Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20190219 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ddclient inxi (3.0.30 -> 3.0.32) krb5 (1.16.1 -> 1.17) perl-Cpanel-JSON-XS (4.08 -> 4.09) perl-Image-ExifTool (11.24 -> 11.27) permissions (20181116 -> 20190212) pim-sieve-editor rdesktop squid sssd suse-module-tools (15.1.0 -> 15.1.10) tgt (1.0.60 -> 1.0.74) xcalc (1.0.6 -> 1.0.7) xf86-video-chips (1.3.0 -> 1.4.0) xf86-video-tdfx (1.4.7 -> 1.5.0) xfce4-panel-plugin-diskperf yast2-installation (4.1.35 -> 4.1.36) yast2-packager (4.1.26 -> 4.1.27) yast2-theme (4.1.9 -> 4.1.10) === Details === ==== ddclient ==== - Ensure neutrality of description. - Do not ignore errors from useradd. - Avoid %__-type macro indirection. ==== inxi ==== Version update (3.0.30 -> 3.0.32) - Update to version 3.0.32: * See /usr/share/doc/packages/inxi/inxi.changelog ==== krb5 ==== Version update (1.16.1 -> 1.17) Subpackages: krb5-32bit - Replace old $RPM_* shell vars - Upgrade to 1.17. Major changes: Administrator experience: * A new Kerberos database module using the Lightning Memory-Mapped Database library (LMDB) has been added. The LMDB KDB module should be more performant and more robust than the DB2 module, and may become the default module for new databases in a future release. * "kdb5_util dump" will no longer dump policy entries when specific principal names are requested. Developer experience: * The new krb5_get_etype_info() API can be used to retrieve enctype, salt, and string-to-key parameters from the KDC for a client principal. * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise principal names to be used with GSS-API functions. * KDC and kadmind modules which call com_err() will now write to the log file in a format more consistent with other log messages. * Programs which use large numbers of memory credential caches should perform better. Protocol evolution: * The SPAKE pre-authentication mechanism is now supported. This mechanism protects against password dictionary attacks without requiring any additional infrastructure such as certificates. SPAKE is enabled by default on clients, but must be manually enabled on the KDC for this release. * PKINIT freshness tokens are now supported. Freshness tokens can protect against scenarios where an attacker uses temporary access to a smart card to generate authentication requests for the future. * Password change operations now prefer TCP over UDP, to avoid spurious error messages about replays when a response packet is dropped. * The KDC now supports cross-realm S4U2Self requests when used with a third-party KDB module such as Samba's. The client code for cross-realm S4U2Self requests is also now more robust. User experience: * The new ktutil addent -f flag can be used to fetch salt information from the KDC for password-based keys. * The new kdestroy -p option can be used to destroy a credential cache within a collection by client principal name. * The Kerberos man page has been restored, and documents the environment variables that affect programs using the Kerberos library. Code quality: * Python test scripts now use Python 3. * Python test scripts now display markers in verbose output, making it easier to find where a failure occurred within the scripts. * The Windows build system has been simplified and updated to work with more recent versions of Visual Studio. A large volume of unused Windows-specific code has been removed. Visual Studio 2013 or later is now required. - Use systemd-tmpfiles to create files under /var/lib/kerberos, required by transactional updates; (bsc#1100126); - Rename patches: * krb5-1.12-pam.patch => 0001-krb5-1.12-pam.patch * krb5-1.9-manpaths.dif => 0002-krb5-1.9-manpaths.patch * krb5-1.12-buildconf.patch => 0003-krb5-1.12-buildconf.patch * krb5-1.6.3-gssapi_improve_errormessages.dif to 0004-krb5-1.6.3-gssapi_improve_errormessages.patch * krb5-1.6.3-ktutil-manpage.dif => 0005-krb5-1.6.3-ktutil-manpage.patch * krb5-1.12-api.patch => 0006-krb5-1.12-api.patch * krb5-1.12-ksu-path.patch => 0007-krb5-1.12-ksu-path.patch * krb5-1.12-selinux-label.patch => 0008-krb5-1.12-selinux-label.patch * krb5-1.9-debuginfo.patch => 0009-krb5-1.9-debuginfo.patch ==== perl-Cpanel-JSON-XS ==== Version update (4.08 -> 4.09) - updated to 4.09 see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes 4.09 2019-02-15 (rurban) - Add seperate allow_dupkeys property, in relaxed (#122) - Fixed allow_dupkeys for the XS slow path - Silence 2 -Wunused-value warnings - Fix ->unblessed_bool to produce modifiable perl structures (PR #121 by Pali) ==== perl-Image-ExifTool ==== Version update (11.24 -> 11.27) Subpackages: exiftool perl-File-RandomAccess - Update to version 11.27 * See /usr/share/doc/packages/perl-Image-ExifTool/Changes ==== permissions ==== Version update (20181116 -> 20190212) - Update to version 20190212: * removed old entry for wodim * removed old entry for netatalk * removed old entry for suidperl * removed old entriy for utempter * removed old entriy for hostname * removed old directory entries * removed old entry for qemu-bridge-helper * removed