Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20200324 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (1.4.3.3~git0.776c6edf5 -> 1.4.3.4~git0.3422d6574) ImageMagick (7.0.10.0 -> 7.0.10.1) MozillaFirefox-branding-openSUSE MozillaThunderbird (68.5.0 -> 68.6.0) bash-completion bind (9.16.0 -> 9.16.1) elementary-xfce-icon-theme (0.14+git30.e40a2684 -> 0.15+git0.6fc555d6) fuse3 (3.9.0 -> 3.9.1) gmime (3.2.6 -> 3.2.7) kernel-firmware (20200302 -> 20200316) kernel-source (5.5.9 -> 5.5.11) lensfun (0.3.2 -> 0.3.95.1584325617.48775126) libzypp (17.23.1 -> 17.23.2) mariadb mercurial (5.3 -> 5.3.1) patterns-server (20180718 -> 20200312) perl-Apache-AuthCookie (3.28 -> 3.29) php7 (7.4.3 -> 7.4.4) qemu qemu-linux-user rpm rubygem-mustermann (1.0.3 -> 1.1.1) rubygem-rest-client (2.0.2 -> 2.1.0) suitesparse syslinux valgrind vhba-kmp (20190410_k5.5.9_1 -> 20200106_k5.5.11_1) virt-manager virtualbox xdm xfce4-panel xfce4-screensaver (0.1.8 -> 0.1.9) zypper (1.14.34 -> 1.14.35) === Details === ==== 389-ds ==== Version update (1.4.3.3~git0.776c6edf5 -> 1.4.3.4~git0.3422d6574) Subpackages: lib389 libsvrcore0 - Remove 0001-fix-cargo-build.patch as it has been included upstream - Update to version 1.4.3.4~git0.3422d6574: * Bump version to 1.4.3.4 * Issue 50954 - Port buildnum.pl to python(part 2) * Issue 50955 - Fix memory leaks in chaining plugin * Issue 50954 - Port buildnum.pl to python * Ticket 50947 - change 00core.ldif objectClasses for openldap migration * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory * Issue 50937 - Update CLI for new backend split configuration * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh * Ticket 50945 - givenname alias of gn from openldap * Ticket 50935 - systemd override in lib389 for dscontainer * Issue 50499 - Fix npm audit issues * Issue 49761 - Fix CI test suite issues * Ticket 50618 - clean compiler warning and log level * Ticket 50889 - fix compiler issues * Issue 50884 - Health check tool DSEldif check fails * Issue 50926 - Remove dual spinner and other UI fixes * Issue 50928 - Unable to create a suffix with countryName * Issue 50758 - Only Recommend bash-completion, not Require * Issue 50923 - Fix a test regression * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name * Issue 50919 - Backend delete fails using dsconf * Issue 50872 - dsconf can't create GSSAPI replication agreements * Issue 50912 - RFE - add password policy attribute pwdReset * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group * Ticket 50889 - Extract pem files into a private namespace * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before * Issue: 50686 - Port fractional replication test cases from TET to python3 final * Issue 49845 - Remove pkgconfig check for libasan * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080 * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs * Ticket 50786 - connection table freelist * Ticket 50618 - support cgroupv2 * Ticket 50900 - Fix cargo offline build * Ticket 50898 - ldclt core dumped when run with -e genldif option ==== ImageMagick ==== Version update (7.0.10.0 -> 7.0.10.1) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI4 libMagickCore-7_Q16HDRI7 libMagickWand-7_Q16HDRI7 perl-PerlMagick - version update to 7.0.10.1 * Add support for returning the convex hull of an image with the %[canvas-hull] property. * Added option to specify the preferred version when writing a PDF file with - define pdf:version=version (e.g. 1.7). * Do not throw exception on empty draw path (reference https://github.com/ImageMagick/ImageMagick/issues/974). * Fix possible buffer overflow in ComplexImages(). * SVG to MVG requires transforms to appear before clipping paths (reference https://github.com/ImageMagick/ImageMagick/issues/1860). ==== MozillaFirefox-branding-openSUSE ==== - Update the default homepage and the bookmark icons ==== MozillaThunderbird ==== Version update (68.5.0 -> 68.6.0) Subpackages: MozillaThunderbird-translations-common - Mozilla Thunderbird 68.6.0 MFSA 2020-10 (bsc#1166238) * CVE-2020-6805 (bmo#1610880) Use-after-free when removing data about origins * CVE-2020-6806 (bmo#1612308) BodyStream::OnInputStreamReady was missing protections against state confusion * CVE-2020-6807 (bmo#1614971) Use-after-free