Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20181118 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: autoyast2 (4.0.66 -> 4.0.68) festival flatpak (1.0.3 -> 1.0.5) giflib gjs (1.54.2 -> 1.54.3) gnome-shell (3.30.1 -> 3.30.2) gsettings-desktop-schemas gtk3 gupnp-av (0.12.10 -> 0.12.11) iptables (1.8.1 -> 1.8.2) kernel-source (4.19.1 -> 4.19.2) libgit2-glib (0.26.4 -> 0.27.7) libical libjpeg-turbo (2.0.0 -> 2.0.1) libostree (2018.8 -> 2018.9) librsvg (2.44.6 -> 2.44.9) libwpd mailx mutter (3.30.1 -> 3.30.2) ovmf (2018+git1538590187.c0b1f749ef13 -> 2018+git1542164568.85588389222a) plymouth (0.9.4+git20181105.f898586 -> 0.9.4+git20181111.118c5ca) python-paramiko schily (2018.08.24 -> 2018.10.30) tomcat (9.0.12 -> 9.0.13) webkit2gtk3 yast2-country (4.1.1 -> 4.1.4) yast2-network (4.1.15 -> 4.1.17) yast2-ntp-client (4.1.3 -> 4.1.5) yast2-storage-ng (4.1.31 -> 4.1.35) === Details === ==== autoyast2 ==== Version update (4.0.66 -> 4.0.68) Subpackages: autoyast2-installation - Fallback to English when using fbiterm on those languages which are not properly supported (fate#325746). - 4.0.68 - Removed unneeded flag network_needed in script section. (bsc#1094822) - 4.0.67 ==== festival ==== - Removed sysvinit support according to the boo#1116010. * Added systemd unit file * Moved rcfestival to /usr/lib/festival/server ==== flatpak ==== Version update (1.0.3 -> 1.0.5) Subpackages: libflatpak0 typelib-1_0-Flatpak-1_0 - Make polkit_rules_usability.patch effective by adding a 60- prefix to the rules file. This will cause it to be executed before the polkit-default-privs are executed (bsc#984817). - Update to version 1.0.5: + Make the /etc -> /usr/etc bind-mounts read-only. + Make various app-specific configuration files read-only. + flatpak is more picky about remote names to avoid problems with storing weird names in the ostree config. + A segfault in libflatpak handling of bundles was fixed. + Updated translations + Fixed a regression in flatpak run that caused problems running user-installed apps when the system installation was broken. + Implicity grant MPRIS2 permissions - Changes from version 1.0.4: + Flatpak 0.99.1 removed the inheritance of permissions from the runtime due to concerns with dynamic app permissions. Due to popular requests, this version re-introduces such inheritance, but does it instead at build time. This solved the issues with dynamic permissions while still allowing runtimes to have default permissions. Apps can disable this by passing - -no-inherit-permissions to build-finish. + The sandbox now always includes a /etc/timezone file, following the (old) debian standard for this. This is needed, because the more modern way of exposing the timezone name by having /etc/localtime be a symlink into /usr/share/zoneinfo doesn't work when exposing the host timezone. + All apps now have automatic permissions to own their own app id as a subname of org.mpris.MediaPlayer2. + We now properly re-load remote state in FlatpakTransaction if the metadata was updated for the remote. + The signature of the FlatpakTransaction::operation-done signal was wrong in the header and has now been corrected to the signature that is actually emitted. + A crash was fixed when reading invalid .flatpakref files. + A crash during updates when a local ref was unexpectedly missing was fixed. + An error case on uninstalling was incorrectly returning success even thought there was an error. + flatpak_installation_modify_remote did not correctly save the nodeps state. + flatpak_installation_load_app_overrides() was improperly returning freed memory. + The tarball now ships with an icon (flatpak.png). ==== giflib ==== - Remove unused build requires on X libraries - Use %license ==== gjs ==== Version update (1.54.2 -> 1.54.3) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.54.3: + object: Fix write-only properties. + SIGSEGV when exiting gnome-shell. + SelectionData.get_targets crashes with "Unable to resize vector". + Gnome-shell crashes on destroying cached param specs. + GType memleak fixes. + Fix build with --enable-dtrace and create CI job to ensure it doesn't break in the future. ==== gnome-shell ==== Version update (3.30.1 -> 3.30.2) Subpackages: gnome-shell-browser-plugin gnome-shell-calendar gnome-shell-lang - Update to version 3.30.2: + popupMenu: Fix keyboard activation when numlock is active. + Do not block all shortcuts while app folders are expanded. + Fix regression in handling new input sources. + Improve performance of app icon animations. + Respect natural-scroll setting for workspace swipe gesture. + notifications: Support icon theme names in 'image-path' hint. + Confine window preview titles to workspace area. + Misc. bug fixes. + Updated translations. - Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch: + Add a background for this_lockDialogGroup to make login/lock background configurable + This patch requires a patch in gsettings-desktop-schemas gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background- configuration.patch + You can change the background via gsettings, and the schema id is "org.gnome.desktop.background.lockdialog" + The default theme is the same as upstream's, you can configure the the background in a branding package just like how GNOME Shell's wallpaper was changed (fate#324570, glgo#GNOME/gnome-shell#680). ==== gsettings-desktop-schemas ==== Subpackages: gsettings-desktop-schemas-lang - Add gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch: + Add settings for org.gnome.desktop.background.lockdialog This key is for the background of lockDialogGroup which makes login and lock background configurable. The default behavior will be retained to what it is currently. + This patch is required by a patch in GNOME Shell gnome-shell-fate324570-Make-GDM-background-image-configurable.patch (fate#324570, glgo#GNOME/gnome-shell#680). ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Add gtk3-atk-table-cell.patch: add support for AtkTableCell (fate#326548 glgo#GNOME/gtk!411). ==== gupnp-av ==== Version update (0.12.10 -> 0.12.11) Subpackages: libgupnp-av-1_0-2 - Update to version 0.12.11: + Fix memory leak in GUPnPAVXMLDoc. + Fix parsing of storageUsed. + Fix name clash of internal XML utility functions. + Fix multiple compiler warnings with recent GCC. + Remove deprecated g_type_class_add_private. + Bugs fixed: bgo#770174, bgo#778396, bgo#784511. ==== iptables ==== Version update (1.8.1 -> 1.8.2) Subpackages: libiptc0 libxtables12 xtables-plugins - Update to new upstream release 1.8.2 * Fix incorrect handling of various targets and options in iptables-nft,ebtables-nft,arptables-nft. ==== kernel-source ==== Version update (4.19.1 -> 4.19.2) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.19.2 (bnc#1012628). - bpf: fix partial copy of map_ptr when dst is scalar (bnc#1012628). - MIPS: VDSO: Reduce VDSO_RANDOMIZE_SIZE to 64MB for 64bit (bnc#1012628). - gpio: mxs: Get rid of external API call (bnc#1012628). - mtd: rawnand: marvell: fix the IRQ handler complete() condition (bnc#1012628). - mtd: maps: gpio-addr-flash: Fix ioremapped size (bnc#1012628). - mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB (bnc#1012628). - mtd: spi-nor: intel-spi: Add support for Intel Ice Lake SPI serial flash (bnc#1012628). - mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus (bnc#1012628). - spi: spi-mem: Adjust op len based on message/transfer size limitations (bnc#1012628). - spi: bcm-qspi: switch back to reading flash using smaller chunks (bnc#1012628). - spi: bcm-qspi: fix calculation of address length (bnc#1012628). - bcache: trace missed reading by cache_missed (bnc#1012628). - bcache: fix ioctl in flash device (bnc#1012628). - bcache: correct dirty data statistics (bnc#1012628). - bcache: fix miss key refill->end in writeback (bnc#1012628). - hwmon: (pmbus) Fix page count auto-detection (bnc#1012628). - jffs2: free jffs2_sb_info through jffs2_kill_sb() (bnc#1012628). - block: setup bounce bio_sets properly (bnc#1012628). - block: make sure discard bio is aligned with logical block size (bnc#1012628). - block: make sure writesame bio is aligned with logical block size (bnc#1012628). - cpufreq: conservative: Take limits changes into account properly (bnc#1012628). - dma-mapping: fix panic caused by passing empty cma command line argument (bnc#1012628). - pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges (bnc#1012628). - ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer() (bnc#1012628). - ACPICA: AML interpreter: add region addresses in global list during initialization (bnc#1012628). - ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended opcodes (bnc#1012628). - acpi, nfit: Fix Address Range Scrub completion tracking (bnc#1012628). - kprobes/x86: Use preempt_enable() in optimized_callback() (bnc#1012628). - ipmi: Fix timer race with module unload (bnc#1012628). - mailbox: PCC: handle parse error (bnc#1012628). - parisc: Fix address in HPMC IVA (bnc#1012628). - parisc: Fix map_pages() to not overwrite existing pte entries (bnc#1012628). - parisc: Fix exported address of os_hpmc handler (bnc#1012628). - ALSA: hda - Add quirk for ASUS G751 laptop (bnc#1012628). - ALSA: hda - Fix headphone pin config for ASUS G751 (bnc#1012628). - ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo M715 (bnc#1012628). - ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905) (bnc#1012628). - ALSA: hda: Add 2 more models to the power_save blacklist (bnc#1012628). - ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops (bnc#1012628). - ALSA: hda - Fix incorrect clearance of thinkpad_acpi hooks (bnc#1012628). - x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (bnc#1012628). - x86/xen: Fix boot loader version reported for PVH guests (bnc#1012628). - x86/corruption-check: Fix panic in memory_corruption_check() when boot option without value is provided (bnc#1012628). - x86/kvm/nVMX: allow bare VMXON state migration (bnc#1012628). - x86/mm/pat: Disable preemption around __flush_tlb_all() (bnc#1012628). - x86/numa_emulation: Fix uniform-split numa emulation (bnc#1012628). - ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen (bnc#1012628). - net: socionext: Reset tx queue in ndo_stop (bnc#1012628). - net: loopback: clear skb->tstamp before netif_rx() (bnc#1012628). - locking/lockdep: Fix debug_locks off performance problem (bnc#1012628). - netfilter: xt_nat: fix DNAT target for shifted portmap ranges (bnc#1012628). - ataflop: fix error handling during setup (bnc#1012628). - swim: fix cleanup on setup error (bnc#1012628). - arm64: cpufeature: ctr: Fix cpu capability check for late CPUs (bnc#1012628). - hv_netvsc: fix vf serial matching with pci slot info (bnc#1012628). - nfp: devlink port split support for 1x100G CXP NIC (bnc#1012628). - tun: Consistently configure generic netdev params via rtnetlink (bnc#1012628). - s390/sthyi: Fix machine name validity indication (bnc#1012628). - hwmon: (pwm-fan) Set fan speed to 0 on suspend (bnc#1012628). - lightnvm: pblk: fix race on sysfs line state (bnc#1012628). - lightnvm: pblk: fix two sleep-in-atomic-context bugs (bnc#1012628). - lightnvm: pblk: fix race condition on metadata I/O (bnc#1012628). - spi: spi-ep93xx: Use dma_data_direction for ep93xx_spi_dma_{finish,prepare} (bnc#1012628). - perf tools: Free temporary 'sys' string in read_event_files() (bnc#1012628). - perf tools: Cleanup trace-event-info 'tdata' leak (bnc#1012628). - perf tools: Free 'printk' string in parse_ftrace_printk() (bnc#1012628). - perf strbuf: Match va_{add,copy} with va_end (bnc#1012628). - cpupower: Fix coredump on VMWare (bnc#1012628). - bcache: Populate writeback_rate_minimum attribute (bnc#1012628). - mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01 (bnc#1012628). - sdhci: acpi: add free_slot callback (bnc#1012628). - mtd: rawnand: denali: set SPARE_AREA_SKIP_BYTES register to 8 if unset (bnc#1012628). - iwlwifi: pcie: avoid empty free RB queue (bnc#1012628). - iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface (bnc#1012628). - iwlwifi: mvm: check for n_profiles validity in EWRD ACPI (bnc#1012628). - x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC (bnc#1012628). - wlcore: Fix BUG with clear completion on timeout (bnc#1012628). - ACPI/PPTT: Handle architecturally unknown cache types (bnc#1012628). - ACPI / PM: LPIT: Register sysfs attributes based on FADT (bnc#1012628). - ACPI / processor: Fix the return value of acpi_processor_ids_walk() (bnc#1012628). - cpufreq: dt: Try freeing static OPPs only if we have added them (bnc#1012628). - x86/intel_rdt: Show missing resctrl mount options (bnc#1012628). - mtd: rawnand: atmel: Fix potential NULL pointer dereference (bnc#1012628). - nvme: call nvme_complete_rq when nvmf_check_ready fails for mpath I/O (bnc#1012628). - ath10k: fix tx status flag setting for management frames (bnc#1012628). - signal: Introduce COMPAT_SIGMINSTKSZ for use in compat_sys_sigaltstack (bnc#1012628). - ice: fix changing of ring descriptor size (ethtool -G) (bnc#1012628). - ice: update fw version check logic (bnc#1012628). - net: hns3: Fix for packet buffer setting bug (bnc#1012628). - Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth (bnc#1012628). - Bluetooth: hci_qca: Remove hdev dereference in qca_close() (bnc#1012628). - efi/x86: Call efi_parse_options() from efi_main() (bnc#1012628). - x86: boot: Fix EFI stub alignment (bnc#1012628). - net: hns3: Add nic state check before calling netif_tx_wake_queue (bnc#1012628). - net: hns3: Fix ets validate issue (bnc#1012628). - pinctrl: sunxi: fix 'pctrl->functions' allocation in sunxi_pinctrl_build_state (bnc#1012628). - pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux (bnc#1012628). - brcmfmac: fix for proper support of 160MHz bandwidth (bnc#1012628). - net: hns3: Check hdev state when getting link status (bnc#1012628). - net: hns3: Set STATE_DOWN bit of hdev state when stopping net (bnc#1012628). - net: phy: phylink: ensure the carrier is off when starting phylink (bnc#1012628). - block, bfq: correctly charge and reset entity service in all cases (bnc#1012628). - arm64: entry: Allow handling of undefined instructions from EL1 (bnc#1012628). - kprobes: Return error if we fail to reuse kprobe instead of BUG_ON() (bnc#1012628). - spi: gpio: No MISO does not imply no RX (bnc#1012628). - ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers (bnc#1012628). - pinctrl: qcom: spmi-mpp: Fix drive strength setting (bnc#1012628). - bpf/verifier: fix verifier instability (bnc#1012628). - failover: Add missing check to validate 'slave_dev' in net_failover_slave_unregister (bnc#1012628). - perf tests: Fix record+probe_libc_inet_pton.sh without ping's debuginfo (bnc#1012628). - pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant (bnc#1012628). - pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant (bnc#1012628). - net: hns3: Preserve vlan 0 in hardware table (bnc#1012628). - net: hns3: Fix ping exited problem when doing lp selftest (bnc#1012628). - net: hns3: Fix for vf vlan delete failed problem (bnc#1012628). - net: dsa: mv88e6xxx: Fix writing to a PHY page (bnc#1012628). - mt76x2u: run device cleanup routine if resume fails (bnc#1012628). - rsi: fix memory alignment issue in ARM32 platforms (bnc#1012628). - libertas_tf: prevent underflow in process_cmdrequest() (bnc#1012628). - iwlwifi: mvm: fix BAR seq ctrl reporting (bnc#1012628). - gpio: brcmstb: allow 0 width GPIO banks (bnc#1012628). - ixgbe: disallow IPsec Tx offload when in SR-IOV mode (bnc#1012628). - ixgbevf: VF2VF TCP RSS (bnc#1012628). - wil6210: fix RX buffers release and unmap (bnc#1012628). - ath10k: schedule hardware restart if WMI command times out (bnc#1012628). - libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9 (bnc#1012628). - thermal: rcar_thermal: Prevent doing work after unbind (bnc#1012628). - thermal: da9062/61: Prevent hardware access during system suspend (bnc#1012628). - cifs: fix a credits leak for compund commands (bnc#1012628). - cgroup, netclassid: add a preemption point to write_classid (bnc#1012628). - net: stmmac: dwmac-sun8i: fix OF child-node lookup (bnc#1012628). - f2fs: fix to account IO correctly for cgroup writeback (bnc#1012628). - MD: Memory leak when flush bio size is zero (bnc#1012628). - md: fix memleak for mempool (bnc#1012628). - of: Add missing exports of node name compare functions (bnc#1012628). - scsi: esp_scsi: Track residual for PIO transfers (bnc#1012628). - scsi: ufs: Schedule clk gating work on correct queue (bnc#1012628). - UAPI: ndctl: Fix g++-unsupported initialisation in headers (bnc#1012628). - KVM: nVMX: Clear reserved bits of #DB exit qualification (bnc#1012628). - scsi: megaraid_sas: fix a missing-check bug (bnc#1012628). - RDMA/core: Do not expose unsupported counters (bnc#1012628). - RDMA/cm: Respect returned status of cm_init_av_by_path (bnc#1012628). - IB/ipoib: Clear IPCB before icmp_send (bnc#1012628). - RDMA/bnxt_re: Avoid accessing nq->bar_reg_iomem in failure case (bnc#1012628). - RDMA/bnxt_re: Fix recursive lock warning in debug kernel (bnc#1012628). - usb: host: ohci-at91: fix request of irq for optional gpio (bnc#1012628). - PCI: mediatek: Fix mtk_pcie_find_port() endpoint/port matching logic (bnc#1012628). - PCI: cadence: Use AXI region 0 to signal interrupts from EP (bnc#1012628). - usb: typec: tcpm: Report back negotiated PPS voltage and current (bnc#1012628). - tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated (bnc#1012628). - f2fs: clear PageError on the read path (bnc#1012628). - Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask (bnc#1012628). - VMCI: Resource wildcard match fixed (bnc#1012628). - PCI / ACPI: Enable wake automatically for power managed bridges (bnc#1012628). - xprtrdma: Reset credit grant properly after a disconnect (bnc#1012628). - irqchip/pdc: Setup all edge interrupts as rising edge at GIC (bnc#1012628). - usb: dwc2: fix call to vbus supply exit routine, call it unlocked (bnc#1012628). - usb: dwc2: fix a race with external vbus supply (bnc#1012628). - usb: gadget: udc: atmel: handle at91sam9rl PMC (bnc#1012628). - ext4: fix argument checking in EXT4_IOC_MOVE_EXT (bnc#1012628). - MD: fix invalid stored role for a disk (bnc#1012628). - PCI: cadence: Correct probe behaviour when failing to get PHY (bnc#1012628). - nvmem: check the return value of nvmem_add_cells() (bnc#1012628). - xhci: Avoid