Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20171010 When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: ImageMagick (7.0.7.4 -> 7.0.7.6) apache2 (2.4.27 -> 2.4.28) apparmor cmake (3.9.2 -> 3.9.4) expat gcc7 (7.2.1+r253221 -> 7.2.1+r253435) gdb (8.0 -> 8.0.1) ghostscript-fonts hplip (3.17.6 -> 3.17.9) installation-images-Kubic (14.335 -> 14.336) jemalloc (4.5.0 -> 5.0.1) libcdio libcroco libusbmuxd libvirt (3.7.0 -> 3.8.0) mozilla-nspr (4.16 -> 4.17) mozilla-nss (3.32.1 -> 3.33) opencc (1.0.3.1 -> 1.0.5) php7 python-cffi (1.10.0 -> 1.11.1) python-ldap (2.4.44 -> 2.4.45) scons (2.5.1 -> 3.0.0) sysdig (0.17.0_k4.13.5_1 -> 0.19.1_k4.13.5_1) systemd xkeyboard-config (2.21 -> 2.22) xml-commons xmlbeans xorg-x11-server (1.19.3 -> 1.19.4) yast2-snapper (4.0.0 -> 4.0.1) zypper (1.13.36 -> 1.13.37) === Details === ==== ImageMagick ==== Version update (7.0.7.4 -> 7.0.7.6) Subpackages: ImageMagick-devel ImageMagick-extra libMagick++-7_Q16HDRI3 libMagickCore-7_Q16HDRI4 libMagickWand-7_Q16HDRI4 perl-PerlMagick - updated to 7.0.7-6 * Reset the magick_list_initialized boolean when needed. * Fixed numerous memory leaks. * Support URW-base35 fonts. * Removed "ping_preserve_iCCP=MagickTrue;" statement that was inadvertently added to coders/png.c. - %make_install only for sle12 and higher - Update package summaries and RPM groups. Make use of %make_install. ==== apache2 ==== Version update (2.4.27 -> 2.4.28) Subpackages: apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-utils - updated to 2.4.28: * ) SECURITY: CVE-2017-9798 (cve.mitre.org) Corrupted or freed memory access. <Limit[Except]> must now be used in the main configuration file (httpd.conf) to register HTTP methods before the .htaccess files. [Yann Ylavic] * ) event: Avoid possible blocking in the listener thread when shutting down connections. PR 60956. [Yann Ylavic] * ) mod_speling: Don't embed referer data in a link in error page. PR 38923 [Nick Kew] * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max length in a password file. [Luca Toscano, Hanno B�ck <hanno hboeck de>] * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25). [Jim Jagielski] * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically. PR 61142. * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond), 's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski] * ) mod_http2: Fix for stalling when more than 32KB are written to a suspended stream. [Stefan Eissing] * ) build: allow configuration without APR sources. [Jacob Champion] * ) mod_ssl, ab: Fix compatibility with LibreSSL. PR 61184. [Bernard Spil <brnrd freebsd.org>, Michael Schlenker <msc contact.de>, Yann Ylavic] * ) core/log: Support use of optional "tag" in syslog entries. PR 60525. [Ben Rubson <ben.rubson gmail.com>, Jim Jagielski] * ) mod_proxy: Fix ProxyAddHeaders merging. [Joe Orton] * ) core: Disallow multiple Listen on the same IP:port when listener buckets are configured (ListenCoresBucketsRatio > 0), consistently with the single bucket case (default), thus avoiding the leak of the corresponding socket descriptors on graceful restart. [Yann Ylavic] * ) event: Avoid listener periodic wake ups by using the pollset wake-ability when available. PR 57399. [Yann Ylavic, Luca Toscano] * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have led to spurious HTTP 502 error messages sent on upgrade connections. PR 61283. [Yann Ylavic] - suexec binary moved to main package [bsc#1054741] - do not call and do not ship apache-22-24-upgrade [bsc#1042037] - make the package runable on non systemd systems + deprecated-scripts-arch.patch ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit perl-apparmor python3-apparmor - profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195) ==== cmake ==== Version update (3.9.2 -> 3.9.4) - update to 3.9.4: * FindBoost: Finish reverting "Simplify search in lists" for 3.9 - includes changes from 3.9.3: * VS: Do not consider MAP_IMPORTED_CONFIG_ on non-imported targets bootstrap: Fix running multiple times in-source * vim: Remove default setting of expandtab * FindBoost: Add support for Boost 1.65.0 and 1.65.1 to CMake 3.9 * CTest: fix crash if source file for coverage cannot be found * Autogen: Backport autogen target dependency as file dependency fix * Autogen: Tests: Backport