December 2019 - openSUSE Kubic - openSUSE Mailing Lists

[opensuse-kubic] New MicroOS snapshot 20191229 released!
by Richard Brown 30 Dec '19

30 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libnl3 (3.4 -> 3.5.0) === Details === ==== libnl3 ==== Version update (3.4 -> 3.5.0) Subpackages: libnl-config libnl3-200 - Update to release 3.5.0 * route/qdisc: add 64-bit rate/ceil support for htb class * xfrmi: introduce XFRM interfaces support * xfrm: fix memory corruption (dangling pointer) when when setting xfrmnl_sa * route/link: avoid dangling pointer in rtnl_link_set_slave_type() * nla_ok: fix overrun in attribute iteration. * route:act: add vlan action * route:tc: allow to set chain index for tc objects * route:qdisc: add MQPRIO Qdisc * if_tunnel: update IFLA defines up to FWMARK * Add support for cloning cgroup filter objects * neigh: cache updates as well query AF_BRIDGE neigh * route:cls: add matchall classifier * neigh: support bridge entries for vxlan interfaces * rule: add support for protocol and port ranges * link: add Geneve support -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191229 released!
by Richard Brown 30 Dec '19

30 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libnl3 (3.4 -> 3.5.0) === Details === ==== libnl3 ==== Version update (3.4 -> 3.5.0) Subpackages: libnl-config libnl3-200 - Update to release 3.5.0 * route/qdisc: add 64-bit rate/ceil support for htb class * xfrmi: introduce XFRM interfaces support * xfrm: fix memory corruption (dangling pointer) when when setting xfrmnl_sa * route/link: avoid dangling pointer in rtnl_link_set_slave_type() * nla_ok: fix overrun in attribute iteration. * route:act: add vlan action * route:tc: allow to set chain index for tc objects * route:qdisc: add MQPRIO Qdisc * if_tunnel: update IFLA defines up to FWMARK * Add support for cloning cgroup filter objects * neigh: cache updates as well query AF_BRIDGE neigh * route:cls: add matchall classifier * neigh: support bridge entries for vxlan interfaces * rule: add support for protocol and port ranges * link: add Geneve support -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191228 released!
by Richard Brown 29 Dec '19

29 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: tallow === Details === ==== tallow ==== - BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191228 released!
by Richard Brown 29 Dec '19

29 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: tallow === Details === ==== tallow ==== - BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191227 released!
by Richard Brown 28 Dec '19

28 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: lvm2-device-mapper === Details === ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021) + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch + bug-1150021_02-bcache-add-bcache_abort.patch + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch + bug-1150021_04-bcache-add-unit-test.patch + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch - Update patch, according to bug-1150021_01-scanning-xxx.patch + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191227 released!
by Richard Brown 28 Dec '19

28 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: lvm2 lvm2-device-mapper === Details === ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021) + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch + bug-1150021_02-bcache-add-bcache_abort.patch + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch + bug-1150021_04-bcache-add-unit-test.patch + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch - Update patch, according to bug-1150021_01-scanning-xxx.patch + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021) + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch + bug-1150021_02-bcache-add-bcache_abort.patch + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch + bug-1150021_04-bcache-add-unit-test.patch + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch - Update patch, according to bug-1150021_01-scanning-xxx.patch + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New ARM MicroOS snapshot 20191225 released!
by Guillaume Gardet 27 Dec '19

27 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor boost-base btrfsprogs (5.3.1 -> 5.4) ca-certificates-mozilla growpart hwdata (0.329 -> 0.330) installation-images-MicroOS (14.443 -> 14.450) kernel-firmware (20191108 -> 20191118) libcontainers-common (20190923 -> 20191211) openssl (1.1.1c -> 1.1.1d) podman (1.6.2 -> 1.6.4) python-appdirs python-jsonschema (3.0.2 -> 3.2.0) python-networkx (2.3 -> 2.4) python-pyasn1 (0.4.7 -> 0.4.8) python-pyparsing (2.4.2 -> 2.4.5) python-requests read-only-root-fs (1.0+git20191112.42add9e -> 1.0+git20191203.3f7cc07) transactional-update (2.17 -> 2.20) zypper (1.14.32 -> 1.14.33) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-profiles apparmor-utils - Properly pull in full python3 interpreter ==== boost-base ==== - Remove hardcoded abiflags (%py3_abiflags is not available for 3 years), use python3-config instead. Fixes build with Python 3.8. ==== btrfsprogs ==== Version update (5.3.1 -> 5.4) - Update to 5.4 * support new hash algorithms (kernel 5.5): * mkfs.btrfs and btrfs-convert with --csum, crc32c, xxhash, sha256, blake2 * mkfs: support new raid1c3 and raid1c4 block group profiles (kernel 5.5) * check: * --repair delays start with a warning, can be skipped using --force * enhanced detetion of inode types from partial data, more options for repair * receive: fix quiet option * image: speed up chunk loading * fi usage: * sort devices by id * print ratio of used/total per block group type * rescue zero-log: reset the log pointers directly, avoid reading some other potentially damaged structures * new make target install-static to install only static binaries/libraries * other * docs updates * new tests * cleanups and refactoring ==== ca-certificates-mozilla ==== - make sure p11-kit with patches is installed on SLE (boo#1154871) - export correct p11kit trust attributes so Firefox detects built in certificates (boo#1154871). Courtesy of Fedora. ==== growpart ==== - Clean growpart.spec: * Drop obsolete tags * Use install instead of mkdir+cp+chmod * Fix build on SLE 12 SP4 - Replaced hardcoded systemd paths with macros in spec file - Reference entry for maintenance Tracker bug for the submission set to: bsc#1154357 - Deleted rootgrow source and sub-package build rootgrow is provided on github: https://github.com/SUSE-Enceladus/rootgrow and builds a standalone package now ==== hwdata ==== Version update (0.329 -> 0.330) - Update to version 0.330: * Updated pci, usb and vendor ids. ==== installation-images-MicroOS ==== Version update (14.443 -> 14.450) - merge gh#openSUSE/installation-images#347 - prepare for syslinux 6.x setup (jsc#SLE-2969) - use gfxboot script from repo, not the installed one - 14.450 - merge gh#openSUSE/installation-images#346 - etc: module.config, fix build on i586 with 5.4 kernel - 14.449 - merge gh#openSUSE/installation-images#345 - etc: update module.config to match 5.4-final - 14.448 - merge gh#openSUSE/installation-images#343 - Revert "Include KacstOne font for Persian (boo#1092920)" - Use Noto Naskh Arabic instead of KacstBook (boo#1092920) - another attempt to fix fonts - 14.447 - merge gh#openSUSE/installation-images#344 - Added linuxrc reboot_timeout option (bsc1122493) - 14.446 - merge gh#openSUSE/installation-images#342 - Include KacstOne font for Persian (boo#1092920) - 14.445 ==== kernel-firmware ==== Version update (20191108 -> 20191118) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20191118 (git commit e8a0f4c93147): * rtl_nic: add firmware rtl8168fp-3 * linux-firmware: Update NXP Management Complex firmware to version 10.18.0 - Update to version 20191113 (git commit c62c3c26a5e7): * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: update navi14 vcn firmware * amdgpu: update navi10 vcn firmware ==== libcontainers-common ==== Version update (20190923 -> 20191211) - Update to image 5.0.0 - Clean up various imports primarily so that imports of packages that aren't in the standard library are all in one section. - Update to major version v5 - return resp error message - copy.Image(): select the CopySystemImage image using the source context - Add manifest list support - docker: handle http 429 status codes - allow for .dockercfg files to reside in non-home directories - Use the correct module path in (make test-skopeo) - Update to libpod 1.6.3 - Handling of the libpod.conf configuration file has seen major changes. Most significantly, rootless users will no longer automatically receive a complete configuration file when they first use Podman, and will instead only receive differences from the global configuration. - Initial support for the CNI DNS plugin, which allows containers to resolve the IPs of other containers via DNS name, has been added - Podman now supports anonymous named volumes, created by specifying only a destination to the -v flag to the podman create and podman run commands - Named volumes now support uid and gid options in --opt o=... to set UID and GID of the created volume - Update to storage 1.15.3 - overlay: allow storing images with more than 127 layers - Lazy initialize the layer store - tarlogger: drop state mutex ==== openssl ==== Version update (1.1.1c -> 1.1.1d) - Remove Obsoletes: pkgconfig(*): Only package names can be obsoleted. Until RPM 4.15, those lines were simply ineffective and being ignored, but with RPM 4.15 they result in an error. - Update to 1.1.1d release ==== podman ==== Version update (1.6.2 -> 1.6.4) - Update podman to v1.6.4 - Remove winsz FIFO on container restart to allow use with Conmon 2.03 and higher - Ensure volumes reacquire locks on system restart, preventing deadlocks when starting containers - Suppress spurious log messages when running rootless Podman - Update vendored containers/storage to v1.13.6 - Fix a deadlock related to writing events - Do not use the journald event logger when it is not available - Remove obsolete patch container-start-fix.patch ==== python-appdirs ==== - Format with spec-cleaner ==== python-jsonschema ==== Version update (3.0.2 -> 3.2.0) - update to version 3.2.0: * Added a format_nongpl setuptools extra, which installs only format dependencies that are non-GPL (#619). - specfile: * be more explicit in %files section * require python-importlib-metadata - update to version 3.1.1: * Temporarily revert the switch to js-regex until #611 and #612 are resolved. - changes from version 3.1.0: * Regular expressions throughout schemas now respect the ECMA 262 dialect, as recommended by the specification (#609). ==== python-networkx ==== Version update (2.3 -> 2.4) - Drop incorrectly calculated dependency on python33 - Switch to using %pytest macro - Update to version 2.4 Highlights: * Remove deprecated code from 1.x * Support for Python 3.8 * Switched to pytest for testing * Last release to support Python 3.5 * Fifteen new fuctions, including onion decomposition and linear prufing * Three new generators, such as a directed joint degree generator - Add numpy-38-test.patch, to correct test failure under Python 3.8 - Update URL, upstream changed to tarballs from zipfiles. ==== python-pyasn1 ==== Version update (0.4.7 -> 0.4.8) - Update to 0.4.8: * Added ability of combining `SingleValueConstraint` and `PermittedAlphabetConstraint` objects into one for proper modeling `FROM ... EXCEPT ...` ASN.1 clause. ==== python-pyparsing ==== Version update (2.4.2 -> 2.4.5) - update to version 2.4.5: * Fixed encoding when setup.py reads README.rst to include the project long description when uploading to PyPI. A stray unicode space in README.rst prevented the source install on systems whose default encoding is not 'utf-8'. - changes from version 2.4.4: * Unresolved symbol reference in 2.4.3 release was masked by stdout buffering in unit tests, thanks for the prompt heads-up, Ned Batchelder! - changes from version 2.4.3: * Fixed a bug in ParserElement.__eq__ that would for some parsers create a recursion error at parser definition time. Thanks to Michael Clerx for the assist. (Addresses issue #123) * Fixed bug in indentedBlock where a block that ended at the end of the input string could cause pyaprsing to loop forever. Raised as part of discussion on StackOverflow with geckos. * Backports from pyparsing 3.0.0: + __diag__.enable_all_warnings() + Fixed bug in PrecededBy which caused infinite recursion, issue [#127] + support for using regex-compiled RE to construct Regex expressions ==== python-requests ==== - Remove python-urllib3, python-certifi and ca-certificates from main package BuildRequires, not required for building. - Do not require full python, (implicit) python-base is sufficient. ==== read-only-root-fs ==== Version update (1.0+git20191112.42add9e -> 1.0+git20191203.3f7cc07) - Update to version 1.0+git20191203.3f7cc07: * Workaround /var being RO during systemd-journal-flush (boo#1156421) ==== transactional-update ==== Version update (2.17 -> 2.20) - Update to version 2.20 - Add the option `--continue` to extend an existing snapshot. This can be used to perform multiple operations before rebooting into the new state. [gh#openSUSE/transactional-update#16] - Make sure the dracut service to print warnings on /etc overlay conflicts also runs in the pre-made images. - Add "none" reboot method - Remove conflicting overlay artifacts in case an existing overlay directory will be reused ==== zypper ==== Version update (1.14.32 -> 1.14.33) - Introduce purge-kernels command (bsc#1155198) Adds a new zypper command to cleanup all obsolete kernels as configured by the user. - Request root privs for zypper addlocale and removelocale. - Load only target resolvables for removelocale. - Load only target resolvables for zypper rm (bsc#1157377) - Fix broken search by filelist (bsc#1135114 ) - zypper-log: Replace python by a bash script (fixes#304, fixes#306, bsc#1156158) - locales: do not sort out requested locales which are not available (bsc#1155678) - list_patches_by_issue: rewrite table output and add xml output (bsc#1154805) Prevent listing duplicate matches in tables. XML result is provided within the new <list-patches-byissue> element. - list-patches: XML add patch <issue-date> and <issue-list> (bsc#1154805) - Fix zypper lp --cve/bugzilla/issue options (bsc#1155298) - Always execute commit when adding/removing locales (fixes bsc#1155205) - man page: fix description of --table-style,-s (bsc#1154804) - Provide reverse search in zypper (fixes #214) This patch adds a new set of switches to zypper to support searching reverse dependencies for a package or a set of packages. - BuildRequires: libzypp-devel >= 17.16.1. - version 1.14.33 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New ARM Kubic snapshot 20191225 released!
by Guillaume Gardet 27 Dec '19

