Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20170602 When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: aaa_base (13.2+git20170504.927b15d -> 13.2+git20170512.8fa87a3) bash bluez (5.44 -> 5.45) diffutils (3.5.15 -> 3.6) ffmpeg (3.3 -> 3.3.1) file (5.30 -> 5.31) gcc6 (6.3.1+r246603 -> 6.3.1+r248589) gcc7 (7.1.1+r248152 -> 7.1.1+r248590) ibus (1.5.14 -> 1.5.16) kernel-firmware (20170511 -> 20170530) kiwi (7.04.31 -> 7.04.32) krita (3.1.3 -> 3.1.4) libdrm (2.4.80 -> 2.4.81) libfabric libgcj-gcc6 (6.3.1+r246603 -> 6.3.1+r248589) libraw (0.18.0 -> 0.18.2) libxml2 miniupnpc (2.0 -> 2.0.20170509) mono-core (5.0.0 -> 5.0.1) nasm (2.12.02 -> 2.13.01) patterns-desktop patterns-server patterns-xfce rdma-core shadow (4.2.1 -> 4.5) strace (4.16 -> 4.17) xdg-utils (20160610 -> 20170508) === Details === ==== aaa_base ==== Version update (13.2+git20170504.927b15d -> 13.2+git20170512.8fa87a3) Subpackages: aaa_base-extras - Be aware that on s390/s390x the ttyS0 is misused - Reset extended screen TERM variables if no terminfo - Better status line support even for tcsh - Modernize /etc/ttytype as tset of ncurses use it ==== bash ==== Subpackages: bash-doc libreadline7 readline-devel readline-doc - Make build reproducible in spite of profile based optimizations (boo#1040589) - Allow to disable do_profiling in builds (related to boo#1040589) ==== bluez ==== Version update (5.44 -> 5.45) Subpackages: bluez-cups bluez-devel libbluetooth3 - add bluez-5.45-disable-broken-tests.diff to disable two broken tests (reported upstream but not yet fixed) - update to version 5.45: This is mostly a bugfix release with fixes in ATT, GATT, OBEX and AVDTP. Feature-wise there are some new things as well, such as btmon support decoding Bluetooth 5.0 HCI commands and events. ==== diffutils ==== Version update (3.5.15 -> 3.6) - Update to version 3.6: * When one file is a prefix of the other, cmp now appends the shorter file's size to the EOF diagnostic. * diff's default algorithm has been tweaked to deal better with larger files, reversing some of the changes made in diffutils-3.4. - Define packager and bug reporting url ==== ffmpeg ==== Version update (3.3 -> 3.3.1) Subpackages: libavcodec57 libavfilter6 libavformat57 libavresample3 libavutil55 libpostproc54 libswresample2 libswscale4 - Disable cuda support to fix boo#1041794: ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos from playing on Youtube - Refreshed patches: ffmpeg-codec-choice.diff ffmpeg-libcdio_cdda-pkgconfig.patch ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff - Add additional checks to ensure MPEG is off - Update to new upstream release 3.3.1 * Fix uninitialized variables, signed integer overflow, excess shift operations. Add boundary checks. ==== file ==== Version update (5.30 -> 5.31) Subpackages: file-devel file-magic libmagic1 libmagic1-32bit - Update to file version 5.31 * remove trailing spaces from magic files * refactor is_tar * better bounds checks for cdf - Remove patches now upstream * file-5.30-150735.patch * file-5.30-3c60e5.patch - Rename patch file-5.30.dif which becomes file-5.31.dif - Modify the patches * file-4.24-autoconf.dif * file-5.14-tex.dif * file-5.16-ocloexec.patch * file-5.19-printf.dif * file-5.23-endian.patch ==== gcc6 ==== Version update (6.3.1+r246603 -> 6.3.1+r248589) - Update to gcc-6-branch head (r248628). - Add #!BuildIgnore: gcc-PIE to cross compiler builds ==== gcc7 ==== Version update (7.1.1+r248152 -> 7.1.1+r248590) Subpackages: cpp7 gcc7-c++ gcc7-fortran gcc7-info gcc7-locale gcc7-objc libasan4 libatomic1 libcilkrts5 libgcc_s1 libgcc_s1-32bit libgfortran4 libgomp1 libitm1 liblsan0 libmpx2 libmpxwrappers2 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-devel-gcc7 libtsan0 libubsan0 - Update to gcc-7-branch head (r248590). - Add #!BuildIgnore: gcc-PIE also to cross compiler builds. ==== ibus ==== Version update (1.5.14 -> 1.5.16) Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update to 1.5.16 * Implement shortcut keys on emoji dialog * Move language settings from IBusEmojier to ibus-setup * Improve `ibus emoji` command to work on Wayland * Emoji-related improvements * Add man page of `ibus emoji` command - Update to 1.5.15 * Fix memory leaks * Fix warnings during resizing panel * Improve emoji lookup window * Support scrill event in GTK3 candidate panel * Avoid emoji typing during Unicode typing * Fix potential buffer overrun