tests for _autogen target dependencies ==== expat ==== Subpackages: libexpat-devel libexpat1 libexpat1-32bit - Allow building when do_profiling is undefined ==== gcc7 ==== Version update (7.2.1+r253221 -> 7.2.1+r253435) Subpackages: cpp7 gcc7-c++ gcc7-fortran gcc7-info gcc7-locale gcc7-objc libasan4 libatomic1 libcilkrts5 libgcc_s1 libgcc_s1-32bit libgfortran4 libgomp1 libitm1 liblsan0 libmpx2 libmpxwrappers2 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-devel-gcc7 libtsan0 libubsan0 - Update to gcc-7-branch head (r253435). * contains fix for PR82406 which blocks chromium build. - Add gcc7-pr81481.diff to fix a register allocation issue. [bnc#1048861] ==== gdb ==== Version update (8.0 -> 8.0.1) - Link gdb against a bundled libipt (processor trace library) on x86_64 and i686 for improved tracing support on Intel CPUs. [bnc#985550] Adds v1.6.1.tar.gz and patches v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch. - Rebase to 8.0.1 release (fixing PR21886, PR22046) - Updated libstdc++ pretty printers to - Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 . - Add patches for s390x z14 feates [fate #321514, fate #322272] gdb-s390x-1b63490.patch gdb-s390x-289e23a.patch gdb-s390x-8fe09d7.patch gdb-s390x-96235dc.patch gdb-s390x-ad33963.patch - Adjust some patches: gdb-ppc-power7-test.patch gdb-rhbz795424-bitpos-20of25.patch gdb-rhbz795424-bitpos-21of25.patch gdb-vla-intel-fortran-vla-strings.patch - Add some patches from Fedora: gdb-rhbz1420304-s390x-01of35.patch gdb-rhbz1420304-s390x-02of35.patch gdb-rhbz1420304-s390x-03of35.patch gdb-rhbz1420304-s390x-04of35.patch gdb-rhbz1420304-s390x-05of35.patch gdb-rhbz1420304-s390x-06of35.patch gdb-rhbz1420304-s390x-07of35.patch gdb-rhbz1420304-s390x-08of35.patch gdb-rhbz1420304-s390x-09of35.patch gdb-rhbz1420304-s390x-10of35.patch gdb-rhbz1420304-s390x-11of35.patch gdb-rhbz1420304-s390x-12of35.patch gdb-rhbz1420304-s390x-13of35.patch gdb-rhbz1420304-s390x-14of35.patch gdb-rhbz1420304-s390x-15of35.patch gdb-rhbz1420304-s390x-16of35.patch gdb-rhbz1420304-s390x-17of35.patch gdb-rhbz1420304-s390x-18of35.patch gdb-rhbz1420304-s390x-19of35.patch gdb-rhbz1420304-s390x-20of35.patch gdb-rhbz1420304-s390x-21of35.patch gdb-rhbz1420304-s390x-22of35.patch gdb-rhbz1420304-s390x-23of35.patch gdb-rhbz1420304-s390x-24of35.patch gdb-rhbz1420304-s390x-25of35.patch gdb-rhbz1420304-s390x-26of35.patch gdb-rhbz1420304-s390x-27of35.patch gdb-rhbz1420304-s390x-28of35.patch gdb-rhbz1420304-s390x-29of35.patch gdb-rhbz1420304-s390x-30of35.patch gdb-rhbz1420304-s390x-31of35.patch gdb-rhbz1420304-s390x-32of35.patch gdb-rhbz1420304-s390x-33of35.patch gdb-rhbz1420304-s390x-34of35.patch gdb-rhbz1420304-s390x-35of35.patch gdb-upstream.patch ==== ghostscript-fonts ==== Subpackages: ghostscript-fonts-other ghostscript-fonts-std - Do no longer mess around with the original fonts: Do no longer try to "improve" the appearance of glyphs in certain fonts in a SUSE-sepcific way. Provide the fonts as originally intended. Now neither the SUSE-sepcific ghostscript-fonts-std-8.11.patch nor special tools like t1ascii and t1binary from the t1utils RPM are needed to build a RPM package that only contains fonts. Cf. the entry below dated "Tue Mar 27 16:57:57 CEST 2012". ==== hplip ==== Version update (3.17.6 -> 3.17.9) Subpackages: hplip-hpijs hplip-sane - Version update to 3.17.9: * Added support for the following new printers: - HP OfficeJet Pro 7720 Wide Format All-in-One - HP DeskJet AMP All-in-One Printer - HP OfficeJet 5220 All-in-One Printer - HP OfficeJet 5230 All-in-One Printer - HP OfficeJet 5232 All-in-One Printer - HP ENVY Photo 6220 All-in-One Printer - HP ENVY Photo 6232 All-in-One Printer - HP ENVY Photo 7120 All-in-One Printer - HP ENVY Photo 7134 All-in-One Printer - HP ENVY Photo 7820 All-in-One Printer - HP ENVY 5020 All-in-One Printer - HP ENVY 5032 All-in-One Printer - HP DeskJet Ink Advantage 3735 All-in-One - HP ENVY Photo 6234 All-in-One Printer - HP ENVY Photo 6230 All-in-One Printer - HP AMP 130 All-in-One Printer - HP OfficeJet Pro 7730 Wide Format All-in-One - HP ENVY Photo 7155 All-in-One Printer - HP ENVY Photo 7164 All-in-One Printer - HP ENVY Photo 7155 All-In-One Printer - HP ENVY Photo 7800 All-In-One Printer - HP ENVY Photo 6200 All-In-One Printer - HP ENVY Photo 7130 