New Tumbleweed snapshot 20201205 released!

7 Dec 2020

      Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20201205

Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports

Packages changed:
  ImageMagick (7.0.10.43 -> 7.0.10.45)
  MozillaThunderbird (78.5.0 -> 78.5.1)
  PackageKit
  apparmor (3.0.0 -> 3.0.1)
  autofs
  busybox
  fwupd (1.5.1 -> 1.5.2)
  glibmm2_4 (2.64.4 -> 2.64.5)
  gnome-shell (3.38.1 -> 3.38.2)
  gnome-shell-extensions (3.38.1 -> 3.38.2)
  kernel-source (5.9.11 -> 5.9.12)
  kvm_stat (5.9.8 -> 5.9.12)
  libapparmor (3.0.0 -> 3.0.1)
  libarchive (3.4.3 -> 3.5.0)
  libreoffice
  libvirt (6.9.0 -> 6.10.0)
  libyui-qt (2.56.3 -> 2.56.4)
  mutter (3.38.1 -> 3.38.2)
  nano (5.3 -> 5.4)
  open-vm-tools
  orca (3.38.0 -> 3.38.1)
  plasma5-disks (5.20.3 -> 5.20.4)
  plasma5-thunderbolt (5.20.3 -> 5.20.4)
  python-Pygments (2.7.2 -> 2.6.1)
  python-async_generator
  python-future
  python-gunicorn
  python-libvirt-python (6.9.0 -> 6.10.0)
  python-pycairo (1.19.1 -> 1.20.0)
  python-setproctitle (1.1.10 -> 1.2)
  python-sniffio
  rubygem-packaging_rake_tasks (1.4.11 -> 1.4.14)
  snapper
  spice-gtk (0.38 -> 0.39)
  sqlite3 (3.33.0 -> 3.34.0)
  unbound (1.12.0 -> 1.13.0)
  webkit2gtk3
  yast2-storage-ng (4.3.24 -> 4.3.27)
  yast2-users (4.3.9 -> 4.3.10)

=== Details ===

==== ImageMagick ====
Version update (7.0.10.43 -> 7.0.10.45)
Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI4 libMagickCore-7_Q16HDRI8 libMagickWand-7_Q16HDRI8

- version update to 7.0.10.45
  * added support for the farbfeld format (reference
    https://github.com/ImageMagick/ImageMagick/discussions/2664).
  * specify the bilateral neighbor as width/height rather than radius/sigma.
  * correct reading of first row in TIFF decoder.
  * correct rotation parameter for SVG transform.

==== MozillaThunderbird ====
Version update (78.5.0 -> 78.5.1)
Subpackages: MozillaThunderbird-translations-common

- Mozilla Thunderbird 78.5.1
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server response codes

==== PackageKit ====
Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0

- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).

==== apparmor ====
Version update (3.0.0 -> 3.0.1)
Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor

- update to AppArmor 3.0.1
  - minor additions to profiles and abstractions
  - some bugfixes in libapparmor, apparmor_parser and the aa-* utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
    for the detailed upstream changelog
- removed upstream(ed) patches:
  - changes-since-3.0.0.diff
  - extra-profiles-fix-Pux.diff
  - utils-fix-hotkey-conflict.diff
- Use apache provided variables for the module_directry:
  + Use %apache_libexecdir
  + Add apache-rpm-macros BuildRequires

==== autofs ====

- automount-fix-master-wait.patch: Fix options string for master wait
  (bsc#1178006)
- autofs-nsswitch-usr-etc.patch: Use /usr/etc/nsswitch.conf if
  /etc/nsswitch.con is unavailable (bsc#1175238)

==== busybox ====
Subpackages: busybox-static

- prepare usrmerge (boo#1029961)

==== fwupd ====
Version update (1.5.1 -> 1.5.2)
Subpackages: fwupd-lang libfwupd2 libfwupdplugin1 typelib-1_0-Fwupd-2_0

