Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20171203
When you reply to report some issues, make sure to change the subject.
It is not helpful to keep the release announcement subject in a thread
while discussing a specific problem.
Packages changed:
caribou
curl (7.56.1 -> 7.57.0)
ffmpeg
giflib
git (2.15.0 -> 2.15.1)
gwenhywfar
iputils
kernel-firmware (20171009 -> 20171125)
libXcursor
libXfont (1.5.3 -> 1.5.4)
libXfont2 (2.0.2 -> 2.0.3)
libmwaw (0.3.11 -> 0.3.13)
libquicktime
libstaroffice (0.0.3 -> 0.0.5)
libva
libva-gl
libwps (0.4.6 -> 0.4.7)
manufacturer-PPDs
obs-service-source_validator (0.6+git20170922.230bbc4 -> 0.7)
openblas_pthreads
opencv
openslp
openssl-1_0_0
patterns-media
python-keyring (10.4.0 -> 10.5.0)
python-kiwi (9.11.22 -> 9.11.24)
qemu
qemu-linux-user
rdma-core (15 -> 15.1)
reiserfs (3.6.26 -> 3.6.27)
samba (4.7.1+git.26.1ac2944c965 -> 4.7.3+git.30.54c196e5d35)
sddm
tevent (0.9.33 -> 0.9.34)
vim (8.0.627 -> 8.0.1358)
xmlsec1 (1.2.24 -> 1.2.25)
zip
=== Details ===
==== caribou ====
Subpackages: caribou-common caribou-gtk-module-common caribou-gtk2-module caribou-gtk3-module caribou-lang libcaribou0 typelib-1_0-Caribou-1_0
- Drop %py_requires: this is a python2 dependency, but the package
was already migrated to python3.
==== curl ====
Version update (7.56.1 -> 7.57.0)
Subpackages: libcurl-devel libcurl4
- Update to version 7.57.0 [bsc#1069226, CVE-2017-8816]
[bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
Changes:
* auth: add support for RFC7616 - HTTP Digest access authentication
* share: add support for sharing the connection cache
* HTTP: implement Brotli content encoding
Bugfixes:
* CVE-2017-8816: NTLM buffer overflow via integer overflow
* CVE-2017-8817: FTP wildcard out of bounds read
* CVE-2017-8818: SSL out of buffer access
* curl_mime_filedata.3: fix typos
* libtest: Add required test libraries for lib1552 and lib1553
* fix time diffs for systems using unsigned time_t
* ftplistparser: memory leak fix: free temporary memory always
* multi: allow table handle sizes to be overridden
* wildcards: don't use with non-supported protocols
* curl_fnmatch: return error on illegal wildcard pattern
* transfer: Fix chunked-encoding upload too early exit
* resolvers: only include anything if needed
* setopt: fix CURLOPT_SSH_AUTH_TYPES option read
* Curl_timeleft: change return type to timediff_t
* cmake: Export libcurl and curl targets to use by other cmake projects
* curl: in -F option arg, comma is a delimiter for files only
* curl: improved ";type=" handling in -F option arguments
* timeval: use mach_absolute_time() on MacOS
* curlx: the timeval functions are no longer provided as curlx_*
* mkhelp.pl: do not generate comment with current date
* memdebug: use send/recv signature for curl_dosend/curl_dorecv
* cookie: avoid NULL dereference
* url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
* include: remove conncache.h inclusion from where its not needed
* CURLOPT_MAXREDIRS: allow -1 as a value
* tests: Fixed torture tests on tests 556 and 650
* http2: Fixed OOM handling in upgrade request
* url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
* CURLOPT_INFILESIZE: accept -1
* curl: pass through [] in URLs instead of calling globbing error
* curl: speed up handling of many URLs