in cubeb during stream destruction * CVE-2020-6811 (bmo#1607742) Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection * CVE-2019-20503 (bmo#1613765) Out of bounds reads in sctp_load_addresses_from_init * CVE-2020-6812 (bmo#1616661) The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256, bmo#1612636, bmo#1614339) Memory safety bugs fixed in Thunderbird 68.6 - requires NSS >= 3.44.3 ==== bash-completion ==== - Add patch to also complete qdbus-qt5: * qdbus-qt5.patch ==== bind ==== Version update (9.16.0 -> 9.16.1) Subpackages: bind-chrootenv bind-doc bind-utils libbind9-1600 libirs1600 libisccc1600 libisccfg1600 python3-bind - Use sysusers.d to create named user - Have only one package creating the user - coreutils are not used in %post, remove Requires. - Use systemd_ordering instead of hard requiring systemd - Upgrade to version 9.16.1 * UDP network ports used for listening can no longer simultaneously be used for sending traffic. * The system-provided POSIX Threads read-write lock implementation is now used by default instead of the native BIND 9 implementation. * Fixed re-signing issues with inline zones which resulted in records being re-signed late or not at all. [bind-9.16.1.tar.xz] ==== elementary-xfce-icon-theme ==== Version update (0.14+git30.e40a2684 -> 0.15+git0.6fc555d6) - Build using buildsystem to take advantage of the SVG to PNG conversion script. PNG load faster than SVG. - Update to version 0.15+git0.6fc555d6: * Run vacuum-defs * Add 24px clipman icon * Fixed dangling symlinks ==== fuse3 ==== Version update (3.9.0 -> 3.9.1) Subpackages: libfuse3-3 - Update to version 3.9.1 * Fixed memory leak in fuse_session_new(). * Fixed an issue with the linker version script. * Make ioctl prototype conditional on FUSE_USE_VERSION. Define FUSE_USE_VERSION < 35 to get old ioctl prototype with int commands; define FUSE_USE_VERSION >= 35 to get new ioctl prototype with unsigned int commands. * Various small bugfixes. ==== gmime ==== Version update (3.2.6 -> 3.2.7) - Update to version 3.2.7: + Added some configure logic to auto-detect the system shift-jis charset alias. + Fixed tests/Makefile.am to exit with a non-negative value. + Fixed logic to skip expired or revoked gpg subkeys when looking for the correct subkey to use for signing or encrypting. + Fixed a regression introduced into 3.2.6 as part of the header parser rewrite that lost the ability to warn about invalid headers for non-toplevel MIME parts. + Fixed S/MIME to always set GPGME_KEYLIST_MODE_VALIDATE when looking up certificates as this is needed in order to correctly populate the GMimeCertificates. ==== kernel-firmware ==== Version update (20200302 -> 20200316) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20200316 (git commit 8eb0b281511d): * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: update vega20 firmware from 19.50 * amdgpu: update vega12 firmware from 19.50 * amdgpu: update vega10 firmware from 19.50 * rtl_bt: Add firmware and configuration files for RTL8822C BT UART chip * i915: Add DMC firmware v2.06 for TGL * i915: add HuC firmware v7.0.12 for TGL ==== kernel-source ==== Version update (5.5.9 -> 5.5.11) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 5.5.11 (bnc#1012628). - ipv4: ensure rcu_read_lock() in cipso_v4_error() (bnc#1012628). - ARM: 8961/2: Fix Kbuild issue caused by per-task stack protector GCC plugin (bnc#1012628). - HID: add ALWAYS_POLL quirk to lenovo pixart mouse (bnc#1012628). - HID: google: add moonball USB id (bnc#1012628). - mm: slub: add missing TID bump in kmem_cache_alloc_bulk() (bnc#1012628). - ARM: 8958/1: rename missed uaccess .fixup section (bnc#1012628). - ARM: 8957/1: VDSO: Match ARMv8 timer in cntvct_functional() (bnc#1012628). - blk-mq: insert flush request to the front of dispatch queue (bnc#1012628). - jbd2: fix data races at struct journal_head (bnc#1012628). - net: dsa: mv88e6xxx: Fix masking of egress port (bnc#1012628). - mlxsw: pci: Wait longer before accessing the device after reset (bnc#1012628). - sfc: fix timestamp reconstruction at 16-bit rollover points (bnc#1012628). - net: rmnet: fix packet forwarding in rmnet bridge mode (bnc#1012628). - net: rmnet: fix bridge mode bugs (bnc#1012628). - net: rmnet: use upper/lower