Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20171028 When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: SDL2 SuSEfirewall2 (3.6.365 -> 3.6.369) apr apr-util build (20170918 -> 20171012) fftw3 graphviz graphviz-addons hwinfo (21.49 -> 21.50) java-1_8_0-openjdk kbd libXfont (1.5.2 -> 1.5.3) libbsd (0.8.3 -> 0.8.6) libsmbios (2.3.2 -> 2.3.3) libxkbcommon libxslt (1.1.29 -> 1.1.30) libxslt-python (1.1.29 -> 1.1.30) m4 mariadb mono-core (5.2.0 -> 5.4.0) nghttp2 (1.25.0 -> 1.27.0) openmpi2 openssh pam-config (0.92 -> 0.93) pciutils-ids (20170917 -> 20171018) perl-Module-Runtime (0.015 -> 0.016) perl-Net-DNS (1.12 -> 1.13) perl-XML-LibXML (2.0129 -> 2.0131) python-urllib3 systemd yast2-country (4.0.3 -> 4.0.5) yast2-pkg-bindings (4.0.1 -> 4.0.4) zypp-plugin (0.5 -> 0.6.1) === Details === ==== SDL2 ==== - Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888 ==== SuSEfirewall2 ==== Version update (3.6.365 -> 3.6.369) - rpcinfo: recognize execution errors of the perl script and terminate accordingly - rpcinfo: fixed security issue with too open implicit portmapper rules (bnc#1064127): A source net restriction for _rpc_ services was not taken into account for the implicitly added rules for port 111, making the portmap service accessible to everyone in the affected zone. ==== apr ==== Subpackages: apr-devel libapr1 - We need to obsolete same version of package (bsc#1063305) ==== apr-util ==== Subpackages: apr-util-devel libapr-util1 - We need to obsolete same version of package (bsc#1063305) ==== build ==== Version update (20170918 -> 20171012) Subpackages: build-mkbaselibs build-mkdrpms - proper fix for for liblua, for factory and leap 15.0 - Temporary hack to aid liblua5_3 -> liblua5_3-5 rename - switch baselibs scheme for debuginfo packages from foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217] - fix usage of the right service generated files. - debootstrap: Also mount sysfs - Fileprovides should only match package names, not provides - avoid export of build results of sym links pointing to external files - support build of different flavors via multibuild - experimental AppImage build support - reworked openstack support (still experimental) - updated confguration for tumbleweed - Arch linux fixes - mount swap by label - allow custom qemu options - allow to override hostname - fix build with vm-type lxc - fix haskell builds (bsc#1018895) - fix multi type kiwi profile handling - minor distribution config and bug fixes - add config for openSUSE Leap 42.3 (alpha, non-final) - handle Fedora 25 special cases - Improve /proc mount behaviour - fix dependency on CentOS (build#2415) - Use weak dependencies as 3rd choice breaker - support statistics from xvda devices - build env wipe support (--wipe command) - speed up build (for preinstall and keeping packages) - Recognize Recommends and Supplements relations of RPMs. - fix build against susetags repos - Add clang binaries to ccache symlinking - Fix a probable tabs to spaces bug - Kiwi: allow to specify ExclusiveArch and ExcludeArch - build-vm-kvm: use virtio-rng-device also on aarch64 - Add support for LXC as libvirt driver - support multiple image builds for multiple profiles - Add optional whitelisting for allowed buildroots and parameters - build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen - build-vm-kvm: fix vm_enable_console also for kvm_serial_console case - sl13.3.conf: Prepare for bash 4.4, using libreadline7 - Add and clarify licenses - calculate leap version for default config - first version of Leap 42.2 configuration - provide loop devices in docker VM - support lxc 2.0 - Add architecture-specific sources extract for Arch Linux - snapcraft improvements - adding first snapcraft support - fix build on armv7hl - run debtransform after buildtime source services - Handle also aarch32* and armv8 cases for kvm cpu switches - add support for LXC 1.0.8 - added DoD for aarch64 repositories on Debian - support unpacking of obscpio archives in source - added DoD for aarch64 repositories on Debian - aarch64_ilp32 support - KVM: telnet feature fixes and documentation - KVM: run qemu as user - fail when space allocation is not successful (on supported FS) - add switch to enable VM console input - add --vm-user option to run kvm as non-root - Implement experimental obscpio unpacking - Use fallocate -p for a fast zero-fill, correctly truncate. - PowerVM backend - Make --ignoreignore only ignore ignores from the project config - aggregate patches fields - Fail simpleimage build when integration scripts fail - mkdrpms: do not create debuginfo/source deltas Kiwi: - Support new Kiwi v8 (experimental) - Make sure kiwi is called in UTF-8 locale - Kiwi appliance: support "replaces" attribute and handle it as buildignore - KIWI profile support - Support a way to map urls to OBS project/repos Debian: - Support lintian when OBS_DCH_RELEASE set - Add support for debbuild's eval and .debmacros - add openSUSE 42.1 config (bnc#953782) - avoid full path in sha256 files of products - support virtio-rng device in kvm builds - lxc 1.1 support - avoid dependency to perl(parent) again - fixed buildtime source service execution - fixed debian collax support - collax support added - Fix auto-detection of -p1 option to patch - Handle .deb files that have