* ntlm: avoid malloc(0) for zero length passwords
* url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
* HTTP: support multiple Content-Encodings
* travis: add a job with brotli enabled
* url: remove unncessary NULL-check
* fnmatch: remove dead code
* connect: store IPv6 connection status after valid connection
* imap: deal with commands case insensitively
* --interface: add support for Linux VRF
* content_encoding: fix inflate_stream for no bytes available
* cmake: Add missing setmode check
* connect.c: remove executable bit on file
* SMB: fix uninitialized local variable
* zlib/brotli: only include header files in modules needing them
* URL: return error on malformed URLs with junk after IPv6 bracket
* openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
* macOS: Fix missing connectx function with Xcode version older than 9.0
* --resolve: allow IP address within [] brackets
* examples/curlx: Fix code style
* ntlm: remove unnecessary NULL-check to please scan-build
* Curl_llist_remove: fix potential NULL pointer deref
* mime: fix "Value stored to 'sz' is never read" scan-build error
* openssl: fix "Value stored to 'rc' is never read" scan-build error
* http2: fix "Value stored to 'hdbuf' is never read" scan-build error
* http2: fix "Value stored to 'end' is never read" scan-build error
* Curl_open: fix OOM return error correctly
* url: reject ASCII control characters and space in host names
* examples/rtsp: clear RANGE again after use
* connect: improve the bind error message
* make: fix "make distclean"
* connect: add support for new TCP Fast Open API on Linux
* metalink: fix memory-leak and NULL pointer dereference
* URL: update "file:" URL handling
* ssh: remove check for a NULL pointer
* global_init: ignore CURL_GLOBAL_SSL's absense
==== ffmpeg ====
Subpackages: libavcodec-devel libavcodec57 libavdevice57 libavfilter6 libavformat57 libavresample-devel libavresample3 libavutil-devel libavutil55 libpostproc54 libswresample-devel libswresample2 libswscale-devel libswscale4
- install also doc/ffserver.conf
==== giflib ====
Subpackages: giflib-devel libgif7
- Keep timestamps before patch updates them to fix build-compare
- Added fix-autoconf11.patch for fixing build with older autoconf,
requires for SLE11.
==== git ====
Version update (2.15.0 -> 2.15.1)
Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk
- git 2.15.1:
* fix "auto" column output
* fixes to moved lines diffing
* documentation updates
* fix use of repositories immediately under the root directory
* improve usage of libsecret
* fixes to various error conditions in git commands
- Rewrite from sysv init to systemd unit file for git-daemon
(bsc#1069803)
==== gwenhywfar ====
Subpackages: gwenhywfar-devel gwenhywfar-lang libgwengui-cpp0 libgwengui-fox16-0 libgwengui-gtk2-0 libgwengui-qt5-0 libgwenhywfar60 libgwenhywfar60-plugins
- Conditionalize usage of qt4 libs
==== iputils ====
Subpackages: rarpd
- mark ping also verify not caps, as these are changed by the
permissions package. (bsc#1065835)
- Reintroduce rarpd as subpackage
- Explicitly list content in filelist as we have two subpackages
now
==== kernel-firmware ====
Version update (20171009 -> 20171125)
Subpackages: ucode-amd
- Change the shebang of check_whence.py (installed as a
non-executable) to point to python3.
