Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20200224 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (1.4.3.1~git0.a08202a5b -> 1.4.3.3~git0.776c6edf5) bison (3.5.1 -> 3.5.2) elementary-xfce-icon-theme (0.14+git5.36fd0049 -> 0.14+git19.684af360) ibus-m17n kernel-source (5.5.4 -> 5.5.5) libarchive libgpg-error (1.36 -> 1.37) libseccomp libunwind openssl-1_1 qemu qemu-linux-user sysdig (0.26.5_k5.5.4_1 -> 0.26.5_k5.5.5_1) system-users xfce4-weather-plugin (0.10.0 -> 0.10.1) === Details === ==== 389-ds ==== Version update (1.4.3.1~git0.a08202a5b -> 1.4.3.3~git0.776c6edf5) Subpackages: lib389 libsvrcore0 - Add requirement on openssl for rust-openssl as part of ldaptokens - Add rust vendored libs - Add 0001-fix-cargo-build.patch to fix minor rust build issues - Update to version 1.4.3.3~git0.776c6edf5: * Bump version to 1.4.3.3 * Issue 50855 - remove unused file from UI * Issue 50855 - UI: Port Server Tab to React * Issue 49845 - README does not contain complete information on building * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1 * Ticket - 49623-cont cenotaph errors on modrdn operations * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled * Issue 50886 - Typo in the replication debug message * Issue 50873 - Fix healthcheck and virtual attr check * Issue 50873 - Fix issues with healthcheck tool * Issue 50028 - Add a new CI test case * Issue 49946 - Add a new CI test case * Issue 50117 - Add a new CI test case * Ticket 50787 - fix implementation of attr unique * Ticket 50859 - support running only with ldaps socket * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache * Issue 50867 - Fix minor buildsys issues * Issue 50737 - Allow building with rust online without vendoring * Ticket 50831 add cargo.lock to allow offline builds * Ticket 50694 - import PEM certs on startup * Ticket 50857 - Memory leak in ACI using IP subject * Issue 49761 - Fix CI test suite issues * Issue 50853 - Fix NULL pointer deref in config setting * Issue 50850 - Fix dsctl healthcheck for python36 * Issue 49990 - Need to enforce a hard maximum limit for file descriptors * Ticket 48707 - ldapssotoken for authentication * Bump version to 1.4.3.2 * Issue 49254 - Fix compiler failures and warnings * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown * Issue 50836 - Port Schema UI tab to React * Issue 50842 - Decrease 389-console Cockpit component size * Ticket 50790 - Add result text when filter is invalid * Issue 50627 - Add ASAN logs to HTML report * Issue 50834 - Incorrectly setting the NSS default SSL version max * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 * Ticket 50784 - performance testing scripts * Issue 50599 - Fix memory leak when removing db region files * Issue 49395 - Set the default TLS version min to TLS1.2 * Issue 50818 - dsconf pwdpolicy get error * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined" * Issue 50599 - Remove db region files prior to db recovery * Issue 50812 - dscontainer executable should be placed under /usr/libexec/dirsrv/ * Issue 50816 - dsconf allows the root password to be set to nothing * Issue 50798 - incorrect bytes in format string(fix import issue) ==== bison ==== Version update (3.5.1 -> 3.5.2) Subpackages: bison-lang - Update to version 3.5.2: * Portability issues and minor cosmetic issues. * The lalr1.cc skeleton properly rejects unsupported values for parse.lac (as yacc.c does). ==== elementary-xfce-icon-theme ==== Version update (0.14+git5.36fd0049 -> 0.14+git19.684af360) - Update to version 0.14+git19.684af360: * Several small symlink fixes * Revamped all 16px panel icons and made several fixes * Revamped 16px dark panel icons and synced network icons from elementary upstream * Add symlinks for LICENSE * Fix