27 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor boost-base btrfsprogs (5.3.1 -> 5.4) ca-certificates-mozilla growpart hwdata (0.329 -> 0.330) installation-images-MicroOS (14.443 -> 14.450) kernel-firmware (20191108 -> 20191118) libcontainers-common (20190923 -> 20191211) openssl (1.1.1c -> 1.1.1d) podman (1.6.2 -> 1.6.4) python-PrettyTable python-appdirs python-jsonschema (3.0.2 -> 3.2.0) python-networkx (2.3 -> 2.4) python-pyasn1 (0.4.7 -> 0.4.8) python-pyparsing (2.4.2 -> 2.4.5) python-requests read-only-root-fs (1.0+git20191112.42add9e -> 1.0+git20191203.3f7cc07) rook (1.1.6+git0.g91d6f635 -> 1.1.7+git0.g50c6ca1f) transactional-update (2.17 -> 2.20) vim (8.1.2233 -> 8.2.0000) zypper (1.14.32 -> 1.14.33) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-profiles apparmor-utils - Properly pull in full python3 interpreter ==== boost-base ==== - Remove hardcoded abiflags (%py3_abiflags is not available for 3 years), use python3-config instead. Fixes build with Python 3.8. ==== btrfsprogs ==== Version update (5.3.1 -> 5.4) - Update to 5.4 * support new hash algorithms (kernel 5.5): * mkfs.btrfs and btrfs-convert with --csum, crc32c, xxhash, sha256, blake2 * mkfs: support new raid1c3 and raid1c4 block group profiles (kernel 5.5) * check: * --repair delays start with a warning, can be skipped using --force * enhanced detetion of inode types from partial data, more options for repair * receive: fix quiet option * image: speed up chunk loading * fi usage: * sort devices by id * print ratio of used/total per block group type * rescue zero-log: reset the log pointers directly, avoid reading some other potentially damaged structures * new make target install-static to install only static binaries/libraries * other * docs updates * new tests * cleanups and refactoring ==== ca-certificates-mozilla ==== - make sure p11-kit with patches is installed on SLE (boo#1154871) - export correct p11kit trust attributes so Firefox detects built in certificates (boo#1154871). Courtesy of Fedora. ==== growpart ==== - Clean growpart.spec: * Drop obsolete tags * Use install instead of mkdir+cp+chmod * Fix build on SLE 12 SP4 - Replaced hardcoded systemd paths with macros in spec file - Reference entry for maintenance Tracker bug for the submission set to: bsc#1154357 - Deleted rootgrow source and sub-package build rootgrow is provided on github: https://github.com/SUSE-Enceladus/rootgrow and builds a standalone package now ==== hwdata ==== Version update (0.329 -> 0.330) - Update to version 0.330: * Updated pci, usb and vendor ids. ==== installation-images-MicroOS ==== Version update (14.443 -> 14.450) - merge gh#openSUSE/installation-images#347 - prepare for syslinux 6.x setup (jsc#SLE-2969) - use gfxboot script from repo, not the installed one - 14.450 - merge gh#openSUSE/installation-images#346 - etc: module.config, fix build on i586 with 5.4 kernel - 14.449 - merge gh#openSUSE/installation-images#345 - etc: update module.config to match 5.4-final - 14.448 - merge gh#openSUSE/installation-images#343 - Revert "Include KacstOne font for Persian (boo#1092920)" - Use Noto Naskh Arabic instead of KacstBook (boo#1092920) - another attempt to fix fonts - 14.447 - merge gh#openSUSE/installation-images#344 - Added linuxrc reboot_timeout option (bsc1122493) - 14.446 - merge gh#openSUSE/installation-images#342 - Include KacstOne font for Persian (boo#1092920) - 14.445 ==== kernel-firmware ==== Version update (20191108 -> 20191118) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20191118 (git commit e8a0f4c93147): * rtl_nic: add firmware rtl8168fp-3 * linux-firmware: Update NXP Management Complex firmware to version 10.18.0 - Update to version 20191113 (git commit c62c3c26a5e7): * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: update navi14 vcn firmware * amdgpu: update navi10 vcn firmware ==== libcontainers-common ==== Version update (20190923 -> 20191211) - Update to image 5.0.0 - Clean up various imports primarily so that imports of packages that aren't in the standard library are all in one section. - Update to major version v5 - return resp error message - copy.Image(): select the CopySystemImage image using the source context - Add manifest list support - docker: handle http 429 status codes - allow for .dockercfg files to reside in non-home directories - Use the correct module path in (make test-skopeo) - Update to libpod 1.6.3 - Handling of the libpod.conf configuration file has seen major changes. Most significantly, rootless users will no longer automatically receive a complete configuration file when they first use Podman, and will instead only receive differences from the global configuration. - Initial support for the CNI DNS plugin, which allows containers to resolve the IPs of other containers via DNS name, has been added - Podman now supports anonymous named volumes, created by specifying only a destination to the -v flag to the podman create and podman run commands - Named volumes now support uid and gid options in --opt o=... to set UID and GID of the created volume - Update to storage 1.15.3 - overlay: allow storing images with more than 127 layers - Lazy initialize the layer store - tarlogger: drop state mutex ==== openssl ==== Version update (1.1.1c -> 1.1.1d) - Remove Obsoletes: pkgconfig(*): Only package names can be obsoleted. Until RPM 4.15, those lines were simply ineffective and being ignored, but with RPM 4.15 they result in an error. - Update to 1.1.1d release ==== podman ==== Version update (1.6.2 -> 1.6.4) - Update podman to v1.6.4 - Remove winsz FIFO on container restart to allow use with Conmon 2.03 and higher - Ensure volumes reacquire locks on system restart, preventing deadlocks when starting containers - Suppress spurious log messages when running rootless Podman - Update vendored containers/storage to v1.13.6 - Fix a deadlock related to writing events - Do not use the journald event logger when it is not available - Remove obsolete patch container-start-fix.patch ==== python-PrettyTable ==== - Run through spec-cleaner ==== python-appdirs ==== - Format with spec-cleaner ==== python-jsonschema ==== Version update (3.0.2 -> 3.2.0) - update to version 3.2.0: * Added a format_nongpl setuptools extra, which installs only format dependencies that are non-GPL (#619). - specfile: * be more explicit in %files section * require python-importlib-metadata - update to version 3.1.1: * Temporarily revert the switch to js-regex until #611 and #612 are resolved. - changes from version 3.1.0: * Regular expressions throughout schemas now respect the ECMA 262 dialect, as recommended by the specification (#609). ==== python-networkx ==== Version update (2.3 -> 2.4) - Drop incorrectly calculated dependency on python33 - Switch to using %pytest macro - Update to version 2.4 Highlights: * Remove deprecated code from 1.x * Support for Python 3.8 * Switched to pytest for testing * Last release to support Python 3.5 * Fifteen new fuctions, including onion decomposition and linear prufing * Three new generators, such as a directed joint degree generator - Add numpy-38-test.patch, to correct test failure under Python 3.8 - Update URL, upstream changed to tarballs from zipfiles. ==== python-pyasn1 ==== Version update (0.4.7 -> 0.4.8) - Update to 0.4.8: * Added ability of combining `SingleValueConstraint` and `PermittedAlphabetConstraint` objects into one for proper modeling `FROM ... EXCEPT ...` ASN.1 clause. ==== python-pyparsing ==== Version update (2.4.2 -> 2.4.5) - update to version 2.4.5: * Fixed encoding when setup.py reads README.rst to include the project long description when uploading to PyPI. A stray unicode space in README.rst prevented the source install on systems whose default encoding is not 'utf-8'. - changes from version 2.4.4: * Unresolved symbol reference in 2.4.3 release was masked by stdout buffering in unit tests, thanks for the prompt heads-up, Ned Batchelder! - changes from version 2.4.3: * Fixed a bug in ParserElement.__eq__ that would for some parsers create a recursion error at parser definition time. Thanks to Michael Clerx for the assist. (Addresses issue #123) * Fixed bug in indentedBlock where a block that ended at the end of the input string could cause pyaprsing to loop forever. Raised as part of discussion on StackOverflow with geckos. * Backports from pyparsing 3.0.0: + __diag__.enable_all_warnings() + Fixed bug in PrecededBy which caused infinite recursion, issue [#127] + support for using regex-compiled RE to construct Regex expressions ==== python-requests ==== - Remove python-urllib3, python-certifi and ca-certificates from main package BuildRequires, not required for building. - Do not require full python, (implicit) python-base is sufficient. ==== read-only-root-fs ==== Version update (1.0+git20191112.42add9e -> 1.0+git20191203.3f7cc07) - Update to version 1.0+git20191203.3f7cc07: * Workaround /var being RO during systemd-journal-flush (boo#1156421) ==== rook ==== Version update (1.1.6+git0.g91d6f635 -> 1.1.7+git0.g50c6ca1f) - Update rook to v1.1.7: * Skip osd prepare job creation if osd daemon exists for the pvc (#4277) * Stop osd process more quickly during pod shutdown to reduce IO unresponsiveness (#4328) * Add osd anti-affinity to the example of OSDs on PVCs (#4326) * Properly set app name on the cmdreporter (#4323) * Ensure disruption draining state is set and checked correctly (#4319) * Update LVM filter for OSDs on PVCs (#4312) * Fix topology logic for disruption drains (#4221) * Skip restorecon during ceph-volume configuration (#4260) * Added a note around snapshot CRD cleanup (#4302) * Storage utilization alert threshold and timing updated (#4286) * Silence disruption errors if necessary and add missing errors (#4288) * Create csi keys and secrets for external cluster (#4276) * Add retry to ObjectUser creation (#4149) ==== transactional-update ==== Version update (2.17 -> 2.20) - Update to version 2.20 - Add the option `--continue` to extend an existing snapshot. This can be used to perform multiple operations before rebooting into the new state. [gh#openSUSE/transactional-update#16] - Make sure the dracut service to print warnings on /etc overlay conflicts also runs in the pre-made images. - Add "none" reboot method - Remove conflicting overlay artifacts in case an existing overlay directory will be reused ==== vim ==== Version update (8.1.2233 -> 8.2.0000) - Update to version 8.2.0000 * make depend" does not work correctly for libvterm. * Crash when calling popup_close() in win_execute() * With a long file name the hit-enter prompt appears. * bufnr('$') is wrong after recycling popup buffer. * loading menus sets v:errmsg. * popup menu flickers if an info popup is used. * Crash when evaluating expression with error. * Function argument copied unnecessarily. * syntax menu and build instructions outdated. * matchadd_conceal test fails under valgrind. * :cexpr does not handle | in expression. * Use // comments where appropriate. * 'wincolor' is not used for 'listchars'. * Opening cmdline window with feedkeys() does not work. - Updated to version 8.1.2383, fixes the following problems + refreshed patches: vim-7.3-help_tags.patch vim-7.3-name_vimrc.patch vim-8.1.0297-dump3.patch * Cannot get the Vim command line arguments. * get_short_pathname() fails depending on encoding. * "C" with 'virtualedit' set does not include multi-byte char. * Ml_get error if pattern matches beyond last line. * Mode() result after usign "r" depends on whether CURSOR_SHAPE is defined. (Christian Brabandt) * Error in docs tags goes unnoticed. * Popup window width changes when scrolling. * Match highlight does not combine with 'wincolor'. * Creating docs tags uses user preferences. (Tony Mechelynck) * 'wrapscan' is not used for "gn". * Third character of 'listchars' tab shows in wrong place when 'breakindent' is set. * Some tests are still in old style. * "make vimtags" does not work in runtime/doc. * CTRL-W dot does not work in a terminal when modifyOtherKeys is enabled. * "make vimtags" does not print any message. * CTRL-U and CTRL-D don't work in popup window. * ":term command" may not work without a shell. * Compiler warning for int size. * Using "which" to check for an executable is not reliable. * May get hit-enter prompt after entering a number. (Malcolm Rowe) * Running tests may leave XfakeHOME behind. * With modifyOtherKeys set 'noesckeys' doesn't work. (James McCoy) * Unpack assignment in function not recognized. * 'noesckeys' test fails in GUI. * There are two test files for :let. * When popup with "botleft" does not fit it flips incorrectly. * Position unknown for a mouse click in a popup window. * Compiler warning for uninitialized variable. (Tony Mechelynck) * Spell file flag zero is not recognized. * Tags file with very long line stops using binary search. * "gf" is not tested in Visual mode. * Build error if FEAT_TAG_BINS is not defined. (John Marriott) * Test may hang at more prompt. * Wrong default when "pos" is changed with popup_atcursor(). * Newlines in 'balloonexpr' result only work in the GUI. * Using "seesion" looks like a mistake. * Terminal window is not updated when info popup changes. * Using "cd" with "exe" may fail. * Computation of highlight attributes is too complicated. * Crash when passing partial to substitute(). * 'showbreak' cannot be set for one window. * Crash when passing many arguments through a partial. (Andy Massimino) * Missed on use of p_sbr. * Compiler warning for unused variable. (Tony Mechelynck) * Padding in structures wastes memory. * Using border highlight in popup window leaks memory. * Using EndOfBuffer highlight in popup does not look good. * Not using all space when popup with "topleft" flips to above. * After :diffsplit closing the window does not disable diff. * Autocommand test fails. * Memory leak when executing command in a terminal. * v:mouse_winid not set on click in popup window. * Join adds trailing space when second line is empty. (Brennan Vincent) * Cursor position wrong when characters are concealed and asearch causes a scroll. * If buffer of popup is in another window cursorline sign shows. * Text properties are not combined with syntax by default. * The ex_vimgrep() function is too long. * Missing part of 8.1.2296. * ConPTY in MS-Windows 1909 is still wrong. * Redraw breaks going through list of popup windows. * :lockmarks does not work for '[ and ']. * Cursor in wrong position after horizontal scroll. * Cannot get the mouse position when getting a mouse click. * No warning for wrong entry in translations. * Double and triple clicks are not tested. * Positioning popup doesn't work for buffer-local textprop. * Deleting text before zero-width textprop removes it. * Compiler warning for argument type. * No proper test for directory changes in quickfix. * Warning for missing function prototype. * "line:" field in tags file not used. * Debugging where a delay comes from is not easy. * vi' sometimes does not select anything. * Not always using the right window when jumping to an error. * FORTIFY_SOURCE can also be present in CPPFLAGS. * No test for spell affix file with flag on suffix. * Compiler warning for int size. * Insufficient test coverage for quickfix. * Cannot select all text with the mouse. (John Marriott) * Quickfix test fails in very big terminal. * Width of scrollbar in popup menu not taken into account. * Crash when using balloon with empty line. * Cannot parse a date/time string. * Cannot build with Hangul input. * A few hangul input pieces remain. * Mouse multiple click test is a bit flaky. * vi' does not always work when 'selection' is exclusive. * The option.c file is still very big. * Missing file in refactoring. * With modifyOtherKeys CTRL-^ doesn't work. * Possible NULL pointer dereference in popup_locate(). (Coverity) * Error message for function arguments may use NULL pointer. (Coverity) * When an expr mapping moves the cursor it is not restored. * Double-click time sometimes miscomputed. * Using Visual mark sith :s gives E20 if not set. * Insufficient testing for quickfix. * Quickfix test fails under valgrind and asan. * Not so easy to interrupt a script programatically. * Random number generator in Vim script is slow. * Using time() for srand() is not very random. * .cjs files are not recognized as Javascript. * CTRL-R CTRL-R doesn't work with modifyOtherKeys. * :const cannot be followed by "| endif". * :lockvar and :unlockvar cannot be followed by "| endif". * Other text for CTRL-V in Insert mode with modifyOtherKeys. * 'wincolor' not used for > for not fitting double width char. Also: popup drawn on right half of double width character looks wrong. * rand() does not use the best algorithm. * No test with wrong argument for rand(). * Cannot build without FEAT_FLOAT. (John Marriott) * Quickfix test coverage can still be improved. * Cannot place signs in a popup window. (Maxim Kim) * ml_get error when accessing Visual area in 'statusline'. * Missing tests for recent popupwin changes. * Using old C style comments. * Registers are not sufficiently tested. * Using old C style comments. * Cannot build with quickfix and without text properties. * Build problems on VMS. * FEAT_TEXT_PROP is a confusing name. * Cannot build with +popupwin but without +quickfix. (John Marriott) * Unused parts of libvterm are included. * No suffucient testing for registers. * Preprocessor indents are incorrect. * GUI: when losing focus a pending operator is executed. * Using old C style comments. * Not all register related code is covered by tests. ==== zypper ==== Version update (1.14.32 -> 1.14.33) - Introduce purge-kernels command (bsc#1155198) Adds a new zypper command to cleanup all obsolete kernels as configured by the user. - Request root privs for zypper addlocale and removelocale. - Load only target resolvables for removelocale. - Load only target resolvables for zypper rm (bsc#1157377) - Fix broken search by filelist (bsc#1135114 ) - zypper-log: Replace python by a bash script (fixes#304, fixes#306, bsc#1156158) - locales: do not sort out requested locales which are not available (bsc#1155678) - list_patches_by_issue: rewrite table output and add xml output (bsc#1154805) Prevent listing duplicate matches in tables. XML result is provided within the new <list-patches-byissue> element. - list-patches: XML add patch <issue-date> and <issue-list> (bsc#1154805) - Fix zypper lp --cve/bugzilla/issue options (bsc#1155298) - Always execute commit when adding/removing locales (fixes bsc#1155205) - man page: fix description of --table-style,-s (bsc#1154804) - Provide reverse search in zypper (fixes #214) This patch adds a new set of switches to zypper to support searching reverse dependencies for a package or a set of packages. - BuildRequires: libzypp-devel >= 17.16.1. - version 1.14.33 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191225 released!
by Richard Brown 27 Dec '19