All-in-One Printer - HP ENVY Photo 7830 All-in-One Printer - HP ENVY Photo 7120 All-in-One Printer - HP ENVY Photo 7820 All-in-One Printer - HP ENVY Photo 7855 All-in-One Printer - HP DeskJet Ink Advantage 5075 All-in-One Printer - HP PageWide Enterprise Color 765dn - HP PageWide Managed Color E75160dn - HP PageWide Enterprise Color MFP 780dn - HP PageWide Enterprise Color Flow MFP 785f - HP PageWide Enterprise Color Flow MFP 785zs - HP PageWide Enterprise Color Flow MFP 785z+ - HP PageWide Managed Color MFP E77650dn - HP PageWide Managed Color MFP E77650dns - HP PageWide Managed Color MFP E77660dn - HP PageWide Managed Color Flow MFP E77650z - HP PageWide Managed Color Flow MFP E77650zs - HP PageWide Managed Color Flow MFP E77650z+ - HP PageWide Managed Color Flow MFP E77660z - HP PageWide Managed Color Flow MFP E77660zs - HP PageWide Managed Color Flow MFP E77660z+ * from 3.17.7: - HP DeskJet Ink Advantage 2635 All-in-One - HP DeskJet Ink Advantage 2636 All-in-One - HP DeskJet Ink Advantage 2675 All-in-One - HP DeskJet Ink Advantage 2676 All-in-One - HP DeskJet Ink Advantage 2677 All-in-One - HP DeskJet Ink Advantage 2678 All-in-One - HP DeskJet 2620 All-in-One - HP DeskJet 2621 All-in-One - HP DeskJet 2622 All-in-One - HP DeskJet 2623 All-in-One - HP DeskJet Ink Advantage 2200 All-in-One - HP DeskJet 3722 All-in-One - HP DeskJet Ink Advantage 3789 All-in-One - HP DeskJet Ink Advantage 3790 All-in-One ==== installation-images-Kubic ==== Version update (14.335 -> 14.336) - merge gh#openSUSE/installation-images#206 - use the same driver updates for caasp as the dist it is based on - 14.336 ==== jemalloc ==== Version update (4.5.0 -> 5.0.1) - Add 0001-ARM-Don-t-extend-bit-LG_VADDR-to-compute-high-addres.patch: fixes #979. - Add 0001-remove-CPU_SPINWAIT.patch: revert 701daa5298b3befe2aff05ce590533165abb9ba4 in order to fix #761. - Update to version 5.0.1 Bug fixes: * Update decay->nunpurged before purging, in order to avoid potential update races and subsequent incorrect purging volume. ([37]@interwq) * Only abort on dlsym(3) error if the failure impacts an enabled feature (lazy locking and/or background threads). This mitigates an initialization failure bug for which we still do not have a clear reproduction test case. ([38]@interwq) * Modify tsd management so that it neither crashes nor leaks if a thread's only allocation activity is to call free() after TLS destructors have been executed. This behavior was observed when operating with GNU libc, and is unlikely to be an issue with other libc implementations. ([39]@interwq) * Mask signals during background thread creation. This prevents signals from being inadvertently delivered to background threads. ([40]@jasone, [41]@davidtgoldblatt, [42]@interwq) * Avoid inactivity checks within background threads, in order to prevent recursive mutex acquisition. ([43]@interwq) * Fix extent_grow_retained() to use the specified hooks when the arena.<i>.extent_hooks mallctl is used to override the default hooks. ([44]@interwq) * Add missing reentrancy support for custom extent hooks which allocate. ([45]@interwq) * Post-fork(2), re-initialize the list of tcaches associated with each arena to contain no tcaches except the forking thread's. ([46]@interwq) * Add missing post-fork(2) mutex reinitialization for extent_grow_mtx. This fixes potential deadlocks after fork(2). ([47]@interwq) * Enforce minimum autoconf version (currently 2.68), since 2.63 is known to generate corrupt configure scripts. ([48]@jasone) * Ensure that the configured page size (--with-lg-page) is no larger than the configured huge page size (--with-lg-hugepage). ([49]@jasone) New features: * Implement optional per-CPU arena support; threads choose which arena to use based on current CPU rather than on fixed thread-->arena associations. ([59]@interwq) * Implement two-phase decay of unused dirty pages. Pages transition from dirty-->muzzy-->clean, where the first phase transition relies on madvise(... MADV_FREE) semantics, and the second phase transition discards pages such that they are replaced with demand-zeroed pages on next access. ([60]@jasone) * Increase decay time resolution from seconds to milliseconds. ([61]@jasone) * Implement opt-in per CPU background threads, and use them for asynchronous decay-driven