Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=15.0&build=139.1&groupid=50 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&query_format=advanced&resolution=---&version=Leap%2015.0 When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3m... to record your testing efforts and use bugzilla to report bugs. Packages changed: aaa_base (84.87+git20180205.2d2832f -> 84.87+git20180208.8eeab90) autoyast2 (4.0.29 -> 4.0.31) branding-openSUSE calibre (3.16.0 -> 3.17.0) csmash device-mapper digikam dleyna-renderer (0.5.0 -> 0.6.0) drbd-utils epiphany (3.26.5.1 -> 3.26.6) filesystem gstreamer-rtsp-server insserv-compat installation-images-openSUSE (14.358 -> 14.359) kernel-firmware (20180119 -> 20180201) libstorage-ng (3.3.151 -> 3.3.163) lvm2 mdadm mpc (1.0.3 -> 1.1.0) multipath-tools openssh plasma5-pk-updates python-numpy ripit rpm rsibreak (0.12.7 -> 0.12.8) sg3_utils slang sox yast2 (4.0.49 -> 4.0.53) yast2-add-on (4.0.5 -> 4.0.6) yast2-bootloader (4.0.15 -> 4.0.18) yast2-control-center (3.3.0 -> 4.0.0) yast2-country (4.0.19 -> 4.0.20) yast2-firewall (4.0.12 -> 4.0.14) yast2-installation (4.0.31 -> 4.0.33) yast2-metapackage-handler (3.1.4 -> 4.0.0) yast2-packager (4.0.36 -> 4.0.39) yast2-pkg-bindings (4.0.7 -> 4.0.9) yast2-services-manager (4.0.1 -> 4.0.2) yast2-storage-ng (4.0.88 -> 4.0.97) yast2-update (4.0.8 -> 4.0.9) yast2-vm (3.2.4 -> 3.2.5) === Details === ==== aaa_base ==== Version update (84.87+git20180205.2d2832f -> 84.87+git20180208.8eeab90) Subpackages: aaa_base-extras aaa_base-malloccheck - Update to version 84.87+git20180208.8eeab90: * Don't call fillup for removed sysconfig.news * Adjust path for script converting sysctl config * For ksh use builtin keyword 'function' to make sure that the keyword 'typeset' really set the variable IFS to be local within the function _ls. ==== autoyast2 ==== Version update (4.0.29 -> 4.0.31) Subpackages: autoyast2-installation - fate#319119 - yast2-ca-management is dropped - 4.0.31 - fate#323373 - Xinetd and yast2-inetd are not supported. Marking respective autoyast section as obsolete. - 4.0.30 ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE - Fix uninitialized $gfx_mode ==== calibre ==== Version update (3.16.0 -> 3.17.0) - update to 3.17.0 New Features - Allow splitting the book list, by right clicking on the column headers and choosing 'Split the book list' - Store temporary files used by the editor and viewer in the cache directory to try to prevent errors caused by 'file cleaner' programs deleting temporary files still in use Bug Fixes - EPUB3 Input: Fix HTML covers and titlepages that are marked using the deprecated element not being recognized. - Bulk metadata edit: Fix regression in 3.13 that made it impossible to use the Force numbering checkbox for custom series - Conversion: Fix the valign attribute on tags not being honored - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu action not working on some Windows systems - E-book viewer: Make the semi-transparent background for viewing metadata a little more opaque. ==== csmash ==== - FIx buildRequires so metapackages xorg-x11-devel, Mesa-devel are not required anymore. ==== device-mapper ==== Subpackages: libdevmapper-event1_03 libdevmapper1_03 libdevmapper1_03-32bit - Fix detection of clvm that happens on compile time based on CLVM_PIDFILE, as we determine these features on runtime bsc#1080299: + bsc1080299-detect-clvm-properly.patch ==== digikam ==== Subpackages: digikam-doc digikam-lang kipi-plugins kipi-plugins-lang libdigikamcore5 showfoto - Fix broken rebase of 0001-Disable-detection-of-OpenGL-for-GLES-platforms.patch ==== dleyna-renderer ==== Version update (0.5.0 -> 0.6.0) - Update to version 0.6.0: + Ensure that g_context.watchers has a valid value. + Used core functionality dleyna_core_prv_convert_udn_to_path for persistent path. + [m4]: - Don't use bash arrays in m4 macros. - Don't use bash "let" builtin. - Use AS_VAR_APPEND macro instead of "+=". + Avoid any attempts to delete the same dlr_upnp_t twice. + Uninitialized argument value in prv_open_uri_cb. - Do a minor spec cleanup, add missing COPYING. - Add libtool BuildRequires and pass autoreconf, bootstrap tarball. - Pass --disable-static to configure, ensure