27 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base ca-certificates-mozilla dracut (049+git115.c2d8d6fb -> 049+git116.e9995c78) fuse3 (3.8.0 -> 3.9.0) gcc9 (9.2.1+r275327 -> 9.2.1+r279103) gpg2 (2.2.18 -> 2.2.19) grub2 iptables (1.8.3 -> 1.8.4) kdump ldb less libsolv (0.7.9 -> 0.7.10) libssh (0.9.2 -> 0.9.3) libxml2 libzypp (17.17.0 -> 17.20.0) lvm2-device-mapper mokutil openssl-1_1 p11-kit policycoreutils python-requests slirp4netns (0.4.2 -> 0.4.3) sssd xen (4.13.0_03 -> 4.13.0_04) === Details === ==== boost-base ==== Subpackages: boost-license1_71_0 libboost_thread1_71_0 - Remove hardcoded abiflags (%py3_abiflags is not available for 3 years), use python3-config instead. Fixes build with Python 3.8. ==== ca-certificates-mozilla ==== - make sure p11-kit with patches is installed on SLE (boo#1154871) ==== dracut ==== Version update (049+git115.c2d8d6fb -> 049+git116.e9995c78) Subpackages: dracut-ima - Update to version 049+git116.e9995c78: * dracut.spec: add convertfs module correctly (boo#1158777) ==== fuse3 ==== Version update (3.8.0 -> 3.9.0) - Update to version 3.9.0 * Added support for FUSE_EXPLICIT_INVAL_DATA to enable onl invalidate cached pages on explicit request. ==== gcc9 ==== Version update (9.2.1+r275327 -> 9.2.1+r279103) Subpackages: libgcc_s1 libstdc++6 - Update to gcc-9-branch head (r279103). * Includes gcc9-pr91772.patch - Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply again. - Use new license and header also in gcc.spec.in to reduce churn with format_spec_file. - Use BuildRoot tag again for old distros (SLE-11). - Make cross-arm-gcc a gcc_icecream cross. Remove the disabling of debuginfo stripping. [bsc#1152590] ==== gpg2 ==== Version update (2.2.18 -> 2.2.19) - update to 2.2.19: * gpg: Fix double free when decrypting for hidden recipients * gpg: Use auto-key-locate for encryption even for mail addressed given with angle brackets * gpgsm: Add special case for certain expired intermediate certificates ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912) - Correct linux and initrd handling in 20_linux_xen (bsc#1157912) M grub2-efi-xen-cfg-unquote.patch M grub2-efi-xen-chainload.patch M grub2-efi-xen-cmdline.patch M grub2-efi-xen-removable.patch ==== iptables ==== Version update (1.8.3 -> 1.8.4) Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Update to release 1.8.4 * Fix for wrong counter format in `ebtables-nft-save -c` output. * Print typical iptables-save comments in arptables- and ebtables-save, too. * xt_owner: add --suppl-groups option * Remove support for /etc/xtables.conf * Restore support for "-4" and "-6" options in rule lines. ==== kdump ==== - kdump-calibrate-Update-values.patch: calibrate: Update values (bsc#1130529). - kdump-prefer-by-path-and-device-mapper.patch: Prefer by-path and device-mapper aliases over kernel device names (bsc#1101149, LTC#168532). - kdump-powerpc-no-reload-on-CPU-removal.patch: powerpc: Do not reload on CPU hot removal (bsc#1133407, LTC#176111). - kdump-Add-force-option-to-KDUMP_NETCONFIG.patch: Add ":force" option to KDUMP_NETCONFIG (bsc#1108919). - kdump-Add-fence_kdump_send-when-fence-agents-installed.patch: Add fence_kdump_send when fence-agents installed (bsc#1108919). - kdump-FENCE_KDUMP_SEND-variable.patch: Use var for path of fence_kdump_send and remove the unnecessary PRESCRIPT check (bsc#1108919). - kdump-Document-fence_kdump_send.patch: Document kdump behaviour for fence_kdump_send (bsc#1108919). - kdump-nss-modules.patch: Improve the handling of NSS (bsc#1021846). - kdump-skip-mounts-if-no-proc-vmcore.patch: Skip kdump-related mounts if there is no /proc/vmcore (bsc#1102252, bsc#1125011). - kdump-clean-up-kdump-mount-points.patch: Make sure that kdump mount points are cleaned up (bsc#1102252, bsc#1125011). - kdump-Clean-up-the-use-of-current-vs-boot-network-iface.patch: Clean up the use of current vs. boot network interface names (bsc#1094444, bsc#1116463, bsc#1141064). - kdump-Use-a-custom-namespace-for-physical-NICs.patch: Use a custom namespace for physical NICs (bsc#1094444, bsc#1116463, bsc#1141064). - kdump-preserve-white-space.patch: Preserve white space when removing kernel command line options (bsc#1117652). ==== ldb ==== - Add obsolete ldb1 directive to baselibs.conf ==== less ==== - Move lesskey* from /etc to /usr/etc ==== libsolv ==== Version update (0.7.9 -> 0.7.10) - fix solv_zchunk decoding error if large chunks are used [bnc#1159314] - build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support multiple rpm database backends - added two new function to make libzypp independent of the rpm database format - bump version to 0.7.10 ==== libssh ==== Version update (0.9.2 -> 0.9.3) Subpackages: libssh-config libssh4 - Update to version 0.9.3 * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state * SSH-01-006 General: Various unchecked Null-derefs cause DOS * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys * SSH-01-010 SSH: Deprecated hash function in fingerprinting * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access * SSH-01-001 State Machine: Initial machine states should be set explicitly * SSH-01-002 Kex: Differently bound macros used to iterate same array * SSH-01-005 Code-Quality: Integer sign confusion during assignments * SSH-01-008 SCP: Protocol Injection via unescaped File Names * SSH-01-009 SSH: Update documentation which RFCs are implemented * SSH-01-012 PKI: Information leak via uninitialized stack buffer - Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved for internal use. ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - Build python2 and python3 bindings in separate flavors. As python3-libxml2 is a dependency of e.g. itstools and thus many other packages these packages no longer have a build dependency on python2. Breaks a build loop for python2. ==== libzypp ==== Version update (17.17.0 -> 17.20.0) - BuildRequires: libsolv-devel >= 0.7.10. - RpmDb: Become rpmdb backend independent (jsc#SLE-7272) - RpmDb: Close API offering a custom rpmdb path It's actually not needed and for this to work also libsolv needs to support it. You can sill use a librpmDb::db_const_iterator to access a database at a custom location (ro). - Remove legacy rpmV3database conversion code. - version 17.20.0 (20) - MediaCurl: assert cookie file has mode 0600 (bsc#1158763, CVE-2019-18900) - version 17.19.0 (12) - dup: fix removing orphaned packages dropped by to-be-installed products (bsc#1155819) - version 17.18.1 (12) - Resolver: add solution actions for SOLVER_SOLUTION_BLACK (retracted/PTF) - Solvable: add isRetracted and isPtf attributes. - version 17.18.0 (12) ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - backport patches for lvm2 to avoid software abnormal work (bsc#1158861) + bug-1158861_01-config-remove-filter-typo.patch + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch + bug-1158861_04-fix-duplicate-pv-size-check.patch + bug-1158861_05-hints-fix-copy-of-filter.patch + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch + bug-1158861_08-hints-fix-mem-leaking-buffers.patch + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch - backport upstream patches for passing lvm2 testsuite (bsc#1158628) + bug-1158628_01-tests-replaces-grep-q-usage.patch + bug-1158628_02-tests-fix-ra-checking.patch + bug-1158628_03-tests-simplify-some-var-settings.patch + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch + bug-1158628_05-activation-add-synchronization-point.patch + bug-1158628_06-pvmove-add-missing-synchronization.patch + bug-1158628_07-activation-extend-handling-of-pending_delete.patch + bug-1158628_08-lv_manip-add-synchronizations.patch + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch + bug-1158628_14-tests-add-extra-settle.patch + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch ==== mokutil ==== - Add build for ppc64/ppc64le ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Security fix: [bsc#1158809, CVE-2019-1551] * Overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli - Add openssl-1_1-CVE-2019-1551.patch ==== p11-kit ==== Subpackages: libp11-kit0 p11-kit-tools - Also build documentation (boo#1013125) ==== policycoreutils ==== Subpackages: python3-policycoreutils - Added chcat_join.patch to prevent joining non-existing categories (bsc#1159262) ==== python-requests ==== - Remove python-urllib3, python-certifi and ca-certificates from main package BuildRequires, not required for building. - Do not require full python, (implicit) python-base is sufficient. ==== slirp4netns ==== Version update (0.4.2 -> 0.4.3) - Update to 0.4.3 * api: raise an error if the socket path is too long * libslirp: update to v4.1.0: Including the fix for libslirp sends RST to app in response to arriving FIN when containerized socket is shutdown() with SHUT_WR * Fix create_sandbox error ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Install infopipe dbus service (bsc#1106598) - Add systemd service unit files to manage socket or bus activated responders. - All responders except infopipe are also managed by a socket unit file. - Add missing post and postun hooks for libsss_certmap0 package. ==== xen ==== Version update (4.13.0_03 -> 4.13.0_04) - bsc#1159320 - Xen logrotate file needs updated logrotate.conf - Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware - Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191225 released!
by Richard Brown 27 Dec '19