device infrastructure (bnc#1012628). - net: rmnet: do not allow to change mux id if mux id is duplicated (bnc#1012628). - net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device() (bnc#1012628). - net: rmnet: fix suspicious RCU usage (bnc#1012628). - net: rmnet: fix NULL pointer dereference in rmnet_changelink() (bnc#1012628). - net: rmnet: fix NULL pointer dereference in rmnet_newlink() (bnc#1012628). - hinic: fix a bug of rss configuration (bnc#1012628). - hinic: fix a bug of setting hw_ioctxt (bnc#1012628). - hinic: fix a irq affinity bug (bnc#1012628). - net: phy: mscc: fix firmware paths (bnc#1012628). - slip: not call free_netdev before rtnl_unlock in slip_open (bnc#1012628). - net: bcmgenet: Clear ID_MODE_DIS in EXT_RGMII_OOB_CTRL when not needed (bnc#1012628). - signal: avoid double atomic counter increments for user accounting (bnc#1012628). - kbuild: add dt_binding_check to PHONY in a correct place (bnc#1012628). - kbuild: add dtbs_check to PHONY (bnc#1012628). - io_uring: pick up link work on submit reference drop (bnc#1012628). - drm/amdgpu: fix memory leak during TDR test(v2) (bnc#1012628). - io_uring: fix poll_list race for SETUP_IOPOLL|SETUP_SQPOLL (bnc#1012628). - blk-mq: insert passthrough request into hctx->dispatch directly (bnc#1012628). - net: ll_temac: Handle DMA halt condition caused by buffer underrun (bnc#1012628). - net: ll_temac: Fix RX buffer descriptor handling on GFP_ATOMIC pressure (bnc#1012628). - net: ll_temac: Add more error handling of dma_map_single() calls (bnc#1012628). - net: ll_temac: Fix race condition causing TX hang (bnc#1012628). - mac80211: rx: avoid RCU list traversal under mutex (bnc#1012628). - net: ks8851-ml: Fix IRQ handling and locking (bnc#1012628). - net: usb: qmi_wwan: restore mtu min/max values after raw_ip switch (bnc#1012628). - scsi: libfc: free response frame from GPN_ID (bnc#1012628). - cfg80211: check reg_rule for NULL in handle_channel_custom() (bnc#1012628). - tracing: Fix number printing bug in print_synth_event() (bnc#1012628). - selftests/rseq: Fix out-of-tree compilation (bnc#1012628). - kunit: run kunit_tool from any directory (bnc#1012628). - riscv: set pmp configuration if kernel is running in M-mode (bnc#1012628). - HID: hid-bigbenff: fix race condition for scheduled work during removal (bnc#1012628). - HID: hid-bigbenff: call hid_hw_stop() in case of error (bnc#1012628). - HID: hid-bigbenff: fix general protection fault caused by double kfree (bnc#1012628). - HID: i2c-hid: add Trekstor Surfbook E11B to descriptor override (bnc#1012628). - ACPI: watchdog: Set default timeout in probe (bnc#1012628). - HID: apple: Add support for recent firmware on Magic Keyboards (bnc#1012628). - ACPI: watchdog: Allow disabling WDAT at boot (bnc#1012628). - pinctrl: qcom: ssbi-gpio: Fix fwspec parsing bug (bnc#1012628). - commit 794b2e9 - Linux 5.5.10 (bnc#1012628). - virtio_balloon: Adjust label in virtballoon_probe (bnc#1012628). - ALSA: hda/realtek - More constifications (bnc#1012628). - ALSA: hda/realtek - Add Headset Mic supported for HP cPC (bnc#1012628). - ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported (bnc#1012628). - cgroup, netclassid: periodically release file_lock on classid updating (bnc#1012628). - cxgb4: fix checks for max queues to allocate (bnc#1012628). - gre: fix uninit-value in __iptunnel_pull_header (bnc#1012628). - inet_diag: return classid for all socket types (bnc#1012628). - ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (bnc#1012628). - ipvlan: add cond_resched_rcu() while processing muticast backlog (bnc#1012628). - ipvlan: do not add hardware address of master to its unicast filter list (bnc#1012628). - ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() (bnc#1012628). - ipvlan: don't deref eth hdr before checking it's set (bnc#1012628). - macvlan: add cond_resched() during multicast processing (bnc#1012628). - net: dsa: fix phylink_start()/phylink_stop() calls (bnc#1012628). - net: dsa: mv88e6xxx: fix lockup on warm boot (bnc#1012628). - net: fec: validate the new settings in fec_enet_set_coalesce() (bnc#1012628). - net: hns3: fix a not link up issue when fibre port supports autoneg (bnc#1012628). - net/ipv6: use configured metric when add peer route (bnc#1012628). - netlink: Use netlink header as base to calculate bad attribute offset (bnc#1012628). - net: macsec: update SCI upon MAC address change (bnc#1012628). - net: mscc: ocelot: properly account for VLAN header length when setting MRU (bnc#1012628). - net: nfc: fix bounds checking bugs on "pipe" (bnc#1012628). - net/packet: tpacket_rcv: do not increment ring index on drop (bnc#1012628). - net: phy: bcm63xx: fix OOPS due to missing driver name (bnc#1012628). - net/smc: cancel event worker during device removal (bnc#1012628). - net: stmmac: dwmac1000: Disable ACS if enhanced descs are not used (bnc#1012628). - net: systemport: fix index check to avoid an array out of bounds access (bnc#1012628). - r8152: check disconnect status after long sleep (bnc#1012628). - sfc: detach from cb_page in efx_copy_channel() (bnc#1012628). - slip: make slhc_compress() more robust against malicious packets (bnc#1012628). - taprio: Fix sending packets without dequeueing them (bnc#1012628). - bonding/alb: make sure arp header is pulled before accessing it (bnc#1012628). - bnxt_en: reinitialize IRQs when MTU is modified (bnc#1012628). - bnxt_en: fix error handling when flashing from file (bnc#1012628). - cgroup: memcg: net: do not associate sock with unrelated cgroup (bnc#1012628). - net: memcg: late association of sock to memcg (bnc#1012628). - net: memcg: fix lockdep splat in inet_csk_accept() (bnc#1012628). - dt-bindings: net: FMan erratum A050385 (bnc#1012628). - arm64: dts: ls1043a: FMan erratum A050385 (bnc#1012628). - fsl/fman: detect FMan erratum A050385 (bnc#1012628). - dpaa_eth: FMan erratum A050385 workaround (bnc#1012628). - net: hns3: fix "tc qdisc del" failed issue (bnc#1012628). - net: hns3: fix RMW issue for VLAN filter switch (bnc#1012628). - net: hns3: clear port base VLAN when unload PF (bnc#1012628). - devlink: validate length of param values (bnc#1012628). - devlink: validate length of region addr/len (bnc#1012628). - fib: add missing attribute validation for tun_id (bnc#1012628). - nl802154: add missing attribute validation (bnc#1012628). - nl802154: add missing attribute validation for dev_type (bnc#1012628). - can: add missing attribute validation for termination (bnc#1012628). - macsec: add missing attribute validation for port (bnc#1012628). - openvswitch: add missing attribute validation for hash (bnc#1012628). - net: fq: add missing attribute validation for orphan mask (bnc#1012628). - net: taprio: add missing attribute validation for txtime delay (bnc#1012628). - team: add missing attribute validation for port ifindex (bnc#1012628). - team: add missing attribute validation for array index (bnc#1012628). - tipc: add missing attribute validation for MTU property (bnc#1012628). - nfc: add missing attribute validation for SE API (bnc#1012628). - nfc: add missing attribute validation for deactivate target (bnc#1012628). - nfc: add missing attribute validation for vendor subcommand (bnc#1012628). - net: phy: avoid clearing PHY interrupts twice in irq handler (bnc#1012628). - net: phy: fix MDIO bus PM PHY resuming (bnc#1012628). - net/ipv6: need update peer route when modify metric (bnc#1012628). - net/ipv6: remove the old peer route if change it to a new one (bnc#1012628). - selftests/net/fib_tests: update addr_metric_test for peer route testing (bnc#1012628). - s390/qeth: don't reset default_out_queue (bnc#1012628). - s390/qeth: handle error when backing RX buffer (bnc#1012628). - net: dsa: Don't instantiate phylink for CPU/DSA ports unless needed (bnc#1012628). - net: dsa: mv88e6xxx: Add missing mask of ATU occupancy register (bnc#1012628). - net: phy: Avoid multiple suspends (bnc#1012628). - cgroup: fix psi_show() crash on 32bit ino archs (bnc#1012628). - cgroup: cgroup_procs_next should increase position index (bnc#1012628). - cgroup: Iterate tasks that did not finish do_exit() (bnc#1012628). - netfilter: nf_tables: fix infinite loop when expr is not available (bnc#1012628). - virtio-blk: fix hw_queue stopped on arbitrary error (bnc#1012628). - iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bnc#1012628). - netfilter: nf_conntrack: ct_cpu_seq_next should increase position index (bnc#1012628). - netfilter: synproxy: synproxy_cpu_seq_next should increase position index (bnc#1012628). - netfilter: xt_recent: recent_seq_next should increase position index (bnc#1012628). - netfilter: x_tables: xt_mttg_seq_next should increase position index (bnc#1012628). - workqueue: don't use wq_select_unbound_cpu() for bound works (bnc#1012628). - drm/amd/display: remove duplicated assignment to grph_obj_type (bnc#1012628). - drm/i915: Actually emit the await_start (bnc#1012628). - drm/i915: Return early for await_start on same timeline (bnc#1012628). - drm/i915: be more solid in checking the alignment (bnc#1012628). - drm/i915: Defer semaphore priority bumping to a workqueue (bnc#1012628). - drm/i915/gt: Close race between cacheline_retire and free (bnc#1012628). - drm/i915/execlists: Enable timeslice on partial virtual engine dequeue (bnc#1012628). - mmc: sdhci-pci-gli: Enable MSI interrupt for GL975x (bnc#1012628). - pinctrl: falcon: fix syntax error (bnc#1012628). - pinctrl: qcom: Assign irq_eoi conditionally (bnc#1012628). - ktest: Add timeout for ssh sync testing (bnc#1012628). - block: Fix partition support for host aware zoned block devices (bnc#1012628). - cifs_atomic_open(): fix double-put on late allocation failure (bnc#1012628). - gfs2_atomic_open(): fix O_EXCL|O_CREAT handling on cold dcache (bnc#1012628). - KVM: x86: clear stale x86_emulate_ctxt->intercept value (bnc#1012628). - KVM: nVMX: avoid NULL pointer dereference with incorrect EVMCS GPAs (bnc#1012628). - ARC: define __ALIGN_STR and __ALIGN symbols for ARC (bnc#1012628). - fuse: fix stack use after return (bnc#1012628). - MIPS: DTS: CI20: fix PMU definitions for ACT8600 (bnc#1012628). - MIPS: DTS: CI20: fix interrupt for pcf8563 RTC (bnc#1012628). - MIPS: Fix CONFIG_MIPS_CMDLINE_DTB_EXTEND handling (bnc#1012628). - s390/dasd: fix data corruption for thin provisioned devices (bnc#1012628). - ftrace: Return the first found result in lookup_rec() (bnc#1012628). - blk-iocost: fix incorrect vtime comparison in iocg_is_idle() (bnc#1012628). - fscrypt: don't evict dirty inodes after removing key (bnc#1012628). - pid: Fix error return value in some cases (bnc#1012628). - macintosh: windfarm: fix MODINFO regression (bnc#1012628). - x86/ioremap: Map EFI runtime services data as encrypted for SEV (bnc#1012628). - efi: Fix a race and a buffer overflow while reading efivars via sysfs (bnc#1012628). - efi: Add a sanity check to efivar_store_raw() (bnc#1012628). - i2c: designware-pci: Fix BUG_ON during device removal (bnc#1012628). - mt76: fix array overflow on receiving too many fragments for a packet (bnc#1012628). - perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bnc#1012628). - x86/mce: Fix logic and comments around MSR_PPIN_CTL (bnc#1012628). - iommu/dma: Fix MSI reservation allocation (bnc#1012628). - iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bnc#1012628). - iommu/vt-d: dmar_parse_one_rmrr: replace WARN_TAINT with pr_warn + add_taint (bnc#1012628). - iommu/vt-d: Fix RCU list debugging warnings (bnc#1012628). - iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bnc#1012628). - batman-adv: Don't schedule OGM for disabled interface (bnc#1012628). - clk: imx8mn: Fix incorrect clock defines (bnc#1012628). - pinctrl: meson-gxl: fix GPIOX sdio pins (bnc#1012628). - pinctrl: imx: scu: Align imx sc msg structs to 4 (bnc#1012628). - virtio_ring: Fix mem leak with vring_new_virtqueue() (bnc#1012628). - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (bnc#1012628). - drm/i915/gvt: Fix dma-buf display blur issue on CFL (bnc#1012628). - pinctrl: core: Remove extra kref_get which blocks hogs being freed (bnc#1012628). - drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits (bnc#1012628). - driver code: clarify and fix platform device DMA mask allocation (bnc#1012628). - iommu/vt-d: Fix RCU-list bugs in intel_iommu_init() (bnc#1012628). - i2c: gpio: suppress error on probe defer (bnc#1012628). - nl80211: add missing attribute validation for critical protocol indication (bnc#1012628). - nl80211: add missing attribute validation for beacon report scanning (bnc#1012628). - nl80211: add missing attribute validation for channel switch (bnc#1012628). - perf bench futex-wake: Restore thread count default to online CPU count (bnc#1012628). - netfilter: nf_tables: free flowtable hooks on