USB autosuspend when resuming USB2 ports (bnc#1012628). - scsi: qla2xxx: Fix recursive mailbox timeout (bnc#1012628). - f2fs: fix to recover inode's crtime during POR (bnc#1012628). - f2fs: fix to recover inode's i_flags during POR (bnc#1012628). - PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice (bnc#1012628). - coresight: etb10: Fix handling of perf mode (bnc#1012628). - PCI: dwc: pci-dra7xx: Enable errata i870 for both EP and RC mode (bnc#1012628). - crypto: caam - fix implicit casts in endianness helpers (bnc#1012628). - usb: chipidea: Prevent unbalanced IRQ disable (bnc#1012628). - Smack: ptrace capability use fixes (bnc#1012628). - driver/dma/ioat: Call del_timer_sync() without holding prep_lock (bnc#1012628). - ASoC: AMD: Fix capture unstable in beginning for some runs (bnc#1012628). - firmware: coreboot: Unmap ioregion after device population (bnc#1012628). - IB/ipoib: Use dev_port to expose network interface port numbers (bnc#1012628). - IB/mlx5: Allow transition of DCI QP to reset (bnc#1012628). - uio: ensure class is registered before devices (bnc#1012628). - scsi: lpfc: Correct soft lockup when running mds diagnostics (bnc#1012628). - scsi: lpfc: Correct race with abort on completion path (bnc#1012628). - f2fs: avoid sleeping under spin_lock (bnc#1012628). - f2fs: report error if quota off error during umount (bnc#1012628). - signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init (bnc#1012628). - f2fs: fix to flush all dirty inodes recovered in readonly fs (bnc#1012628). - mfd: menelaus: Fix possible race condition and leak (bnc#1012628). - dmaengine: dma-jz4780: Return error if not probed from DT (bnc#1012628). - IB/rxe: fix for duplicate request processing and ack psns (bnc#1012628). - ALSA: hda: Check the non-cached stream buffers more explicitly (bnc#1012628). - cpupower: Fix AMD Family 0x17 msr_pstate size (bnc#1012628). - Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()" (bnc#1012628). - f2fs: fix missing up_read (bnc#1012628). - f2fs: fix to recover cold bit of inode block during POR (bnc#1012628). - f2fs: fix to account IO correctly (bnc#1012628). - OPP: Free OPP table properly on performance state irregularities (bnc#1012628). - ARM: dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings (bnc#1012628). - ARM: dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250 (bnc#1012628). - xen-swiotlb: use actually allocated size on check physical continuous (bnc#1012628). - tpm: Restore functionality to xen vtpm driver (bnc#1012628). - xen/blkfront: avoid NULL blkfront_info dereference on device removal (bnc#1012628). - xen/balloon: Support xend-based toolstack (bnc#1012628). - xen: fix race in xen_qlock_wait() (bnc#1012628). - xen: make xen_qlock_wait() nestable (bnc#1012628). - xen/pvh: increase early stack size (bnc#1012628). - xen/pvh: don't try to unplug emulated devices (bnc#1012628). - libertas: don't set URB_ZERO_PACKET on IN USB transfer (bnc#1012628). - usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten (bnc#1012628). - usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage (bnc#1012628). - usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround" (bnc#1012628). - mt76: mt76x2: fix multi-interface beacon configuration (bnc#1012628). - iwlwifi: mvm: check return value of rs_rate_from_ucode_rate() (bnc#1012628). - net/ipv4: defensive cipso option parsing (bnc#1012628). - dmaengine: ppc4xx: fix off-by-one build failure (bnc#1012628). - scsi: sched/wait: Add wait_event_lock_irq_timeout for TASK_UNINTERRUPTIBLE usage (bnc#1012628). - scsi: target: Fix target_wait_for_sess_cmds breakage with active signals (bnc#1012628). - libnvdimm: Hold reference on parent while scheduling async init (bnc#1012628). - libnvdimm, region: Fail badblocks listing for inactive regions (bnc#1012628). - libnvdimm, pmem: Fix badblocks population for 'raw' namespaces (bnc#1012628). - ASoC: intel: skylake: Add missing break in skl_tplg_get_token() (bnc#1012628). - ASoC: sta32x: set ->component pointer in private struct (bnc#1012628). - IB/mlx5: Fix MR cache initialization (bnc#1012628). - IB/rxe: Revise the ib_wr_opcode enum (bnc#1012628). - jbd2: fix use after free in jbd2_log_do_checkpoint() (bnc#1012628). - gfs2_meta: ->mount() can get NULL dev_name (bnc#1012628). - ext4: fix EXT4_IOC_SWAP_BOOT (bnc#1012628). - ext4: initialize retries variable in ext4_da_write_inline_data_begin() (bnc#1012628). - ext4: fix setattr project check in fssetxattr ioctl (bnc#1012628). - ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR (bnc#1012628). - ext4: fix use-after-free race in ext4_remount()'s error path (bnc#1012628). - selinux: fix mounting of cgroup2 under older policies (bnc#1012628). - HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452 (bnc#1012628). - HID: hiddev: fix potential Spectre v1 (bnc#1012628). - EDAC, amd64: Add Family 17h, models 10h-2fh support (bnc#1012628). - EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting (bnc#1012628). - EDAC, skx_edac: Fix logical channel intermediate decoding (bnc#1012628). - ARM: dts: dra7: Fix up unaligned access setting for PCIe EP (bnc#1012628). - PCI/ASPM: Fix link_state teardown on device removal (bnc#1012628). - PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk (bnc#1012628). - signal/GenWQE: Fix sending of SIGKILL (bnc#1012628). - signal: Guard against negative signal numbers in copy_siginfo_from_user32 (bnc#1012628). - crypto: lrw - Fix out-of bounds access on counter overflow (bnc#1012628). - crypto: tcrypt - fix ghash-generic speed test (bnc#1012628). - crypto: aesni - don't use GFP_ATOMIC allocation if the request doesn't cross a page in gcm (bnc#1012628). - crypto: morus/generic - fix for big endian systems (bnc#1012628). - crypto: aegis/generic - fix for big endian systems (bnc#1012628). - crypto: speck - remove Speck (bnc#1012628). - mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range() (bnc#1012628). - userfaultfd: disable irqs when taking the waitqueue lock (bnc#1012628). - ima: fix showing large 'violations' or 'runtime_measurements_count' (bnc#1012628). - ima: open a new file instance if no read