27 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base ca-certificates-mozilla dracut (049+git115.c2d8d6fb -> 049+git116.e9995c78) fuse3 (3.8.0 -> 3.9.0) gcc9 (9.2.1+r275327 -> 9.2.1+r279103) gpg2 (2.2.18 -> 2.2.19) grub2 haproxy (2.0.10+git14.7caf150a -> 2.1.1+git0.4ae521379) iptables (1.8.3 -> 1.8.4) kdump ldb less libsolv (0.7.9 -> 0.7.10) libssh (0.9.2 -> 0.9.3) libxml2 libzypp (17.17.0 -> 17.20.0) lvm2 lvm2-device-mapper mokutil openssl-1_1 p11-kit patterns-base policycoreutils python-requests reg (0.16.0 -> 0.16.1) salt slirp4netns (0.4.2 -> 0.4.3) sssd xen (4.13.0_03 -> 4.13.0_04) === Details === ==== boost-base ==== Subpackages: boost-license1_71_0 libboost_thread1_71_0 - Remove hardcoded abiflags (%py3_abiflags is not available for 3 years), use python3-config instead. Fixes build with Python 3.8. ==== ca-certificates-mozilla ==== - make sure p11-kit with patches is installed on SLE (boo#1154871) ==== dracut ==== Version update (049+git115.c2d8d6fb -> 049+git116.e9995c78) Subpackages: dracut-ima - Update to version 049+git116.e9995c78: * dracut.spec: add convertfs module correctly (boo#1158777) ==== fuse3 ==== Version update (3.8.0 -> 3.9.0) - Update to version 3.9.0 * Added support for FUSE_EXPLICIT_INVAL_DATA to enable onl invalidate cached pages on explicit request. ==== gcc9 ==== Version update (9.2.1+r275327 -> 9.2.1+r279103) Subpackages: libgcc_s1 libstdc++6 - Update to gcc-9-branch head (r279103). * Includes gcc9-pr91772.patch - Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply again. - Use new license and header also in gcc.spec.in to reduce churn with format_spec_file. - Use BuildRoot tag again for old distros (SLE-11). - Make cross-arm-gcc a gcc_icecream cross. Remove the disabling of debuginfo stripping. [bsc#1152590] ==== gpg2 ==== Version update (2.2.18 -> 2.2.19) - update to 2.2.19: * gpg: Fix double free when decrypting for hidden recipients * gpg: Use auto-key-locate for encryption even for mail addressed given with angle brackets * gpgsm: Add special case for certain expired intermediate certificates ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912) - Correct linux and initrd handling in 20_linux_xen (bsc#1157912) M grub2-efi-xen-cfg-unquote.patch M grub2-efi-xen-chainload.patch M grub2-efi-xen-cmdline.patch M grub2-efi-xen-removable.patch ==== haproxy ==== Version update (2.0.10+git14.7caf150a -> 2.1.1+git0.4ae521379) - Update to version 2.1.1+git0.4ae521379: * [RELEASE] Released version 2.1.1 * BUILD/MINOR: unix sockets: silence an absurd gcc warning about strncpy() * BUG/MINOR: listener: fix off-by-one in state name check * BUG/MINOR: server: make "agent-addr" work on default-server line * BUG/MINOR: listener: do not immediately resume on transient error * BUG/MINOR: mworker: properly pass SIGTTOU/SIGTTIN to workers * BUG/MINOR: log: fix minor resource leaks on logformat error path * DOC: remove references to the outdated architecture.txt * DOC: proxies: HAProxy only supports 3 connection modes * BUG/MINOR: tasks: only requeue a task if it was already in the queue * DOC: listeners: add a few missing transitions - Update to version 2.1.0+git33.8e4a62508: * BUG/MEDIUM: proto_udp/threads: recv() and send() must not be exclusive. * BUG/MAJOR: dns: add minimalist error processing on the Rx path * BUG/MEDIUM: kqueue: Make sure we report read events even when no data. * DOC: document the listener state transitions * BUG/MEDIUM: listener/threads: fix a remaining race in the listener's accept() * BUG/MINOR: listener: also clear the error flag on a paused listener * BUG/MINOR: listener/threads: always use atomic ops to clear the FD events * BUG/MINOR: proxy: make soft_stop() also close FDs in LI_PAUSED state * BUG/MEDIUM: mux-fcgi: Handle cases where the HTX EOM block cannot be inserted * BUG/MINOR: mux-h1: Be sure to set CS_FL_WANT_ROOM when EOM can't be added - Update to version 2.1.0+git23.e77b108cd: * BUG/MEDIUM: checks: Make sure we set the task affinity just before connecting. * BUG/MEDIUM: tasks: Make sure we switch wait queues in task_set_affinity(). ==== iptables ==== Version update (1.8.3 -> 1.8.4) Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Update to release 1.8.4 * Fix for wrong counter format in `ebtables-nft-save -c` output. * Print typical iptables-save comments in arptables- and ebtables-save, too. * xt_owner: add --suppl-groups option * Remove support for /etc/xtables.conf * Restore support for "-4" and "-6" options in rule lines. ==== kdump ==== - kdump-calibrate-Update-values.patch: calibrate: Update values (bsc#1130529). - kdump-prefer-by-path-and-device-mapper.patch: Prefer by-path and device-mapper aliases over kernel device names (bsc#1101149, LTC#168532). - kdump-powerpc-no-reload-on-CPU-removal.patch: powerpc: Do not reload on CPU hot removal (bsc#1133407, LTC#176111). - kdump-Add-force-option-to-KDUMP_NETCONFIG.patch: Add ":force" option to KDUMP_NETCONFIG (bsc#1108919). - kdump-Add-fence_kdump_send-when-fence-agents-installed.patch: Add fence_kdump_send when fence-agents installed (bsc#1108919). - kdump-FENCE_KDUMP_SEND-variable.patch: Use var for path of fence_kdump_send and remove the unnecessary PRESCRIPT check (bsc#1108919). - kdump-Document-fence_kdump_send.patch: Document kdump behaviour for fence_kdump_send (bsc#1108919). - kdump-nss-modules.patch: Improve the handling of NSS (bsc#1021846). - kdump-skip-mounts-if-no-proc-vmcore.patch: Skip kdump-related mounts if there is no /proc/vmcore (bsc#1102252, bsc#1125011). - kdump-clean-up-kdump-mount-points.patch: Make sure that kdump mount points are cleaned up (bsc#1102252, bsc#1125011). - kdump-Clean-up-the-use-of-current-vs-boot-network-iface.patch: Clean up the use of current vs. boot network interface names (bsc#1094444, bsc#1116463, bsc#1141064). - kdump-Use-a-custom-namespace-for-physical-NICs.patch: Use a custom namespace for physical NICs (bsc#1094444, bsc#1116463, bsc#1141064). - kdump-preserve-white-space.patch: Preserve white space when removing kernel command line options (bsc#1117652). ==== ldb ==== - Add obsolete ldb1 directive to baselibs.conf ==== less ==== - Move lesskey* from /etc to /usr/etc ==== libsolv ==== Version update (0.7.9 -> 0.7.10) - fix solv_zchunk decoding error if large chunks are used [bnc#1159314] - build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support multiple rpm database backends - added two new function to make libzypp independent of the rpm database format - bump version to 0.7.10 ==== libssh ==== Version update (0.9.2 -> 0.9.3) Subpackages: libssh-config libssh4 - Update to version 0.9.3 * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state * SSH-01-006 General: Various unchecked Null-derefs cause DOS * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys * SSH-01-010 SSH: Deprecated hash function in fingerprinting * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access * SSH-01-001 State Machine: Initial machine states should be set explicitly * SSH-01-002 Kex: Differently bound macros used to iterate same array * SSH-01-005 Code-Quality: Integer sign confusion during assignments * SSH-01-008 SCP: Protocol Injection via unescaped File Names * SSH-01-009 SSH: Update documentation which RFCs are implemented * SSH-01-012 PKI: Information leak via uninitialized stack buffer - Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved for internal use. ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - Build python2 and python3 bindings in separate flavors. As python3-libxml2 is a dependency of e.g. itstools and thus many other packages these packages no longer have a build dependency on python2. Breaks a build loop for python2. ==== libzypp ==== Version update (17.17.0 -> 17.20.0) - BuildRequires: libsolv-devel >= 0.7.10. - RpmDb: Become rpmdb backend independent (jsc#SLE-7272) - RpmDb: Close API offering a custom rpmdb path It's actually not needed and for this to work also libsolv needs to support it. You can sill use a librpmDb::db_const_iterator to access a database at a custom location (ro). - Remove legacy rpmV3database conversion code. - version 17.20.0 (20) - MediaCurl: assert cookie file has mode 0600 (bsc#1158763, CVE-2019-18900) - version 17.19.0 (12) - dup: fix removing orphaned packages dropped by to-be-installed products (bsc#1155819) - version 17.18.1 (12) - Resolver: add solution actions for SOLVER_SOLUTION_BLACK (retracted/PTF) - Solvable: add isRetracted and isPtf attributes. - version 17.18.0 (12) ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - backport patches for lvm2 to avoid software abnormal work (bsc#1158861) + bug-1158861_01-config-remove-filter-typo.patch + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch + bug-1158861_04-fix-duplicate-pv-size-check.patch + bug-1158861_05-hints-fix-copy-of-filter.patch + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch + bug-1158861_08-hints-fix-mem-leaking-buffers.patch + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch - backport upstream patches for passing lvm2 testsuite (bsc#1158628) + bug-1158628_01-tests-replaces-grep-q-usage.patch + bug-1158628_02-tests-fix-ra-checking.patch + bug-1158628_03-tests-simplify-some-var-settings.patch + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch + bug-1158628_05-activation-add-synchronization-point.patch + bug-1158628_06-pvmove-add-missing-synchronization.patch + bug-1158628_07-activation-extend-handling-of-pending_delete.patch + bug-1158628_08-lv_manip-add-synchronizations.patch + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch + bug-1158628_14-tests-add-extra-settle.patch + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - backport patches for lvm2 to avoid software abnormal work (bsc#1158861) + bug-1158861_01-config-remove-filter-typo.patch + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch + bug-1158861_04-fix-duplicate-pv-size-check.patch + bug-1158861_05-hints-fix-copy-of-filter.patch + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch + bug-1158861_08-hints-fix-mem-leaking-buffers.patch + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch - backport upstream patches for passing lvm2 testsuite (bsc#1158628) + bug-1158628_01-tests-replaces-grep-q-usage.patch + bug-1158628_02-tests-fix-ra-checking.patch + bug-1158628_03-tests-simplify-some-var-settings.patch + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch + bug-1158628_05-activation-add-synchronization-point.patch + bug-1158628_06-pvmove-add-missing-synchronization.patch + bug-1158628_07-activation-extend-handling-of-pending_delete.patch + bug-1158628_08-lv_manip-add-synchronizations.patch + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch + bug-1158628_14-tests-add-extra-settle.patch + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch ==== mokutil ==== - Add build for ppc64/ppc64le ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Security fix: [bsc#1158809, CVE-2019-1551] * Overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli - Add openssl-1_1-CVE-2019-1551.patch ==== p11-kit ==== Subpackages: libp11-kit0 p11-kit-tools - Also build documentation (boo#1013125) ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-minimal_base - Disable purge-kernels-service dependency for now: dracut has not yet been updated to no longer ship the service file. - Support multiversion(kernel) with purge-kernels.service separated from dracut (jsc#SLE-10162, jsc#SLE-10465). ==== policycoreutils ==== Subpackages: python3-policycoreutils - Added chcat_join.patch to prevent joining non-existing categories (bsc#1159262) ==== python-requests ==== - Remove python-urllib3, python-certifi and ca-certificates from main package BuildRequires, not required for building. - Do not require full python, (implicit) python-base is sufficient. ==== reg ==== Version update (0.16.0 -> 0.16.1) - Update to version 0.16.1 - Update vendor - Adds support for passing a context with all http requests ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Add missing bugzilla references: Properly handle colons in inline dicts with yamlloader (bsc#1095651) Fix corrupt public key with m2crypto python3 (bsc#1099323) Add missing dateutils import (bsc#1099945) Fix UnicodeDecodeError using is_binary check (bsc#1100225) Prevent payload crash on decoding binary data (bsc#1100697) Fix file.blockreplace to avoid throwing IndexError (bsc#1101812) Add API log rotation on SUSE package (bsc#1102218) Fix wrong recurse behavior on for linux_acl.present (bsc#1106164) Handle anycast IPv6 addresses on network.routes (bsc#1114474) Crontab module fix: file attributes option missing (bsc#1114824) Add metadata to accepted keyword arguments (bsc#1122680) Bugfix: properly refresh pillars (bsc#1125015) - xfs: do not fail if type is not present (bsc#1153611) - Added: * xfs-do-not-fails-if-type-is-not-present.patch - Don't use __python indirection macros on spec file %__python is no longer defined in RPM 4.15 (python2 is going EOL in Jan 2020); additionally, python/python3 are just binaries in the path. - Fix errors when running virt.get_hypervisor function - Added: * fix-virt.get_hypervisor-188.patch - Align virt.full_info fixes with upstream Salt - Let salt-ssh use platform-python on RHEL8 (bsc#1158441) - Added: * align-virt-full-info-fixes-with-upstream-192.patch * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch - Fix StreamClosedError issue (bsc#1157479) - Added: * fix-batch_async-obsolete-test.patch * fixing-streamclosed-issue.patch ==== slirp4netns ==== Version update (0.4.2 -> 0.4.3) - Update to 0.4.3 * api: raise an error if the socket path is too long * libslirp: update to v4.1.0: Including the fix for libslirp sends RST to app in response to arriving FIN when containerized socket is shutdown() with SHUT_WR * Fix create_sandbox error ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Install infopipe dbus service (bsc#1106598) - Add systemd service unit files to manage socket or bus activated responders. - All responders except infopipe are also managed by a socket unit file. - Add missing post and postun hooks for libsss_certmap0 package. ==== xen ==== Version update (4.13.0_03 -> 4.13.0_04) - bsc#1159320 - Xen logrotate file needs updated logrotate.conf - Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware - Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191221 released!
by Richard Brown 24 Dec '19