sysv ar(1) filenames - Exported RECIPEFILE in build-recipe-livebuild - openSUSE 13.3 config added (bnc#944121) - Support old versions of Archive::Tar - debtransformer xz archive support - workaround for broken chroot command (Mageia:5 shipped with it) - Support building with Mandriva/Mageia Repositories - debian: Various bugfixes for lintian support - debian: Generate .changes files when building deb packages. - create /dev/loop-control for kernel >= 3.1 - support singleexport flag handling - Fix precedence of unary '-' and '!' - fix ppc qemu registration rules - fixing test suite call - support build time source services - docker VM support - Simple image creation support - vc: create changelog file only in case of a change - get hostarch based on preinstalled kernel image - architecture CanDo updates - avoid endless loops during in binfmt misc registration - debian debootstrap fixes - added support of debbuild build engine - optional support of network inside of KVM - allow lintian to break the build - workaround initrd breakage when using initrd for systemd with older systems - fixes for building in LXC containers - avoid emulator for arm on aarch64 - Fixing UTC symlink resolving when setting localtime - ppc64le can build ppc64 with KVM - build-vm-kvm: Switch armv7 to virt machine - Fix --no-checks with older rpmbuild - documenation updates - add recommend to perl(Net::SSL) (bnc#880212) - add support for debian debootstrap build engine - Update arch config - Add support for conflicts, addselfprovides, weakdeps to query functions - installed package handling works also for arch and debian now - large code cleanup - bugfixes and documentation updates - Add releasesuffix hack for new PTF handling - support parallel build jobs for debs - Fix repocfg usage in the "exact match" case - Improve exclarch handling for deb builds - rewritten workaround for broken chroot tool - add support for new chroot tool * fixes Ubuntu 14.10 builds - man pages for unrpm and vc - drop not available packages from SLE 12 config - fix syntax error in SLE 12 config - add SLE 12 config (bnc#893618) - build-vm-kvm: Always use -mem-prealloc when using -mem-path - debian livebuild support - various ppc handling fixes - various smaller fixes - build script got refactored and split in multiple modules - bugfix release - /sys mounting - binfmtmisc setup - fix ppc64le vs. ppc64 emulator check (none needed) - fix vc tool regression from "minor fixes" - support for project side configured VM kernels - ppc64le support - minor fixes - update openSUSE 13.1 build configuration - add openSUSE 13.2 build configuration - add support for m86k - add support for Tizen changelog date format - export .packages, .verified and .ova files for kiwi - initvm code cleanup - Do not specify compression format for Arch packages when extracting - export kiwi-image:$type for kiwi files with schemaversion 5.6 or newer - mount tmpfs on $BUILD_ROOT/dev/shm - Create devices nodes if udev is not running - more arm architectures - make version '0' a valid version - fix the call to lintian, lintian gets a dsc file as input - adding generic parameter to hand over kiwi parameters - add requires for Fedora - fix build for non-SUSE rpm distros - fix a number of issues regarding statistics collection => works with more udev versions now - fix qemu-binfmt registration in chroot builds - debian builds call linitian now if installed - Arch Linux: support new pacman tool syntax - support kiwi installation medias with new kiwi versions - fixed regression using build host rpm instead of the version from chroot - fixed repository priority ordering, when only some repos have a priority and kiwi appliances get build - support multi architecture initvm binaries => vminit gets build as subpackage now again - De-hardcode hugetlbfs from ppc - Do not emulate VGA - support new nameing scheme of install images of kiwi builds - disabling fsync again for newer rpm versions to speed up installation phase again. - cloud support for Amanzon EC2 and openstack - fixed SPEC_REL support - fixed zvm build - fixed uml support - fixing ext4 usage on old distros - final openSUSE 12.3 config - arm build support fixes - add sl13.1.conf (openSUSE:Factory prjconf of 2013-03-29) - have ncurses-devel-32bit require ncurses-devel and not ncurses-32bit - do not put .socket files into the 32bit packages - unbreak kvm for x86_64 - fix kvm support for x86_64 again - avoid writing out incomplete IO statistics - ARM AArch64 support added - Generic system emulator support as VM added - s390 z/VM build environment support added - support collecting resource statistics during build (for OBS 2.4) - rpm5 fixes - kvm support for armv7l - mount /dev/pts with right permissions - fixed deb building - collecting statistics during VM build - backport /proc mounting for rpmlint for factory - change to automatic date version in _service - update from git (4afd9f0ee03f9e51cf8db9a27fae4663e3f4dde6) Martin Koegler (1): Bug fix: ignore links in orig tar files Michael Schroeder (1): - be more verbose when the preinstallimage unpack fails Stephan Kulow (2): the difference between openSUSE and SLE is outdated do not cumulate packages with 12.2's rpm - remove build-mkbaselibs-sle, the split is no longer necessary - remove default