Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20190814 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-openconnect (1.2.4 -> 1.2.6) crash (7.2.6_k5.2.3_1 -> 7.2.6_k5.2.8_1) gtk-vnc (0.9.0 -> 1.0.0) icedtea-web (1.7.1 -> 1.7.2) kdevelop5 (5.4.0 -> 5.4.1) kernel-source (5.2.7 -> 5.2.8) libdlm (4.0.7 -> 4.0.9) libgnomecanvas libinput (1.13.4 -> 1.14.0) libopenmpt (0.4.5 -> 0.4.6) libseccomp nano (4.2 -> 4.3) obs-service-download_url (0.1.1 -> 0.1.2) open-vm-tools perl-Class-Method-Modifiers (2.12 -> 2.13) perl-Mojolicious (8.22 -> 8.23) postfix python-attrs python-kiwi (9.18.9 -> 9.18.10) quota susepaste (0.5 -> 0.6) xfce4-panel-plugin-whiskermenu (2.3.2 -> 2.3.3) xiterm yast2-schema (4.2.0 -> 4.2.1) === Details === ==== NetworkManager-openconnect ==== Version update (1.2.4 -> 1.2.6) Subpackages: NetworkManager-openconnect-gnome NetworkManager-openconnect-lang - Update to version 1.2.6: + libnm-glib compatibility (NetworkManager < 1.0) is disabled by default. It can be enabled by passing --with-libnm-glib to configure script. Nobody should need it by now. Users that still use this are encouraged to let us know before the libnm-glib support is removed for good. + Allow key files for TPM v2.0 to be configured. + Add support for PAN GlobalProtect and native Pulse Secure protocol. + Discourage users from accepting bad server certificates. + Add persistent support (beware https://bugzilla.gnome.org/794190 though). - Add pkgconfig(gcr-3) BuildRequires: New dependency. - Use modern macros. ==== crash ==== Version update (7.2.6_k5.2.3_1 -> 7.2.6_k5.2.8_1) - Add patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68 in linux 5.3: crash-allow-kmem-section-is-early.patch ==== gtk-vnc ==== Version update (0.9.0 -> 1.0.0) Subpackages: gtk-vnc-lang libgtk-vnc-2_0-0 libgvnc-1_0-0 - Update to version 1.0.0: + Autotools build system replaced with meson. + Support for GTK-2 is dropped. GTK-3 is mandatory. + Support for libview is dropped in example program. + Improvements to example demos. + Use MAP_ANON if MAP_ANONYMOUS doesn't exist to help certain macOS versions. + Fix crash when connection attempt fails early. + Initialize gcrypt early in auth process. + Emit vnc-auth-failure signal when SASL auth fails. + Emit vnc-error signal when authentication fails. + Fix double free when failing to read certificates. + Run unit tests in RPM build. + Modernize RPM spec. + Fix race condition in unit tests. + Fix install of missing header for cairo framebuffer. + Fix typo in gir package name. + Add missing VncPixelFormat file to git data. - Add meson BuildRequires and macros. - Drop libtool BuildRequires: No longer needed. - Drop translation-update-upstream BuildRequires and macro, SUSE no longer provides extra translations for gtk-vnc. - Replace gtk3-devel with pkgconfig(gtk+-3.0) BuildRequires: Align with what meson checks for. - Add pkgconfig(gvnc-1.0) BuildRequires: New dependency. - Use sed hack to enable install of gncviewer. ==== icedtea-web ==== Version update (1.7.1 -> 1.7.2) Subpackages: icedtea-web-javadoc - Update to 1.7.2 * added support for javafx-desc and so allow run of pure-javafx only applications * --nosecurity enhanced for possibility to skip invalid signatures * enhanced to allow resources to be read also from j2se/java element (OmegaT) * PR3644 - java.lang.NoClassDefFoundError: Could not initialize class net.sourceforge.jnlp.runtime.JNLPRuntime$DeploymentConfigurationHolder * deployment.config now support generic url instead just file * Added support for windows desktop shortcuts via https://github.com/DmitriiShamrikov/mslinks * cache can now be operated by groups, list by -Xcacheids (details via -verbose, can filter by regex), Xclearcache