- Update to version 1.5.2:
  + ata: Add OUI quirk for Toshiba
  + libfwupd: Restore recognizing gpg and pkcs7 types still
  + Register the SoupSession gtype when required
  + Switch from libsoup to libcurl
  + Fix sync method when called from threads without a context
  + Move ABI check to Github actions
  + Enable github workflows
  + libfwupd: Add fwupd_client_download_file()
  + libfwupd: Add fwupd_client_get_user_agent()
  + Only download the remote metadata as required
  + Add breaks for fwupdate 12-7 (Closes: #960688)
  + Install modules-load configs in the correct directory
  + vli: Do not be clever replugging the MSP430 device
  + vli: Make some trivial debugging more specific to help debug
    an issue
  + make gcab optional
  + Fall back to FAT32 internal partitions for detecting ESP
  + Add a flag to indicate if packages are supported
  + uefi: a new option for uefi configuration to use UEFI removable
    path
  + Add a section to man page on scripting
  + synaptics-mst: Improve reliability by waiting 2 seconds after
    writing data
  + hailuck: Add an plugin for the Pinebook Pro laptop
  + Allow setting global flags for FuHidDevice
  + Set the SMBIOS chassis type to portable if a DT battery exists
  + colorhug: Don't set the version format to triplet at startup
  + Allow components to set the icon from the metadata
  + colorhug: Fix detection of version on older firmware versions
  + bcm57xx: Fix reading vendor/device ids from firmware.
  + Remove HSI update and attestation suffixes
  + trivial: make dbxtool executable to fix snap build
  + Ignore an invalid vendor-id when adding releases for display
  + Notify the service manager when idle-quitting
- Refresh fwupd-bsc1130056-change-shim-path.patch
- Changes in BuildRequires:
  + Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  + Replace pkgconfig(systemd) with pkgconfig(libsystemd)
- fwupd-msr.conf and fwupd-platform-integrity.conf are moved to
  %{_modulesloaddir}.

==== glibmm2_4 ====
Version update (2.64.4 -> 2.64.5)
Subpackages: libgiomm-2_4-1 libglibmm-2_4-1

- Update to version 2.64.5:
  + gmmproc: Fix compatibility with gtkmm 3.24.2.
  + Build: Meson build: Fix Cocoa (macOS) detection.

==== gnome-shell ====
Version update (3.38.1 -> 3.38.2)
Subpackages: gnome-shell-calendar gnome-shell-lang

- Update to version 3.38.2:
  + Handle @content properties in ease() functions.
  + Fix screencast indicator on Xorg.
  + Fix inline-replies in chat notifications.
  + Improve do-not-disturb support.
  + Fix mobile broadband support.
  + Improve app picker spacing on larger resolutions.
  + Plugged leaks.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop 98234acd5b48a58c2d112b5edb3dddb85e04a643.patch: Fixed
  upstream.

==== gnome-shell-extensions ====
Version update (3.38.1 -> 3.38.2)
Subpackages: gnome-shell-classic gnome-shell-classic-session

- Update to version 3.38.2:
  + window-list: Honor changes in skip-taskbar property.
  + window-list, workspace-indicator:
  - Improve previews in workspace thumbs.
  - Adjust to 3.38 changes.
  + auto-move: Improve behavior on multi-monitor setups.
  + windowNavigator: Adjust to 3.38 changes.
  + Misc. bug fixes.

==== kernel-source ====
Version update (5.9.11 -> 5.9.12)
Subpackages: kernel-default kernel-docs