we do not build any static files. ==== drbd-utils ==== - bsc#1077176, pass the string to backend. - bsc#1058770, fix kernel trace while starting sync stacked drbd - Add patch Fix-no-bitmap-allocate-for-stacked-res.patch - Add patch Support-pass-force-to-dump-md.patch ==== epiphany ==== Version update (3.26.5.1 -> 3.26.6) Subpackages: epiphany-lang - Update to version 3.26.6: + Fix download of blob URIs (bgo#788576). + Fix WhatsApp web app (bgo#790781). + Fix profile migrator deleting bookmarks if run multiple times (bgo#792683). + Add touch support for address bar icons (bgo#792876). + Fix placement of select element with multiple monitors (bgo#792940). + Hopefully fix the search provider. - Drop epiphany-application-mode-fix-desktopfile.patch, epiphany-fix-download-of-blob-URIs.patch and epiphany-search-provider-fix.patch: Fixed upstream. ==== filesystem ==== - Exclude some directories from fs-var.conf which are already part of systemd [bsc#1078466]. - Remove obsolete, outdated or duplicate directories: /lib/YaST, /lib/lsb, /srv/ftp, /usr/lib/lsb, /usr/share/nls and /usr/share/tmac. ==== gstreamer-rtsp-server ==== - Add upstream bug fix patches: + gst-rtsp-server-rtsp-client-add-type-annotations.patch. + gst-rtsp-server-gst_rtsp_context_get_current.patch. + gst-rtsp-server-add-annotations-and-API-guards.patch. ==== insserv-compat ==== - Own the lib/lsb directories, without this package, lsb init scripts are not supported and nobody else is using them. ==== installation-images-openSUSE ==== Version update (14.358 -> 14.359) - merge gh#openSUSE/installation-images#234 - add vmd.ko module (bsc#1079924) - 14.359 ==== kernel-firmware ==== Version update (20180119 -> 20180201) Subpackages: ucode-amd - Update to version 20180201: * linux-firmware: Add firmware file for Intel Bluetooth,9560 * linux-firmware: Add firmware file for Intel Bluetooth,9260 * linux-firmware: Update firmware file for Intel Bluetooth,8265 * wl127x/wl128x: update PLT firmwares * linux-firmware: intel: Update Kabylake audio firmware - Mark license files as such ==== libstorage-ng ==== Version update (3.3.151 -> 3.3.163) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#467 - cleanup - added integration test - added jfs support (boo#1078552) - 3.3.163 - merge gh#openSUSE/libstorage-ng#466 - improve ruby bindings - 3.3.162 - merge gh#openSUSE/libstorage-ng#465 - extended is_usable_as_blk_device() - 3.3.161 - merge gh#openSUSE/libstorage-ng#464 - use system devicegraph during probe - merge gh#openSUSE/libstorage-ng#463 - added function is_usable_as_blk_device() - added function is_usable_as_partitionable() - 3.3.160 - merge gh#openSUSE/libstorage-ng#462 - added function to immediately activate/deactivate mount point - added documentation - code cleanup - 3.3.159 - merge gh#openSUSE/libstorage-ng#461 - work on error handling - added documentation - coding style - extended test case - 3.3.158 - merge gh#openSUSE/libstorage-ng#460 - Removed unit tests that clash with new glibc number formatting (bsc#1079855) - 3.3.157 - merge gh#openSUSE/libstorage-ng#459 - extended unit tests - added and improved math functions - do not rely on 80-bit floats (bsc#1078997) - added unit test - added note - 3.3.156 - merge gh#openSUSE/libstorage-ng#458 - removed deprecated functions - updated unit test - 3.3.155 - merge gh#openSUSE/libstorage-ng#457 - improved error logging - 3.3.154 - merge gh#openSUSE/libstorage-ng#454 - allow to set ssh port - 3.3.153 - merge gh#openSUSE/libstorage-ng#456 - fetch the full history in travis so the log can be generated correctly - 3.3.152 ==== lvm2 ==== Subpackages: liblvm2app2_2 liblvm2cmd2_02 - Fix detection of clvm that happens on compile time based on CLVM_PIDFILE, as we determine these features on runtime bsc#1080299: + bsc1080299-detect-clvm-properly.patch ==== mdadm ==== - policy.c: Avoid to take spare without defined domain by imsm (bsc#1076588) 0209-policy.c-Avoid-to-take-spare-without-defined-domain-.patch ==== mpc ==== Version update (1.0.3 -> 1.1.0) - Update to version 1.1.0. - Compatible with mpfr 4.0.0, obsoletes mpc-1.0.3-addsubulp.diff and mpc-1.0.3-fmma.diff. - New functions mpc_cmp_abs and mpc_rootofunity - Rewrite of the testing framework - New mpcbench