hook register error (bnc#1012628). - netfilter: cthelper: add missing attribute validation for cthelper (bnc#1012628). - netfilter: nft_payload: add missing attribute validation for payload csum flags (bnc#1012628). - netfilter: nft_tunnel: add missing attribute validation for tunnels (bnc#1012628). - netfilter: nf_tables: dump NFTA_CHAIN_FLAGS attribute (bnc#1012628). - netfilter: nft_chain_nat: inet family is missing module ownership (bnc#1012628). - iommu/vt-d: Fix the wrong printing in RHSA parsing (bnc#1012628). - iommu/vt-d: Ignore devices with out-of-spec domain number (bnc#1012628). - i2c: acpi: put device when verifying client fails (bnc#1012628). - iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bnc#1012628). - ipv6: restrict IPV6_ADDRFORM operation (bnc#1012628). - net/smc: check for valid ib_client_data (bnc#1012628). - Update config files. - commit 3925fb5 - mmc: sdhci: iproc: Add custom set_power() callback for bcm2711 (bsc#1165954). - mmc: sdhci: Introduce sdhci_set_power_and_bus_voltage() (bsc#1165954). - commit e9e359d ==== lensfun ==== Version update (0.3.2 -> 0.3.95.1584325617.48775126) - Update to version v0.3.95.1584325617.48775126: * add support for lots of new cameras * add support for lots of new lenses * lots of bug fixes - Remove 0060-Various-CMake-patches-from-the-mailing-list.patch - Remove lensfun-respect-DESTDIR.patch - Remove lensfun-test-database.patch - Remove lensfun_fix_memory_leak.patch - Update the package URLs ==== libzypp ==== Version update (17.23.1 -> 17.23.2) - RepoVariables: Add safe guard in case the caller does not own a zypp instance. - Enable c++17. Define libyzpp CXX_STANDARD in ZyppCommon.cmake. - version 17.23.2 (22) ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Add mariadb-10.5-fix-prevent-optimizing-out-buf-argument-in-ch.patch in order to fix boo#1158405 (MDEV-21248). ==== mercurial ==== Version update (5.3 -> 5.3.1) Subpackages: mercurial-lang - Mercurial 5.3.1 ==== patterns-server ==== Version update (20180718 -> 20200312) Subpackages: patterns-server-dhcp_dns_server patterns-server-directory_server patterns-server-file_server patterns-server-kvm_server patterns-server-lamp_server patterns-server-mail_server patterns-server-printing patterns-server-xen_server - fix reordering of pattern() - kvm-server for arm: fix missing qemu-ipxe packages and improve arm detection (bsc#1158430) - version 20200312 ==== perl-Apache-AuthCookie ==== Version update (3.28 -> 3.29) - updated to 3.29 see /usr/share/doc/packages/perl-Apache-AuthCookie/Changes 3.29 2020-03-22 - Add optional support for enforcing a local destination, like so: PerlSetVar MyAuthEnforceLocalDestination 1 - Add optional support for specifying a default destination when the login form's destination argument is unspecified or invalid (including non-local if local destinations are enforced), like this: PerlSetVar MyAuthDefaultDestination /protected/user/ ==== php7 ==== Version update (7.4.3 -> 7.4.4) Subpackages: apache2-mod_php7 php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter - build firebird extension in any case - updated to 7.4.4: This is a security release which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4 ==== qemu ==== Subpackages: qemu-arm qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-extra qemu-guest-agent qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-sdl qemu-ui-spice-app qemu-vgabios qemu-vhost-user-gpu qemu-x86 - Include upstream patches targeted for the next stable release (bug fixes only) block-io-fix-bdrv_co_do_copy_on_readv.patch compat-disable-edid-on-correct-virtio-gp.patch target-ppc-Fix-rlwinm-on-ppc64.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch - s390x Protected Virtualization support - start and control guest in secure mode. (note: binary patch from patch series dropped since for s390x we rebuild the patched binary anyways) (bsc#1167075 jsc#SLE-7407) s390-sclp-improve-special-wait-psw-logic.patch s390x-Add-missing-vcpu-reset-functions.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Beautify-diag308-handling.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-Move-clear-reset.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-Move-initial-reset.