unused dirty page purging. ([62]@interwq) * Add mutex profiling, which collects a variety of statistics useful for diagnosing overhead/contention issues. ([63]@interwq) * Add C++ new/delete operator bindings. ([64]@djwatson) * Support manually created arena destruction, such that all data and metadata are discarded. Add MALLCTL_ARENAS_DESTROYED for accessing merged stats associated with destroyed arenas. ([65]@jasone) * Add MALLCTL_ARENAS_ALL as a fixed index for use in accessing merged/destroyed arena statistics via mallctl. ([66]@jasone) * Add opt.abort_conf to optionally abort if invalid configuration options are detected during initialization. ([67]@interwq) * Add opt.stats_print_opts, so that e.g. JSON output can be selected for the stats dumped during exit if opt.stats_print is true. ([68]@jasone) * Add --with-version=VERSION for use when embedding jemalloc into another project's git repository. ([69]@jasone) * Add --disable-thp to support cross compiling. ([70]@jasone) * Add --with-lg-hugepage to support cross compiling. ([71]@jasone) * Add mallctl interfaces (various authors): + background_thread + opt.abort_conf + opt.retain + opt.percpu_arena + opt.background_thread + opt.{dirty,muzzy}_decay_ms + opt.stats_print_opts + arena.<i>.initialized + arena.<i>.destroy + arena.<i>.{dirty,muzzy}_decay_ms + arena.<i>.extent_hooks + arenas.{dirty,muzzy}_decay_ms + arenas.bin.<i>.slab_size + arenas.nlextents + arenas.lextent.<i>.size + arenas.create + stats.background_thread.{num_threads,num_runs,run_interval} + stats.mutexes.{ctl,background_thread,prof,reset}.{num_ops,num_ spin_acq,num_wait,max_wait_time,total_wait_time,max_num_thds,n um_owner_switch} + stats.arenas.<i>.{dirty,muzzy}_decay_ms + stats.arenas.<i>.uptime + stats.arenas.<i>.{pmuzzy,base,internal,resident} + stats.arenas.<i>.{dirty,muzzy}_{npurge,nmadvise,purged} + stats.arenas.<i>.bins.<j>.{nslabs,reslabs,curslabs} + stats.arenas.<i>.bins.<j>.mutex.{num_ops,num_spin_acq,num_wait ,max_wait_time,total_wait_time,max_num_thds,num_owner_switch} + stats.arenas.<i>.lextents.<j>.{nmalloc,ndalloc,nrequests,curle xtents} + stats.arenas.i.mutexes.{large,extent_avail,extents_dirty,exten ts_muzzy,extents_retained,decay_dirty,decay_muzzy,base,tcache_ list}.{num_ops,num_spin_acq,num_wait,max_wait_time,total_wait_ time,max_num_thds,num_owner_switch} Portability improvements: * Improve reentrant allocation support, such that deadlock is less likely if e.g. a system library call in turn allocates memory. ([72]@davidtgoldblatt, [73]@interwq) * Support static linking of jemalloc with glibc. ([74]@djwatson) Optimizations and refactors: * Organize virtual memory as "extents" of virtual memory pages, rather than as naturally aligned "chunks", and store all metadata in arbitrarily distant locations. This reduces virtual memory external fragmentation, and will interact better with huge pages (not yet explicitly supported). ([75]@jasone) * Fold large and huge size classes together; only small and large size classes remain. ([76]@jasone) * Unify the allocation paths, and merge most fast-path branching decisions. ([77]@davidtgoldblatt, [78]@interwq) * Embed per thread automatic tcache into thread-specific data, which reduces conditional branches and dereferences. Also reorganize tcache to increase fast-path data locality. ([79]@interwq) * Rewrite atomics to closely model the C11 API, convert various synchronization from mutex-based to atomic, and use the explicit memory ordering control to resolve various hypothetical races without increasing synchronization overhead. ([80]@davidtgoldblatt) * Extensively optimize rtree via various methods: + Add multiple layers of rtree lookup caching, since rtree lookups are now part of fast-path deallocation. ([81]@interwq) + Determine rtree layout at compile time. ([82]@jasone) + Make the tree shallower for common configurations. ([83]@jasone) + Embed the root node in the top-level rtree data structure, thus avoiding one level of indirection. ([84]@jasone) + Further specialize leaf elements as compared to internal node elements, and directly embed extent metadata needed for fast-path deallocation. ([85]@jasone) + Ignore leading always-zero address bits (architecture-specific). ([86]@jasone) * Reorganize headers (ongoing work) to make them