- Linux 5.9.12 (bsc#1012628).
- io_uring: get an active ref_node from files_data (bsc#1012628).
- io_uring: order refnode recycling (bsc#1012628).
- spi: bcm-qspi: Fix use-after-free on unbind (bsc#1012628).
- spi: bcm2835: Fix use-after-free on unbind (bsc#1012628).
- ipv4: use IS_ENABLED instead of ifdef (bsc#1012628).
- IB/hfi1: Ensure correct mm is used at all times (bsc#1012628).
- RDMA/i40iw: Address an mmap handler exploit in i40iw
  (bsc#1012628).
- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1012628).
- btrfs: tree-checker: add missing return after error in root_item
  (bsc#1012628).
- btrfs: tree-checker: add missing returns after data_ref
  alignment checks (bsc#1012628).
- btrfs: don't access possibly stale fs_info data for printing
  duplicate device (bsc#1012628).
- btrfs: fix lockdep splat when reading qgroup config on mount
  (bsc#1012628).
- rtc: pcf2127: fix a bug when not specify interrupts property
  (bsc#1012628).
- s390: fix fpu restore in entry.S (bsc#1012628).
- mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)
  (bsc#1012628).
- smb3: Call cifs reconnect from demultiplex thread (bsc#1012628).
- smb3: Avoid Mid pending list corruption (bsc#1012628).
- smb3: Handle error case during offload read path (bsc#1012628).
- cifs: fix a memleak with modefromsid (bsc#1012628).
- powerpc/64s: Fix KVM system reset handling when
  CONFIG_PPC_PSERIES=y (bsc#1012628).
- powerpc/64s/exception: KVM Fix for host DSI being taken in
  HPT guest MMU context (bsc#1012628).
- KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing
  ESB page (bsc#1012628).
- KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last
  for userspace (bsc#1012628).
- KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
  (bsc#1012628).
- KVM: x86: Fix split-irqchip vs interrupt injection window
  request (bsc#1012628).
- iommu/vt-d: Don't read VCCAP register unless it exists
  (bsc#1012628).
- firmware: xilinx: Use hash-table for api feature check
  (bsc#1012628).
- drm/amdgpu: fix SI UVD firmware validate resume fail
  (bsc#1012628).
- io_uring: fix ITER_BVEC check (bsc#1012628).
- trace: fix potenial dangerous pointer (bsc#1012628).
- arm64: tegra: Correct the UART for Jetson Xavier NX
  (bsc#1012628).
- arm64: tegra: Fix USB_VBUS_EN0 regulator on Jetson TX1
  (bsc#1012628).
- arm64: pgtable: Fix pte_accessible() (bsc#1012628).
- arm64: pgtable: Ensure dirty bit is preserved across
  pte_wrprotect() (bsc#1012628).
- drm/amdgpu: fix a page fault (bsc#1012628).
- drm/amdgpu: update golden setting for sienna_cichlid
  (bsc#1012628).
- drm/amd/amdgpu: fix null pointer in runtime pm (bsc#1012628).
- drm/amd/display: Avoid HDCP initialization in devices without
  output (bsc#1012628).
- HID: uclogic: Add ID for Trust Flex Design Tablet (bsc#1012628).
- HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off
  keypresses (bsc#1012628).
- HID: cypress: Support Varmilo Keyboards' media hotkeys
  (bsc#1012628).
- HID: add support for Sega Saturn (bsc#1012628).
- Input: i8042 - allow insmod to succeed on devices without an
  i8042 controller (bsc#1012628).
- HID: hid-sensor-hub: Fix issue with devices with no report ID
  (bsc#1012628).
- staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK
  (bsc#1012628).
- HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice
  devices (bsc#1012628).
- dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant
  (bsc#1012628).
- x86/xen: don't unbind uninitialized lock_kicker_irq
  (bsc#1012628).
- kunit: fix display of failed expectations for strings
  (bsc#1012628).
- HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for
  the Dinovo Edge (bsc#1012628).
- HID: Add Logitech Dinovo Edge battery quirk (bsc#1012628).
- proc: don't allow async path resolution of /proc/self components
  (bsc#1012628).
- nvme: free sq/cq dbbuf pointers when dbbuf set fails
  (bsc#1012628).
- io_uring: handle -EOPNOTSUPP on path resolution (bsc#1012628).
- net: stmmac: dwmac_lib: enlarge dma reset timeout (bsc#1012628).
- vdpasim: fix "mac_pton" undefined error (bsc#1012628).
- vhost: add helper to check if a vq has been setup (bsc#1012628).
- vhost scsi: alloc cmds per vq instead of session (bsc#1012628).
- vhost scsi: fix cmd completion race (bsc#1012628).
- cpuidle: tegra: Annotate tegra_pm_set_cpu_in_lp2() with
  RCU_NONIDLE (bsc#1012628).
- dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
  (bsc#1012628).
- scsi: libiscsi: Fix NOP race condition (bsc#1012628).
- scsi: target: iscsi: Fix cmd abort fabric stop race
  (bsc#1012628).
- lockdep: Put graph lock/unlock under lock_recursion protection
  (bsc#1012628).
- perf/x86: fix sysfs type mismatches (bsc#1012628).
- xtensa: uaccess: Add missing __user to strncpy_from_user()
  prototype (bsc#1012628).
- x86/dumpstack: Do not try to access user space code of other
  tasks (bsc#1012628).
- net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset
  (bsc#1012628).
- bus: ti-sysc: Fix reset status check for modules with quirks
  (bsc#1012628).
- bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw
  (bsc#1012628).
- ARM: OMAP2+: Manage MPU state properly for
  omap_enter_idle_coupled() (bsc#1012628).
- phy: tegra: xusb: Fix dangling pointer on probe failure
  (bsc#1012628).
- iwlwifi: mvm: use the HOT_SPOT_CMD to cancel an AUX ROC
  (bsc#1012628).
- iwlwifi: mvm: properly cancel a session protection for P2P
  (bsc#1012628).
- iwlwifi: mvm: write queue_sync_state only for sync
  (bsc#1012628).
- KVM: s390: pv: Mark mm as protected after the set secure
  parameters and improve cleanup (bsc#1012628).
- KVM: s390: remove diag318 reset code (bsc#1012628).
- batman-adv: set .owner to THIS_MODULE (bsc#1012628).
- usb: cdns3: gadget: fix some endian issues (bsc#1012628).
- usb: cdns3: gadget: calculate TD_SIZE based on TD (bsc#1012628).
- phy: qualcomm: usb: Fix SuperSpeed PHY OF dependency
  (bsc#1012628).
- phy: qualcomm: Fix 28 nm Hi-Speed USB PHY OF dependency
  (bsc#1012628).
- arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
  (bsc#1012628).
- bus: ti-sysc: suppress err msg for timers used as
  clockevent/source (bsc#1012628).