permissions (bnc#1012628). - hugetlbfs: dirty pages as they are added to pagecache (bnc#1012628). - mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly (bnc#1012628). - mm/hmm: fix race between hmm_mirror_unregister() and mmu_notifier callback (bnc#1012628). - KVM: arm/arm64: Ensure only THP is candidate for adjustment (bnc#1012628). - KVM: arm64: Fix caching of host MDCR_EL2 value (bnc#1012628). - kbuild: fix kernel/bounds.c 'W=1' warning (bnc#1012628). - iio: ad5064: Fix regulator handling (bnc#1012628). - iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs() (bnc#1012628). - iio: adc: at91: fix acking DRDY irq on simple conversions (bnc#1012628). - iio: adc: at91: fix wrong channel number in triggered buffer mode (bnc#1012628). - w1: omap-hdq: fix missing bus unregister at removal (bnc#1012628). - smb3: allow stats which track session and share reconnects to be reset (bnc#1012628). - smb3: do not attempt cifs operation in smb3 query info error path (bnc#1012628). - smb3: on kerberos mount if server doesn't specify auth type use krb5 (bnc#1012628). - printk: Fix panic caused by passing log_buf_len to command line (bnc#1012628). - genirq: Fix race on spurious interrupt detection (bnc#1012628). - tpm: fix response size validation in tpm_get_random() (bnc#1012628). - NFC: nfcmrvl_uart: fix OF child-node lookup (bnc#1012628). - NFSv4.1: Fix the r/wsize checking (bnc#1012628). - nfs: Fix a missed page unlock after pg_doio() (bnc#1012628). - nfsd: correctly decrement odstate refcount in error path (bnc#1012628). - nfsd: Fix an Oops in free_session() (bnc#1012628). - lockd: fix access beyond unterminated strings in prints (bnc#1012628). - dm ioctl: harden copy_params()'s copy_from_user() from malicious users (bnc#1012628). - dm zoned: fix metadata block ref counting (bnc#1012628). - dm zoned: fix various dmz_get_mblock() issues (bnc#1012628). - media: ov7670: make "xclk" clock optional (bnc#1012628). - fsnotify: Fix busy inodes during unmount (bnc#1012628). - powerpc64/module elfv1: Set opd addresses after module relocation (bnc#1012628). - powerpc/msi: Fix compile error on mpc83xx (bnc#1012628). - powerpc/tm: Fix HFSCR bit for no suspend case (bnc#1012628). - powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9 (bnc#1012628). - MIPS: OCTEON: fix out of bounds array access on CN68XX (bnc#1012628). - rtc: ds1307: fix ds1339 wakealarm support (bnc#1012628). - rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_interrupt' (bnc#1012628). - rtc: cmos: Remove the `use_acpi_alarm' module parameter for !ACPI (bnc#1012628). - power: supply: twl4030-charger: fix OF sibling-node lookup (bnc#1012628). - ocxl: Fix access to the AFU Descriptor Data (bnc#1012628). - iommu/arm-smmu: Ensure that page-table updates are visible before TLBI (bnc#1012628). - TC: Set DMA masks for devices (bnc#1012628). - net: bcmgenet: fix OF child-node lookup (bnc#1012628). - media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD (bnc#1012628). - Revert "media: dvbsky: use just one mutex for serializing device R/W ops" (bnc#1012628). - kgdboc: Passing ekgdboc to command line causes panic (bnc#1012628). - remoteproc: qcom: q6v5: Propagate EPROBE_DEFER (bnc#1012628). - media: cec: make cec_get_edid_spa_location() an inline function (bnc#1012628). - media: cec: integrate cec_validate_phys_addr() in cec-api.c (bnc#1012628). - xen: fix xen_qlock_wait() (bnc#1012628). - xen: remove size limit of privcmd-buf mapping interface (bnc#1012628). - xen-blkfront: fix kernel panic with negotiate_mq error path (bnc#1012628). - media: cec: add new tx/rx status bits to detect aborts/timeouts (bnc#1012628). - media: cec: fix the Signal Free Time calculation (bnc#1012628). - media: cec: forgot to cancel delayed work (bnc#1012628). - media: em28xx: use a default format if TRY_FMT fails (bnc#1012628). - media: tvp5150: avoid going past array on v4l2_querymenu() (bnc#1012628). - media: em28xx: fix input name for Terratec AV 350 (bnc#1012628). - media: em28xx: make v4l2-compliance happier by starting sequence on zero (bnc#1012628). - media: em28xx: fix handler for vidioc_s_input() (bnc#1012628). - media: adv7604: when the EDID is cleared, unconfigure CEC as well (bnc#1012628). - media: adv7842: when the EDID is cleared, unconfigure CEC as well (bnc#1012628). - drm/mediatek: fix OF sibling-node lookup (bnc#1012628). - media: media colorspaces*.rst: rename AdobeRGB to opRGB (bnc#1012628). - media: replace ADOBERGB by OPRGB (bnc#1012628). - media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC (bnc#1012628). - arm64: lse: remove -fcall-used-x0 flag (bnc#1012628). - rpmsg: smd: fix memory leak on channel create (bnc#1012628). - Cramfs: fix abad comparison when wrap-arounds occur (bnc#1012628). - ARM: dts: socfpga: Fix SDRAM node address for Arria10 (bnc#1012628). - arm64: dts: stratix10: Correct System Manager register size (bnc#1012628). - soc: qcom: rmtfs-mem: Validate that scm is available (bnc#1012628). - soc/tegra: pmc: Fix child-node lookup (bnc#1012628). - selftests/ftrace: Fix synthetic event test to delete event correctly (bnc#1012628). - selftests/powerpc: Fix ptrace tm failure (bnc#1012628). - tracing: Return -ENOENT if there is no target synthetic event (bnc#1012628). - btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled (bnc#1012628). - btrfs: Handle owner mismatch gracefully when walking up tree (bnc#1012628). - btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock (bnc#1012628). - btrfs: fix error handling in free_log_tree (bnc#1012628). - btrfs: fix error handling in btrfs_dev_replace_start (bnc#1012628). - btrfs: Enhance btrfs_trim_fs function to handle error better (bnc#1012628). - btrfs: Ensure btrfs_trim_fs can trim the whole filesystem (bnc#1012628). - btrfs: iterate all devices during trim, instead of fs_devices::alloc_list (bnc#1012628). - btrfs: don't attempt to trim devices that don't support it (bnc#1012628). - btrfs: keep trim from interfering with transaction commits (bnc#1012628). - btrfs: wait on caching when putting the bg cache (bnc#1012628). - Btrfs: don't clean dirty pages during buffered writes (bnc#1012628). - btrfs: release metadata before running delayed refs (bnc#1012628). - btrfs: protect space cache inode alloc with GFP_NOFS (bnc#1012628). - btrfs: reset max_extent_size on clear in a bitmap (bnc#1012628). - btrfs: make sure we create all new block groups (bnc#1012628). - Btrfs: fix warning when replaying log after fsync of a tmpfile (bnc#1012628). - Btrfs: fix wrong dentries after fsync of file that got its parent replaced (bnc#1012628). - btrfs: qgroup: Dirty all qgroups before rescan (bnc#1012628). - Btrfs: fix null pointer dereference on compressed write path error (bnc#1012628). - Btrfs: fix assertion on fsync of regular file when using no-holes feature (bnc#1012628). - Btrfs: fix deadlock when writing out free space caches (bnc#1012628). - btrfs: reset max_extent_size properly (bnc#1012628). - btrfs: set max_extent_size properly (bnc#1012628). - btrfs: don't use ctl->free_space for max_extent_size (bnc#1012628). - btrfs: only free reserved extent if we didn't insert it (bnc#1012628). - btrfs: fix insert_reserved error handling (bnc#1012628). - btrfs: don't run delayed_iputs in commit (bnc#1012628). - btrfs: move the dio_sem higher up the callchain (bnc#1012628). - Btrfs: fix use-after-free during inode eviction (bnc#1012628). - Btrfs: fix use-after-free when dumping free space (bnc#1012628). - net: sched: Remove TCA_OPTIONS from policy (bnc#1012628). - userns: also map extents in the reverse map to kernel IDs (bnc#1012628). - bpf: wait for running BPF programs when updating map-in-map (bnc#1012628). - vga_switcheroo: Fix missing gpu_bound call at audio client registration (bnc#1012628). - MD: fix invalid stored role for a disk - try2 (bnc#1012628). - Refresh patches.suse/0001-x86-speculation-Add-basic-IBRS-support-infrastructur.patch. - commit 8adee6e ==== libgit2-glib ==== Version update (0.26.4 -> 0.27.7) - Update to version 0.27.7 + pkg-config pc file generation fixed + Fix cached hunks - Remove libgit2-glib-libgit2-0.27.0.patch: Version 0.27.7 added support for libgit2 0.27.0 ==== libical ==== - Add patches 0001-vcc.y-factor-out-hexdigit-conversion.patch, 0002-vcc.y-fix-infinite-loop-with-lower-case-hex-digits.patch, 0003-vcc.y-fix-infinite-loop-with-non-hex-digits.patch, 0004-vobject.c-vCard-Unicode-reading-support.patch, 0005-vcc.y-do-not-ignore-field-separator-in-QUOTED-PRINTA.patch to support Unicode in VCF (and fix infinite loops). [https://github.com/libical/libical/pull/354 ] ==== libjpeg-turbo ==== Version update (2.0.0 -> 2.0.1) Subpackages: libjpeg8 libjpeg8-32bit libturbojpeg0 - update to version 2.0.1: * jsimd_quantize_float_dspr2() and jsimd_convsamp_float_dspr2() functions in the MIPS DSPr2 SIMD extensions are now disabled at compile time if the soft float ABI is enabled * Fixed a regression in the SIMD feature detection code, introduced by the AVX2 SIMD extensions * Fixed out-of-bounds read in cjpeg that occurred when attempting to compress a specially-crafted malformed color-index (8-bit-per-sample) Targa file ==== libostree ==== Version update (2018.8 -> 2018.9) Subpackages: libostree-1-1 - Update to version 2018.9: + New features: * Allow disabling pulling from LAN/USB/Internet * lib/repo: Add an API to get min-free-space-* reserved bytes * OstreeMutableTree: add _remove method * repo: Add a checkout option to not hardlink zero-sized files + Bugfixes (apart from regular memory leaks fixes): * finalize-staged: Bump timeout to 5 minutes * deploy: Fix removing /var/.updated with separate /var mount * src/ostree: Don't delete refs having aliases + One notable change in this release is the initrd service ostree-prepare-root.service now runs earlier in the boot process. This shouldn't actually affect OSes, unless there's extended logic in the initrd that integrates tightly with OSTree. + Another systemd related change is the introduction of a path unit: ostree-finalize-staged.path. This allows the service of the same name to be path activated instead of explicitly started at deployment staging time. This release however does not yet rely on this mechanism to give time for packagers and integrators to adapt to the new unit (e.g. by enabling it in the systemd presets). A future release will require this. Note that deployment staging is still not the default for libostree, although at least rpm-ostree now unconditionally uses staging, and while it generally worked well, we hit issues with people using slower hard drives, hence the increase in timeout in PR #1755 . + Another change to call out is: lib/commit: Don't chown objects to repo target owner. We previously had incomplete support for a process running as uid 0 writing to a repository owned by a non-zero uid, but it was never finished. This will likely be revisited at a later time. ==== librsvg ==== Version update (2.44.6 -> 2.44.9) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.44.9: + rsvg-convert was positioning extracted elements incorrectly when using the -w/-h options together with --export-id. + Mis-rendering in small arc segments. + Rendering of gradients for horizontal/vertical stroked lines with gradientUnits="userSpaceOnUse". + Fix a couple of memory leaks in the error paths of the GdkPixbuf loader. - Update to version 2.44.8: + Don't drop spaces around <tspan> elements. + rsvg-convert now uses pixel units for SVG output, instead of points. + Tweaks to have the test suite pass on i386 and non-x86_64 platforms. + With RSVG_LOG=1, librsvg will now report when SVGs have references to nonexistent elements, to aid debugging (for example, in an xlink:href attribute). + Allow reference tests with a small difference to pass without breaking the build. - Update to version 2.44.7: + Correctly match the systemLanguage attribute with the user's locale. + Parse xml:lang correctly. + Don't modify the caller's cairo_t state during rendering. + Don't panic if we get a "data:" URI with empty data. + Don't panic on getting a very large "order" for feConvolveMatrix. + Bugs fixed: glgo#GNOME/librsvg#256, glgo#GNOME/librsvg#320, glgo#GNOME/librsvg#334, glgo#GNOME/librsvg#349, glgo#GNOME/librsvg#352. ==== libwpd ==== - Drop tm markers, these are