- Update to version 20171125:
* brcm: update firmware for bcm4358
* brcm: update firmware for bcm4356
* brcm: update firmware for bcm4354
* brcm: introduce firmware for bcm43430 revision 0
* brcm: update firmware for bcm4339
* Mellanox: Add new mlxsw_spectrum firmware 13.1530.152
* WHENCE: Add missing entry for mlxsw_spectrum firmware
* WHENCE: Fix typo in entry for iwlwifi-8265-34.ucode
* s2255drv: f2255usb: firmware version 1.2.8
* amdgpu: add new CP firmware for polaris chips
* qed: Add firmware 8.33.1.0
* qcom: add venus firmware files for v4.2
* qcom: add firmware files for Adreno a530
* iwlwifi: add firmware version 34 for new 9000 series
* linux-firmware: liquidio: update firmware to v1.7.0
* linux-firmware: intel: Update Geminilake audio firmware
* iwlwifi: add firmware version 33 for new 9000 series
* iwlwifi: add new firmware version 34 for 8000C and 8265
* iwlwifi: update firmwares for 3160, 3168, 7260, 7265 and 7265D
* iwlwifi: update firmwares for 3160, 3168, 7265D, 8000C and 8265
* linux-firmware: DMC firmware for kabylake v1.04
* linux-firmware: update Marvell PCIe-USB8997 firmware image
* linux-firmware: GuC firmware for kabylake v9.39
* linux-firmware: GuC firmware for Broxton v9.29
* linux-firmware: GuC firmware for Skylake v9.33
* linux-firmware/i915: Add Cannonlake DMC version 1.06
* linux-firmware/i915: Add Geminilake DMC version 1.04
* WHENCE: Add new qed firmware
* WHENCE: Add new radeon firmware
* WHENCE: Fix syntax error for iwlwifi-8265-31.ucode entry
* Revert "ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2"
* ath10k: QCA6174 hw3.0: update board-2.bin
* ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00051-QCARMSWP-1
* cxgb4: update firmware to revision 1.16.63.0
* linux-firmware: update Marvell PCIe-USB8997 firmware image
* linux-firmware: update Marvell PCIe-USB8897-A2 firmware image
* Drop intel wifi firmwares and WHENCE-iwlwifi-update.patch as
they are upstreamed
==== libXcursor ====
Subpackages: libXcursor1 libXcursor1-32bit
- U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch
* It is possible to trigger heap overflows due to an integer
overflow while parsing images and a signedness issue while
parsing comments. [CVE-2017-16612] (bsc#1065386)
==== libXfont ====
Version update (1.5.3 -> 1.5.4)
- Update to release 1.5.4
* Open files with O_NOFOLLOW. (CVE-2017-16611)
==== libXfont2 ====
Version update (2.0.2 -> 2.0.3)
- Update to version 2.0.3
* Open files with O_NOFOLLOW. (CVE-2017-16611)
==== libmwaw ====
Version update (0.3.11 -> 0.3.13)
- Version update to 0.3.13:
* Remove merged CVE-2017-9433.patch
* Many fuzzing fixes
==== libquicktime ====
- Add %%{name} Requires to orig-addon sub-package, installing the
addon-package does not make sense without the main package.
==== libstaroffice ====
Version update (0.0.3 -> 0.0.5)
- Version update to 0.0.5:
* Various bugs found by fuzzing
* Switched to C++11
* Remove merged patch CVE-2017-9432.patch
==== libva ====
Subpackages: libva-drm2 libva-x11-2 libva2
- Drop erroneous --disable-wayland configure call passed when
building gl part.
- Drop vaapi-wayland-tools sub-package, it does not contain any
files.
- Clean up spec, explicitly list .pc files, ensure they go into the
correct devel package, stop rm'ing binaries that no longer exist.
==== libva-gl ====
- Drop erroneous --disable-wayland configure call passed when
building gl part.
- Drop vaapi-wayland-tools sub-package, it does not contain any
files.
- Clean up spec, explicitly list .pc files, ensure they go into the
correct devel package, stop rm'ing binaries that no longer exist.
==== libwps ====
Version update (0.4.6 -> 0.4.7)
- Version update to 0.4.7:
* Many fixes found by fuzzing
==== manufacturer-PPDs ====
- Removed all recode remainders in spec file: Since a long time
calling 'recode ibmpc..lat1 $PPD' does not work and fails with
'recode: $PPD failed: Ambiguous output in step CR-LF..data'
so that it had no effect since a long time (boo#1053646).
- Drop broken recode support (FATE#323644).
==== obs-service-source_validator ====
Version update (0.6+git20170922.230bbc4 -> 0.7)
- Update to version 0.7:
* Do not ignore conditionals of the form "%if ... %{name} ..."
* Add --keep-name-conditionals option to helpers/spec_query
* Do not fail in case of ambiguous source tags
* Use priviate --homedir when calling gpg
==== openblas_pthreads ====
- Add -mvsx option for ppc64 archi (not required for ppc64le)
to avoid ./kernel/power/sasum_microk_power8.c:41:3: error:
'__vector' undeclared (first use in this function); ...
==== opencv ====
Subpackages: libopencv3_3 opencv-devel
- Readd opencv-gles.patch, it is *not* included upstream; otherwise
build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
OpenCV 3.3 syntax on x86.