- ARM: dts: dra76x: m_can: fix order of clocks (bsc#1012628).
- scsi: ufs: Fix race between shutdown and runtime resume flow
  (bsc#1012628).
- bnxt_en: fix error return code in bnxt_init_one() (bsc#1012628).
- bnxt_en: fix error return code in bnxt_init_board()
  (bsc#1012628).
- video: hyperv_fb: Fix the cache type when mapping the VRAM
  (bsc#1012628).
- bnxt_en: Release PCI regions when DMA mask setup fails during
  probe (bsc#1012628).
- block/keyslot-manager: prevent crash when num_slots=1
  (bsc#1012628).
- cxgb4: fix the panic caused by non smac rewrite (bsc#1012628).
- dpaa2-eth: select XGMAC_MDIO for MDIO bus support (bsc#1012628).
- s390/qeth: make af_iucv TX notification call more robust
  (bsc#1012628).
- s390/qeth: fix af_iucv notification race (bsc#1012628).
- s390/qeth: fix tear down of async TX buffers (bsc#1012628).
- drm/mediatek: dsi: Modify horizontal front/back porch byte
  formula (bsc#1012628).
- bonding: wait for sysfs kobject destruction before freeing
  struct slave (bsc#1012628).
- ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1012628).
- ibmvnic: notify peers when failover and migration happen
  (bsc#1012628).
- powerpc/64s: Fix allnoconfig build since uaccess flush
  (bsc#1012628).
- iommu: Check return of __iommu_attach_device() (bsc#1012628).
- IB/mthca: fix return value of error branch in mthca_init_cq()
  (bsc#1012628).
- i40e: Fix removing driver while bare-metal VFs pass traffic
  (bsc#1012628).
- firmware: xilinx: Fix SD DLL node reset issue (bsc#1012628).
- spi: imx: fix the unbalanced spi runtime pm management
  (bsc#1012628).
- io_uring: fix shift-out-of-bounds when round up cq size
  (bsc#1012628).
- aquantia: Remove the build_skb path (bsc#1012628).
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers
  (bsc#1012628).
- net: ena: handle bad request id in ena_netdev (bsc#1012628).
- net: ena: set initial DMA width to avoid intel iommu issue
  (bsc#1012628).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1012628).
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues
  (bsc#1012628).
- ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq
  (bsc#1012628).
- ibmvnic: enhance resetting status check during module exit
  (bsc#1012628).
- optee: add writeback to valid memory type (bsc#1012628).
- x86/tboot: Don't disable swiotlb when iommu is forced on
  (bsc#1012628).
- arm64: tegra: Wrong AON HSP reg property size (bsc#1012628).
- efi/efivars: Set generic ops before loading SSDT (bsc#1012628).
- efivarfs: revert "fix memory leak in efivarfs_create()"
  (bsc#1012628).
- efi: EFI_EARLYCON should depend on EFI (bsc#1012628).
- riscv: Explicitly specify the build id style in vDSO Makefile
  again (bsc#1012628).
- RISC-V: Add missing jump label initialization (bsc#1012628).
- RISC-V: fix barrier() use in <vdso/processor.h> (bsc#1012628).
- net: stmmac: fix incorrect merge of patch upstream
  (bsc#1012628).
- enetc: Let the hardware auto-advance the taprio base-time of 0
  (bsc#1012628).
- ptp: clockmatrix: bug fix for idtcm_strverscmp (bsc#1012628).
- drm/nouveau: fix relocations applying logic and a double-free
  (bsc#1012628).
- can: gs_usb: fix endianess problem with candleLight firmware
  (bsc#1012628).
- platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup
  time (bsc#1012628).
- platform/x86: toshiba_acpi: Fix the wrong variable assignment
  (bsc#1012628).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (bsc#1012628).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (bsc#1012628).
- RDMA/hns: Bugfix for memory window mtpt configuration
  (bsc#1012628).
- can: m_can: m_can_open(): remove IRQF_TRIGGER_FALLING from
  request_threaded_irq()'s flags (bsc#1012628).
- can: m_can: fix nominal bitiming tseg2 min for version >= 3.1
  (bsc#1012628).
- perf record: Synthesize cgroup events only if needed
  (bsc#1012628).
- perf stat: Use proper cpu for shadow stats (bsc#1012628).
- perf probe: Fix to die_entrypc() returns error correctly
  (bsc#1012628).
- USB: core: Change %pK for __user pointers to %px (bsc#1012628).
- usb: gadget: f_midi: Fix memleak in f_midi_alloc (bsc#1012628).
- USB: core: Fix regression in Hercules audio card (bsc#1012628).
- USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo
  A630Z TIO built-in usb-audio card (bsc#1012628).
- usb: gadget: Fix memleak in gadgetfs_fill_super (bsc#1012628).
- irqchip/exiu: Fix the index of fwspec for IRQ type
  (bsc#1012628).
- x86/mce: Do not overwrite no_way_out if mce_end() fails
  (bsc#1012628).
- x86/speculation: Fix prctl() when
  spectre_v2_user={seccomp,prctl},ibpb (bsc#1012628).
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent
  refcount leak (bsc#1012628).
- x86/resctrl: Add necessary kernfs_put() calls to prevent
  refcount leak (bsc#1012628).
- drm/amdgpu: add rlc iram and dram firmware support
  (bsc#1012628).
- commit 46922da
- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256
- Update config files.
  Refresh after SOUNDWIRE removal.
- commit fa3b6ea
- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e
- Update config files: make CONFIG_SOUNDWIRE=m (bsc#1179201)
  Also turned it off for unrelated platforms
- commit afd1f81
- Update
  patches.kernel.org/5.9.11-181-sched-Fix-data-race-in-wakeup.patch
  (bsc#1012628 bsc#1175893).
  Add a bsc.
- commit d5a5c02
- dt-bindings: pwm: Add binding for RPi firmware PWM bus
  (jsc#SLE-16543).
- staging: vchiq: Release firmware handle on unbind
  (jsc#SLE-16543).
- soc: bcm: raspberrypi-power: Release firmware handle on unbind
  (jsc#SLE-16543).
-  - pwm: Add Raspberry Pi Firmware based PWM bus (jsc#SLE-16543).
  - Update configs: Enable pwm driver on arm64/arm32
  - supported.conf: Enable pwm driver
- input: raspberrypi-ts: Release firmware handle when not needed
  (jsc#SLE-16543).
- gpio: raspberrypi-exp: Release firmware handle on unbind
  (jsc#SLE-16543).
- firmware: raspberrypi: Keep count of all consumers
  (jsc#SLE-16543).
- firmware: raspberrypi: Introduce devm_rpi_firmware_get()
  (jsc#SLE-16543).
- clk: bcm: rpi: Release firmware handle on unbind
  (jsc#SLE-16543).
- commit e8d4edd