tool, used with make bench - Fixed handling of over- and underflows with directed rounding in the "other direction" for mpc_cos, mpc_sin, mpc_exp and mpc_pow - Fixed a bug in mpc_atan(0,y) with |y| near 1 - Adjust URLs to tarball and signature. - Add mpc-1.0.3-addsubulp.diff and mpc-1.0.3-fmma.diff to fix build with mpfr 4.0.0. - Add gpg signature - Add info scriplet dependencies and move them to correct sections - Cleanup spec file with spec-cleaner ==== multipath-tools ==== Subpackages: kpartx multipath-tools-rbd - Fix whitespace in dracut conf file (bsc#1080562) ==== openssh ==== Subpackages: openssh-helpers - add OpenSSL 1.0 to 1.1 shim to remove dependency on old OpenSSL (update tracker: bsc#1080779) ==== plasma5-pk-updates ==== Subpackages: plasma5-pk-updates-lang - Add patch to close the plasmoid after update installation (boo#1077633): * 0001-Close-the-plasmoid-after-updates-got-installed.patch ==== python-numpy ==== Subpackages: python2-numpy python3-numpy - Fix summary in module files (bnc#1080259) - The HPC of python-numpy expects openBLAS. OpenBLAS is not availble for sc390: disable buidling on s390 for HPC (bsc#1079513). ==== ripit ==== - use wikipedia URL, as the original domain is no longer valid - added ripit-4.0.0-undefined_variables.patch to avoid errors if the user is using an old config file which does not define some variables - added ripit-man-spellfix.patch from Debian which contains some spell fixes for the man page - rebased ripit-3.9.0-ogg.patch - use Productivity/Multimedia/CD/Grabbers as RPM group ==== rpm ==== Subpackages: rpm-32bit - auto-config-update-aarch64-ppc64le.diff: Update for riscv64 and enable it there - change disk usage handling to take hardlinks into account [bnc#720150] new patch: hardlinks.diff ==== rsibreak ==== Version update (0.12.7 -> 0.12.8) Subpackages: rsibreak-lang - Update to 0.12.8: * Translation improvements * Free the user if hibernation happened while the countdown was shown (kde#384783) * Slideshow: add the ability to select how to keep aspect ratio for image * Add pause skip threshold ==== sg3_utils ==== Subpackages: libsgutils2-1_43-2 - dracut.conf: add whitespace at end of line (bsc#1080562) ==== slang ==== Subpackages: libslang2 slang-slsh - Add upstream commit 6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1 as patch git-6dd5ade9a97b52ace4ac033779a6d3c1c51db4d1.patch (boo#1079543) * Added support for the new ncurses 32-bit terminfo database entries ==== sox ==== Subpackages: libsox3 - Added patches: * CVE-2017-11332.patch: Fixed the startread function in wav.c, which allowed remote attackers to cause a DoS (divide-by-zero) via a crafted wav file. (CVE-2017-11332 bsc#1081140) * CVE-2017-11358.patch: Fixed the read_samples function in hcom.c, which allowed remote attackers to cause a DoS (invalid memory read) via a crafted hcom file. (CVE-2017-11358 bsc#1081141) * CVE-2017-11359.patch: Fixed the wavwritehdr function in wav.c, which allowed remote attackers to cause a DoS (divide-by-zero) when converting a a crafted snd file to a wav file. (CVE-2017-11359 bsc#1081142) * CVE-2017-15370.patch: Fixed a heap-based buffer overflow in the ImaExpandS function of ima_rw.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (CVE-2017-15370 bsc#1063439) * CVE-2017-15371.patch: Fixed an assertion abort in the function sox_append_comment() in formats.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (CVE-2017-15371 bsc#1063450) * CVE-2017-15372.patch: Fixed a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (CVE-2017-15372 bsc#1063456) * CVE-2017-15642.patch: Fixed an Use-After-Free vulnerability in lsx_aiffstartread in aiff.c, which could be triggered by an attacker by providing a malformed AIFF file. (CVE-2017-15642 bsc#1064576) * CVE-2017-18189.patch: Fixed a NULL pointer dereference triggered by a corrupt header specifying zero channels in the startread function in xa.c, which allowed remote attackers to cause a DoS (CVE-2017-18189 bsc#1081146). - Removed sox-doublefree.patch ==== yast2 ==== Version update (4.0.49 -> 4.0.53) - Fixed list of the URL schemes without host, fixes processing URLs with the "hd:/" scheme (bsc#1077310) - 4.0.53 - Add a method to get the list of available