dangling symlinks to AUTHORS, CONTRIBUTORS, and README.md * Cleanup unused styles fron thunderbird svgs, fixing inkscape warning attribute 'mask' given as CSS * Second run of vacuum-defs * Drop file reference (fixes #171) * Rename fake svgs to pngs * Vacuum all svgs * Drop Chrome and Chromium icons Both icons scale well at every size ==== ibus-m17n ==== - Change group as System/Localization - Enable ibus-m17n-setup build ==== kernel-source ==== Version update (5.5.4 -> 5.5.5) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 5.5.5 (bnc#1012628). - io_uring: fix deferred req iovec leak (bnc#1012628). - io_uring: retry raw bdev writes if we hit -EOPNOTSUPP (bnc#1012628). - Input: synaptics - switch T470s to RMI4 by default (bnc#1012628). - Input: synaptics - enable SMBus on ThinkPad L470 (bnc#1012628). - Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bnc#1012628). - ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bnc#1012628). - ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bnc#1012628). - ALSA: pcm: Fix double hw_free calls (bnc#1012628). - ALSA: hda/realtek - Add more codec supported Headset Button (bnc#1012628). - ALSA: hda/realtek - Fix silent output on MSI-GL73 (bnc#1012628). - ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 (bnc#1012628). - ACPI: EC: Fix flushing of pending work (bnc#1012628). - ACPI: PM: s2idle: Avoid possible race related to the EC GPE (bnc#1012628). - ACPICA: Introduce acpi_any_gpe_status_set() (bnc#1012628). - ACPI: PM: s2idle: Prevent spurious SCIs from waking up the system (bnc#1012628). - ext4: don't assume that mmp_nodename/bdevname have NUL (bnc#1012628). - ext4: fix support for inode sizes > 1024 bytes (bnc#1012628). - ext4: fix checksum errors with indexed dirs (bnc#1012628). - ext4: add cond_resched() to ext4_protect_reserved_inode (bnc#1012628). - ext4: improve explanation of a mount failure caused by a misconfigured kernel (bnc#1012628). - Btrfs: fix race between using extent maps and merging them (bnc#1012628). - btrfs: ref-verify: fix memory leaks (bnc#1012628). - btrfs: print message when tree-log replay starts (bnc#1012628). - btrfs: log message when rw remount is attempted with unclean tree-log (bnc#1012628). - ARM: npcm: Bring back GPIOLIB support (bnc#1012628). - gpio: xilinx: Fix bug where the wrong GPIO register is written to (bnc#1012628). - arm64: ssbs: Fix context-switch when SSBS is present on all CPUs (bnc#1012628). - xprtrdma: Fix DMA scatter-gather list mapping imbalance (bnc#1012628). - cifs: make sure we do not overflow the max EA buffer size (bnc#1012628). - jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() (bnc#1012628). - jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer (bnc#1012628). - EDAC/sysfs: Remove csrow objects on errors (bnc#1012628). - EDAC/mc: Fix use-after-free and memleaks during device removal (bnc#1012628). - KVM: nVMX: Use correct root level for nested EPT shadow page tables (bnc#1012628). - KVM: x86/mmu: Fix struct guest_walker arrays for 5-level paging (bnc#1012628). - perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's event map (bnc#1012628). - s390/pkey: fix missing length of protected key on return (bnc#1012628). - s390/uv: Fix handling of length extensions (bnc#1012628). - drm/vgem: Close use-after-free race in vgem_gem_create (bnc#1012628). - drm/mst: Fix possible NULL pointer dereference in drm_dp_mst_process_up_req() (bnc#1012628). - drm/panfrost: Make sure the shrinker does not reclaim referenced BOs (bnc#1012628). - drm/amdgpu: update smu_v11_0_pptable.h (bnc#1012628). - drm/amdgpu:/navi10: use the ODCAP enum to index the caps array (bnc#1012628). - bus: moxtet: fix potential stack buffer overflow (bnc#1012628). - nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (bnc#1012628). - drivers: ipmi: fix off-by-one bounds check that leads to a out-of-bounds write (bnc#1012628). - IB/mlx5: Return failure when rts2rts_qp_counters_set_id is not supported (bnc#1012628). - IB/hfi1: Acquire lock to release TID entries when user file is closed (bnc#1012628). - IB/hfi1: Close window for pq and request coliding (bnc#1012628). - IB/rdmavt: Reset all QPs when the device is shut down (bnc#1012628). - IB/umad: Fix kernel crash while unloading ib_umad (bnc#1012628). - RDMA/core: Fix invalid memory access in spec_filter_size (bnc#1012628). - RDMA/iw_cxgb4: initiate CLOSE when entering TERM (bnc#1012628). - RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create (bnc#1012628). - RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bnc#1012628). - RDMA/core: Fix protection fault in get_pkey_idx_qp_list (bnc#1012628). - s390/time: Fix clk type in get_tod_clock (bnc#1012628). - Input: ili210x - fix return value of is_visible function (bnc#1012628). - sched/uclamp: Reject negative values in cpu_uclamp_write() (bnc#1012628). - mac80211: use more bits for ack_frame_id (bnc#1012628). - spmi: pmic-arb: Set lockdep class for hierarchical irq domains (bnc#1012628). - perf/x86/intel: Fix inaccurate period in context switch for auto-reload (bnc#1012628). - hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions (bnc#1012628). - mac80211: fix quiet mode activation in action frames (bnc#1012628). - cifs: fix mount option display for sec=krb5i (bnc#1012628). - ceph: noacl mount option is effectively ignored (bnc#1012628). - arm64: dts: fast models: Fix FVP PCI interrupt-map property (bnc#1012628). - KVM: x86: Mask off reserved bit from #DB exception payload (bnc#1012628). - KVM: nVMX: Handle pending #DB when injecting INIT VM-exit (bnc#1012628). - perf stat: Don't report a null stalled cycles per insn metric (bnc#1012628). - NFSv4.1 make cachethis=no for writes (bnc#1012628). - NFSv4: Ensure the delegation cred is pinned when we call delegreturn (bnc#1012628). - Revert "drm/sun4i: drv: Allow framebuffer modifiers in mode config" (bnc#1012628). - drm/i915/pmu: Correct the rc6 offset upon enabling (bnc#1012628). - ext4: choose hardlimit when softlimit is larger than hardlimit in ext4_statfs_project() (bnc#1012628). - io-wq: add support for inheriting ->fs (bnc#1012628). - NFSv4: Add accounting for the number of active delegations held (bnc#1012628). - gpio: add gpiod_toggle_active_low() (bnc#1012628). - mmc: core: Rework wp-gpio handling (bnc#1012628). - commit 5157fff - Update config files (bnc#1161832). Disable CONFIG_MODULE_SIG on i386. We don't run pesign on i386 builds, hence the modules are not signed at all. This results in module verification failures and warnings. CONFIG_SECURITY_LOCKDOWN_LSM depends on (selects) CONFIG_MODULE_SIG, so we have to disable it too. But it makes no sense to lockdown without module signature anyway. - commit 599e3c2 - vt: selection, close sel_buffer race (bnc#1162928 CVE-2020-8648). - vt: selection, handle pending signals in paste_selection (bnc#1162928 CVE-2020-8648). - commit 813d10d ==== libarchive ==== Subpackages: bsdtar libarchive13 - Switch back to cmake build now that cmake-mini exists, this will no longer create a build-cycle. ==== libgpg-error ==== Version update (1.36 -> 1.37) Subpackages: libgpg-error0 libgpg-error0-32bit - Update to 1.37 Release-info: https://dev.gnupg.org/T4772 * Fixes a build problems when using Gawk 5.0 [#4459] * Improves cross-compiling support. [#4643] * New error codes to map SQLite primary error codes. * Now uses poll(2) instead of select(2) in gpgrt_poll if possible. * Fixes a bug in gpgrt_close. [#4698] * Fixes a few minor portability bugs. * New interfaces in this release: GPG_ERR_NO_KEYBOXD GPG_ERR_KEYBOXD GPG_ERR_NO_SERVICE GPG_ERR_SERVICE GPG_ERR_SQL_OK GPG_ERR_SQL_ERROR GPG_ERR_SQL_INTERNAL GPG_ERR_SQL_PERM GPG_ERR_SQL_ABORT GPG_ERR_SQL_BUSY GPG_ERR_SQL_LOCKED GPG_ERR_SQL_NOMEM GPG_ERR_SQL_READONLY GPG_ERR_SQL_INTERRUPT GPG_ERR_SQL_IOERR GPG_ERR_SQL_CORRUPT GPG_ERR_SQL_NOTFOUND GPG_ERR_SQL_FULL GPG_ERR_SQL_CANTOPEN GPG_ERR_SQL_PROTOCOL GPG_ERR_SQL_EMPTY GPG_ERR_SQL_SCHEMA GPG_ERR_SQL_TOOBIG GPG_ERR_SQL_CONSTRAINT GPG_ERR_SQL_MISMATCH GPG_ERR_SQL_MISUSE GPG_ERR_SQL_NOLFS GPG_ERR_SQL_AUTH GPG_ERR_SQL_FORMAT GPG_ERR_SQL_RANGE GPG_ERR_SQL_NOTADB GPG_ERR_SQL_NOTICE GPG_ERR_SQL_WARNING GPG_ERR_SQL_ROW GPG_ERR_SQL_DONE - Remove patch fixed upstream. * gawk5.patch ==== libseccomp ==== - Add patch to fix ntpsec and others build (accidental drop of symbols): * SNR_ppoll.patch ==== libunwind ==== - Fix build with GCC-10: [bsc#1160876] * In GCC-10, the default option -fcommon will change to -fno-common - Add libunwind-gcc10-build-fno-common.patch ==== openssl-1_1 ==== Subpackages: libopenssl-1_1-devel libopenssl1_1 libopenssl1_1-32bit libopenssl1_1-hmac - Use the newly build libcrypto shared library when computing the hmac checksums in order to avoid a bootstrapping issue by BuildRequiring libopenssl1_1 (bsc#1164102) - Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569) * add openssl-fips_fix_selftests_return_value.patch - Added SHA3 FIPS self-tests bsc#1155345 * openssl-fips-add-SHA3-selftest.patch ==== qemu ==== Subpackages: qemu-arm qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-extra qemu-guest-agent qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-sdl qemu-ui-spice-app qemu-vgabios qemu-vhost-user-gpu qemu-x86 - Fix xenfv migration from xen host with pre-v4.0 qemu. We had previously dropped a similar patch, but have decided that for now we need to go with this type of solution (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch - Avoid query-cpu-model-expansion crashed qemu when using machine type none, patch is queued in upstream now, will update commit id later (bsc#1159443) target-arm-monitor-query-cpu-model-expan.patch - BuildRequire pkgconfig(libudev) instead of libudev-devel: Allow OBS to shortcut through -mini flavors. ==== qemu-linux-user ==== - Fix xenfv migration from xen host with pre-v4.0 qemu. We had previously dropped a similar patch, but have decided that for now we need to go with this type of solution (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch - Avoid query-cpu-model-expansion crashed qemu when using machine type none, patch is queued in upstream now, will update commit id later (bsc#1159443) target-arm-monitor-query-cpu-model-expan.patch - BuildRequire pkgconfig(libudev) instead of libudev-devel: Allow OBS to shortcut through -mini flavors. ==== sysdig ==== Version update (0.26.5_k5.5.4_1 -> 0.26.5_k5.5.5_1) - sysdig-32bit.patch: make build on 32bit ==== system-users ==== Subpackages: system-group-hardware system-group-wheel system-user-bin system-user-daemon system-user-ftp system-user-games system-user-lp system-user-mail system-user-man system-user-news system-user-nobody system-user-tftp system-user-upsd system-user-uucp system-user-wwwrun - Align /var/lib/tss permissions with trousers (boo#1162360). ==== xfce4-weather-plugin ==== Version update (0.10.0 -> 0.10.1) Subpackages: xfce4-weather-plugin-lang - Update to 0.10.1 * Switch to 'locationforecast' product and use a more recent API version (bxo#16268) * Fix invalid scrollbar index to add a label (bxo#16023) * Update URLs from goodies.x.o to docs.x.o (bxo#16182) * Fix build with panel 4.15 * Make build output less verbose * Use standard icon names (bxo#16059) * Translation updates -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org