now can clear only selected id. There is also gui to operate cache via id in itweb-settings now. * desktop shortcut name get shortened to title or file if title is missing. * scripted launchers rework: Windows bat launchers rewritten to be feature complete, Linux shell launchers made portable, build enhanced to produce platform independent image - Removed patch: * icedtea-web-jdk10.patch + integrated upstream - Added patches: * CVE-2019-10181.patch + Upstream patch to fix bsc#1142835, CVE-2019-10181: icedtea-web: unsigned code injection in a signed JAR file * CVE-2019-10182_1.patch * CVE-2019-10182_2.patch + Upstream patches to fix bsc#1142825, CVE-2019-10182: icedtea-web: path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite * CVE-2019-10185.patch + Upstream patch to fix bsc#1142832, CVE-2019-10185: icedtea-web: directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite ==== kdevelop5 ==== Version update (5.4.0 -> 5.4.1) Subpackages: kdevelop5-lang kdevplatform kdevplatform-lang libkdevplatform54 - Update to 5.4.1 * Fix crash: add missing Q_INTERFACES to OktetaDocument for IDocument. (kde#410820) * Shell: do not show bogus error about repo urls on DnD of normal files. * [Grepview] Use the correct icons. * Fix calculation of commit age in annotation side bar for < 1 year. * Appdata: add <launchable/> entry. ==== kernel-source ==== Version update (5.2.7 -> 5.2.8) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla - Linux 5.2.8 (bnc#1012628). - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure (bnc#1012628). - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bnc#1012628). - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bnc#1012628). - ALSA: usb-audio: Sanity checks for each pipe and EP types (bnc#1012628). - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check (bnc#1012628). - HID: wacom: fix bit shift for Cintiq Companion 2 (bnc#1012628). - HID: Add quirk for HP X1200 PIXART OEM mouse (bnc#1012628). - atm: iphase: Fix Spectre v1 vulnerability (bnc#1012628). - bnx2x: Disable multi-cos feature (bnc#1012628). - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case (bnc#1012628). - ife: error out when nla attributes are empty (bnc#1012628). - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6 (bnc#1012628). - ip6_tunnel: fix possible use-after-free on xmit (bnc#1012628). - ipip: validate header length in ipip_tunnel_xmit (bnc#1012628). - mlxsw: spectrum: Fix error path in mlxsw_sp_module_init() (bnc#1012628). - mvpp2: fix panic on module removal (bnc#1012628). - mvpp2: refactor MTU change code (bnc#1012628). - net: bridge: delete local fdb on device init failure (bnc#1012628). - net: bridge: mcast: don't delete permanent entries when fast leave is enabled (bnc#1012628). - net: bridge: move default pvid init/deinit to NETDEV_REGISTER/UNREGISTER (bnc#1012628). - net: fix ifindex collision during namespace removal (bnc#1012628). - net/mlx5e: always initialize frag->last_in_page (bnc#1012628). - net/mlx5: Use reversed order when unregister devices (bnc#1012628). - net: phy: fixed_phy: print gpio error only if gpio node is present (bnc#1012628). - net: phylink: don't start and stop SGMII PHYs in SFP modules twice (bnc#1012628). - net: phylink: Fix flow control for fixed-link (bnc#1012628). - net: phy: mscc: initialize stats array (bnc#1012628). - net: qualcomm: rmnet: Fix incorrect UL checksum offload logic (bnc#1012628). - net: sched: Fix a possible null-pointer dereference in dequeue_func() (bnc#1012628). - net sched: update vlan action for batched events operations (bnc#1012628). - net: sched: use temporary variable for actions indexes (bnc#1012628). - net/smc: do not schedule tx_work in SMC_CLOSED