license translations for a given product (related to FATE#322276). - 4.0.52 - Firewalld: Added interfaces helpers (fate#323460) - 4.0.51 - Drop (x)inetd agents - CWMServiceStart: Replace xinetd by systemd socket activation (fate#323373) - 4.0.50 ==== yast2-add-on ==== Version update (4.0.5 -> 4.0.6) - Made the addon=url boot option work with a multi-product medium such as the SLE-15 Packages DVD (FATE#324656) - 4.0.6 ==== yast2-bootloader ==== Version update (4.0.15 -> 4.0.18) - fix nil exception for device with filesystem that is not mounted (bsc#1081018) - 4.0.18 - Detect properly that unknown device is used in bootloader configuration (bsc#1078713) - 4.0.17 - Adapt to new MountPoint API (part of fate#318196). - 4.0.16 ==== yast2-control-center ==== Version update (3.3.0 -> 4.0.0) Subpackages: yast2-control-center-qt - Do not included unused RPC headers (boo#1081118). - 4.0.0 ==== yast2-country ==== Version update (4.0.19 -> 4.0.20) Subpackages: yast2-country-data - Keyboard: don't try to set the keyboard map for AMBA devices, e.g. /dev/ttyAMA0 (bsc#1080222). - 4.0.20 ==== yast2-firewall ==== Version update (4.0.12 -> 4.0.14) - fate#323460 - updated summary in autoyast client to work with new firewalld api - 4.0.14 - AutoYaST: added 'enable_firewall', 'start_firewall' and 'FW_LOG_DROP_CRIT' to the list of supported properties for SuSEFirewall2 profiles and fixed a typo with 'FW_LOG_DROP_ALL' (fate#323460). - 4.0.13 ==== yast2-installation ==== Version update (4.0.31 -> 4.0.33) - Ensure previous role selection is cleared when doing desktop selection (bsc#1078961) - 4.0.33 - Startup scripts: Replaced xinetd by xvnc.socket (fate#323373) - Revert changes added in 4.0.29 bringing back the enablement of the xvnc.socket during the first stage if Linuxrc.vnc is set. (bnc#1077236) - 4.0.32 ==== yast2-metapackage-handler ==== Version update (3.1.4 -> 4.0.0) - don't use inline html styles when including package metadata (bsc#1080792) - 4.0.0 ==== yast2-packager ==== Version update (4.0.36 -> 4.0.39) - Display licenses translations (related to FATE#322276). - 4.0.39 - Also display the licenses stored in the RPM-MD repository metadata, fixes displaying the license e.g. for SLE15-HA product on the Packages DVD (bsc#1057223) - 4.0.38 - Adapt to new MountPoint API (part of fate#318196). - 4.0.37 ==== yast2-pkg-bindings ==== Version update (4.0.7 -> 4.0.9) - always scan media for products to allow media identification (bsc#1080983) - 4.0.9 - Add a PrdLicenseLocales function to get the list of available license translations for a given product (related to FATE#322276). - 4.0.8 ==== yast2-services-manager ==== Version update (4.0.1 -> 4.0.2) - Drop xinetd service protected for xvnc as it now uses service (fate#323373) - 4.0.2 ==== yast2-storage-ng ==== Version update (4.0.88 -> 4.0.97) - Adjusted the suggested and minimum sizes of all the booting partitions, both in the storage proposal and in the Partitioner validations (bsc#1076851 and fate#318196). - 4.0.97 - Fix hwinfo parsing to support more than one device_file property (bsc#1080999) - 4.0.96 - Split detection of problematic boot scenarios into errors and warnings. With warnings user can continue, but not with errors. (bsc#1074475) - 4.0.95 - PowerPC: do not require /boot partition for non-PowerNV (bsc#1070139). - Partitioner: do not enforce partition id for /boot/efi (bsc#1078707). - 4.0.94 - add format options dialog (bsc#1077868) - 4.0.93 - More reasonable location in the disk for the partitions proposed to make the system bootable (bsc#1073680 and bsc#1076851). - Partitioner: fix issues using transactions (bsc#1079880 and bsc#1079573). - 4.0.92 - Enable multipathd in the target system at the end of installation if there are multipath devices (bsc#1076183). - Updated required version of libstorage-ng-ruby (bsc#1079541). - 4.0.91 ==== yast2-update ==== Version update (4.0.8 -> 4.0.9) - Adapt to new MountPoint API (part of fate#318196). - 4.0.9 ==== yast2-vm ==== Version update (3.2.4 -> 3.2.5) - The check for TextMode was in the wrong place and useless. Move it and update package list if user doesn't want GUI components installed. (bsc#1077694) - 3.2.5 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org