==== kvm_stat ====
Version update (5.9.8 -> 5.9.12)

- Include the example service file in the package
  * install it in /usr/share/kvm_stat
  * this deals properly with bsc#1179469

==== libapparmor ====
Version update (3.0.0 -> 3.0.1)
Subpackages: libapparmor1 libapparmor1-32bit

- update to AppArmor 3.0.1
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
    for the detailed upstream changelog
  - drop upstream patch changes-since-3.0.0.diff

==== libarchive ====
Version update (3.4.3 -> 3.5.0)

- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.

==== libreoffice ====
Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit

- Disable firebird integration for the time being (boo#1179203).

==== libvirt ====
Version update (6.9.0 -> 6.10.0)
Subpackages: libvirt-bash-completion libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs

- Update to libvirt 6.10.0
  - jsc#SLE-13688
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html
  - Dropped patches:
    f035f53b-virt-guest-shutdown.patch

==== libyui-qt ====
Version update (2.56.3 -> 2.56.4)

- Add folder-temp icon (related to jsc#SLE-16313).
- 2.56.4

==== mutter ====
Version update (3.38.1 -> 3.38.2)
Subpackages: libmutter-7-0 mutter-data mutter-lang

- Update to version 3.38.2:
  + Fix unwanted position changes on window resize.
  + Fix _NET_WM_FRAME_DRAWN timestamps.
  + Fix missed redraws of newly-mapped actors.
  + (Temporarily) make Xwayland listen on abstract namespace socket
    again.
  + Fix tiling to the correct monitor.
  + Fix background artifacts in magnifier.
  + Fix monitor tiling support on X11.
  + Fix device configuration not being picked up on X11.
  + Improve compatibility with Qt's wayland support.
  + Support tagging devices as primary GPU via udev.
  + Fix size hints with CSD.
  + Do not disable the X Security extension by default.
  + Fix unresponsive input after screen blank.
  + Improve tablet-mode-switch support.
  + Plugged memory leaks.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.