requires for devel-32bit - fix logic for cumulating packages - update to current git (03587016a7eca7788f404820642a2b5a1556aa0b) Adrian Schr�ter (1): - use default MEMSIZE in check_for_ppc Anas Nashif (2): pass --use-system-qemu option to init_buildsystem Support https repositories Frank Lichtenheld (1): init_buildsystem: fail early on reorder failure Martin Koegler (4): Diff can't handle empty files Refactor diff generation Handle overriden files already present in the orig.tar.gz correctly in debtransform Correct version number of binaries, if necessary Michael Schroeder (3): - don't add self-provides for src packages - support binary rpms with fo SOURCERPM header element - drop '-o' bsdtar flag when unpacking preinstall images Werner Fink (1): Make init_buildsystem able to use the features of newer rpm - update to current git * fixed arch PKGBUILD parsing * add .qcow2 file handling for kiwi * support root tar ball output format of kiwi - update to current git * fixed cross build initialsation with chroot * ignore prereqs for subpacks to be built * more Arch Linux support * new --vmdisk-clean switch - add recommends to qemu-linux-user - update openSUSE 12.2 config to RC1 state - add openSUSE 12.3 config to fix build for factory - do not package compressed _and_ uncompressed kiwi images - add build timestamps in each logfile line - preinstallimage support added - build fixes for Fedora 17 - syntax error fix for kiwi vmx builds - update from git: (mls) simplify debug package code so that it also works with --target - take care of prjconf target: definition for spec file parsing - support for breakages in Fedora:17 * support enforced ordering during preinstall and vminstall phase * allow to extract files via symlinked directories - work around command line size limit mkbaselibs may fail on an excessive number of packages (bnc#761977) - improve build root owner setting - don't die at compile time if Archive::Tar is not available - fixed breakage with older perls - ~ support for rpm version compare - handle broken deb packages better - no more hardcoded copy-in of qemu* binaries - do not use sle-baselibs.conf on openSUSE - license update: GPL-2.0+ and GPL-2.0 See e.g. spec2changelog by Pascal Bleser. Also, there should be a copy of the GPL-2.0 license in the package - check_emulator needs to use $BUILD_DIR for initvm checks or obs worker builds may break - Introduce --vmdisk-mount-options - using xz compression for kiwi raw files - progress counters during installing - 12.2 config added - Support for openSUSE 12.2 (current factory) - Support for crossbuild via Hostarch directive - PPC KVM support - swap space gets taken into account for ulimits - Failure on not supported personality set - use github.com as git repo now - fix build for rpmv5 - add sles11sp2 build config and adapt autodetection [bnc#711770] - use new qemu-*-binfmt handler to run commands with correct $0 - fix build for Factory - fixing kvm cpuid setting for AMD and Intel CPU's - support new xen tools - fixed qemu build initialisation - Requires:/Recommends: were part of the package description. Moved them to the correct place. - compat mode for broken kiwi of openSUSE 11.4 - fixed kiwi execution call for some versions - support new kiwi command line mode - do not build ia64 baselibs packages for openSUSE anymore - allow to use simple spec file parser via Build::show - conflict with old bsdtar (not supporting --chroot) - revert to single cpu build default for debian packages - switch back to single process build for debian to be conform with their policy - use cpuid kvm64 on kvm for 64bit as workaround for a cpuid bug - make sure default.conf is no stale symlink - support new cross build initvm. Done by James Perkins from LinuxFoundation - do not use loop device anymore when using block devices directly - workaround for distros with appstart like Ubuntu 10.10 - delta size limit 80% - actually unlink the delta file if the delta is too big - use '.drpm' suffix instead of '.delta.rpm' for delta rpms - makedeltarpms -> mkdrpms and also rename subpackage to match script name - since mkdrpms needs Build.pm make perl-TimeDate dependency of build optional - add missing optional perl dependencies - update to current git * export also fallback archs as exclusive archs for kiwi product building, fixes factory dvd5 64bit media * cross build fixes by Martin Mohring * correct disk image file creation, it was one byte too large by James Perkins - update to current git * workaround for supporting rpm install on cross build with native acceleration - package mkdrpms script in separate package - update to current git * support for mips cross build - update to current git * replace release number macros with 0 if not specified - update to current git * document --repo and --dist * update wiki links * fix bugs in repo handling * fix distribution autodetection code - update to current git * support for Files provide - update to current git * export BUILD_DEBUG so rpmlint can check for it (bnc#618004) - update to current git * add 11.3 config * fix repo creation in --noinit case * support ovf files directly * allow multiple --oldpackages * delta rpm support - update to current git * fixes for image building for SLE 10 * fix parsing of macros that contain {} blocks * support xz decoder helper script * don't substitute in lines with %(), the parser cannot handle it (bnc#613965) * run kvm instance with the right number of cpus according to given parallel build jobs - update to current git * noatime VM mount * _service file rename happens inside of chroot/vm now. - update to current git * CBinstall and CBPreninstall directive support from Jan-Simon - detect kvm virtio initrds on SUSE systems automatically - build-mkbaselibs: also move baselibs*conf to subpackage - add BuildIgnore build-mkbaselibs to be able to bootstrap - split out -mkbaselibs package to avoid build dependency problems on perl version updates in future. - update to current git * added armv6el to emulator archs by Jan-Simon. * fixing a logic error in arch= attribute handling for kiwi - update to current git * Support for remote yum repos by yi.y.yang@intel.com * fixed kiwi file parsing for arch= attributes - update to current git * kvm autosetup enhancements * multiple bugfixes and refactoring - update to current git * Kiwi exclude arch handling - create default.conf symlink to correct *.conf based on %suse_version and %sles_version macros - add dependency to tar (needed for deb builds) - use current git * Added '--uid uid:gid' feature to specify abuild id in chroot (by David Greaves) - update to current git * fix for permissions for debian (done by Jan-Simon) - update to current git * fixed handling of kiwi build results - update to current git * support kiwi 4.1 schema files - update to current git * fixed missing --root parameter for substitutedeps call - update to current git * create .sha256 files for kiwi image results - update to current git repo * unbreaking kiwi builds again - update to current git repo, update to commit 549cf6c6e148b7f8c05c12ee06f3094cb67149f9 * minor bugfixes * sparc support fixes - switch to git repository, update to commit c8b33e430bfb40b80df43249279bd561d874d786 * product building via abuild user * prodoct building speedup - update to svn(r9279) Debian packages get configured at install time again now. But keeping additional configuration step afterwards for failed configutions (due to dep cycles) - add requires to perl-TimeDate for changelog2spec app - update to svn(r9238) * Debian chroot enviroments are running post installation scripts now after all packages got installed, not after each installation (partly fixes Ubuntu 9.10 setup) - update to current svn(r9154) * add support for xz compressed rpms (Fedora 12) on platforms without xz support in rpm. * speed up install by disabling fsync in rpm config - update to current svn (r8506) - product iso generation is done by kiwi now - debs get generated via "make install" - update to current svn (r8048) - support openSUSE 11.2 [bnc#539914] - update to current svn (r7751) - support for legacy releasepkg mechanism - only print parse warnings if $config->{'warnings'} is set - set warnings for expanddeps/substitutedeps - use UTC as default timezone - also consider patches as sources - do not call depmod until we use also the native kernel, it can't match otherwise - return with value 3, if basic file system creation fails. bs_worker will mark the build host as bad and retries on another one. - handle files from service correctly and strip their prefix. - - also add rpmv3 compatibility hack to createrpmdeps - mount proc filesystem for build compare run - fix for ccache support from - add build-ids for debuginfo packages for subpacks - update to current svn (r7483) * Jan-Simons "ChangeTarget" support * fix for handling missing self provides with rpm format 3.0.6 - update to current svn (r7164) * package vc tool correctly * avoid running fsck on vm instances after 23 build runs - install files via Makefile instead of manual calls in spec file - update to current svn (r7126) * new blocklist based build result export * Martin Mohrings cross build extensions * vc tool included now - Fix for "Requires(pre/post)" tags - fix missing abuild group in /etc/gshadow on debian like distros ==== fftw3 ==== Subpackages: fftw3-devel libfftw3-3 libfftw3_threads3 - Don't use openmpi-devel for HPC builds. - Fix dependencies for the HPC devel package. ==== graphviz ==== Subpackages: graphviz-plugins-core libgraphviz6 - Reverse last change. - Remove pre_checkin.sh and graphviz-addon.* as they aren't needed anymore. - Replace the recommends for graphviz-gnome by a 'supplements packageand' so that graphviz doesn't pull in all the X11 related stuff on a machine without graphical desktop (bsc#930442). ==== graphviz-addons ==== Subpackages: graphviz-gd graphviz-gnome - Reverse last change. - Remove pre_checkin.sh and graphviz-addon.