undesired by legal. - Add patch to fix rh#1643752 bsc#1115713 CVE-2018-19208: * 0001-Resolves-rhbz-1643752-bounds-check-m_currentTable-ac.patch ==== mailx ==== - Updates to mailx-12.5-openssl-1.1.0f.patch * If the openssl RNG is already seeded (on linux it always is) skip snake-oil reeseeding from file. Update man page accordingly. * Update man page with information that ssl2 and ssl3 are not only deprecated but currently unavailable and that tls1 forces TLS 1.0 but not later versions. * RAND_EGD is also unavailable, not just unused. * set SSL_OP_NO_TICKET, many servers accept session tickets, but almost never rotate them properly, TLS 1.3 session tickets are not affected by this flag. * When using client certificates, check if the cert and key match each other. ==== mutter ==== Version update (3.30.1 -> 3.30.2) Subpackages: libmutter-3-0 mutter-data mutter-lang - Update to version 3.30.2: + Fix handling of non-UTF8 encodings. + Fix memory leaks introduced in 3.30.1. + Work around hangul text input bug. + Fix crash when restarting window manager. + Fix crash on monitor hotplug. + Updated translations. ==== ovmf ==== Version update (2018+git1538590187.c0b1f749ef13 -> 2018+git1542164568.85588389222a) Subpackages: qemu-ovmf-x86_64 - Update to 2018+git1542164568.85588389222a (edk2-stable201811) + UefiCpuPkg/CommonFeature: Always set FEATURE_CONTROL.Lock + MdeModulePkg/NvmExpressPei: Refine data buffer & len check in PassThru + OvmfPkg/QemuVideoDxe: list "UnalignedIoInternal.h" in the INF file + OvmfPkg/QemuVideoDxe: VMWare SVGA device support + OvmfPkg/QemuVideoDxe: Helper functions for unaligned port I/O + OvmfPkg: VMWare SVGA display device register definitions + Fix UEFI and Tiano Decompression logic issue + MdePkg: Fix incorrect check for DisplayOnly text format in AcpiEx + UefiCpuPkg/PiSmmCpuDxeSmm: Separate semaphore container + UefiCpuPkg/RegisterCpuFeaturesLib: Separate semaphore container + UefiCpuPkg/RegisterCpuFeaturesLib: Adjust Order + MdePkg/BaseSynchronizationLib: Fix InternalSync[De|In]crement + UefiCpuPkg/SmmCpu: Block access-out only when static paging is used + MdeModulePkg/Core: fix ineffective guard page issue + MdeModulePkg/Core: fill logic hole in MemoryProtectionCpuArchProtocolNotify + MdeModulePkg/Mtftp4Dxe: Fix invalid configuration of MTFTP local port + OvmfPkg: Replace obsoleted network drivers from platform DSC/FDF + MdePkg/Base.h: Implement BASE_CR() via OFFSET_OF() + MdeModulePkg/PiSmmIpl: Do not reset SMRAM to UC when CPU driver runs + NetworkPkg/TlsDxe: Fix failure to process multiple TLS records + BaseTools ConvertFceToStructurePcd: Fix the array value with empty string + CryptoPkg/BaseCryptLib: Fix potential integer overflow issue + ArmPkg/OpteeLib: Add APIs to communicate with OP-TEE + UefiCpuPkg/PiSmmCpuDxeSmm: Fix ASSERT for success + UefiCpuPkg/MpInitLib: Fix ASSERT for success + MdeModulePkg/Core: fix an issue of potential NULL pointer access + NetworkPkg/Mtftp6Dxe: Correct the total received and saved block number + MdeModulePke/Mtftp4Dxe: Correct the total received and saved block number + MdeModulePkg EhciDxe: Extract new EhciInsertAsyncIntTransfer function + MdeModulePkg XhciDxe: Extract new XhciInsertAsyncIntTransfer function + BaseTools: Sync the DevicePath Function update from MdePkg + MdeModulePkg/HiiDB: Make sure database update behaviors are atomic + MdeModulePkg/HiiDB: Reorganize codes of exporting HII settings + UefiCpuPkg/RegisterCpuFeaturesLib: Support combo CPU feature style + UefiCpuPkg/RegisterCpuFeaturesLib: Fix ECC issues + MdeModulePkg/Core: add freed-memory guard feature + MdeModulePkg/Core: prevent re-acquire GCD memory lock + UefiCpuPkg/CpuDxe: prevent recursive calling of InitializePageTablePool + UefiCpuPkg/CpuDxe: consider freed-memory guard in non-stop mode + MdeModulePkg: introduce UEFI freed-memory guard bit in HeapGuard PCD + MdeModulePkg/NvmExpressDxe: Refine PassThru IO queue creation behavior + MdeModulePkg/NvmExpressDxe: Always copy CQ entry to PassThru packet + MdeModulePkg/NvmExpressDxe: Refine data buffer & len check in PassThru + MdePkg: Handle various device path when optional para is not specified + FatPkg: Correct the line ending to CRLF + MdePkg-BaseLib: Fix PathCleanUpDirectories() issue with "\\..\\.." + FatPkg/EnhancedFatDxe Fix Double Cluster Allocation + FatBinPkg: Remove FatBinPkg and refresh document + ShellPkg/dmem: Only dump sizeof (EFI_SYSTEM_TABLE) bytes for gST + MdeModulePkg/UsbMass: Fix USB key write failure + IntelFrameworkModulePkg: Add more checker in UefiTianoDecompressLib (CVE FIX) + MdePkg: Add more checker in UefiDecompressLib to access the valid buffer only (CVE FIX) + MdeModulePkg/PartitionDxe: Add check for underlying device block size + MdeModulePkg Xhci: Handle value 5 in Port Speed field of PORTSC + MdeModulePkg XhciDxe: Assign Usb2Hc.XXXRevision based on SBRN + MdePkg/BaseLib: AsciiStrToUnicodeStr(S) not handle EASCII properly + UefiCpuPkg/CpuCommonFeaturesLib: Register MSR base on scope Info + UefiCpuPkg/CpuS3DataDxe: Keep old data if value already existed + UefiCpuPkg/PiSmmCpuDxeSmm: Add logic to support semaphore type + UefiCpuPkg/RegisterCpuFeaturesLib: Add logic to support semaphore type + UefiCpuPkg/RegisterCpuFeaturesLib.h: Add new dependence types + UefiCpuPkg/Include/AcpiCpuData.h: Add Semaphore related Information + NetworkPkg/IpSecDxe: Fix issue to parse SA Payload + NetworkPkg: Correct the time stamp and fix the integer overflow issue + NetworkPkg/TlsDxe: Remove the redundant library class + MdePkg UefiLib: Check Table against NULL in ScanTableInSDT + MdeModulePkg BrotliDecompressLib: Add the checker to avoid array out of bound + UefiCpuPkg/CpuExceptionHandlerLib: always clear descriptor data in advance + fix InternalSyncCompareExchange*() + MdeModulePkg Variable: Fix Timestamp zeroing issue on APPEND_WRITE + MdeModulePkg/Bus/Ufs: Ensure device not return more data than expected + MdeModulePkg/AbsPointer: Don't access key codes when length is wrong + MdeModulePkg BrotliCustomDecompressLib: Don't build it for EBC arch + MdeModulePkg RegularExpressionDxe: Enable STDARG for variable arguments + MdeModulePkg/RegularExpressionDxe: Miss null pointer check + MdeModulePkg PcdDxe: ASSERT PcdSetNvStoreDefaultId set + UefiCpuPkg/S3Resume2Pei: disable paging before creating new page table + MdeModulePkg/SdMmcPciHcDxe: Allow additional SDHCI versions + MdeModulePkg/SdMmcPciHcDxe: Add controller version defines + MdePkg: Use VENDOR_DEVICE_PATH structure for Debug Port device path + ShellPkg-Cd: Ensure all valid cd targets are handled properly + MdePkg-BaseLib: Fix PathCleanUpDirectories() error involving "\..