==== nano ====
Version update (5.3 -> 5.4)
Subpackages: nano-lang

- GNU nano 5.4:
  * Moving the cursor now skips over combining characters (an
    other zero-width characters)
  * Deleting a character deletes also any succeeding zero-width
    characters but backspacing deletes just one character at a time

==== open-vm-tools ====
Subpackages: libvmtools0 open-vm-tools-desktop

- Enable build on aarch64

==== orca ====
Version update (3.38.0 -> 3.38.1)
Subpackages: orca-lang

- Update to version 3.38.1:
  + Web: Fix crash when generating speech for childless math
    element.
  + General: Fix bug causing the new radio button group to not be
    presented when the group was first entered.
  + Updated translations.

==== plasma5-disks ====
Version update (5.20.3 -> 5.20.4)
Subpackages: plasma5-disks-lang

- Update to 5.20.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma-5.20.4
- No code changes since 5.20.3

==== plasma5-thunderbolt ====
Version update (5.20.3 -> 5.20.4)
Subpackages: plasma5-thunderbolt-lang

- Update to 5.20.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma-5.20.4
- No code changes since 5.20.3

==== python-Pygments ====
Version update (2.7.2 -> 2.6.1)

- Revert to 2.6.1 (higher version break python-Pelican).

==== python-async_generator ====

- fix pytest call for multiple python flavors
  gh#openSUSE/python-rpm-macros#66

==== python-future ====

- Need dbm for more than one python3 flavor
  gh#openSUSE/python-rpm-macros#66

==== python-gunicorn ====

- Neither pytest-cov nor standalone mock are true BuildRequirements

==== python-libvirt-python ====
Version update (6.9.0 -> 6.10.0)

- Update to 6.10.0
  - Add all new APIs and constants in libvirt 6.10.0
  - jsc#SLE-13688

==== python-pycairo ====
Version update (1.19.1 -> 1.20.0)

- Update to 1.20.0
  * Require Python 3.6+ #pr-201
  * Require cairo 1.15.10+ #pr-204
  * docs: support Sphinx 3.0 #pr-207
  * meson: add ?tests? option to skip tests #pr-188
  * Windows: build wheels #pr-197
  * Add support for Python 3.9 and 3.10 #pr-198 #pr-202
  * examples: add a Jupyter Notebook example #pr-181
  * Raise an error early when being passed a file object not opened
    in binary mode #pr-205
  * Add a pyproject.toml file #pr-206
- move header file in sitearch to devel package (rpmlint error)
  header is packaged twice: gh#pygobject/pycairo#98
- Move the pkgconfig file to the common package
  gh#openSUSE/python-rpm-macros#66

==== python-setproctitle ====
Version update (1.1.10 -> 1.2)

- Update to version 1.2
  * added ``getthreadtitle()`` and ``setthreadtitle()``.
  * Initialisation of the module moved to the first usage:
    importing the module doesn't cause side effects.
  * Manage much longer command lines (#52)
  * Improved build on BSD, dropped ancient versions (issue #67).
  * Fixed build for Python 3.8 (#66, #72)
  * Added support for Python 3.9
  * Dropped support for Python < 3.6
- Drop use-pkg-config.patch
- Drop extra requirements

==== python-sniffio ====

- skip upcoming python36 flavor because there is no python36-curio

==== rubygem-packaging_rake_tasks ====
Version update (1.4.11 -> 1.4.14)

- Do not check license in vector images (needed for jsc#SLE-16313).
- 1.4.14
- Use the "--non-interactive" zypper option in the
  "build_dependencies:install" task if not running in a terminal
  (related to bsc#1179445)
- 1.4.13
- Use "sudo" in the "build_dependencies:install" task only when
  running as non-root, "sudo" might not be installed when running
  as root (bsc#1179445)
- 1.4.12

==== snapper ====
Subpackages: libsnapper5 snapper-zypp-plugin

- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)
- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)
- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)

==== spice-gtk ====
Version update (0.38 -> 0.39)
Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5