* as they aren't needed anymore. - Replace the recommends for graphviz-gnome by a 'supplements packageand' so that graphviz doesn't pull in all the X11 related stuff on a machine without graphical desktop (bsc#930442). ==== hwinfo ==== Version update (21.49 -> 21.50) Subpackages: hwinfo-devel - merge gh#openSUSE/hwinfo#54 - support SMBIOS 3.0 spec (bsc#1062562) - 21.50 ==== java-1_8_0-openjdk ==== Subpackages: java-1_8_0-openjdk-headless - Enable improved font rendering on systems where it applies ==== kbd ==== Subpackages: kbd-legacy - Add vlock.pamd PAM file (bsc#1056449#c8). - Clean spec file. ==== libXfont ==== Version update (1.5.2 -> 1.5.3) - Update to release 1.5.3 * Check for end of string in PatternMatch (CVE-2017-13720) * pcfGetProperties: Check string boundaries (CVE-2017-13722) ==== libbsd ==== Version update (0.8.3 -> 0.8.6) - Update to version 0.8.6: * test: + Fix nlist() unit test on IA64 and PowerPC 64-bit ELFv1 * Fix handling of non-contiguous argv + envp in setproctitle() - Changes for version 0.8.5: * test: + Handle libtool executable names in getprogname() unit test + Remove unused variable in nlist() unit test * man: + Ship and install libbsd(7) + Update man page sections in titles and references * Fix ELF definitions for PowerPC in local-elf.h * Fix ELF definitions for MIPS in local-elf.h - Changes for version 0.8.4: * Add support for RISC-V * Support GCC deprecated attribute for GCC older than 4.5 * Fix the __progname check to avoid the optimizer discarding the symbol * Gracefully handle lack of system * Do not provide funopen() on musl * Try if is not present * Do not use legacy BSD u_* types * Import for some of its macros ==== libsmbios ==== Version update (2.3.2 -> 2.3.3) Subpackages: python-smbios smbios-utils-python - Update to version 2.3.3 Shipping and new DellEMC systems may use dell_rbu driver to perform BIOS updates on the system. [fate#322804] ==== libxkbcommon ==== Subpackages: libxkbcommon-x11-0 libxkbcommon0 - Allow building x11 subpackage on any distribution ==== libxslt ==== Version update (1.1.29 -> 1.1.30) Subpackages: libxslt-devel libxslt-tools libxslt1 - Update to version 1.1.30 [bsc#1063934] * Documentation: - Misc doc fixes * Portability: - Look for libxml2 via pkg-config first * Bug Fixes: - Also fix memory hazards in exsltFuncResultElem - Fix NULL deref in xsltDefaultSortFunction - Fix memory hazards in exsltFuncFunctionFunction - Fix memory leaks in EXSLT error paths - Fix memory leak in str:concat with empty node-set - Fix memory leaks in error paths - Switch to xmlUTF8Strsize in numbers.c - Fix NULL pointer deref in xsltFormatNumberFunction - Fix UTF-8 check in str:padding - Fix xmlStrPrintf argument - Check for overflow in _exsltDateParseGYear - Fix double to int conversion - Check for overflow in exsltDateParseDuration - Change version of xsltMaxVars back to 1.0.24 - Disable xsltCopyTextString optimization for extensions - Create DOCTYPE for HTML version 5 - Make xsl:decimal-format work with namespaces - Remove norm:localTime extension function - Check for integer overflow in xsltAddTextString - Detect infinite recursion when evaluating function arguments - Fix memory leak in xsltElementAvailableFunction - Fix for pattern predicates calling functions - Fix cmd.exe invocations in Makefile.mingw - Don't try to install index.sgml - Fix symbols.xml - Fix heap overread in xsltFormatNumberConversion - Fix for non-element nodes - Fix unreachable code in xsltAddChild - Change version number in xsl:version warning - Avoid infinite recursion after failed param evaluation - Stop if potential recursion is detected - Consider built-in templates in apply-imports - Fix precedence with multiple attribute sets - Rework attribute set resolution * Improvements: - Silence tests a little - Set LIBXML_SRC to absolute path - Add missing #include - Adjust expected error messages in tests - Make xsltDebug more quiet - New-line terminate error message that missed this convention - Use xmlBuffers in EXSLT string functions - Switch to xmlUTF8Strsize in EXSLT string functions - Check for return value of xmlUTF8Strlen - Avoid double/long round trip in FORMAT_ITEM - Separate date and duration structs - Check for overflow in _exsltDateDifference - Clamp seconds field of durations - Change _exsltDateAddDurCalc parameter types - Fix date:difference with time zones - Rework division/remainder arithmetic in date.c - Remove exsltDateCastDateToNumber - Change internal representation of years - Optimize IS_LEAP - Link libraries with libm - Rename xsltCopyTreeInternal to xsltCopyTree - Update linker version script - Add local wildcard to version script - Make some symbols static - Remove redundant NULL check in xsltNumberComp - Fix forwards compatibility for imported stylesheets - Reduce warnings in forwards-compatible mode - Precompute XSLT elements after preprocessing - Fix whitespace in xsltParseStylesheetTop - Consolidate recursion checks - Treat XSLT_STATE_STOPPED same as errors - Make sure that XSLT_STATE_STOPPED isn't overwritten - Add comment regarding built-in templates and params - Rewrite memory management of local RVTs - Validate QNames of attribute sets - Add xsl:attribute-set regression tests - Ignore imported stylesheets in xsltApplyAttributeSet - Dropped patches fixed upstream * libxslt-CVE-2016-4738.patch * libxslt-1.1.28-CVE-2017-5029.patch ==== libxslt-python ==== Version update (1.1.29 -> 1.1.30) - Update to version 1.1.30 [bsc#1063934] * Documentation: - Misc doc fixes * Portability: - Look for libxml2 via pkg-config first * Bug Fixes: - Also fix memory hazards in exsltFuncResultElem - Fix NULL deref in xsltDefaultSortFunction - Fix memory hazards in exsltFuncFunctionFunction - Fix memory leaks in EXSLT error paths - Fix memory leak in str:concat with empty node-set - Fix memory leaks in error paths - Switch to xmlUTF8Strsize in numbers.c - Fix NULL pointer deref in xsltFormatNumberFunction - Fix UTF-8 check in str:padding - Fix xmlStrPrintf argument - Check for overflow in _exsltDateParseGYear - Fix double to int conversion - Check for overflow in exsltDateParseDuration - Change version of xsltMaxVars back to 1.0.24 - Disable xsltCopyTextString optimization for extensions - Create DOCTYPE for HTML version 5 - Make xsl:decimal-format work with namespaces - Remove norm:localTime extension function - Check for integer overflow in xsltAddTextString - Detect infinite recursion when evaluating function arguments - Fix memory leak in xsltElementAvailableFunction - Fix for pattern predicates calling functions - Fix cmd.exe invocations in Makefile.mingw - Don't try to install index.sgml - Fix symbols.xml - Fix heap overread in xsltFormatNumberConversion - Fix for non-element nodes - Fix unreachable code in xsltAddChild - Change version number in xsl:version warning - Avoid infinite recursion after failed param evaluation - Stop if potential recursion is detected - Consider built-in templates in apply-imports - Fix precedence with multiple attribute sets - Rework attribute set resolution * Improvements: - Silence tests a little - Set LIBXML_SRC to absolute path - Add missing #include - Adjust expected error messages in tests - Make xsltDebug more quiet - New-line terminate error message that missed this convention - Use xmlBuffers in EXSLT string functions - Switch to xmlUTF8Strsize in EXSLT string functions - Check for return value of xmlUTF8Strlen - Avoid double/long round trip in FORMAT_ITEM - Separate date and duration structs - Check for overflow in _exsltDateDifference - Clamp seconds field of durations - Change _exsltDateAddDurCalc parameter types - Fix date:difference with time zones - Rework division/remainder arithmetic in date.c - Remove exsltDateCastDateToNumber - Change internal representation of years - Optimize IS_LEAP - Link libraries with libm - Rename xsltCopyTreeInternal to xsltCopyTree - Update linker version script - Add local wildcard to version script - Make some symbols static - Remove redundant NULL check in xsltNumberComp - Fix forwards compatibility for imported stylesheets - Reduce warnings in forwards-compatible mode - Precompute XSLT elements after preprocessing - Fix whitespace in xsltParseStylesheetTop - Consolidate recursion checks - Treat XSLT_STATE_STOPPED same as errors - Make sure that XSLT_STATE_STOPPED isn't overwritten - Add comment regarding built-in templates and params - Rewrite memory management of local RVTs - Validate QNames of attribute sets - Add xsl:attribute-set regression tests - Ignore imported stylesheets in xsltApplyAttributeSet - security update: initialize random generator, CVE-2015-9019 [bsc#934119] + libxslt-random-seed.patch ==== m4 ==== - Explicitly remove %{_infodir}/dir before creating package to allow builds on RHEL and derived Linux distributions - Enable configure option --disable-dependency-tracking to allow build on Mageia - Add xz as BuildRequires to unpack source on SLE 11 ==== mariadb ==== Subpackages: libmysqlclient-devel libmysqlclient18 libmysqlclient_r18 libmysqld18 mariadb-client mariadb-errormessages - Drop INFO_BIN from package because it is not needed and differs for every build (boo#1047218) ==== mono-core ==== Version update (5.2.0 -> 5.4.0) Subpackages: libmono-2_0-1 libmono-2_0-devel libmonosgen-2_0-1 libmonosgen-2_0-devel mono-data mono-data-sqlite mono-extras mono-mvc mono-wcf mono-web mono-winforms mono-winfxcore - Add bug-59608.patch: * Fix bxc#59608 - Attribute MethodImplOptions.AggressiveInlining causes method to always return NULL - Add bug-57918.patch: * Fix bxc#57918 - System.Net.Sockets.EndSend returns incorrect value - Update to version 5.4.0.201 (5.4.0 Stable) - Minor packaging updates - Remove patch: 0001-btls-Disable-BUILD_SHARED_LIBS-while-building-boring.patch - Remove patch: fix-project-builds-linux.patch - Add patch mcs-compatibility-fix.patch: * When using deprecated MCS compiler to build Mono, convert incompatible C#6\C#7 code to C#5 analog in order to fix build errors. - New features and changes: * JIT Job Control: improve Roslyn performance * Array element store optimization * Load scalability improvements * ValueType write barrier optimization * Make jit method table resizing more scalable * Reflection queries scalability improvements * Intrisificy Marshal.PtrToStruct for blitable types * Revamped unaligned memory access support * Interpreter works in JIT restricted environments * Interpreter supports ARM and ARM64 * Class Libraries: integrated AppContextSwitch code from reference sources which allows all of its compat switches to be used, added reference assemblies for .NET Framework 4.7 to support builds targetting .NET 4.7. * Tools: bundled nuget binary was updated to version 4.3.0, added packaging for roslyn-parts of msbuild. - Bugfixes: * bxc#580 - Type.Load loads strong type despite version mismatch * bxc#17325 - RealProxy returns MarshalByRefObject for an Interface instead of the real interface type * bxc#44907 - Applications crash on Nexus 9 devices only since Xamarin.Android 7.0.0.18 * bxc#46482 - SIGSEGV at random code lines after application start on Nexus 9 with Xamarin Android 7 * bxc#51791 - [XA] HTC Nexus 9 - app closes on launch * bxc#52508 - TLS SignalR Self-host Hang * bxc#53038 - SRE should fail more gracefully when SymbolWriter is missing * bxc#53202 - Number minus Enum gives wrong value * bxc#53244 - mcs generates ParamArrayAttribute when specifying ?params? in overridden method where base doesn?t have it * bxc#53792 - CFNetworkHandler reports correct download when internet connection is lost during request * bxc#54159 - Compiler crashes when calling method named Finalize * bxc#54322 - await in catch-block inside a loop causes the same exception to be caught multiple times * bxc#54388 - InternalsVisibleTo is case sensitive * bxc#54448 - Unable to revert to thread-local storage for CurrentThread.CultureInfo * bxc#54485 - Creating an open generic type with recurrent constraint fails * bxc#54658 - [iOS]BCL test failed with Assertion failures error: * Assertion at /Users/builder/data/lanes/4691/6bea7a5b/source/xamarin-macios/external/mono/mono/mini/aot-runtime.c:2924, condition `!async? not met and condition `unwind_options == MONO_UNWIND_NONE? not * bxc#54976 - [iOS]fsharp test failing on iOS device with Assertion at /Users/builder/data/lanes/4691/9245c1c0/source/xamarin-macios/external/mono/mono/mini/mini-arm-gsharedvt.c:220, condition `src_slot < 16? not met * bxc#54991 - Cannot compile get => _text * bxc#55041 - Stripping mscorlib in simple example changes IntPtr (5) behavior? * bxc#55083 - coreclr test b353858.il fails after 6f33b62f39a273fccb78f71513cb5e0dfb987c70 * bxc#55095 - Breakpoints not hit for ASP.NET MVC Project * bxc#55348 - ?using static? results in invalid compiler errors * bxc#55400 - MCS produces incorrect code for generic instantiated with a gtd * bxc#55436 - System.Runtime refuses to load with strict naming * bxc#55577 - SIMD instructions with System.Numerics.Vectors do not work * bxc#55603 - Follow-up to bug 52845: Satellite assemblies not loaded by app when using ?Bundle assemblies into native code? even though they are now successfully mkbundled * bxc#55604 - Incorrect struct size when using property setter * bxc#55697 - .NET 2.0 style web services fail to build under msbuild in Release but work with xbuild * bxc#56081 - Returning a valuetype from an async method with an awaited parameter yields a Mono.CSharp.InternalErrorException: Await yields with non-empty stack * bxc#56111 - Hitting assertion after enabling AOT+LLVM on x86 devices in tramp-x86.c:124 * bxc#56202 - [mono-2017-04]Apps fail to launch on 32 bit device with error EXC_ARM_DA_ALIGN at 0x0142ccec * bxc#56240 - Performance Degradation When Using Expressions * bxc#56242 - TypeTest.GetGenericMethodDefinitionOverInflatedMethodOnGTD throws NRE on Android in Release mode * bxc#56247 - Enumerable.OrderByDescending behaves differently on LLVM FullAOT * bxc#56452 - Problem Stack too big * bxc#56462 - Custom operator causes internal compiler error * bxc#56493 - Windows MMAP doesn?t release file * bxc#56499 - DateTime.Now throws exception if /etc/localtime symlink destination missing * bxc#56567 - Passing large struct into exception filter method crashes runtime with SIGSEGV * bxc#56611 - Regression: ArrayTypeMismatchException when running F# script * bxc#56616 - Missing CS1629 for unsafe code in iterators * bxc#56627 - mcs inherits interface implementation, while csc doesn?t * bxc#56684 - (mono-2.0-sgen.dll) in mono.exe: 0xC0000005: Access violation reading location 0x04FA3D9A. * bxc#56694 - Assertion: should not be reached at d:\j\workspace\v\repos\mono\mono\sgen\sgen-scan-object.h:91 * bxc#56814 - Xamarin.Mac.dll Memory Leak starting with 3.2.0.175 Release * bxc#56821 - Static ctor of MarshalByRefObject runs in primary AppDomain * bxc#56824 - Runtime crash with VSMEF * bxc#57002 - New bockbuild package is missing .dSYM directories * bxc#57222 - System.Reflection.AmbiguousMatchException for two fields with same name but different types * bxc#57232 - Compiler error when using ternary operator and no whitespace * bxc#57242 - [StructLayout (LayoutKind.Sequential, Pack = 1)] doesn?t work as expected * bxc#57301 - Running IronPython?s executable under Mono 5.0.x causes a SIGSEGV on exit, this did not happen on 4.8 * bxc#57496 - [Slovenian CultureInfo + others] .Parse throws exception when parsing negative values * bxc#57505 - Missing error CS0165 in presence of commented line * bxc#57629 - [io-layer] File.Delete () throws System.UnauthorizedAccessException on non-existing files on a read-only path * bxc#57691 - InternalsVisibleTo doesn?t work with 2048-bit SNK files * bxc#57744 - ReflectionTypeLoadException.LoaderExceptions has null exceptions * bxc#57771 - F#.NET Core 2.0 projects do not compile * bxc#57796 - Compiler Crash instead of CS1621 * bxc#57850 - Mono assertion when ResolveEventHandler returns a reflection-only assembly * bxc#57851 - Assertion if using ResolveEventHandler to find custom attributes * bxc#57930 - Building netstandard 2.0 project throws DllNotFoundException: hostfxr during msbuild * bxc#57959 - SIGSEGV in roslyn with corrupted stack * bxc#58114 - [llvm] csc (Rolsyn) produce fault clauses that the llvm backend does not support * bxc#58210 - ?