24 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cryptsetup installation-images-MicroOS (14.447 -> 14.450) libcap libcontainers-common (20190923 -> 20191211) libselinux-bindings podman (1.6.2 -> 1.6.4) procps (3.3.15 -> 3.3.16) sudo wicked (0.6.60 -> 0.6.61) === Details === ==== cryptsetup ==== Subpackages: libcryptsetup12 - Create a weak dependency cycle between libcryptsetup and libcryptsetup-hmac to make sure they are installed together (bsc#1090768) ==== installation-images-MicroOS ==== Version update (14.447 -> 14.450) - merge gh#openSUSE/installation-images#347 - prepare for syslinux 6.x setup (jsc#SLE-2969) - use gfxboot script from repo, not the installed one - 14.450 - merge gh#openSUSE/installation-images#346 - etc: module.config, fix build on i586 with 5.4 kernel - 14.449 - merge gh#openSUSE/installation-images#345 - etc: update module.config to match 5.4-final - 14.448 ==== libcap ==== - Remove pam_cap (bsc#1150522) since this PAM module is a bad idea, security wise. ==== libcontainers-common ==== Version update (20190923 -> 20191211) - Update to image 5.0.0 - Clean up various imports primarily so that imports of packages that aren't in the standard library are all in one section. - Update to major version v5 - return resp error message - copy.Image(): select the CopySystemImage image using the source context - Add manifest list support - docker: handle http 429 status codes - allow for .dockercfg files to reside in non-home directories - Use the correct module path in (make test-skopeo) - Update to libpod 1.6.3 - Handling of the libpod.conf configuration file has seen major changes. Most significantly, rootless users will no longer automatically receive a complete configuration file when they first use Podman, and will instead only receive differences from the global configuration. - Initial support for the CNI DNS plugin, which allows containers to resolve the IPs of other containers via DNS name, has been added - Podman now supports anonymous named volumes, created by specifying only a destination to the -v flag to the podman create and podman run commands - Named volumes now support uid and gid options in --opt o=... to set UID and GID of the created volume - Update to storage 1.15.3 - overlay: allow storing images with more than 127 layers - Lazy initialize the layer store - tarlogger: drop state mutex ==== libselinux-bindings ==== - Added swig4_moduleimport.patch to prevent import errors due to SWIG 4 ==== podman ==== Version update (1.6.2 -> 1.6.4) Subpackages: podman-cni-config - Update podman to v1.6.4 - Remove winsz FIFO on container restart to allow use with Conmon 2.03 and higher - Ensure volumes reacquire locks on system restart, preventing deadlocks when starting containers - Suppress spurious log messages when running rootless Podman - Update vendored containers/storage to v1.13.6 - Fix a deadlock related to writing events - Do not use the journald event logger when it is not available - Remove obsolete patch container-start-fix.patch ==== procps ==== Version update (3.3.15 -> 3.3.16) - Update to procps-ng-3.3.16 * library: Increment to 8:2:0 No removals or functions Internal changes only, so revision is incremented. Previous version should have been 8:1:0 not 8:0:1 * docs: Use correct symbols for -h option in free.1 Debian #898774 * docs: ps.1 now warns about command name length issue #101 * docs: install translated man pages issue #146 * pgrep: Match on runstate issue #109, Debian #919381 * snice: Fix matching on pid merge #89 * top: can now exploit 256-color terminals issue #96 * top: preserves 'other filters' in configuration file issue #99 * top: can now collapse/expand forest view children issue #99 * top: parent %CPU time includes collapsed children * top: improve xterm support for vim navigation keys issue #135 * top: avoid segmentation fault at program termination Redhat #1737552 - Port patches (mostly changed offsets of the hunks) * procps-ng-3.3.10-fdleak.dif * procps-ng-3.3.10-large_pcpu.patch * procps-ng-3.3.10-slab.patch * procps-ng-3.3.10-xen.dif * procps-ng-3.3.8-bnc634840.patch * procps-ng-3.3.8-petabytes.patch * procps-ng-3.3.8-readeof.patch * procps-ng-3.3.8-tinfo.dif * procps-ng-3.3.8-vmstat-terabyte.dif * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff - Delete patches now upstream * procps-ng-3.3.15-typo.patch * procps-ng-3.3.8-top.1.diff - Add aptch procps-ng-3.3.16-comm_len.patch * "ps -C" does not allow anymore an argument longer than 15 characters (bsc#1158830) ==== sudo ==== - Move pam.d/sudo* files to /usr/etc ==== wicked ==== Version update (0.6.60 -> 0.6.61) Subpackages: wicked-service - version 0.6.61 - dracut: add initial cmdline parsing as a config source - address: don't check hwaddr length if parsing as ARPHRD_VOID - utils: added find and insert var array utils, cleanup - client: add show-policy command calling policy generation - client: initial support to generate a basic policy directly - client: cleanup convert and show-config commands -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191221 released!
by Richard Brown 24 Dec '19

24 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cryptsetup ebtables (2.0.10.4 -> 2.0.11) installation-images-MicroOS (14.447 -> 14.450) libcap libcontainers-common (20190923 -> 20191211) libselinux-bindings podman (1.6.2 -> 1.6.4) procps (3.3.15 -> 3.3.16) sudo wicked (0.6.60 -> 0.6.61) === Details === ==== cryptsetup ==== Subpackages: libcryptsetup12 - Create a weak dependency cycle between libcryptsetup and libcryptsetup-hmac to make sure they are installed together (bsc#1090768) ==== ebtables ==== Version update (2.0.10.4 -> 2.0.11) - add ebtables.keyring as a Source - Update to release 2.0.11 * Add --noflush command line support for ebtables-restore * Do not print IPv6 mask if it is all ones * Allow RETURN target rules in user defined chains * ebt_ip: add support for matching ICMP type and code * ebt_ip: add support for matching IGMP type * extensions: Add string filter to ebtables * Print IPv6 prefixes in CIDR notation * extensions: Add AUDIT target * Fix incorrect IPv6 prefix formatting - Drop ebtables-v2.0.8-makefile.diff (no longer needed) - Drop ebtables-v2.0.8-initscript.diff, include-linux-if.patch (not applicable) - Drop ebtables-v2.0.10-4-audit.patch, 0001-fix-compilation-warning.patch, 0001-Use-flock-for-concurrent-option.patch, 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch (merged) ==== installation-images-MicroOS ==== Version update (14.447 -> 14.450) - merge gh#openSUSE/installation-images#347 - prepare for syslinux 6.x setup (jsc#SLE-2969) - use gfxboot script from repo, not the installed one - 14.450 - merge gh#openSUSE/installation-images#346 - etc: module.config, fix build on i586 with 5.4 kernel - 14.449 - merge gh#openSUSE/installation-images#345 - etc: update module.config to match 5.4-final - 14.448 ==== libcap ==== - Remove pam_cap (bsc#1150522) since this PAM module is a bad idea, security wise. ==== libcontainers-common ==== Version update (20190923 -> 20191211) - Update to image 5.0.0 - Clean up various imports primarily so that imports of packages that aren't in the standard library are all in one section. - Update to major version v5 - return resp error message - copy.Image(): select the CopySystemImage image using the source context - Add manifest list support - docker: handle http 429 status codes - allow for .dockercfg files to reside in non-home directories - Use the correct module path in (make test-skopeo) - Update to libpod 1.6.3 - Handling of the libpod.conf configuration file has seen major changes. Most significantly, rootless users will no longer automatically receive a complete configuration file when they first use Podman, and will instead only receive differences from the global configuration. - Initial support for the CNI DNS plugin, which allows containers to resolve the IPs of other containers via DNS name, has been added - Podman now supports anonymous named volumes, created by specifying only a destination to the -v flag to the podman create and podman run commands - Named volumes now support uid and gid options in --opt o=... to set UID and GID of the created volume - Update to storage 1.15.3 - overlay: allow storing images with more than 127 layers - Lazy initialize the layer store - tarlogger: drop state mutex ==== libselinux-bindings ==== - Added swig4_moduleimport.patch to prevent import errors due to SWIG 4 ==== podman ==== Version update (1.6.2 -> 1.6.4) Subpackages: podman-cni-config - Update podman to v1.6.4 - Remove winsz FIFO on container restart to allow use with Conmon 2.03 and higher - Ensure volumes reacquire locks on system restart, preventing deadlocks when starting containers - Suppress spurious log messages when running rootless Podman - Update vendored containers/storage to v1.13.6 - Fix a deadlock related to writing events - Do not use the journald event logger when it is not available - Remove obsolete patch container-start-fix.patch ==== procps ==== Version update (3.3.15 -> 3.3.16) - Update to procps-ng-3.3.16 * library: Increment to 8:2:0 No removals or functions Internal changes only, so revision is incremented. Previous version should have been 8:1:0 not 8:0:1 * docs: Use correct symbols for -h option in free.1 Debian #898774 * docs: ps.1 now warns about command name length issue #101 * docs: install translated man pages issue #146 * pgrep: Match on runstate issue #109, Debian #919381 * snice: Fix matching on pid merge #89 * top: can now exploit 256-color terminals issue #96 * top: preserves 'other filters' in configuration file issue #99 * top: can now collapse/expand forest view children issue #99 * top: parent %CPU time includes collapsed children * top: improve xterm support for vim navigation keys issue #135 * top: avoid segmentation fault at program termination Redhat #1737552 - Port patches (mostly changed offsets of the hunks) * procps-ng-3.3.10-fdleak.dif * procps-ng-3.3.10-large_pcpu.patch * procps-ng-3.3.10-slab.patch * procps-ng-3.3.10-xen.dif * procps-ng-3.3.8-bnc634840.patch * procps-ng-3.3.8-petabytes.patch * procps-ng-3.3.8-readeof.patch * procps-ng-3.3.8-tinfo.dif * procps-ng-3.3.8-vmstat-terabyte.dif * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff - Delete patches now upstream * procps-ng-3.3.15-typo.patch * procps-ng-3.3.8-top.1.diff - Add aptch procps-ng-3.3.16-comm_len.patch * "ps -C" does not allow anymore an argument longer than 15 characters (bsc#1158830) ==== sudo ==== - Move pam.d/sudo* files to /usr/etc ==== wicked ==== Version update (0.6.60 -> 0.6.61) Subpackages: wicked-service - version 0.6.61 - dracut: add initial cmdline parsing as a config source - address: don't check hwaddr length if parsing as ARPHRD_VOID - utils: added find and insert var array utils, cleanup - client: add show-policy command calling policy generation - client: initial support to generate a basic policy directly - client: cleanup convert and show-config commands -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191216 released!
by Richard Brown 18 Dec '19