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch Sync-pv.patch - Fix the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1163140) pc-bios-s390x-Save-iplb-location-in-lowc.patch - Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 bsc#1161066 CVE-2020-7039) slirp-use-correct-size-while-emulating-c.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch tcp_emu-fix-unsafe-snprintf-usages.patch util-add-slirp_fmt-helpers.patch - Replace this patch with upstream version target-arm-monitor-query-cpu-model-expan.patch ==== qemu-linux-user ==== - Include upstream patches targeted for the next stable release (bug fixes only) block-io-fix-bdrv_co_do_copy_on_readv.patch compat-disable-edid-on-correct-virtio-gp.patch target-ppc-Fix-rlwinm-on-ppc64.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch - s390x Protected Virtualization support - start and control guest in secure mode. (note: binary patch from patch series dropped since for s390x we rebuild the patched binary anyways) (bsc#1167075 jsc#SLE-7407) s390-sclp-improve-special-wait-psw-logic.patch s390x-Add-missing-vcpu-reset-functions.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Beautify-diag308-handling.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-Move-clear-reset.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-Move-initial-reset.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch Sync-pv.patch - Fix the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1163140) pc-bios-s390x-Save-iplb-location-in-lowc.patch - Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 bsc#1161066 CVE-2020-7039) slirp-use-correct-size-while-emulating-c.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch tcp_emu-fix-unsafe-snprintf-usages.patch util-add-slirp_fmt-helpers.patch - Replace this patch with upstream version target-arm-monitor-query-cpu-model-expan.patch ==== rpm ==== Subpackages: librpmbuild9 rpm-build rpm-devel - Follow one level of symlink indirection when converting the rpm database [bnc#1167537] * modified patch: db_conversion.diff - Add macro for supported ARM 64bit processors ==== rubygem-mustermann ==== Version update (1.0.3 -> 1.1.1) - updated to version 1.1.1 no changelog found ==== rubygem-rest-client ==== Version update (2.0.2 -> 2.1.0) - updated to version 2.1.0 see installed history.md [#] 2.1.0 - Add a dependency on http-accept for parsing Content-Type charset headers. This works around a bad memory leak introduced in MRI Ruby 2.4.0 and fixed in Ruby 2.4.2. (#615) - Use mime/types/columnar from mime-types 2.6.1+, which is leaner in memory usage than the older storage model of mime-types. (#393) - Add `:log` option to individual requests. This allows users to set a log on a per-request / per-resource basis instead of the kludgy global log. (#538) - Log request duration by tracking request start and end times. Make `log_response` a method on the Response object, and ensure the `size` method works on RawResponse objects. (#126) - `# => 200 OK | text/html 1270 bytes, 0.08s` - Also add a new `:stream_log_percent` parameter, which is applicable only when `:raw_response => true` is set. This causes progress logs to be emitted only on every N% (default 10%) of the total download size rather than on every chunk. - Drop custom handling of compression and use built-in Net::HTTP support for supported Content-Encodings like gzip and deflate. Don't set any explicit `Accept-Encoding` header, rely instead on Net::HTTP defaults. (#597) - Note: this changes behavior for compressed responses when using `:raw_response => true`. Previously the raw response would not have been uncompressed by rest-client, but now Net::HTTP will uncompress it. - The previous fix to avoid having Netrc username/password override an Authorization header was case-sensitive and incomplete. Fix this by respecting existing Authorization headers, regardless of letter case. (#550) - Handle ParamsArray payloads. Previously, rest-client would silently drop a ParamsArray passed as the payload. Instead, automatically use Payload::Multipart if the ParamsArray contains a file handle, or use Payload::UrlEncoded if it doesn't. (#508) - Gracefully handle Payload objects (Payload::Base or subclasses) that are passed as a payload argument. Previously, `Payload.generate` would wrap a Payload object in Payload::Streamed, creating a pointlessly nested payload. Also add a `closed?