hermetic, and disentangle various module dependencies. ([87]@davidtgoldblatt) * Convert various internal data structures such as size class metadata from boot-time-initialized to compile-time-initialized. Propagate resulting data structure simplifications, such as making arena metadata fixed-size. ([88]@jasone) * Simplify size class lookups when constrained to size classes that are multiples of the page size. This speeds lookups, but the primary benefit is complexity reduction in code that was the source of numerous regressions. ([89]@jasone) * Lock individual extents when possible for localized extent operations, rather than relying on a top-level arena lock. ([90]@davidtgoldblatt, [91]@jasone) * Use first fit layout policy instead of best fit, in order to improve packing. ([92]@jasone) * If munmap(2) is not in use, use an exponential series to grow each arena's virtual memory, so that the number of disjoint virtual memory mappings remains low. ([93]@jasone) * Implement per arena base allocators, so that arenas never share any virtual memory pages. ([94]@jasone) * Automatically generate private symbol name mangling macros. ([95]@jasone) Incompatible changes: * Replace chunk hooks with an expanded/normalized set of extent hooks. ([96]@jasone) * Remove ratio-based purging. ([97]@jasone) * Remove --disable-tcache. ([98]@jasone) * Remove --disable-tls. ([99]@jasone) * Remove --enable-ivsalloc. ([100]@jasone) * Remove --with-lg-size-class-group. ([101]@jasone) * Remove --with-lg-tiny-min. ([102]@jasone) * Remove --disable-cc-silence. ([103]@jasone) * Remove --enable-code-coverage. ([104]@jasone) * Remove --disable-munmap (replaced by opt.retain). ([105]@jasone) * Remove Valgrind support. ([106]@jasone) * Remove quarantine support. ([107]@jasone) * Remove redzone support. ([108]@jasone) * Remove mallctl interfaces (various authors): + config.munmap + config.tcache + config.tls + config.valgrind + opt.lg_chunk + opt.purge + opt.lg_dirty_mult + opt.decay_time + opt.quarantine + opt.redzone + opt.thp + arena.<i>.lg_dirty_mult + arena.<i>.decay_time + arena.<i>.chunk_hooks + arenas.initialized + arenas.lg_dirty_mult + arenas.decay_time + arenas.bin.<i>.run_size + arenas.nlruns + arenas.lrun.<i>.size + arenas.nhchunks + arenas.hchunk.<i>.size + arenas.extend + stats.cactive + stats.arenas.<i>.lg_dirty_mult + stats.arenas.<i>.decay_time + stats.arenas.<i>.metadata.{mapped,allocated} + stats.arenas.<i>.{npurge,nmadvise,purged} + stats.arenas.<i>.huge.{allocated,nmalloc,ndalloc,nrequests} + stats.arenas.<i>.bins.<j>.{nruns,reruns,curruns} + stats.arenas.<i>.lruns.<j>.{nmalloc,ndalloc,nrequests,curruns} + stats.arenas.<i>.hchunks.<j>.{nmalloc,ndalloc,nrequests,curhch unks} Bug fixes: * Improve interval-based profile dump triggering to dump only one profile when a single allocation's size exceeds the interval. ([109]@jasone) * Use prefixed function names (as controlled by - -with-jemalloc-prefix) when pruning backtrace frames in jeprof. ([110]@jasone) ==== libcdio ==== Subpackages: libcdio++0 libcdio-devel libcdio16 libiso9660-10 libudf0 - Fix symbol versioning, some symbols where no longer exported with a version, thus the library inadvertently broke ABI between version 0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907 * add 0001-Fix-symbol-versioning-for-exported-symbols.patch ==== libcroco ==== - Remove --with-pic which is useless with --disable-static. - Rectify RPM groups. Remove redundant %clean section. - Drop gtk-doc BuildRequires: Do not build documentation (helps eliminate a build cycle). This is no loss for the package, as we simply install the pre-built doc from the tarball. ==== libusbmuxd ==== Subpackages: libusbmuxd-devel libusbmuxd4 - Rectify RPM groups. ==== libvirt ==== Version update (3.7.0 -> 3.8.0) Subpackages: libvirt-client libvirt-daemon libvirt-daemon-config-network libvirt-daemon-config-nwfilter libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-driver-uml libvirt-daemon-driver-vbox libvirt-daemon-lxc libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - apparmor: add dnsmasq ptrace rule to libvirtd profile c44b29aa-apparmor-dnsmasq-ptrace.patch bsc#1060860 - spec: Add dependency to UEFI firmwares since paths are specified at build time - Update to libvirt 3.8.