* Assertion at metadata.c:1048, condition `index < meta->heap_strings.size? not met? is output on startup - works fine on Windows * bxc#58344 - SIMD crash using System.Numerics.Vector * bxc#58361 - EnumBuilder can no longer be used to generate IL code * bxc#58399 - Delegates as collection key are ~500x slower than previously * bxc#58421 - sre-save.c asserts in fixup_method () if TypeBuilder token is used across assemblies * bxc#58446 - [iOS]EnumerableMoreTest.ConcatArgumentNullTest crash on tvOS device * bxc#58454 - Cannot resolve method Subscription`1 Subscribe[TSelection](System.Func`2[TState,TSelection], System.Action`2[TSelection,TState]) because the declaring type of the method handle FSI_0002+Store`1[TState] is generic. Explicitly provide the declaring type to * bxc#58738 - System.IO.MonoIO.Read - Native Crash when device file is gone * bxc#58782 - Exception stack traces are deleted when reaching the native-to-managed wrapper in a reverse invoke * bxc#58829 - Application Output Window being flooded with ?[Mono] worker parking, [Mono] worker unparking? messages when debugging agasint Android Emulator * bxc#59235 - [mono-2017-06] android.runtime.JavaProxyThrowable: System.ObjectDisposedException: Cannot access a disposed object. * bxc#59274 - [Mac]A crash report is generated on closing mac apps ==== nghttp2 ==== Version update (1.25.0 -> 1.27.0) - Update to version 1.27.0: * h2load: Print out h2 header fields with --verbose option * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client only - Changes for version 1.26.0: * docs: Fix some typos in the nghttpx how-to * h2load: Fix bug that timing script stalls with -m1 * h2load: Reservoir sampling (GH-984) * h2load: Add timing-based load-testing in h2load - Switch to python3 support ==== openmpi2 ==== Subpackages: openmpi2-config openmpi2-devel openmpi2-libs - Fix pre/post install call to ldconfig ==== openssh ==== Subpackages: openssh-helpers - sshd_config is has now permissions 0600 in secure mode ==== pam-config ==== Version update (0.92 -> 0.93) - Update to version 0.93: Teach pam_cracklib module about enforce_for_root [bnc#929079, FATE#312643]. ==== pciutils-ids ==== Version update (20170917 -> 20171018) - Update to 20171018 ==== perl-Module-Runtime ==== Version update (0.015 -> 0.016) - updated to 0.016 see /usr/share/doc/packages/perl-Module-Runtime/Changes version 0.016; 2017-10-17 * port t/taint.t to Perl 5.27.5, where re-requiring an already-loaded module doesn't trigger tainting * skip t/taint.t if the perl empirically doesn't perform taint checks but the script got run anyway (which happens with an unsupported configuration of the Perl core which some people are using in the absence of a supported no-taint configuration) * in t/taint.t, use $^X rather than $ENV{PATH} as the primordial tainted value to taint a string being tested * in documentation, use four-column indentation for all verbatim material * in META.{yml,json}, point to public bug tracker * in META.json, specify type of public repository ==== perl-Net-DNS ==== Version update (1.12 -> 1.13) - updated to 1.13 see /usr/share/doc/packages/perl-Net-DNS/Changes ==== perl-XML-LibXML ==== Version update (2.0129 -> 2.0131) - updated to 2.0131 see /usr/share/doc/packages/perl-XML-LibXML/Changes 2.0131 2017-10-24 - Re-include the missing *.pod documents. - https://rt.cpan.org/Ticket/Display.html?id=123362 - Thanks to Stephen for the report. - Add t/pod-files-presence.t to test for it in the future. - Merge https://github.com/shlomif/perl-XML-LibXML/pull/8 - Fix bug in Node::replaceChild() - Thanks to @Mipu94 . - updated to 2.0130 see /usr/share/doc/packages/perl-XML-LibXML/Changes 2.0130 2017-10-18 - Fix the tests with libxml2-2.9.6 . - https://rt.cpan.org/Public/Bug/Display.html?id=122958 - Thanks to Daniel Macks for the report and ppisar for a patch. - setNamespace() Enhancements. - Thanks to E. Choroba. - Dropped patch merged upstream: * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch ==== python-urllib3 ==== Subpackages: python2-urllib3 python3-urllib3 - use python3 for detection, in anticipation of python2 removal ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-bash-completion systemd-logger systemd-sysvinit udev - Import commit e44237e76f6e133e62ff6c681d3fd06ebf12f66d a4e02c099 udev-rules: all values can contain escaped double quotes now (#6890) d2b767a76 tmpfiles: remove old ICE and X11 sockets at boot (#6979) - Add 0001-systemd-firstboot-add-vconsole-keymap-support.patch (bsc#1046436) Temporary patch until it's been merged by upstream, see https://github.com/systemd/systemd/pull/7035 ==== yast2-country ==== Version update (4.0.3 -> 4.0.5) Subpackages: yast2-country-data - Display an error popup when saving the keyboard config fails (related to bsc#1046436) - 4.0.5 - Do not use `--root` option for the `systemd-firstboot` call, SCR already runs it in the target chroot (bsc#1046436) - 4.0.4 ==== yast2-pkg-bindings ==== Version update (4.0.1 -> 4.0.4) - Pkg.ResolvableProperties: return the "register_flavor" product property (related to bsc#896224) - 4.0.4 - Report error when repository refresh fails during a service refresh (bsc#1064210) - 4.0.3 - Do not crash after a callback is set, unset, then called (bsc#1063459) - 4.0.2 ==== zypp-plugin ==== Version update (0.5 -> 0.6.1) - Let zypp-plugin-python provide python2-zypp-plugin to be consistent with python3-zypp-plugin. - version 0.6.1 - Fix specfile to be able to build for python3 - version 0.6 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org