in CreateNestedListi() * Set emoji preview text on font setting * Add `ibus emoji` command - Clean up spec file ==== kernel-firmware ==== Version update (20170511 -> 20170530) Subpackages: ucode-amd - Update to version 20170530: * linux-firmware: add wil6210 firmware 4.1.0.55 * cxgb4: update firmware to revision 1.16.45.0. - Update to version 20170522 (commit df40d15d6ad6) (bsc#1039785): * Update firmware for 3168 * qed: Add firmware 8.20.0.0 * Update Intel OPA hfi1 firmware ==== kiwi ==== Version update (7.04.31 -> 7.04.32) Subpackages: kiwi-desc-isoboot kiwi-desc-netboot kiwi-desc-oemboot kiwi-desc-vmxboot kiwi-doc kiwi-media-requires kiwi-templates - v7.04.32 released - Get the first two characters of the gdisk partition code output According to the gdisk documentationi, gdisk maps the partitions IDs to the MBR codes, but they are multiplied by 0x0100 in hexa. Meaning 0x8300 code is equivalent to 0x83 in MBR. This commit only considers the first two characters of the sgdisk partition code output. With this change the partition types are comparable, regardless of using MBR or GPT. - Fixes OEM deployments on a free partition, bnc#1039469 This commit updates the boot code for oem images. In case oem-partition-install flag was set, the boot code was not capable to find an appropriate partition due to not attaching properly the raw image as a loopback device. KIWI was calling 'losetup' command with wrong arguments. Fixes bnc#1039469 ==== krita ==== Version update (3.1.3 -> 3.1.4) Subpackages: krita-lang - Update to version 3.1.4: * Fix a crash when trying to play an animation when OpenGL is disabled in Krita * Fix rendering animation frames if the directory you're trying to render to doesn't exist * Don't open the tablet/screen resolution conflict dialog multiple times * Don't scale down previews that are too small in the transform tool: this fixes a rare crash with the transform tool * Don't crash when trying to close the last view on the last document while the document is modified. * Fix a crash when cycling quickly through layers that have a color tag * Fix loading some Gimp 2.9 files: note that Gimp 2.9's file format is not officially supported in Krita * Fully remove the macro recorder plugin: in 3.1.4, only the menu entries had stayed around. * Make it impossible to hide the template selector in the new image dialog; hiding the template selector would also hide the cancel button in the dialog. - Add Drop-QForeachContainer-include.patch to fix build with Qt 5.9 ==== libdrm ==== Version update (2.4.80 -> 2.4.81) Subpackages: libdrm-devel libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 libkms1 - Update to version 2.4.81 * Export drmDevicesEqual * configure: Fix the <sys/sysmacros.h> check * Fix stray caller of drmCompareDevices * amdgpu/: concisely && consistently check null ptrs in canonical form * amdgpu: Use the canonical form in branch predicate * Add pl111 as a KMS driver for utils. * Add the DPI encoder/connector types to KMS utils. * amdgpu: add raven family id * modetest: fix printing of fourcc on BE machines * amdgpu/drm: add AMDGPU_HW_IP_VCN_DEC * amdgpu/drm: add AMDGPU_HW_IP_VCN_ENC * amdgpu: add the interface of waiting multiple fences * amdgpu: add a test for amdgpu_cs_wait_fences * amdgpu: add missing extern "C" headers * freedreno: fix double-free on exit ==== libfabric ==== - Update to v1.4.2 (bsc#1036907). ==== libgcj-gcc6 ==== Version update (6.3.1+r246603 -> 6.3.1+r248589) Subpackages: libgcj-devel-gcc6 libgcj-jar-gcc6 libgcj_bc1 - Update to gcc-6-branch head (r248628). - Add #!BuildIgnore: gcc-PIE to cross compiler builds ==== libraw ==== Version update (0.18.0 -> 0.18.2) Subpackages: libraw-devel libraw16 - updated to 0.18.2: Fixed several errors (Secunia advisory SA75000) ACES colorspace output option included in dcraw_emu help page Avoided possible 32-bit overflows in Sony metadata parser Phase One flat field code called even for half-size output Camera Support: Sigma Quattro H Fixed bug in FujiExpoMidPointShift parser Fixed wrong black level in Sony A350 Added standard integer types for VisualStudio 2008 and earlier - added missing parts of the fix for CVE-2017-6887 and CVE-2017-6886 + libraw-CVE-2017-6887,6886.patch - added missing fix for CVE-2017-6890 and CVE-2017-6899 + libraw-CVE-2017-6890,6899.patch ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fixes: * libxml2-CVE-2017-9049.patch [bsc#1039066] * heap-based buffer overflow (xmlDictComputeFastKey func) * libxml2-CVE-2017-9048.patch [bsc#1039063] * stack overflow vulnerability (xmlSnprintfElementContent func) * libxml2-CVE-2017-9047.patch [bsc#1039064] * stack overflow vulnerability (xmlSnprintfElementContent func) ==== miniupnpc ==== Version update (2.0 -> 2.0.20170509) - Build 2.0.20170509 * Fix CVE-2017-8798 Thanks to tin/Team OSTStrom * bnc#1038601 fixes VUL-0: CVE-2017-8798: miniupnp: integer signedness error ==== mono-core ==== Version update (5.0.0 -> 5.0.1) Subpackages: libmono-2_0-1 libmono-2_0-devel libmonosgen-2_0-1 libmonosgen-2_0-devel mono-data mono-data-sqlite mono-extras mono-mvc mono-wcf mono-web mono-winforms mono-winfxcore - Update to version 5.0.1.1 (5.0.1 Stable) - Bugfixes: * bxc#56275 - Unable to copy appname.dll from obj to bin because it is being used by another process * bxc#56240 - Performance Degradation When Using Expressions * bxc#56177 - peverify fails on FSharp.Core.dll with mono_os_mutex_lock * bxc#55858 - Microsoft.WebApplication.targets Missing from mono5 * bxc#56322 - Running nunit tests with domain isolation crashes Mono * bxc#55988 - Apps using Roslyn crash when trying to load Roslyn * bxc#56260 - "This stream does not support writing at System.IO.Compression.DeflateStream.BeginWrite" message * bxc#55087 - "System.NotSupportedException: Stack walks are not supported on this platform - System.Reflection.MethodBase.GetCurrentMethod" message on Android ==== nasm ==== Version update (2.12.02 -> 2.13.01) - Update to version 2.13.01: * Fix incorrect output for some types of FAR or SEG references in the obj output format, and possibly other 16-bit output formats. * Fix the address in the list file for an instruction containing a TIMES directive. * Fix error with TIMES used together with an instruction which can vary in size, e.g. JMP. * Fix breakage on some uses of the DZ pseudo-op. - Changes for 2.13.00: * Support the official forms of the UD0 and UD1 instructions. * Allow self-segment-relative expressions in immediates and displacements * Handle a 64-bit origin in NDISASM. * NASM can now generate sparse output files for relevant output formats, if the underlying operating system supports them. * Fix a number of bugs related to AVX-512 decorators. * Fix the {z} decorator on AVX-512 VMOVDQ* instructions. * Add new warnings for certain dangerous constructs which never ought to have been allowed. * Fix the EVEX (AVX-512) versions of the VPBROADCAST, VPEXTR, and VPINSR instructions. * Support contracted forms of additional instructions. * Fix Codeview malformed compiler version record. * Add the CLWB and PCOMMIT instructions. * Add the %pragma preprocessor directive for soft-error directives. * Add the RDPID instruction. - Drop doc subpackage ==== patterns-desktop ==== Subpackages: patterns-desktop-books patterns-desktop-imaging patterns-desktop-imaging_opt patterns-desktop-laptop patterns-desktop-multimedia patterns-desktop-multimedia_opt patterns-desktop-technical_writing - Fix description of -books (boo#1040006). - Fix spacing in description of multimedia pattern (boo#1040006). ==== patterns-server ==== Subpackages: patterns-server-dhcp_dns_server patterns-server-directory_server patterns-server-file_server patterns-server-gateway_server patterns-server-kvm_server patterns-server-lamp_server patterns-server-mail_server patterns-server-print_server patterns-server-xen_server - Fix spelling: e-mail -> email (boo#1040006). ==== patterns-xfce ==== Subpackages: patterns-xfce-xfce patterns-xfce-xfce_basis patterns-xfce-xfce_laptop patterns-xfce-xfce_office - Mark xfce_basis pattern is invisible: it's a base pattern referenced by others, but rather useless for the user. ==== rdma-core ==== Subpackages: libibcm1 libibumad3 libibverbs1 libmlx5-1 librdmacm1 rdma-core-devel rsocket - Update to v14 (bsc#321907). * Introduction of bnxt_re driver * Rework srp_daemon's systemd integration * Various fixes in qedr, mlx4, mlx5, bnxrt_re and rxe drivers * New supported PCI ID were added to mlx5 * Addition of manual pages for cmtime and udpong programs * Multiple fixes of spelling types and documentation clarifications * Sparse fixes * rping gained ability to bind to source IP address * Various improvements in cmake and cbuild infrastructures * Add support for flow tag, CVLAN and VXLAN specifications * Provide ability to pass private data to