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 92bd87a2-ryzen-test-data.patch, 5c83b360-epyc-test-data.patch, a0b62843-epyc-cpu-model.patch, f305d8a1-apparmor-attach_disconnected.patch, b482925c-apparmor-ptrace-support.patch - Enable firewalld support for openSUSE >= 42.2 ==== mozilla-nspr ==== Version update (4.16 -> 4.17) - update to version 4.17 * changes to the Windows implementation of the networking code required for Firefox 57 * a FreeBSD build fix (bmo#1391716) ==== mozilla-nss ==== Version update (3.32.1 -> 3.33) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.33 Notable changes * TLS compression is no longer supported. API calls that attempt to enable compression are accepted without failure. However, TLS compression will remain disabled. * This version of NSS uses a formally verified implementation of Curve25519 on 64-bit systems. * The compile time flag DISABLE_ECC has been removed. * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks are not performed anymore. * Various minor improvements and correctness fixes. New functionality * When listing an NSS database using certutil -L, but the database hasn't yet been initialized with any non-empty or empty password, the text "Database needs user init" will be included in the listing. * When using certutil to set an inacceptable password in FIPS mode, a correct explanation of acceptable passwords will be printed. New functions * CERT_FindCertByIssuerAndSNCX - a variation of existing function CERT_FindCertByIssuerAndSN that accepts an additional password context parameter. * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing function CERT_FindCertByNicknameOrEmailAddr that accepts an additional password context parameter. * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of existing function CERT_FindCertByNicknameOrEmailAddrForUsage that accepts an additional password context parameter. * NSS_SecureMemcmpZero - check if a memory region is all zero in constant time. * PORT_ZAllocAligned - allocate aligned memory. * PORT_ZAllocAlignedOffset - allocate aligned memory for structs. * SSL_GetExperimentalAPI - access experimental APIs in libssl. - add patch to separate hw and sw implementations for AES and GCM to avoid implicit execution of SSE2 methods if compiled for i586 (bmo-1400603.patch, boo#1061204) ==== opencc ==== Version update (1.0.3.1 -> 1.0.5) Subpackages: libopencc2 opencc-data - Update to 1.0.5 * Fix link error for mingw * Try fix error nodejs_version=4; Platform: x86 * Add support for node stable && remove v0.12 * Update artifacts * Artifacts for appveyor ==== php7 ==== Subpackages: apache2-mod_php7 php7-bcmath php7-bz2 php7-calendar php7-ctype php7-curl php7-dba php7-devel php7-dom php7-exif php7-fastcgi php7-ftp php7-gd php7-gettext php7-gmp php7-iconv php7-imap php7-json php7-ldap php7-mbstring php7-mysql php7-odbc php7-openssl php7-pdo php7-pear php7-pear-Archive_Tar php7-pgsql php7-shmop php7-snmp php7-sockets php7-sqlite php7-sysvsem php7-sysvshm php7-tidy php7-tokenizer php7-wddx php7-xmlreader php7-xmlwriter php7-xsl php7-zlib - fixed installation of wrong cli [bsc#1061555] - Update not-so-useful repeated package summaries. Update the descriptions to have a bit more explanation. Replace old tar syntax. ==== python-cffi ==== Version update (1.10.0 -> 1.11.1) Subpackages: python2-cffi python3-cffi - Update pytest in spec to add c directory tests in addition to testing directory. - Omit test_init_once_multithread tests as they rely on multiple threads finishing in a given time. Returns sporadic pass/fail within build. - Update to 1.11.1: * Fix tests, remove deprecated C API usage * Fix (hack) for 3.6.0/3.6.1/3.6.2 giving incompatible binary extensions (cpython issue #29943) * Fix for 3.7.0a1+ - Update to 1.11.0: * Support the modern standard types char16_t and char32_t. These work like wchar_t: they represent one unicode character, or when used as charN_t * or charN_t[] they represent a unicode string. The difference with wchar_t is that they have a known, fixed size. They should work at all places that used to work with wchar_t (please report an issue if I missed something). Note that with set_source(), you need to make sure that these types are actually defined by the C source you provide (if used in cdef()). * Support the C99 types float _Complex