\.." + MdeModulePkg/NonDiscoverablePciDeviceDxe: expose unique B/D/F identifiers + MdeModulePkg: Update Brotli DecompressLib to the latest v1.0.6 + BaseTools: Update Brotli Compress to the latest one 1.0.6 + MdePkg: Add PciRoot/PcieRoot text for ACPI Expanded Device Path + MdePkg: Correct condition check for AcpiExp text format + MdePkg: Correct the string order of ACPI Expanded Device Path + MdePkg: Correct the string expression of UTF8 vendor device path + MdeModulePkg/HiiDB: Fix incorrect structure convention for checkbox + Lzma: Update LZMA SDK version to 18.05 + OvmfPkg/PlatformPei: clear CPU caches + Various BaseTools clean up and fixes + Various UDF fixes + Various USB fixes - Drop upstreamed patches + ovmf-bsc1115916-fix-timestamp-zeroing.patch + ovmf-bsc1115917-bounds-checking-for-ueficompress.patch - Add ovmf-bsc1115916-fix-timestamp-zeroing.patch to fix Timestamp zeroing issue on APPEND_WRITE (bsc#1115916, CVE-2018-3613) - Add ovmf-bsc1115917-bounds-checking-for-ueficompress.patch for the bound checking of ueficompress (bsc#1115917, CVE-2017-5731, CVE-2017-5732, CVE-2017-5733, CVE-2017-5734, CVE-2017-5735) ==== plymouth ==== Version update (0.9.4+git20181105.f898586 -> 0.9.4+git20181111.118c5ca) Subpackages: libply-boot-client4 libply-splash-core4 libply-splash-graphics4 libply4 plymouth-dracut plymouth-plugin-label plymouth-plugin-label-ft plymouth-plugin-script plymouth-plugin-two-step plymouth-scripts - Update to version 0.9.4+git20181111.118c5ca Modify systemd-units: Add "ConditionVirtualization=!container" in all plymouth-*.service, also systemd-ask-password-plymouth.path. ==== python-paramiko ==== - add disable-gssapi.patch - workaround for boo#1115769 ==== schily ==== Version update (2018.08.24 -> 2018.10.30) Subpackages: libdeflt1_0 libfind3_0 librmt1_0 spax star - Trim SELINUX from schily-2018-05-25_star_configuration.patch, it is already determined by %configure now. - Update to new upstream release 2018.10.30 * bsh/Bourne Shell/star: a very long path name could cause a core dump with a "chdir()" operation in some cases. * star: "star -c H=exustar -pax-o binary" now correctly results in unencoded strings for uname/gname/path/linkpath. * star: a new option -no-secure-links allows to disable the secure default behavior. * Changes to libfind options like -mount/-xdev and -perm; for details, see the AN-* files in the documentation directory. * New libfind primaries -chatime, -chctime, -chfile, -chown, etc. see AN-* for details. * star: Added "volatile" to a selection of struct members in struct m_head. This should help to avoid specific optimization from newer compilers that could cause problems with the synchronization of the fifo. * star: make sure that "star -c" results in a non-zero exit code if it is interupted by Ctrl-C. * star: Added new code to allow to debug a hanging FIFO. * star: the path name length and the link name length are now set from the POSIX 2001 extended tar headers in case that a name appears in that extended meta data. - Removed schily-2018-05-25_star_lock.patch (no longer needed). - Added schily-linker.diff. - Add smake and ved subpackages. ==== tomcat ==== Version update (9.0.12 -> 9.0.13) Subpackages: tomcat-admin-webapps tomcat-el-3_0-api tomcat-jsp-2_3-api tomcat-lib tomcat-servlet-4_0-api tomcat-webapps - Update to Tomcat 9.0.13. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt) ==== webkit2gtk3 ==== Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Update _constraints to latest values to avoid OOM erros ==== yast2-country ==== Version update (4.1.1 -> 4.1.4) Subpackages: yast2-country-data - Fallback to English when using fbiterm on those languages which are not properly supported (fate#325746). - 4.1.4 - Timezone: When ntp is configured to be used by default, offer also ntp servers proposed by DHCP but do not choose them if the user does not select one explicitly (fate#323454) - 4.1.3 - Timezone: Since ntp-client does not write the config anymore when called for syncing only, we need to remove the 'ntpdate_only' parameter in order to continue proposing a default when it is enabled in the control file (bsc#1108497). - 4.1.2 ==== yast2-network ==== Version update (4.1.15 -> 4.1.17) - Yast::Lan: Added method for obtaining the NTP servers offered by DHCP (fate#323454) - 4.1.17 - Allow to swich the network backend from the proposal (related to fate#326480) - 4.1.16 ==== yast2-ntp-client ==== Version update (4.1.3 -> 4.1.5) - fate#323454 - Bring back the menu button for choosing an NTP address from a public NTP servers list or from the ones returned by DHCP. - When no configuration is proposed by default, then use the DHCP offered servers as fallback. - Do not synchronize if chronyd service is running (bsc#1087048) - Use the title style capitalization in "Synchronize Now" button (bsc#1039987) - 4.1.5 - Only write the configuration once, and do not save changes when we are only synchronizing the date. (bsc#1108497) - 4.1.4 ==== yast2-storage-ng ==== Version update (4.1.31 -> 4.1.35) - The Guided Proposal tries to preserve partitions of type IRST (Intel Rapid Start Technology) when possible (bsc#1099187, fate#325885). - Made the Guided Proposal algorithm more clear, so it's easier to debug (bsc#1057436). - 4.1.35 - Initial proposal tries all possible attempts over each candidate device before switching to another device. - Related to bsc#1102026 and bsc#1090383. - 4.1.34 - adjust boot requirements to handle RAID cases (fate#326573) - 4.1.33 - SkipListValue.size_k returns the correct value (bsc#1115508). - 4.1.32 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org