- Update to version 0.39. Issues addressed:
  + !33 - Remove PulseAudio backend
  + !34 - Remove support to CELT codec
  + !42 - Drop capabilities from usb-acl-helper binary
  + !45 - #123 - Install ACL helper in libexec directory
  + !48 - Add support to Wayland mouse in server mode
  + !49 - #126 - Read all SASL buffer
  + !54 - Add Copy & Paste support over Webdav
  + !58 - Improve input and display on HiDPI displays
  + !64 - Add support for Physical size display
  + !69 - Fix leak on Display's surface
  + !74 - Fix read overflow on (not seamless) migration code
  + !75 - Fix usb redirect on connect, see [rhbz#1874740]
  + !77 - Fixes buffer overflow in QUIC [CVE-2020-14355]
- Be explicit about the configuration options
- Drop these patches, which are in release tarball:
  Remove-celt-support.patch
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch
- Note: The Mar 9, 2020 spec file cleanup satisfies jsc#SLE-15520

==== sqlite3 ====
Version update (3.33.0 -> 3.34.0)

- SQLite 3.34.0:
  * Added the sqlite3_txn_state() interface for reporting on the
    current transaction state of the database connection.
  * Enhance recursive common table expressions to support two or more
    recursive terms as is done by SQL Server, since this helps make
    queries against graphs easier to write and faster to execute.\
  * Improved error messages on CHECK constraint failures.
  * The .read dot-command now accepts a pipeline in addition to a
    filename.
  * Added options --data-only and --nosys to the .dump dot-command.
  * Added the --nosys option to the .schema dot-command.
  * Table name quoting works correctly for the .import dot-command.
  * The generate_series(START,END,STEP) table-valued function
    extension is now built into the CLI.
  * The .databases dot-command now show the status of each database
    file as determined by sqlite3_db_readonly() and
    sqlite3_txn_state().
  * Added the --tabs command-line option that sets .mode tabs.
  * The --init option reports an error if the file named as its
    argument cannot be opened. The --init option also now honors the
  - -bail option.
  * Improved estimates for the cost of running a DISTINCT operator.
  * When doing an UPDATE or DELETE using a multi-column index where
    only a few of the earlier columns of the index are useful for the
    index lookup, postpone doing the main table seek until after all
    WHERE clause constraints have been evaluated, in case those
    constraints can be covered by unused later terms of the index,
    thus avoiding unnecessary main table seeks.
  * The new OP_SeekScan opcode is used to improve performance of
    multi-column index look-ups when later columns are constrained by
    an IN operator.
  * The BEGIN IMMEDIATE and BEGIN EXCLUSIVE commands now work even if
    one or more attached database files are read-only.
  * Enhanced FTS5 to support trigram indexes.
  * Improved performance of WAL mode locking primitives in cases where
    there are hundreds of connections all accessing the same database
    file at once.
  * Enhanced the carray() table-valued function to include a
    single-argument form that is bound using the auxiliary
    sqlite3_carray_bind() interface.
  * The substr() SQL function can now also be called "substring()" for
    compatibility with SQL Server.
  * The syntax diagrams are now implemented as Pikchr scripts and
    rendered as SVG for improved legibility and ease of maintenance.

==== unbound ====
Version update (1.12.0 -> 1.13.0)
Subpackages: libunbound8 unbound-anchor