18 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: krb5 (1.17 -> 1.17.1) libxcrypt perl vim (8.1.2383 -> 8.2.0000) === Details === ==== krb5 ==== Version update (1.17 -> 1.17.1) - Upgrade to 1.17.1 * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin. * Fix a bug preventing time skew correction from working when a KCM credential cache is used. ==== libxcrypt ==== - gcc10.patch: fix build with gcc10 (bsc#1158192) ==== perl ==== Subpackages: perl-base - Fix incorrect prefix removal in rpm macro %perl_gen_filelist (boo#1152247) ==== vim ==== Version update (8.1.2383 -> 8.2.0000) Subpackages: vim-data-common - Update to version 8.2.0000 * make depend" does not work correctly for libvterm. * Crash when calling popup_close() in win_execute() * With a long file name the hit-enter prompt appears. * bufnr('$') is wrong after recycling popup buffer. * loading menus sets v:errmsg. * popup menu flickers if an info popup is used. * Crash when evaluating expression with error. * Function argument copied unnecessarily. * syntax menu and build instructions outdated. * matchadd_conceal test fails under valgrind. * :cexpr does not handle | in expression. * Use // comments where appropriate. * 'wincolor' is not used for 'listchars'. * Opening cmdline window with feedkeys() does not work. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191216 released!
by Richard Brown 18 Dec '19

18 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: krb5 (1.17 -> 1.17.1) libxcrypt perl vim (8.1.2383 -> 8.2.0000) === Details === ==== krb5 ==== Version update (1.17 -> 1.17.1) - Upgrade to 1.17.1 * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin. * Fix a bug preventing time skew correction from working when a KCM credential cache is used. ==== libxcrypt ==== - gcc10.patch: fix build with gcc10 (bsc#1158192) ==== perl ==== Subpackages: perl-base - Fix incorrect prefix removal in rpm macro %perl_gen_filelist (boo#1152247) ==== vim ==== Version update (8.1.2383 -> 8.2.0000) Subpackages: vim-data-common - Update to version 8.2.0000 * make depend" does not work correctly for libvterm. * Crash when calling popup_close() in win_execute() * With a long file name the hit-enter prompt appears. * bufnr('$') is wrong after recycling popup buffer. * loading menus sets v:errmsg. * popup menu flickers if an info popup is used. * Crash when evaluating expression with error. * Function argument copied unnecessarily. * syntax menu and build instructions outdated. * matchadd_conceal test fails under valgrind. * :cexpr does not handle | in expression. * Use // comments where appropriate. * 'wincolor' is not used for 'listchars'. * Opening cmdline window with feedkeys() does not work. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191214 released!
by Richard Brown 16 Dec '19

16 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: glibc libtasn1 (4.14 -> 4.15.0) yast2 (4.2.34 -> 4.2.47) === Details === ==== glibc ==== Subpackages: glibc-locale glibc-locale-base - prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ [#25204]) - nsswitch.conf: add usrfiles for services, protocols, rpc, ethers and aliases for /usr/etc move - euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module (BZ #24973) - ldconfig-dynstr.patch: ldconfig: handle .dynstr located in separate segment (bsc#1153149, BZ #25087) ==== libtasn1 ==== Version update (4.14 -> 4.15.0) Subpackages: libtasn1-6 - libtasn1 4.15.0: * The generated tree no longer contains ASN.1 built-in types even if they are explicitly defined in the description. Previously a warning was printed when these types were seen, now they are ignored. * Several fixes in ASN.1 definition parser, preventing several crashes and leaks in the tools due to improper ASN.1. * Switched to semantic versioning ==== yast2 ==== Version update (4.2.34 -> 4.2.47) - Add backward compatible hash accessors to Resolvable which solve several crashes (related to bsc#1132650 and bsc#1140037) - 4.2.47 - Use 70-yast.conf instead of 30-yast.conf to write YaST settings under /etc/sysctl.d (related to jsc#SLE-9077). - 4.2.46 - Do not crash while reading the product info (related to bsc#1132650 and bsc#1140037). - 4.2.45 - Do not crash when no base product is found (related to bsc#1132650 and bsc#1140037). - 4.2.44 - Using Y2Packager::Resolvable.any? and Y2Packager::Resolvable.find in order to decrease the required memory (bsc#1132650, bsc#1140037). - 4.2.43 - Network: drop support for obsolete network device types (jsc#SLE-7753) - 4.2.42 - Use /etc/login.defs.d/70-yast.defs to write login.defs values that are overridden by YaST (related to bsc#1155735). - 4.2.41 - add is_wsl function to detect wsl (boo#1154962) - 4.2.40 - bsc#1155735, bsc#1157541: - Read /usr/etc/login.defs. - Write login.defs configuration to /etc/login.defs.d/. - 4.2.39 - bnc#1157532 - do not modify /etc/sysctl.conf in inst-sys as it is on r/o filesystem - 4.2.38 - Linuxrc: Ensure the new opened SCR instace is closed when reading the /etc/install.inf file (bsc#1122493, bsc#1157476) - 4.2.37 - Ensure /etc/install.inf is not read from the target system but from the local one. (bsc#1122493, bsc#1157476) - 4.2.36 - Do not try to find licenses in the installation medium when they have been already downloaded from SCC (bsc#1153326). - 4.2.35 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191214 released!
by Richard Brown 16 Dec '19

16 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: glibc libtasn1 (4.14 -> 4.15.0) yast2 (4.2.34 -> 4.2.47) === Details === ==== glibc ==== Subpackages: glibc-locale glibc-locale-base - prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ [#25204]) - nsswitch.conf: add usrfiles for services, protocols, rpc, ethers and aliases for /usr/etc move - euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module (BZ #24973) - ldconfig-dynstr.patch: ldconfig: handle .dynstr located in separate segment (bsc#1153149, BZ #25087) ==== libtasn1 ==== Version update (4.14 -> 4.15.0) Subpackages: libtasn1-6 - libtasn1 4.15.0: * The generated tree no longer contains ASN.1 built-in types even if they are explicitly defined in the description. Previously a warning was printed when these types were seen, now they are ignored. * Several fixes in ASN.1 definition parser, preventing several crashes and leaks in the tools due to improper ASN.1. * Switched to semantic versioning ==== yast2 ==== Version update (4.2.34 -> 4.2.47) - Add backward compatible hash accessors to Resolvable which solve several crashes (related to bsc#1132650 and bsc#1140037) - 4.2.47 - Use 70-yast.conf instead of 30-yast.conf to write YaST settings under /etc/sysctl.d (related to jsc#SLE-9077). - 4.2.46 - Do not crash while reading the product info (related to bsc#1132650 and bsc#1140037). - 4.2.45 - Do not crash when no base product is found (related to bsc#1132650 and bsc#1140037). - 4.2.44 - Using Y2Packager::Resolvable.any? and Y2Packager::Resolvable.find in order to decrease the required memory (bsc#1132650, bsc#1140037). - 4.2.43 - Network: drop support for obsolete network device types (jsc#SLE-7753) - 4.2.42 - Use /etc/login.defs.d/70-yast.defs to write login.defs values that are overridden by YaST (related to bsc#1155735). - 4.2.41 - add is_wsl function to detect wsl (boo#1154962) - 4.2.40 - bsc#1155735, bsc#1157541: - Read /usr/etc/login.defs. - Write login.defs configuration to /etc/login.defs.d/. - 4.2.39 - bnc#1157532 - do not modify /etc/sysctl.conf in inst-sys as it is on r/o filesystem - 4.2.38 - Linuxrc: Ensure the new opened SCR instace is closed when reading the /etc/install.inf file (bsc#1122493, bsc#1157476) - 4.2.37 - Ensure /etc/install.inf is not read from the target system but from the local one. (bsc#1122493, bsc#1157476) - 4.2.36 - Do not try to find licenses in the installation medium when they have been already downloaded from SCC (bsc#1153326). - 4.2.35 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] Github project for planning work
by Michal Rostecki 16 Dec '19

16 Dec '19

Hi, To make managing of work we do in Kubic easier, I created a Github project board which basically is a kanban board to which you can add notes and issues and make your work visible. The board is here: https://github.com/orgs/kubic-project/projects/3 I created also the following repo to create issues in: https://github.com/kubic-project/issues I'm encouraging everyone to use them. :) Cheers, Michal -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

2 1

[opensuse-kubic] how to handle kubernetes build error cannot import package ../../../../vendor/... ?
by Normand 13 Dec '19

13 Dec '19

With new kubernetes 1.17; there is a build failure for ppc64le (1), how to handle the error: "cannot import package ../../../../vendor/k8s.io/api/apps/v1" ? I basically checked the presence of related path in tarball: === kubernetes-1.17.0/vendor/k8s.io/api -> ../../staging/src/k8s.io/api kubernetes-1.17.0/staging/src/k8s.io/api/apps/v1 === But do not know what do do from there. (1) https://build.opensuse.org/package/live_build_log/devel:kubic/kubernetes/op… === [ 85s] +++ [1212 13:58:43] Building go targets for linux/ppc64le: [ 85s] ./vendor/k8s.io/kube-openapi/cmd/openapi-gen [ 95s] # k8s.io/kubernetes/vendor/github.com/go-bindata/go-bindata/go-bindata [ 95s] loadinternal: cannot find runtime/cgo [ 122s] F1212 13:59:20.792808 5701 defaulter.go:288] cannot import package ../../../../vendor/k8s.io/api/apps/v1 [ 122s] make[1]: *** [Makefile.generated_files:248: gen_defaulter] Error 1 === -- Michel Normand -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

2 2

[opensuse-kubic] New MicroOS snapshot 20191211 released!
by Richard Brown 13 Dec '19

13 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20191120.98f1524 -> 84.87+git20191206.1cb88e3) btrfsprogs (5.3.1 -> 5.4) dbus-1 (1.12.12 -> 1.12.16) expat (2.2.8 -> 2.2.9) gnutls (3.6.10 -> 3.6.11.1) iproute2 (5.3 -> 5.4) libxcrypt (4.4.3 -> 4.4.10) rebootmgr restorecond systemd === Details === ==== aaa_base ==== Version update (84.87+git20191120.98f1524 -> 84.87+git20191206.1cb88e3) - Update to version 84.87+git20191206.1cb88e3: * Add support for lesskey.bin in /usr/etc * Do last change also for tcsh * Not all XTerm based emulators do have an terminfo entry ==== btrfsprogs ==== Version update (5.3.1 -> 5.4) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.4 * support new hash algorithms (kernel 5.5): * mkfs.btrfs and btrfs-convert with --csum, crc32c, xxhash, sha256, blake2 * mkfs: support new raid1c3 and raid1c4 block group profiles (kernel 5.5) * check: * --repair delays start with a warning, can be skipped using --force * enhanced detetion of inode types from partial data, more options for repair * receive: fix quiet option * image: speed up chunk loading * fi usage: * sort devices by id * print ratio of used/total per block group type * rescue zero-log: reset the log pointers directly, avoid reading some other potentially damaged structures * new make target install-static to install only static binaries/libraries * other * docs updates * new tests * cleanups and refactoring ==== dbus-1 ==== Version update (1.12.12 -> 1.12.16) Subpackages: libdbus-1-3 - Verify signatures * dbus-1.keyring - Key for Simon McVittie (smcv) from the Debian developer keyring. - Drop dbus_at_console.ck not needed - Clean up sources * Source2 dbus-1.desktop now Source4 * baselib.conf now source 3 - Update to 1.12.16 * CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1 authentication for identities that differ from the user running the DBusServer. Previously, a local attacker could manipulate symbolic links in their own home directory to bypass authentication and connect to a DBusServer with elevated privileges. The standard system and session dbus-daemons in their default configuration were immune to this attack because they did not allow DBUS_COOKIE_SHA1, but third-party users of DBusServer such as Upstart could be vulnerable. Thanks to Joe Vennix of Apple Information Security. (bsc#1137832, dbus#269, Simon McVittie) - From 1.12.14 * Raise soft fd limit to match hard limit, even if unprivileged. This makes session buses with many clients, or with clients that make heavy use of fd-passing, less likely to suffer from fd exhaustion. (dbus!103, Simon McVittie) * If a privileged dbus-daemon has a hard fd limit greater than 64K, don't reduce it to 64K, ensuring that we can put back the original fd limits when carrying out traditional (non-systemd) activation. This fixes a regression with systemd >= 240 in which system services inherited dbus-daemon's hard and soft limit of 64K fds, instead of the intended soft limit of 1K and hard limit of 512K or 1M. (dbus!103, Debian#928877; Simon McVittie) * Fix build failures caused by an AX_CODE_COVERAGE API change in newer autoconf-archive versions (dbus#249, dbus!88; Simon McVittie) * Fix build failures with newer autoconf-archive versions that include AX_-prefixed shell variable names (dbus#249, dbus!86; Simon McVittie) * Parse section/group names in .service files according to the syntax from the Desktop Entry Specification, rejecting control characters and non-ASCII in section/group names (dbus#208, David King) * Fix various -Wlogical-op issues that cause build failure with newer gcc versions (dbus#225, dbus!109; David King) * Don't assume we can set permissions on a directory, for the benefit of MSYS and Cygwin builds (dbus#216, dbus!110; Simon McVittie) * Don't overwrite PKG_CONFIG_PATH and related environment variables when the pkg-config-based version of DBus1Config is used in a CMake project (dbus#267, dbus!96; Clemens Lang) - Drop now upstream Patches * dbus-no-ax-check.patch * dbus-new-autoconf-archive.patch ==== expat ==== Version update (2.2.8 -> 2.2.9) - Version update to 2.2.9 * Other changes: - examples: Drop executable bits from elements.c [#349] Windows: Change the name of the Windows DLLs from expat*.dll to libexpat*.dll once more (regression from 2.2.8, first fixed in 1.95.3, issue #61 on SourceForge today, was issue #432456 back then); needs a fix due case-insensitive file systems on Windows and the fact that Perl's XML::Parser::Expat compiles into Expat.dll. [#347] Windows: Only define _CRT_RAND_S if not defined Version info bumped from 7:10:6 to 7:11:6 ==== gnutls ==== Version update (3.6.10 -> 3.6.11.1) - gnutls 3.6.11.1: * libgnutls: Corrected issue with TLS 1.2 session ticket handling as client during resumption * libgnutls: gnutls_base64_decode2() succeeds decoding the empty string to the empty string. This is a behavioral change of the API but it conforms to the RFC4648 expectations * libgnutls: Fixed AES-CFB8 implementation, when input is shorter than the block size. Fix backported from nettle. * certtool: CRL distribution points will be set in CA certificates even when non self-signed * gnutls-cli/serv: added raw public-key handling capabilities (RFC7250). Key material can be set via the --rawpkkeyfile and - -rawpkfile flags. ==== iproute2 ==== Version update (5.3 -> 5.4) - Update to new upstream release 5.4 * devlink: increase number of supported options (32 -> 64) * devlink: add trap set and show commands * devlink: add trap group set and show commands * devlink: add reset_dev_on_drv_probe param * devlink: support unknown value for fw_load_policy * devlink: support flash status monitoring * devlink: add reload failed indication * ip: netns: support dump of nsid conversion table * ip: nexthop: support filtering by protocol for flush and list * rdma: driver QP type string * tc: introduce ct action * tc: support 64-bit rate and peakrate * tc: etf: support skip_sock_check * tc: flower: add matching on conntrack info * tc: taprio: support setting flags * tc: taprio: support setting txtime_delay * documentation improvements * json output improvements * drop outdated example scripts and README files - drop (patched script dropped) examples-fix-bashisms-in-example-script.patch - ss-fix-end-of-line-printing-in-misc-ss.c.patch: fix missing end of line at the end of ss output ==== libxcrypt ==== Version update (4.4.3 -> 4.4.10) - Update to version 4.4.10 * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt. * The crypt_* functions will now all fail and set errno to ERANGE if their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE characters (this is currently 512) * The NT hashing method no longer truncates passphrases at 128 characters; Windows does not do this. - format-overflow.patch: remove ==== rebootmgr ==== - Fix %posttrans script returning an error code ==== restorecond ==== - Use %make_build and respect %optflags. ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit dbb1d4734daffa62e0eddecfa4f784c84a9d8e76 1439d72a72 udevd: don't use monitor after manager_exit() 99288dd778 Revert "udevd: fix crash when workers time out after exit is signal caught" 152577d6d0 udevd: fix crash when workers time out after exit is signal caught f854991504 udevd: wait for workers to finish when exiting (bsc#1106383) Changes from the v243-stable (84 commits): e51d9bf9e5 man: add entry about SpeedMeter= aa1fc791c7 udev: silence warning about PROGRAM+= or IMPORT+= rules b9a619bb67 udevadm: ignore EROFS and return earlier 1ec5b9f80c basic: add vmware hypervisor detection from device-tree 7fa7080248 umount: be happy if /proc/swaps doesn't exist [...] 47d0e23d26 udev: fix memleak caused by wrong cleanup function a6fb0542c5 parse_hwdb: fix compatibility with pyparsing 2.4.* cb1d892f17 parse_hwdb: process files in order -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191211 released!
by Richard Brown 13 Dec '19