and double _Complex. Note that libffi doesn?t support them, which means that in the ABI mode you still cannot call C functions that take complex numbers directly as arguments or return type. * Fixed a rare race condition when creating multiple FFI instances from multiple threads. (Note that you aren?t meant to create many FFI instances: in inline mode, you should write ffi = cffi.FFI() at module level just after import cffi; and in out-of-line mode you don?t instantiate FFI explicitly at all.) * Windows: using callbacks can be messy because the CFFI internal error messages show up to stderr?but stderr goes nowhere in many applications. This makes it particularly hard to get started with the embedding mode. (Once you get started, you can at least use @ffi.def_extern(onerror=...) and send the error logs where it makes sense for your application, or record them in log files, and so on.) So what is new in CFFI is that now, on Windows CFFI will try to open a non-modal MessageBox (in addition to sending raw messages to stderr). The MessageBox is only visible if the process stays alive: typically, console applications that crash close immediately, but that is also the situation where stderr should be visible anyway. * Progress on support for callbacks in NetBSD. * Functions returning booleans would in some case still return 0 or 1 instead of False or True. Fixed. * ffi.gc() now takes an optional third parameter, which gives an estimate of the size (in bytes) of the object. So far, this is only used by PyPy, to make the next GC occur more quickly (issue #320). In the future, this might have an effect on CPython too (provided the CPython issue 31105 is addressed). * Add a note to the documentation: the ABI mode gives function objects that are slower to call than the API mode does. For some reason it is often thought to be faster. It is not! - Update to 1.10.1: * Fixed the line numbers reported in case of cdef() errors. Also, I just noticed, but pycparser always supported the preprocessor directive # 42 "foo.h" to mean ?from the next line, we?re in file foo.h starting from line 42?, which it puts in the error messages. ==== python-ldap ==== Version update (2.4.44 -> 2.4.45) - update to upstream release 2.4.45 * fixed error handling ==== scons ==== Version update (2.5.1 -> 3.0.0) - SCons 3.0.0, a major release: * Some targets may rebuild when upgrading. * Significant changes in some python action signatures * Supports Python version earlier than 2.7 and 3.5+ * Switching between PY 2.7 and PY 3.5, 3.6 will cause rebuilds * Updated language support: D, LaTeX, docbook * Remove deprecated tools CVS, Perforce, BitKeeper, RCS, SCCS, Subversion * Removed deprecated module SCons.Sig - refresh scons-1.2.0-fix-install.patch to scons-3.0.0-fix-install.patch - drop scons-1.2.0-noenv.patch, fix is done in spec - drop rpmlintrc, no longer needed - prevent a regression that would require Python3 syntax for print statements, add scons-3.0.0-support-python-2-prints.patch ==== sysdig ==== Version update (0.17.0_k4.13.5_1 -> 0.19.1_k4.13.5_1) - Update to version 0.19.1: * Fix a compilation issue on old versions of kernels 2.6.32 shipped by RHEL/CentOS - Changes for version 0.19.0: * Add per-cpu counters when a tracepoint is hit [#947] * mq_unlink syscall reports as ptrace [#927] * Fixed copy-paste typo [#946] * expose the event masking/unmasking mechanism at the inspector level [#951] * Fix targetViewFilter for "Accessed Files" in wsysdig_summary chisel [#952] * Various improvements and fixes for Sysdig Inspect - Changes for version 0.18.0: * Changed language of CLA to also cover government contributions [#902] * Support mapped container docker networking mode, currently used by k8s pods [#922] * Allow an external event capture dumper object to be used together with an inspector object [#912] * Handle reading large execve args/env that might otherwise cause a page fault [#920] * Add container events (container start/stop/etc) to capture files. In the future, will also be used for orchestrator information. [#935] * Add the executable path as a filterable/displayable item proc.exepath [#845] [#934] * Small README changes [#936] * Support additional flags to clone() syscall [#909] * Support page faults as events [#904] * Support for upcoming