state (bnc#1012628). - net: stmmac: Use netif_tx_napi_add() for TX polling function (bnc#1012628). - NFC: nfcmrvl: fix gpio-handling regression (bnc#1012628). - ocelot: Cancel delayed work before wq destruction (bnc#1012628). - tipc: compat: allow tipc commands without arguments (bnc#1012628). - tipc: fix unitilized skb list crash (bnc#1012628). - tun: mark small packets as owned by the tap sock (bnc#1012628). - net/mlx5: Fix modify_cq_in alignment (bnc#1012628). - net/mlx5e: Prevent encap flow counter update async to user query (bnc#1012628). - r8169: don't use MSI before RTL8168d (bnc#1012628). - bpf: fix XDP vlan selftests test_xdp_vlan.sh (bnc#1012628). - selftests/bpf: add wrapper scripts for test_xdp_vlan.sh (bnc#1012628). - selftests/bpf: reduce time to execute test_xdp_vlan.sh (bnc#1012628). - net: fix bpf_xdp_adjust_head regression for generic-XDP (bnc#1012628). - hv_sock: Fix hang when a connection is closed (bnc#1012628). - net: phy: fix race in genphy_update_link (bnc#1012628). - net/smc: avoid fallback in case of non-blocking connect (bnc#1012628). - rocker: fix memory leaks of fib_work on two error return paths (bnc#1012628). - mlxsw: spectrum_buffers: Further reduce pool size on Spectrum-2 (bnc#1012628). - net/mlx5: Add missing RDMA_RX capabilities (bnc#1012628). - net/mlx5e: Fix matching of speed to PRM link modes (bnc#1012628). - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling (bnc#1012628). - Revert "mac80211: set NETIF_F_LLTX when using intermediate tx queues" (bnc#1012628). - spi: bcm2835: Fix 3-wire mode if DMA is enabled (bnc#1012628). - commit bf37e83 - Use the upstream patch. (Including the tags.) - commit 5dd5b2d - s390: enable detection of kernel version from bzImage (bnc#1139939). - commit 8434c05 - drm/i915/vbt: Fix VBT parsing for the PSR section (bsc#1143139). - commit 0bef772 - rpm/kernel-binary.spec.in: support partial rt debug config. - commit af37821 ==== libdlm ==== Version update (4.0.7 -> 4.0.9) Subpackages: libdlm3 - Update to v4.0.9 * include some fixes/enhancements for dlm_controld (bsc#1144793) * source moved to https://pagure.io/dlm ==== libgnomecanvas ==== Subpackages: libgnomecanvas-2-0 libgnomecanvas-lang - Align with what configure checks for: + Drop intltool and libart_lgpl-devel BuildRequires. + Stop passing enable-glade to configure, drop libglade2-devel BuildRequires, no longer build glade support. + Add pkgconfig(gail), pkgconfig(glib-2.0), pkgconfig(gtk+-2.0), pkgconfig(libart-2.0), pkgconfig(pango) and pkgconfig(pangoft2) BuildRequires. - Use modern macros. - Drop conditional for no longer supported versions of openSUSE. ==== libinput ==== Version update (1.13.4 -> 1.14.0) Subpackages: libinput-udev libinput10 - Update to new upstream release 1.14 * The calibration matrix is now returned correctly even when it is the identity matrix. And the tablet pressure range is scaled correctly into the available physical range. Previously, the bottom 5% where effectively missing and pressure offset on worn-out pens handling took some of the scale away from the top. * Improved thumb detection for touchpads. On Clickpad devices, this should make interactions where a thumb is resting on the touchpad or dropped during an interaction more reliable. * The Dell Canvas Totem is now supported by libinput. It is exposed as a new tool type through the tablet interface along with two new axes. Note that this is only low-level support, the actual integration of the totem needs Wayland protocol changes and significant changes in all applications that want to make use of it. * Touch-capable tablets now tie both devices together for rotation. * Tablet proximity out handling for tablets that are unreliably