13 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20191120.98f1524 -> 84.87+git20191206.1cb88e3) btrfsprogs (5.3.1 -> 5.4) dbus-1 (1.12.12 -> 1.12.16) expat (2.2.8 -> 2.2.9) gnutls (3.6.10 -> 3.6.11.1) haproxy (2.0.9+git6.26b7b800 -> 2.0.10+git14.7caf150a) iproute2 (5.3 -> 5.4) libxcrypt (4.4.3 -> 4.4.10) rebootmgr restorecond systemd === Details === ==== aaa_base ==== Version update (84.87+git20191120.98f1524 -> 84.87+git20191206.1cb88e3) - Update to version 84.87+git20191206.1cb88e3: * Add support for lesskey.bin in /usr/etc * Do last change also for tcsh * Not all XTerm based emulators do have an terminfo entry ==== btrfsprogs ==== Version update (5.3.1 -> 5.4) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.4 * support new hash algorithms (kernel 5.5): * mkfs.btrfs and btrfs-convert with --csum, crc32c, xxhash, sha256, blake2 * mkfs: support new raid1c3 and raid1c4 block group profiles (kernel 5.5) * check: * --repair delays start with a warning, can be skipped using --force * enhanced detetion of inode types from partial data, more options for repair * receive: fix quiet option * image: speed up chunk loading * fi usage: * sort devices by id * print ratio of used/total per block group type * rescue zero-log: reset the log pointers directly, avoid reading some other potentially damaged structures * new make target install-static to install only static binaries/libraries * other * docs updates * new tests * cleanups and refactoring ==== dbus-1 ==== Version update (1.12.12 -> 1.12.16) Subpackages: libdbus-1-3 - Verify signatures * dbus-1.keyring - Key for Simon McVittie (smcv) from the Debian developer keyring. - Drop dbus_at_console.ck not needed - Clean up sources * Source2 dbus-1.desktop now Source4 * baselib.conf now source 3 - Update to 1.12.16 * CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1 authentication for identities that differ from the user running the DBusServer. Previously, a local attacker could manipulate symbolic links in their own home directory to bypass authentication and connect to a DBusServer with elevated privileges. The standard system and session dbus-daemons in their default configuration were immune to this attack because they did not allow DBUS_COOKIE_SHA1, but third-party users of DBusServer such as Upstart could be vulnerable. Thanks to Joe Vennix of Apple Information Security. (bsc#1137832, dbus#269, Simon McVittie) - From 1.12.14 * Raise soft fd limit to match hard limit, even if unprivileged. This makes session buses with many clients, or with clients that make heavy use of fd-passing, less likely to suffer from fd exhaustion. (dbus!103, Simon McVittie) * If a privileged dbus-daemon has a hard fd limit greater than 64K, don't reduce it to 64K, ensuring that we can put back the original fd limits when carrying out traditional (non-systemd) activation. This fixes a regression with systemd >= 240 in which system services inherited dbus-daemon's hard and soft limit of 64K fds, instead of the intended soft limit of 1K and hard limit of 512K or 1M. (dbus!103, Debian#928877; Simon McVittie) * Fix build failures caused by an AX_CODE_COVERAGE API change in newer autoconf-archive versions (dbus#249, dbus!88; Simon McVittie) * Fix build failures with newer autoconf-archive versions that include AX_-prefixed shell variable names (dbus#249, dbus!86; Simon McVittie) * Parse section/group names in .service files according to the syntax from the Desktop Entry Specification, rejecting control characters and non-ASCII in section/group names (dbus#208, David King) * Fix various -Wlogical-op issues that cause build failure with newer gcc versions (dbus#225, dbus!109; David King) * Don't assume we can set permissions on a directory, for the benefit of MSYS and Cygwin builds (dbus#216, dbus!110; Simon McVittie) * Don't overwrite PKG_CONFIG_PATH and related environment variables when the pkg-config-based version of DBus1Config is used in a CMake project (dbus#267, dbus!96; Clemens Lang) - Drop now upstream Patches * dbus-no-ax-check.patch * dbus-new-autoconf-archive.patch ==== expat ==== Version update (2.2.8 -> 2.2.9) - Version update to 2.2.9 * Other changes: - examples: Drop executable bits from elements.c [#349] Windows: Change the name of the Windows DLLs from expat*.dll to libexpat*.dll once more (regression from 2.2.8, first fixed in 1.95.3, issue #61 on SourceForge today, was issue #432456 back then); needs a fix due case-insensitive file systems on Windows and the fact that Perl's XML::Parser::Expat compiles into Expat.dll. [#347] Windows: Only define _CRT_RAND_S if not defined Version info bumped from 7:10:6 to 7:11:6 ==== gnutls ==== Version update (3.6.10 -> 3.6.11.1) - gnutls 3.6.11.1: * libgnutls: Corrected issue with TLS 1.2 session ticket handling as client during resumption * libgnutls: gnutls_base64_decode2() succeeds decoding the empty string to the empty string. This is a behavioral change of the API but it conforms to the RFC4648 expectations * libgnutls: Fixed AES-CFB8 implementation, when input is shorter than the block size. Fix backported from nettle. * certtool: CRL distribution points will be set in CA certificates even when non self-signed * gnutls-cli/serv: added raw public-key handling capabilities (RFC7250). Key material can be set via the --rawpkkeyfile and - -rawpkfile flags. ==== haproxy ==== Version update (2.0.9+git6.26b7b800 -> 2.0.10+git14.7caf150a) - Update to version 2.0.10+git14.7caf150a: * BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1 * BUG/MEDIUM: listener/thread: fix a race when pausing a listener * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data * DOC: move the "group" keyword at the right place * DOC: clarify matching strings on binary fetches * DOC: Clarify behavior of server maxconn in HTTP mode - Update to version 2.0.10+git4.6d9a455d: * BUG/MINOR: http-htx: Don't make http_find_header() fail if the value is empty - Update to version 2.0.10+git3.200c6215: * BUG/MINOR: contrib/prometheus-exporter: decode parameter and value only - Update to version 2.0.10+git2.3a00e5fc: * BUG/MINOR: contrib/prometheus-exporter: Use HTX errors and not legacy ones * BUG/MINOR: stream: init variables when the list is empty - Update to version 2.0.10+git0.ac198b92: * [RELEASE] Released version 2.0.10 * SCRIPTS: git-show-backports: add "-s" to proposed cherry-pick commands * SCRIPTS: create-release: show the correct origin name in suggested commands * BUG/MAJOR: mux-h2: don't try to decode a response HEADERS frame in idle state * BUG/MAJOR: h2: make header field name filtering stronger * BUG/MAJOR: h2: reject header values containing invalid chars * MINOR: ist: add ist_find_ctl() * BUG/MINOR: ssl: fix curve setup with LibreSSL * BUG/MINOR: cli: fix out of bounds in -S parser * DOC: Add documentation about the use-service action * DOC: Add missing stats fields in the management manual * BUG/MINOR: mux-h1: Adjust header case when chunked encoding is add to a message * BUG/MINOR: mux-h1: Fix a UAF in cfg_h1_headers_case_adjust_postparser() * MEDIUM: mux-h1: Add the support of headers adjustment for bogus HTTP/1 apps * REGTEST: vtest can now enable mcli with its own flag * MINOR: stats: Report max times in addition of the averages for sessions * BUG/MINOR: stream-int: Fix si_cs_recv() return value * MINOR: contrib/prometheus-exporter: Add a param to ignore servers in maintenance * MINOR: contrib/prometheus-exporter: filter exported metrics by scope * MINOR: contrib/prometheus-exporter: report the number of idle conns per server * BUG/MINOR: contrib/prometheus-exporter: Rename some metrics * MINOR: contrib/prometheus-exporter: Report metrics about max times for sessions * MINOR: counters: Add fields to store the max observed for {q,c,d,t}_time * MINOR: stream: Remove the lock on the proxy to update time stats * MINOR: freq_ctr: Make the sliding window sums thread-safe * BUG/MINOR: http-ana: Properly catch aborts during the payload forwarding * BUG/MINOR: mux-h1: Fix tunnel mode detection on the response path * BUILD: debug: Avoid warnings in dev mode with -02 because of some BUG_ON tests * BUG/MEDIUM: stream-int: Don't loose events on the CS when an EOS is reported * BUILD/MINOR: ssl: fix compiler warning about useless statement * BUG/MINOR: peers: "peer alive" flag not reset when deconnecting. * BUG/MEDIUM: mworker: don't fill the -sf argument with -1 during the reexec ==== iproute2 ==== Version update (5.3 -> 5.4) - Update to new upstream release 5.4 * devlink: increase number of supported options (32 -> 64) * devlink: add trap set and show commands * devlink: add trap group set and show commands * devlink: add reset_dev_on_drv_probe param * devlink: support unknown value for fw_load_policy * devlink: support flash status monitoring * devlink: add reload failed indication * ip: netns: support dump of nsid conversion table * ip: nexthop: support filtering by protocol for flush and list * rdma: driver QP type string * tc: introduce ct action * tc: support 64-bit rate and peakrate * tc: etf: support skip_sock_check * tc: flower: add matching on conntrack info * tc: taprio: support setting flags * tc: taprio: support setting txtime_delay * documentation improvements * json output improvements * drop outdated example scripts and README files - drop (patched script dropped) examples-fix-bashisms-in-example-script.patch - ss-fix-end-of-line-printing-in-misc-ss.c.patch: fix missing end of line at the end of ss output ==== libxcrypt ==== Version update (4.4.3 -> 4.4.10) - Update to version 4.4.10 * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt. * The crypt_* functions will now all fail and set errno to ERANGE if their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE characters (this is currently 512) * The NT hashing method no longer truncates passphrases at 128 characters; Windows does not do this. - format-overflow.patch: remove ==== rebootmgr ==== - Fix %posttrans script returning an error code ==== restorecond ==== - Use %make_build and respect %optflags. ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit dbb1d4734daffa62e0eddecfa4f784c84a9d8e76 1439d72a72 udevd: don't use monitor after manager_exit() 99288dd778 Revert "udevd: fix crash when workers time out after exit is signal caught" 152577d6d0 udevd: fix crash when workers time out after exit is signal caught f854991504 udevd: wait for workers to finish when exiting (bsc#1106383) Changes from the v243-stable (84 commits): e51d9bf9e5 man: add entry about SpeedMeter= aa1fc791c7 udev: silence warning about PROGRAM+= or IMPORT+= rules b9a619bb67 udevadm: ignore EROFS and return earlier 1ec5b9f80c basic: add vmware hypervisor detection from device-tree 7fa7080248 umount: be happy if /proc/swaps doesn't exist [...] 47d0e23d26 udev: fix memleak caused by wrong cleanup function a6fb0542c5 parse_hwdb: fix compatibility with pyparsing 2.4.* cb1d892f17 parse_hwdb: process files in order -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191210 released!
by Richard Brown 12 Dec '19

