Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20190927 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: engrampa gcc7 (7.4.1+r273795 -> 7.4.1+r275405) gcc8 (8.3.1+r271793 -> 8.3.1+r273794) glibc (2.29 -> 2.30) kernel-source (5.2.14 -> 5.3.1) lttng-ust (2.10.2 -> 2.10.5) mariadb (10.3.17 -> 10.3.18) postfix python-argcomplete (1.9.5 -> 1.10.0) python-argparse-manpage (1.1 -> 1.2.2) rebootmgr (0.18 -> 0.20) strace (5.2 -> 5.3) sysvinit (2.95 -> 2.96) tcpd transactional-update (2.16 -> 2.17) === Details === ==== engrampa ==== Subpackages: engrampa-lang - Remove build require on libxml2-python as it's not required. There is no sign in the source code that it's needed. ==== gcc7 ==== Version update (7.4.1+r273795 -> 7.4.1+r275405) - Rework shared spec file parts to allow custom Summary and Description for cross compilers. Clarify their Summary and Description. [bsc#1148517] - Reorder things in cross.spec.in so the Version define comes before the first use of %version. - Update to gcc-7-branch head (r275405). * Pulls fix for POWER9 DARN miscompilation. (bsc#1149145, CVE-2019-15847) * Includes gcc8-pr89752.patch - Remove bogus fixed include bits/statx.h from glibc 2.30. [gcc#91085] ==== gcc8 ==== Version update (8.3.1+r271793 -> 8.3.1+r273794) - Remove bogus fixed include bits/statx.h from glibc 2.30. [gcc#91085] - Update to gcc-8-branch head (r273794). * Includes fix for LTO linker plugin heap overflow. (bsc#1142649, CVE-2019-14250) - Update to gcc-8-branch head (r273560). * Includes fix for vector shift miscompilation on s390. [bsc#1141897] ==== glibc ==== Version update (2.29 -> 2.30) Subpackages: glibc-32bit glibc-devel glibc-extra glibc-info glibc-locale glibc-locale-base nscd - Package gconv-modules.cache as %ghost - Regenerate it also in the %post of glibc-local-base-<targettype> - move mo files to glibc-locale as that's where all the other informations for those locales are. glibc-locale-base only has English anyways. - riscv-vfork.patch: Fix RISC-V vfork build with Linux 5.3 kernel headers - Remove NoSource tags (bsc#994835) - pwdutils is long gone and replaced by shadow - Update to glibc 2.30 * Unicode 12.1.0 Support * The dynamic linker accepts the --preload argument to preload shared objects * The twalk_r function has been added * On Linux, the getdents64, gettid, and tgkill functions have been added * Minguo (Republic of China) calendar support has been added * The entry for the new Japanese era has been added * Memory allocation functions malloc, calloc, realloc, reallocarray, valloc, pvalloc, memalign, and posix_memalign fail now with total object size larger than PTRDIFF_MAX * The dynamic linker no longer refuses to load objects which reference versioned symbols whose implementation has moved to a different soname since the object has been linked * Add new POSIX-proposed pthread_cond_clockwait, pthread_mutex_clocklock, pthread_rwlock_clockrdlock, pthread_rwlock_clockwrlock and sem_clockwait functions * On AArch64 the GNU IFUNC resolver call ABI changed * The copy_file_range function fails with ENOSYS if the kernel does not support the system call of the same name * The functions clock_gettime, clock_getres, clock_settime, clock_getcpuclockid, clock_nanosleep were removed from the librt library for new applications (on architectures which had them) * The obsolete and never-implemented XSI STREAMS header files <stropts.h> and <sys/stropts.h> have been removed * Support for the "inet6" option in /etc/resolv.conf and the RES_USE_INET6 resolver flag (deprecated in glibc 2.25) have been removed * The obsolete RES_INSECURE1 and RES_INSECURE2 option flags for the DNS stub resolver have been removed from <resolv.h> * With --enable-bind-now, installed programs are now linked with the BIND_NOW flag. * On 32-bit Arm, support for the port-based I/O emulation and the <sys/io.h> header have been removed * The Linux-specific <sys/sysctl.h> header and the sysctl function have been deprecated and will be removed from a future version of glibc * CVE-2019-7309: x86-64 memcmp used signed Jcc