visualization product [#931] * Compilation fixes for sysdig monitor agent [#942] * Fix minor problems found by valgrind [#938] * Fix crash when reading large messages from docker daemon [#932] * Better cleanup of failed installation of the sysdig driver under coreos [#926] * Ensure that a parent's ptid is set when an execve fills in information on a new process [#914] * Fix IN operator so it works with non-string values [#913] * fix compile errors with newer versions of libcurl [#895] [#911] * fix compile errors when O_DIRECTORY not defined [#907] * Use session id, not process group id, for proc.sid [#904] [#905] * Small docs fixes related to container.mount.* [#901] * Update installation script to use latest version of EPEL repository [#897] - Drop no longer needed sysdig-curlbuild.patch ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-bash-completion systemd-logger systemd-sysvinit udev - Damn forgot to drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch in the spec file - Import commit 6dea894131d78b20b9e0482f75afa6ee4dec8627 1cdd944b0 unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1004995) This make 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch not needed anymore. - Import commit 93688f8e53b4e482a55a7d4aba2d927ddedebdde c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline - Import commit c1e8af7d1e8b09c2878a5b17f513bfc41ae46dc6 982754275 build-sys: make sure 61-persitent-storage-compat.rules is installed with meson 9ac2e8b9b udev: proc_cmdline_get_key() FTW! (#6925) ==== xkeyboard-config ==== Version update (2.21 -> 2.22) - Update to version 2.22: + typofix tel-sarala key layout + Whitelist Indian keyboard layouts. #101532 + Enable level3 ralt_switch by default in Kazakh (ext) layout. + Extend more keys in Kazakh (ext) layout. + Add "AltGr" back into the description for altgr-intl layouts + Added Old Hungarian layout + ctrl: add missing modifier_map + Add grp:menu_switch + adds the shortDescription for es-cat and es-ast layouts + Added Friulian translation + Missing fur in ALL_LINGUAS added + Add a Arabic version of Jawi keyboard layout and it's own phonetic version + Adding Finnish Dvorak layout + Add Ladin layout for it and de keyboards + Double Russian fixed + Possible typo in word "lever" + Typo for Dell latitude + Choose only one between "behavior" and "behaviour" + Typo in "non-breakable space" + Spelling fix in guillemets + Add Swedish sv_dvorak based on us dvorak-intl + fixed nontranslatable description and shortDescription tags + Prerelease translations sync + Added a bit of explanation for diff, to make it clear + Fixed old Hungarian + Replaced NoSymbol with dead_belowmacron in default German keyboard layout + Added Polyglot and Reactionary Russian layout ==== xml-commons ==== Subpackages: xml-commons-jaxp-1.2-apis xml-commons-jaxp-1.3-apis xml-commons-resolver11 - Don't depend on java-1_5_0-gcj-compat - Depend on java-devel >= 1.6 instead - Added patch: * xml-commons-encoding.patch + Specify file encoding UTF-8 to avoid build breakages with jdk9 ==== xmlbeans ==== - Remove the dependency on java-1_5_0-gcj-compat - Use java source and target level 1.6 also for xmlbeans-mini - Clean spec files ==== xorg-x11-server ==== Version update (1.19.3 -> 1.19.4) Subpackages: xorg-x11-server-sdk - Update to version 1.19.4: A collection of stability fixes from the development branch, including two minor CVEs (CVE-2017-13721, CVE-2017-13723). - Remove upstream patches: + U_Xi-Do-not-try-to-swap-GenericEvent.patch + U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch + U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch + U_dix-Disallow-GenericEvent-in-SendEvent-request.patch - Adapt patches to work with the new release: + u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch ==== yast2-snapper ==== Version update (4.0.0 -> 4.0.1) - make dialog caption bigger (bsc#1061498) - 4.0.1 ==== zypper ==== Version update (1.13.36 -> 1.13.37) Subpackages: zypper-aptitude zypper-log - Add summary hint if product is better updated by a different command. This is mainly used by rolling distributions like Tumbleweed to remind their users to use 'zypper dup' to update (not zypper up or patch). (bsc#1061384) - version 1.13.37 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org