` method to Payload objects, and don't error in `short_inspect` if `size` returns nil. (#603) - Test with an image in the public domain to avoid licensing complexity. (#607) ==== suitesparse ==== Subpackages: libamd2 libcamd2 libccolamd2 libcholmod3 libcolamd2 libsuitesparseconfig5 libumfpack5 - Update to SuiteSparse 5.7.1 * GraphBLAS 3.2.0: better performance, new ANY and PAIR operators, structural mask, GrB_DESC_* from 1.3 C API Specification. * CHOLMOD 3.0.14: minor update to cholmod_check to print a matrix ==== syslinux ==== - syslinux-4.04-gcc10.diff: fix gcc10 related issues (bsc#1166605) * -fno-common is now the default * provide missing strlen() implementation ==== valgrind ==== - add 0001-Fix-makefile-consistency-check.patch 0001-s390x-Add-models-z14-and-z14-ZR1.patch 0001-s390x-Clean-up-s390-check-opcodes.pl.patch 0001-s390x-Add-CPU-model-for-z15.patch (bsc#1165834) ==== vhba-kmp ==== Version update (20190410_k5.5.9_1 -> 20200106_k5.5.11_1) - Update to release 20200106 * Added an ioctl to retrieve the global device number - Update to release 20190831 * Don't try to unload module from running kernel. * Add support for multiple SCSI channels. * Add proper support for scatterlist chaining. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1167569 - SLES 15 SP2 RC1 - virt-install: cache=none is ignored (kvm) virtinst-set-cache-mode-unsafe-for-install.patch - bsc#1167202 - SLES 15 SP2 Snapshot8 - virt-install misses module gi virt-manager.spec ==== virtualbox ==== Subpackages: virtualbox-guest-tools virtualbox-guest-x11 virtualbox-kmp-default - With version 6.1.4 of VB, the bidirectional clipboard part of VBoxClient for guest systems is failing. A patch is provided at https://www.virtualbox.org/ticket/19336. These changes have been added to file "VirtualBox-6.1.4-VBoxClient-vmsvga-x11-crash.patch". This fixes boo #1167403 "VBoxClient --clipboard dies". - Update the wrapper that starts the UI for VirtualBox to check the version of the extpack that is installed. If no pack is installed or if the license is not current, the new code does nothing. If there is a current license and the installed pack does not match the running version of VB, then the script downloads and installs the new version. File "update-extpack.sh" is added. ==== xdm ==== Subpackages: xdm-xsession - README.security: fixed and improved documentation about how to enable xdmcp for xdm (boo#1167293) ==== xfce4-panel ==== Subpackages: libxfce4panel-1_0-4 libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Added systray-symbolic-icons.patch. Backport to enable symbolic icons in systray ==== xfce4-screensaver ==== Version update (0.1.8 -> 0.1.9) - Update to version 1.9.0 * Replace deprecated GTimeVal usage * Rebuild windows on monitor reconfiguration * Draw overlays during window reconstruction to protect screen * Do not activate DPMS when screensaver is inactive (bxo#16327) * Better handling of multi-monitor and lid-close events (bxo#16102) * Update LINGUAS (bxo#15949) * Fix decimal properties when running through atof * Return 1 on lock command failure (bxo#15945) * Rename 'Pictures folder' to 'Slideshow' (bxo#15589) * Raise NameError and TypeError (bxo#15830) * Fix float parsing error (bxo#16295) * Fix inhibitor proxying (bxo#16356) * Fix inhibitor listing in xfce4-screensaver-command (bxo#16355) * Add systemd sleep inhibitor (bxo#15929) * Fix dbus inhibition (bxo#16365) * dbus: Prevent overzealous activation (bxo#16365) * Translation Updates ==== zypper ==== Version update (1.14.34 -> 1.14.35) Subpackages: zypper-log zypper-needs-restarting - Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770) - Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770) - Relax 'Do not allow the abbreviation of cli arguments' in legacy distibutions (bsc#1164543) - Correctly detect ambigous switch abbreviations (bsc#1165573) - zypper-aptitude: don't supplement zypper. supplementing zypper means zypper-aptitude gets installed by default and pulls in perl. Neither is desired on small systems. - BuildRequires: libzypp-devel >= 17.23.2. - version 1.14.35 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org