instructions to check size * CVE-2019-9169: Attempted case-insensitive regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read - pthread-rwlock-trylock-stalls.patch, arm-systemtap-probe-constraint.patch, pthread-mutex-barrier.patch, fork-handler-lock.patch, pthread-join-probe.patch, riscv-clone-unwind.patch, add-new-Fortran-vector-math-header-file.patch, regex-read-overrun.patch, japanese-era-name-may-2019.patch, dl-show-auxv.patch, s390-vx-vxe-hwcap.patch, taisho-era-string.patch, malloc-tracing-hooks.patch, pldd-inf-loop.patch, malloc-large-bin-corruption-check.patch, wfile-sync-crash.patch, malloc-tests-warnings.patch, fnmatch-collating-elements.patch, iconv-reset-input-buffer.patch: Removed - malloc-info-whitespace.patch: Remove unwanted leading whitespace in malloc_info (BZ #24867) - Move /var/lib/misc/Makefile to /usr/share/misc/Makefile.makedb (bsc#1138726) ==== kernel-source ==== Version update (5.2.14 -> 5.3.1) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla - Linux 5.3.1 (bnc#1012628). - media: technisat-usb2: break out of loop at end of buffer (bnc#1012628). - floppy: fix usercopy direction (bnc#1012628). - phy: qcom-qmp: Correct ready status, again (bnc#1012628). - ovl: fix regression caused by overlapping layers detection (bnc#1012628). - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" (bnc#1012628). - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bnc#1012628). - tty/serial: atmel: reschedule TX after RX was started (bnc#1012628). - serial: sprd: correct the wrong sequence of arguments (bnc#1012628). - firmware: google: check if size is valid when decoding VPD data (bnc#1012628). - Documentation: sphinx: Add missing comma to list of strings (bnc#1012628). - KVM: coalesced_mmio: add bounds checking (bnc#1012628). - net: stmmac: Hold rtnl lock in suspend/resume callbacks (bnc#1012628). - net: dsa: Fix load order between DSA drivers and taggers (bnc#1012628). - xen-netfront: do not assume sk_buff_head list is empty in error handling (bnc#1012628). - udp: correct reuseport selection with connected sockets (bnc#1012628). - net_sched: let qdisc_put() accept NULL pointer (bnc#1012628). - net/sched: fix race between deactivation and dequeue for NOLOCK qdisc (bnc#1012628). - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit (bnc#1012628). - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bnc#1012628). - media: tm6000: double free if usb disconnect while streaming (bnc#1012628). - USB: usbcore: Fix slab-out-of-bounds bug during device reset (bnc#1012628). - commit f187578 - Update config files. Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT. Not all drivers are ready for this yet, so enabling this config option causes regressions. See bsc#1150577 for an example. - commit f759adc - Update to 5.3 final - Eliminated 3 patches - Refresh configs - NF_CONNTRACK_SLP is gone - commit 6baef36 - Btrfs: fix unwritten extent buffers and hangs on future writeback attempts (btrfs hangup). - commit 7f85414 ==== lttng-ust ==== Version update (2.10.2 -> 2.10.5) - Update to version 2.10.5: * New tracef() instrumentation facility. Excerpt from the lttng-ust(3) man page. * Perf PMU counters support from user-space on x86. * Library base address dump is now stable (thanks to Mentor for their contribution). * fixes boo#1149704. ==== mariadb ==== Version update (10.3.17 -> 10.3.18) Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - update to 10.3.18 * notable changes * Connect updated to Connect 1.06.0010 * MDEV-20066: This bug could cause a table to become corrupt if a column was added instantly * MDEV-15326: A race condition in InnoDB transaction commit that affects record locking was fixed * MDEV-17187: Table doesn't exist in engine after ALTER of FOREIGN KEY * MDEV-20301: InnoDB's MVCC has O(N^2) behaviors * MDEV-18128: Simplify .ibd file creation * MDEV-20060: Failing assertion: srv_log_file_size <= 512ULL << 30 while preparing backup * MDEV-20247: Replication hangs with "preparing" and never starts * MDEV-17614: Remove unnecessary locking for INSERT...ON DUPLICATE KEY UPDATE * MDEV-20311: row_ins_step accesses uninitialized memory * MDEV-19947: Repositories for RHEL 8 ppc64le added * fixes for the following security vulnerabilities: none * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10318-release-notes https://mariadb.com/kb/en/library/mariadb-10318-changelog ==== postfix ==== Subpackages: postfix-doc - Backport deprecated-RES_INSECURE1.patch in order to fix boo#1149705. - bsc#1120757 L3: File Permissions->Paranoid can cause a system hang Break loop if postfix has no permission in spool directory. - add postfix-avoid-infinit-loop-if-no-permission.patch ==== python-argcomplete ==== Version update (1.9.5 -> 1.10.0) - Update to 1.10.0: * fish support - Refresh patch skip_tcsh_tests.patch ==== python-argparse-manpage ==== Version update (1.1 -> 1.2.2) - Update to 1.2.2: * More complete release tarball, including tests. * Fixed shebang in /bin/argparse-manpage script so it works on Debian/Ubuntu as well as on Fedora. * LICENSE file included in release tarball. * Command-line executable now takes an optional '--output' argument. ==== rebootmgr ==== Version update (0.18 -> 0.20) - Fix %config for backward compatibility - Update to version 0.20 - add support to write changes back to /etc/rebootmgr.conf - Preserve /etc/rebootmgr.conf if modified - Update to version 0.19 - use libeconf for /usr/etc move ==== strace ==== Version update (5.2 -> 5.3) - Update to strace 5.3 * Improvements * Implemented usage of seccomp-bpf for stopping tracees only for filtered syscalls. Use --seccomp-bpf option to enable. * Implemented decoding of pidfd_open and clone3 syscalls. * Enhanced decoding of io_cancel, io_submit, s390_sthyi, and syslog syscalls. * Enhanced decoding of NETLINK_ROUTE protocol. * Implemented decoding of UNIX_DIAG_UID netlink attribute. * Implemented decoding of WDIOC_* ioctl commands. * Enchanced syscall count statistics: overhead is now applied per-call, added ability for sorting on errors field. * Syscall delay injection and overhead values can now be supplied with time measure unit suffix and provided in IEEE 754 floating point format. * Updated lists of AUDIT_*, BPF_*, ETH_*, KEYCTL_*, KVM_*, MAP_*, SO_*, TCP_*, V4L2_*, XDP_*, and *_MAGIC constants. * Updated lists of ioctl commands from Linux 5.3. * Enhanced manual page. * Bug fixes * Fixed syscall tampering on arc, avr32, csky, ia64, m68k, metag, mips, nios2, or1k, riscv, s390, s390x, sparc, sparc64, and tile architectures when PTRACE_GET_SYSCALL_INFO is in use. * Fixed decoding of sockaddr_hci (AF_BLUETOOTH) addresses that lack hci_channel field. * Fixed evdev ioctl bitset decoding. * Fixed tests on alpha with Linux kernel headers 5.1+. * Portability * Removed support for decoding syscalls in range [1024...1079] on AArch64 architecture as this range has never been implemented in mainline kernel releases. ==== sysvinit ==== Version update (2.95 -> 2.96) - Update to sysvinit 2.96 * Added -z command line paramter to pidof which tells pidof to try to find processes in uninterruptable (D) or zombie (Z) states. This can cause pidof to hang, but produces a more complete process list. * Reformatted init code to make if/while logic more clear. * Make sure src/Makefile cleans up all executable files when parent Makefile calls "make clean". - Update to killproc 2.23 * killproc has its upstream at https://github.com/bitstreamout/killproc * Use new system call statx(2) to replace old stat(2)/lstat(2) - Remove patches now upstream: * killproc-2.18-open_flags.dif * killproc-2.21.dif * killproc-sysmacros.patch * killproc-mntinf-optional.patch ==== tcpd ==== - Add tcp_wrappers_7.6-ipv6.fix.fix3.diff in order to fix boo#1149708. ==== transactional-update ==== Version update (2.16 -> 2.17) Subpackages: transactional-update-zypp-config - Update to version 2.17 - Provide network in shell on systems where resolv.conf is pointing to /run directly [boo#1151081] - Print new snapshot number at the end - Always mount /root subvolume when using shell command to preserve history -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org