- update to 1.13.0
  Features
- Pass the comm_reply information to the inplace_cb_reply* functions
  during the mesh state and update the documentation on that.
- Fix #330: [Feature request] Add unencrypted DNS over HTTPS support.
  This adds the option http-notls-downstream: yesno to change that,
  and the dohclient test code has the -n option.
- Merge PR #228 : infra-keep-probing option to probe hosts that are
  down.  Add infra-keep-probing: yes option. Hosts that are down are
  probed more frequently.
  With the option turned on, it probes about every 120 seconds,
  eventually after exponential backoff, and that keeps that way. If
  traffic keeps up for the domain. It probes with one at a time, eg.
  one query is allowed to probe, other queries within that 120 second
  interval are turned away.
- Merge PR #313 from Ralph Dolmans: Replace edns-client-tag with
  edns-client-string option.
- Merge PR #283 : Stream reuse.  This implements upstream stream
  reuse for performing several queries over the same TCP or TLS
  channel.
- Fix to connect() to UDP destinations, default turned on,
  this lowers vulnerability to ICMP side channels.
  Option to toggle udp-connect, default is enabled.
  Bug Fixes
- Fix #319: potential memory leak on config failure, in rpz config.
- Fix dnstap socket and the chroot not applied properly to the dnstap
  socket path.
- Fix warning in libnss compile, nss_buf2dsa is not used without DSA.
- Fix #323: unbound testsuite fails on mock build in systemd-nspawn
  if systemd support is build.
- Fix for python reply callback to see mesh state reply_list member,
  it only removes it briefly for the commpoint call so that it does
  not drop it and attempt to modify the reply list during reply.
- Fix that if there are on reply callbacks, those are called per
  reply and a new message created if that was modified by the call.
- Free up auth zone parse region after use for lookup of host
- Merge PR #326 from netblue30: DoH: implement content-length
  header field.
- DoH content length, simplify code, remove declaration after
  statement and fix cast warning.
- Fix that if there are reply callbacks for the given rcode, those
  are called per reply and a new message created if that was modified
  by the call.
- Fix that the out of order TCP processing does not limit the
  number of outstanding queries over a connection.
- Fix python documentation warning on functions.rst inplace_cb_reply.
- Log ip address when http session recv fails, eg. due to tls fail.
- Fix to set the tcp handler event toggle flag back to default when
  the handler structure is reused.
- Clean the fix for out of order TCP processing limits on number
  of queries.  It was tested to work.
- Fix that http settings have colon in set_option, for
  http-endpoint, http-max-streams, http-query-buffer-size,
  http-response-buffer-size, and http-nodelay.
- Fix memory leak of https port string when reading config.
- local-zone regional allocations outside of chunk
- Merge PR #324 from James Renken: Add modern X.509v3 extensions to
  unbound-control TLS certificates.
- Fix for PR #324 to attach the x509v3 extensions to the client
  certificate.
- Fix #327: net/if.h check fails on some darwin versions; contribution
  by Joshua Root.
- Fix #320: potential memory corruption due to size miscomputation upton
  custom region alloc init.
- Fix #333: Unbound Segmentation Fault w/ log_info Functions From
  Python Mod.
- Fix that minimal-responses does not remove addresses from a priming
  query response.
- In man page note that tls-cert-bundle is read before permission
  drop and chroot.
- Fix #341: fixing a possible memory leak.
- Fix memory leak after fix for possible memory leak failure.
- Fix #343: Fail to build --with-libnghttp2 with error: 'SSIZE_MAX'
  undeclared.
- Fix for #303 CVE-2020-28935 : Fix that symlink does not interfere
  with chown of pidfile.
- Fix #347: IP_DONTFRAG broken on Apple xcode 12.2.
- Fix #350: with the AF_NETLINK permission, to fix 1.12.0 error:
  failed to list interfaces: getifaddrs: Address family not
  supported by protocol.
- Merge #351 from dvzrv: Add AF_NETLINK to set of allowed socket
  address families.
- iana portlist updated.
- Fix crash when TLS connection is closed prematurely, when
  reuse tree comparison is not properly identical to insertion.
- Fix padding of struct regional for 32bit systems.
- with udp-connect ignore connection refused with UDP timeouts.
- Fix udp-connect on FreeBSD, do send calls on connected UDP socket.
- Better fix for reuse tree comparison for is-tls sockets.  Where
  the tree key identity is preserved after cleanup of the TLS state.
- Fix memory leak for edns client tag opcode config element.
- Attempt fix for libevent state in tcp reuse cases after a packet
  is written.
- Fix readagain and writeagain callback functions for comm point
  cleanup.
- Fix to omit UDP receive errors from log, if verbosity low.
  These happen because of udp-connect.
- For #352: contrib/metrics.awk for Prometheus style metrics output.
- Fix that after failed read, the readagain cannot activate.
- Clear readagain upon decommission of pending tcp structure.
- Fix compile warning for type cast in http2_submit_dns_response.
- Fix when use free buffer to initialize rbtree for stream reuse.
- Fix compile warnings for windows.
- Fix compile warnings in rpz initialization.
- Fix contrib/metrics.awk for FreeBSD awk compatibility.
- Fix assertion failure on double callback when iterator loses
  interest in query at head of line that then has the tcp stream
  not kept for reuse.
- Fix stream reuse and tcp fast open.

==== webkit2gtk3 ====
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles

- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.

==== yast2-storage-ng ====
Version update (4.3.24 -> 4.3.27)

- Fix unit tests (related to jsc#SLE-11308).
- 4.3.27
- Partitioner: added management of tmpfs file systems (related to
  jsc#SLE-11308).
- 4.3.26
- Use Yast::Kernel.propose_hibernation? (related to jsc#SLE-12280).
- 4.3.25

==== yast2-users ====
Version update (4.3.9 -> 4.3.10)

- In the public key selector, allow to choose any device that
  contains any filesystem except swap and squashfs (bsc#1178509).
- 4.3.10

New Tumbleweed snapshot 20201205 released!

Dominique Leuenberger