old entries for pccardctl * removed old entries for isdnctrl * removed old entries for unix(2)_chkpwd * removed old entries for mount.nfs * removed old entries for (u)mount * removed old entry for fileshareset * removed old entries for KDE * removed old entry for heartbeat * removed old entry for gnome-control-center * removed old entry for pcp * removed old entry for lpdfilter * removed old entry for scotty * removed old entry for ia32el * removed old entry for squid * removed old qpopper whitelist * removed pt_chown entries. Not needed anymore and a bad idea anyway * removed old majordomo entry * removed stale entries for old ncpfs tools * removed old entry for rmtab * Fixed typo in icinga2 whitelist entry * New whitelisting for /usr/lib/virtualbox/VirtualBoxVM and removed stale entries for VirtualBox * Removed whitelist for /usr/bin/su.core. According to comment a temporary hack introduced 2012 to help moving su from coretuils to util-linux. I couldn't find it anywhere, so we don't need it anymore * Remove entry for /usr/bin/yaps. We don't ship it anymore and the group that is used doesn't exists anymore starting with Leap 15, so it will not work there anyway. Users using this (old) package can do this individually * removed entry for /etc/ftpaccess. We currently don't have it anywhere (and judging from my search this has been the case for quite a while) * Ensure consistency of entries, otherwise switching between settings becomes problematic * Fix spelling of SUSE * permissions.local: fix typo ==== pim-sieve-editor ==== Subpackages: pim-sieve-editor-lang - Remove unneeded build requirements ==== rdesktop ==== - Trim redundant wording from description. - Use %make_install. ==== squid ==== - Revert whitespace deletions of .changes as it makes diffs a pain. - Do not hide errors from useradd. Make scriptlets plain sh compatible. ==== sssd ==== Subpackages: libnfsidmap-sss libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-32bit sssd-krb5-common sssd-ldap - Add krb-noversion.diff so sssd_pac builds even with newer krb. ==== suse-module-tools ==== Version update (15.1.0 -> 15.1.10) - Update to version 15.1.10 (git b28b13d): - implemented fs blacklisting logic (jsc#SLES-4085, fate#326832) ==== tgt ==== Version update (1.0.60 -> 1.0.74) - Update to version v1.0.74 from version v1.0.60: * tgt 1.0.74 * AIO backing store now reports a list of supported opcodes * tgt 1.0.73 * Update tgt-admin * fix build w/newer glibc * Display nop_count and and nop_interval * Quote $backing_store variable in system(), execute() and backtick-calls * Buffer size is stored in struct concat_buf.size field, so use that instead of BUFSIZE since buffer size can be more than BUFSIZE. Also, remove BUFSIZE since its not used anymore. * tgt 1.0.72 * smc: fix snprintf warnings with gcc7 This removed the tarball v1.0.60.tar.gz, and replaced it with v1.0.74.tar.gz, which can now be gotten using the new _service file. This also updated the SPEC file with the new version number and the different patch set. Remaining patches were renumbered. This following patches were UPDATED (refreshed): * tgt-fix-build * tgt-include-sys-macros-for-major.patch The following patches were REMOVED (no longer needed): * tgt-handle-access-of-a-target-that-has-been-removed * tgt-missing-module-directory-not-an-error * tgt-compare-pointer-to-null.patch And the following patch was added (and submitted upstream): * tgt-Fix-gcc7-string-truncation-warnings.patch ==== xcalc ==== Version update (1.0.6 -> 1.0.7) - Update to version 1.0.7 * This release fixes things that cause warnings from gcc or cppcheck, as well as assorted build system maintenance and tuneups. ==== xf86-video-chips ==== Version update (1.3.0 -> 1.4.0) - update to release 1.4.0 * This is a bug fix release of Chips & Technologies DDX for X.Org X Server. There was an X Server crash bug with the Version 1.3 and older code when the code was converted for a newer vgaHW ABI. This affects devices older than the HiQVideo generation. This release fixes this particular issue. Please note that the code may not compile against X Server 1.20 since it no longer supports 24-bit color. ==== xf86-video-tdfx ==== Version update (1.4.7 -> 1.5.0) - Update to version 1.5.0 * This is a maintenance release of 3dfx DDX for X.Org X Server. The DDX compiles cleanly without compilation warnings on X Server 1.19.6. ==== xfce4-panel-plugin-diskperf ==== Subpackages: xfce4-panel-plugin-diskperf-lang - Added patch missing_sysmacros.patch sys/sysmacros.h required for glibc-2.25+ (bxo#13940) and (boo#1125650) ==== yast2-installation ==== Version update (4.1.35 -> 4.1.36) - Save the used repositories at the end of installation to not offer the driver packages again (bsc#953522) - 4.1.36 ==== yast2-packager ==== Version update (4.1.26 -> 4.1.27) - Automatically preselect the driver packages from new repositories (bsc#953522) - 4.1.27 ==== yast2-theme ==== Version update (4.1.9 -> 4.1.10) Subpackages: yast2-theme-breeze yast2-theme-oxygen - Update oxygen icon theme (boo#1125450) - 4.1.10 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org