sending proximity out events is now always timeout-based. It is no longer necessary to add per-device quirks to enable this feature and it is completely transparent on devices that work correctly anyway. ==== libopenmpt ==== Version update (0.4.5 -> 0.4.6) Subpackages: libmodplug1 libopenmpt0 - Update to version 0.4.6: * Detect IT files unpacked with early UNMO3 versions. ==== libseccomp ==== - ignore make check error for ppc64/ppc64le, bypass boo#1142614 ==== nano ==== Version update (4.2 -> 4.3) Subpackages: nano-lang - GNU Nano 4.3: * The ability to read from and write to a FIFO has been regained * Startup time is reduced by fully parsing a syntax only when needed * Asking for help (^G) when using --operatingdir does not crash * The reading of a huge or slow file can be stopped with ^C * Cut, zap, and copy operations are undone separately when intermixed * M-D reports the correct number of lines (zero for an empty buffer) ==== obs-service-download_url ==== Version update (0.1.1 -> 0.1.2) - Update to version 0.1.2: * make download_url executable. * GPL license file ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - Revert change from (bsc#1133623) update vmtoolsd.service tools to run after the network service is ready. This updated caused cyclic dependencies as reported by bugs (bsc#1143452) and (bsc#1141969) ==== perl-Class-Method-Modifiers ==== Version update (2.12 -> 2.13) - updated to 2.13 see /usr/share/doc/packages/perl-Class-Method-Modifiers/Changes 2.13 2019-08-10 00:18:50Z - bypass prototypes when testing for lvalue attribute - fixed a class name in tests to avoid conflicting with a core module ==== perl-Mojolicious ==== Version update (8.22 -> 8.23) - updated to 8.23 see /usr/share/doc/packages/perl-Mojolicious/Changes 8.23 2019-08-12 - Updated Cpanel::JSON::XS requirement to 4.09 for duplicate keys support. (Grinnz) - Added head and tail methods to Mojo::Collection. (Grinnz) - Improved Mojo::File not to allow undefined values in paths. ==== postfix ==== Subpackages: postfix-doc - fix for boo#1144946 mydestination - missing default localhost * update config.postfix ==== python-attrs ==== - Switch to multibuild to enable tests ==== python-kiwi ==== Version update (9.18.9 -> 9.18.10) - Bump version: 9.18.9 ? 9.18.10 - Align setup.py with the correct license - Pass components to debootstrap call If repo components are specified the collective list of component names should be passed to the debootstrap call. This Fixes #1157 - Update image name for s390 oem integration test Align image name to the schema we use for all other integration tests - Fixed zipl bootloader setup targetgeometry not allowed for targettype SCSI ==== quota ==== Subpackages: quota-nfs - Update patch quota-4.01-warnquota.patch to match up the git version that was integrated bsc#1144265 ==== susepaste ==== Version update (0.5 -> 0.6) Subpackages: susepaste-screenshot - updated to version 0.6 - error out when pasting unreadable file - fix one bashism - allow to specify protocol ==== xfce4-panel-plugin-whiskermenu ==== Version update (2.3.2 -> 2.3.3) Subpackages: xfce4-panel-plugin-whiskermenu-lang - Update to 2.3.3. * Removed workaround for garcon that did not always fix crash. * Translation updates: Bulgarian, Czech, Danish, Galician, Icelandic, Nepali. ==== xiterm ==== Subpackages: fbiterm gtkiterm libiterm1 - stropts.patch: remove use of obsolete XSI STREAMS interface ==== yast2-schema ==== Version update (4.2.0 -> 4.2.1) - Update autoyast2 and yast2-add-on dependencies to: - Support the new add_on_others section - Add the missing 'uuid' element in the 'partition' sections - Fixes bsc#1144007. - 4.2.1 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org