==== openslp ====
Subpackages: openslp-devel openslp-server
- add separate source openslp.logrotate.systemd to
use systemctl reload for logrotate configuration
==== openssl-1_0_0 ====
Subpackages: libopenssl1_0_0 libopenssl1_0_0-32bit
- Do not filter out pkgconfig() provides/require.
==== patterns-media ====
Subpackages: patterns-media-rest_cd_core patterns-media-rest_dvd
- Recommend notification-daemon by rest_dvd_core. This is to ensure
notification-daemon ends up on the medium so that installations
can 'cheaply' provide dbus(org.freedesktop.Notifications).
Otherwise only KDE and GNOME provide this, which would result in
them being installed into a minimal-X system.
==== python-keyring ====
Version update (10.4.0 -> 10.5.0)
- update to 10.5.0:
* Added --list-backends option to command-line interface.
* Removed logger from keyring
* Set the appid for SecretService & KWallet to something meaningful
==== python-kiwi ====
Version update (9.11.22 -> 9.11.24)
- Bump version: 9.11.23 ? 9.11.24
- Fixed URL to semver.org in development guide
- Bump version: 9.11.22 ? 9.11.23
- Fixed module setup for dracut-kiwi-lib
lsblk tool used in code but missing in dependencies
- Fixed test-image-azure build test
azurectl does not resolve because of missing AppScheduler
but for the integration test image we also don't need azurectl
Thus it was just deleted from the list
- Fixed test-image-azure build test
pam-modules package doesn't exist anymore
==== qemu ====
Subpackages: qemu-arm qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-rbd qemu-block-ssh qemu-extra qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-tools qemu-vgabios qemu-x86
- Avoid ref to /usr/bin/python in vmstate-static-checker.py script
0043-scripts-avoid-usr-bin-python-refere.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
- For SLE15, it's been decided to stop providing SDL based graphics
due to packaging constraints. Long ago GTK became the default,
and there is little benefit to providing both. For now, keep it
enabled for openSUSE (Tumblweed and Leap), but consider it marked
deprecated there and if no one complains it will be removed for
openSUSE as well in the near future. (fate#324465)
- Fix problem building skiboot.lid
skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
==== qemu-linux-user ====
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
* Patches added:
0043-scripts-avoid-usr-bin-python-refere.patch
==== rdma-core ====
Version update (15 -> 15.1)
Subpackages: libibcm1 libibumad3 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 rdma-core-devel rsocket
- Update to rdma-core v15.1
* Backport CI checks on centos/SUSE from master
* Stable ABI auto checks
* Backport fixes:
* verbs: Do not block QP attr_masks used by older kernels
* libibumad/umad.c: In get_port, ignore sysfs rate file errors
* bnxt_re/lib: fix the memory barrier call during poll-cq
* bnxt_re/lib: increment psn in case of 0 length packets
* libqedr: fix inline data copy
* verbs: Fix declaration of C++ include file in C-block
* verbs: Fix C++ compilation break
* verbs: fix compilation error with ICC
* hns: Fix create QP structure layout
* ibacm: Incorrect list used for subnet list causes a segfault
* ibacm: Incorrect usage of BE byte order of MLID attach/detach_mcast()
- Remove patches that were merged to v15.1:
* bnxt_re-lib-fix-the-memory-barrier-call-during-poll-cq.patch
* bnxt_re-lib-increment-psn-in-case-of-0-length-packets.patch
* ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
* ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
* libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
* libqedr-fix-inline-data-copy.patch
* verbs-Do-not-block-QP-attr_masks-used-by-older-kernels.patch
==== reiserfs ====
Version update (3.6.26 -> 3.6.27)
Subpackages: libreiserfscore0
- Added COPYING to %doc
- Add conflicts for libreiserfscore0 and earlier reiserfs package.
- Update with respun 3.6.27.
- Update to 3.6.27
- build: use @PACKAGE_VERSION@ instead of @REISERFSCORE_VERSION@ in .pc file
- xattrs: handle both hash forms in reiserfs_check_xattr
- misc: include