.4.81 -> 2.4.82)
Subpackages: libdrm-devel libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1
- Update to version 2.4.82:
+ intel: PCI Ids for S SKU in CFL
+ intel: PCI Ids for H SKU in CFL
+ intel: PCI Ids for U SKU in CFL
+ intel/gen10: Add missed gen10 stuff
+ etnaviv: submit full struct drm_etnaviv_gem_submit
+ amdgpu: sync amdgpu_drm with kernel.
+ drm: update drm.h to latest in drm-next.
+ libdrm: add drm syncobj create/destroy/import/export
+ drm/amdgpu: add syncobj create/destroy/import/export apis
+ drm/amdgpu: add new low overhead command submission API. (v2)
+ amdgpu: add new symbols to tests.
+ Android's major/minor/makedev live in