create CQ * Exposure various device capabilities to user applications - Fix all references to /usr/libexec (bsc#1039999) - Fix rdma.service which had /usr/libexec hardcoded (bsc#1039999). ==== shadow ==== Version update (4.2.1 -> 4.5) - New upstream version 4.5 - Refreshed patches: * shadow-login_defs.patch * chkname-regex.patch * getdef-new-defs.patch * useradd-mkdirs.patch - Upstreamed patches: * shadow-4.1.5.1-manfix.patch * shadow-4.1.5.1-errmsg.patch * shadow-4.1.5.1-backup-mode.patch * shadow-4.1.5.1-audit-owner.patch * shadow-4.2.1-defs-chroot.patch * shadow-4.2.1-merge-group.patch * Fix-user-busy-errors-at-userdel.patch * useradd-clear-tallylog.patch - shadow-4.1.5.1-pam_group.patch dynamically added users via pam_group are not listed in groups databases but are still valid - shadow.keyring: update keyring with current maintainer's keyid only - Serge Hallyn 'F1D08DB778185BF784002DFFE9FEEA06A85E3F9D' - disable_new_audit_function.patch: Disable newer libaudit functionality for older distributions ==== strace ==== Version update (4.16 -> 4.17) - Update to strace 4.17 * Changes in command line syntax * Syscall classes specified in -e trace= option now have % prefix (like - e trace=%process). Old style class names without leading % are still supported, but considered deprecated now. * Improvements * Optimized syscall filtering. * Improved representation of timestamps. * Enhanced decoding of sched_setattr syscall. * Added -e trace=%stat option for tracing variants of stat syscall. * Added -e trace=%lstat option for tracing variants of lstat syscall. * Added -e trace=%fstat option for tracing variants of fstat and fstatat syscalls. * Added -e trace=%%stat option for tracing syscalls used for querying file status information (stat, lstat, fstat, fstatat, statx, and their variations). * Added -e trace=%statfs option for tracing statfs, statfs64 and statvfs syscalls. * Added -e trace=%fstatfs option for tracing fstatfs, fstatfs64 and fstatvfs syscalls. * Added -e trace=%%statfs option for tracing syscalls used for querying file system statistics information (statfs-like, fstatfs-like and ustat). * Added -e trace=/regex option for filtering syscalls using regular expressions. * Added support for prepending of question mark before syscall qualification in -e trace expressions in order to suppress error in case no syscalls matched the provided qualification. * Implemented decoding of signal mask in rt_sigreturn syscall on alpha, arc, arm, avr32, bfin, cris, hppa, m68k, metag, microblaze, mips, nios2, or1k, powerpc, powerpc64, riscv, sh, sh64, sparc, sparc64, tile, x86, and xtensa architectures. * Implemented decoding of statx syscall. * Implemented decoding of NS_* ioctl commands. * Implemented decoding of the remaining V4L2_BUF_TYPE_* types. * Implemented decoding of VIDIOC_[SG]_TUNER ioctl commands. * Implemented decoding of NLMSG_ERROR netlink messages. * Improved decoding of BPF_PROG_ATTACH command of bpf syscall. * Improved decoding of misplaced parts in DM_* ioctl commands. * Updated lists of ioctl commands from Linux 4.11. * Bug fixes * Fixed decoding of flags argument of preadv2 and pwritev2 syscalls on x32. * Fixed the number of arguments and tracing flags of alpha specific syscalls. * Fixed decoding of old sigsuspend syscall on alpha, cris, mips, powerpc, powerpc64, sh, sh64, sparc, and sparc64. * Fixed decoding of sgetmask and ssetmask syscalls on 64-bit architectures. * Fixed decoding of netlink messages received within struct msghdr. * Worked around a bug in miscompiled aarch64 kernels leading to the 3rd argument of sched_getattr syscall being not quite 32-bit. * Fixed corner cases of printing inaccessible times argument of utimes and futimesat syscalls. ==== xdg-utils ==== Version update (20160610 -> 20170508) - Update to version 20170508: * xdg-open: Add "chromium" to fallback browsers * changelog for prior commit * xdg-mime: fails on encountering a list for x-scheme-handler (BR44163) * common: implement vendor dirs in desktop_file_to_binary (BR44163) * Add better support for Enlightenment and LXQt (BR98561) * xdg-screensaver: Restore previous X11 screensaver timeout (BR#98509) * adjust version for release/tag - removed common-vendor-dirs-in-desktop_to_binary.patch - removed fix-enlightenment-lxqt-support.patch - removed xdg-mime-return-existing-desktop-files.patch -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org