12 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: patterns-base === Details === ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-minimal_base - Drop Obsoletes: pattern() = readonly_root_tools: RPM only honors obsoletes against package names, so this obsoletes is in fact useless. WithRPM 4.15, there is a syntax check which even disallows Obsoletes against non-valid names. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] deployment questions
by Bryan Gartner 11 Dec '19

11 Dec '19

Have a few questions around possible deployment options ... a) Can one effectively do a multi-arch cluster deployment, say some x86_64 and some aarch64 nodes? - this might be relevant mostly to have designated (labeled) worker nodes of the respective variety for targeted workloads b) Parallel to above, would it be possible, given the kubeadm-based approach to include a worker node based on another Linux (with Kubernetes installed) distribution? - as above, this might enable usage of other enabled devices like Jetson/RPi4 which don't yet have openSUSE images available c) From the https://en.opensuse.org/Kubic:kubeadm wiki page, it cites being able to have a single master node (and untaint to allow workload scheduling there). For edge computing (aka gateways), this might be a quite valid usage scenario. Other than potential resource conflicts of such a single node "cluster", any other considerations/caveats? And a couple of issues ... 1) on the same wiki page cited above, for Cilium it cites using /usr/share/k8s-yaml/cilium/cilium.yaml but the file currently residing there is /usr/share/k8s-yaml/cilium/quick-install.yaml. Is this the correct one to now use? 2) for some reason, all of the nodes in a recent deployed cluster show Status = NotReady (which may be related to previously listed issue and my assumption to use the file in that directory), since kubectl describe node <name> shows an error ... "Missing CNI default network" Thanks for any help / guidance -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

3 3

[opensuse-kubic] New MicroOS snapshot 20191207 released!
by Richard Brown 10 Dec '19

10 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cloud-init cyrus-sasl gpg2 (2.2.17 -> 2.2.18) hwdata (0.329 -> 0.330) libnftnl (1.1.4 -> 1.1.5) libsolv (0.7.7 -> 0.7.9) libxml2 (2.9.9 -> 2.9.10) libxslt (1.1.33 -> 1.1.34) libzypp (17.15.0 -> 17.17.0) nano (4.5 -> 4.6) openssl perl permissions (1550_20191118 -> 1550_20191205) python-PyYAML (5.1.2 -> 5.2) read-only-root-fs (1.0+git20191112.42add9e -> 1.0+git20191203.3f7cc07) sssd (2.2.0 -> 2.2.2) tallow (19+git20191104.5dfb982 -> 19+git20191106.4b071b0) transactional-update (2.17 -> 2.20) vim (8.1.2233 -> 8.1.2383) zypper (1.14.32 -> 1.14.33) === Details === ==== cloud-init ==== - Add cloud-init-proper-ipv6-setting.patch (bsc#1156139) + Set proper IPv6 interface variable in ifcfg file ==== cyrus-sasl ==== Subpackages: cyrus-sasl-gssapi libsasl2-3 - added backport-patch cyrus-sasl-bug587.patch which fixes off-by-one error in _sasl_add_string function (see https://github.com/cyrusimap/cyrus-sasl/issues/587) ==== gpg2 ==== Version update (2.2.17 -> 2.2.18) - Update to 2.2.18 [bsc#1157900, CVE-2019-14855] * gpg: Changed the way keys are detected on a smartcards; this allows the use of non-OpenPGP cards. In the case of a not very likely regression the new option --use-only-openpgp-card is available. [#4681] * gpg: The commands --full-gen-key and --quick-gen-key now allow direct key generation from supported cards. [#4681] * gpg: Prepare against chosen-prefix SHA-1 collisions in key signatures. This change removes all SHA-1 based key signature newer than 2019-01-19 from the web-of-trust. Note that this includes all key signature created with dsa1024 keys. The new option --allow-weak-key-signatues can be used to override the new and safer behaviour. [#4755,CVE-2019-14855] * gpg: Improve performance for import of large keyblocks. [#4592] * gpg: Implement a keybox compression run. [#4644] * gpg: Show warnings from dirmngr about redirect and certificate problems (details require --verbose as usual). * gpg: Allow to pass the empty string for the passphrase if the '--passphase=' syntax is used. [#4633] * gpg: Fix printing of the KDF object attributes. * gpg: Avoid surprises with --locate-external-key and certain - -auto-key-locate settings. [#4662] * gpg: Improve selection of best matching key. [#4713] * gpg: Delete key binding signature when deletring a subkey. [#4665,#4457] * gpg: Fix a potential loss of key sigantures during import with self-sigs-only active. [#4628] * gpg: Silence "marked as ultimately trusted" diagnostics if option --quiet is used. [#4634] * gpg: Silence some diagnostics during in key listsing even with option --verbose. [#4627] * gpg, gpgsm: Change parsing of agent's pkdecrypt results. [#4652] * gpgsm: Support AES-256 keys. * gpgsm: Fix a bug in triggering a keybox compression run if - -faked-system-time is used. * dirmngr: System CA certificates are no longer used for the SKS pool if GNUTLS instead of NTBTLS is used as TLS library. [#4594] * dirmngr: On Windows detect usability of IPv4 and IPv6 interfaces to avoid long timeouts. [#4165] * scd: Fix BWI value for APDU level transfers to make Gemalto Ezio Shield and Trustica Cryptoucan work. [#4654,#4566] * wkd: gpg-wks-client --install-key now installs the required policy file. - Rebase patches: * gnupg-2.2.8-files-are-digests.patch * gnupg-add_legacy_FIPS_mode_option.patch ==== hwdata ==== Version update (0.329 -> 0.330) - Update to version 0.330: * Updated pci, usb and vendor ids. ==== libnftnl ==== Version update (1.1.4 -> 1.1.5) - Update to release 1.1.5 * flowtable: add support for handle attribute * obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() ==== libsolv ==== Version update (0.7.7 -> 0.7.9) - support conda constrains dependencies - bump version to 0.7.9 - support arch<->noarch package changes when creating patch conflicts from the updateinfo data - support for SOLVER_BLACKLIST jobs that block the installation of matched packages unless they are directly selected by an SOLVER_INSTALL job - libsolv now also parses the patch status in the updateinfo parser - new solvable_matchessolvable() function - bump version to 0.7.8 ==== libxml2 ==== Version update (2.9.9 -> 2.9.10) Subpackages: libxml2-2 libxml2-tools - Since libxml2-2.9.10 perl-XML-LibXSLT fails to build: [bsc#1157450] * Revert upstream commit to make xmlFreeNodeList non-recursive https://github.com/GNOME/libxml2/commit/0762c9b69ba01628f72eada1c64ff3d361f… - Add patch libxml2-xmlFreeNodeList-recursive.patch - Version update to 2.9.10: * Portability: + Fix exponent digits when running tests under old MSVC + Work around buggy ceil() function on AIX + Don't call printf with NULL string in runtest.c + Switched from unsigned long to ptrdiff_t in parser.c + timsort.h: support older GCCs + Make configure.ac work with older pkg-config * Bug Fixes: + Fix for conditional sections at end of document + Make sure that Python tests exit with error code + Audit memory error handling in xpath.c + Fix error code in xmlTextWriterStartDocument + Fix integer overflow when counting written bytes + Fix uninitialized memory access in HTML parser + Fix memory leak in xmlSchemaValAtomicType + Disallow conditional sections in internal subset + Fix use-after-free in xmlTextReaderFreeNodeList + Fix Regextests + Fix empty branch in regex + Fix integer overflow in entity recursion check + Don't read external entities or XIncludes from stdin + Fix Schema determinism check of ##other namespaces + Fix potential null deref in xmlSchemaIDCFillNodeTables + Fix potential memory leak in xmlBufBackToBuffer + Fix error message when processing XIncludes with fallbacks + Fix memory leak in xmlRegEpxFromParse + 14:00 is a valid timezone for xs:dateTime + Fix memory leak in xmlParseBalancedChunkMemoryRecover + Fix potential null deref in xmlRelaxNGParsePatterns + Misleading error message with xs:{min|max}Inclusive + Fix memory leak in xmlXIncludeLoadTxt + Partial fix for comparison of xs:durations + Fix null deref in xmlreader buffer + Fix unability to RelaxNG-validate grammar with choice-based name class + Fix unability to validate ambiguously constructed interleave for RelaxNG + Fix possible null dereference in xmlXPathIdFunction + fix memory leak in xmlAllocOutputBuffer + Fix unsigned int overflow + dict.h: gcc 2.95 doesn't allow multiple storage classes + Fix another code path in xmlParseQName + Make sure that xmlParseQName returns NULL in error case + Fix build without reader but with pattern + Fix memory leak in xmlAllocOutputBufferInternal error path + Fix unsigned integer overflow + Fix return value of xmlOutputBufferWrite + Fix parser termination from "Double hyphen within comment" error + Fix call stack overflow in xmlFreePattern + Fix null deref in previous commit + Fix memory leaks in xmlXPathParseNameComplex error paths + Check for integer overflow in xmlXPtrEvalChildSeq + Fix xmllint dump of XPath namespace nodes + Fix float casts in xmlXPathSubstringFunction + Fix null deref in xmlregexp error path + Fix null pointer dereference in xmlTextReaderReadOuterXml + Fix memory leaks in xmlParseStartTag2 error paths + Fix memory leak in xmlSAX2StartElement + Fix commit "Memory leak in xmlFreeID (xmlreader.c)" + Fix NULL pointer deref in xmlTextReaderValidateEntity + Memory leak in xmlFreeTextReader + Memory leak in xmlFreeID (xmlreader.c) * Improvements: + Propagate memory errors in valuePush + Propagate memory errors in xmlXPathCompExprAdd + Make xmlFreeDocElementContent non-recursive + Avoid ignored attribute warnings under GCC + Make xmlDumpElementContent non-recursive + Make apibuild.py ignore ATTRIBUTE_NO_SANITIZE + Mark xmlExp* symbols as removed + Make xmlParseConditionalSections non-recursive + Adjust expected error in Python tests + Make xmlTextReaderFreeNodeList non-recursive + Make xmlFreeNodeList non-recursive + Make xmlParseContent and xmlParseElement non-recursive + Remove executable bit from non-executable files + Fix expected output of test/schemas/any4 + Optimize build instructions in README + xml2-config.in: Output CFLAGS and LIBS on the same line + xml2-config: Add a --dynamic switch to print only shared libraries + Annotate functions with __attribute__((no_sanitize)) + Fix warnings when compiling without reader or push parser + Remove unused member `doc` in xmlSaveCtxt + Limit recursion depth in xmlXPathCompOpEvalPredicate + Remove -Wno-array-bounds + Remove unreachable code in xmlXPathCountFunction + Improve XPath predicate and filter evaluation + Limit recursion depth in xmlXPathOptimizeExpression + Disable hash randomization when fuzzing + Optional recursion limit when parsing XPath expressions + Optional recursion limit when evaluating XPath expressions + Use break statements in xmlXPathCompOpEval + Optional XPath operation limit + Fix compilation with --with-minimum + Check XPath stack after calling functions + Remove debug printf in xmlreader.c + Always define LIBXML_THREAD_ENABLED when enabled + Fix unused function warning in testapi.c + Remove unneeded function pointer casts + Fix -Wcast-function-type warnings (GCC 8) + Fix -Wformat-truncation warnings (GCC 8) * Cleanups: + Rebuild docs + Disable xmlExp regex code + Remove redundant code in xmlRelaxNGValidateState + Remove redundant code in xmlXPathCompRelationalExpr - Rebase patch fix-perl.diff ==== libxslt ==== Version update (1.1.33 -> 1.1.34) - Update to 1.1.34: Oct 30 2019 * Documentation: - Fix EXSLT web pages, Regenerate web pages - Fix Git link in news.html - Minor documentation fixes after recent changes - Regenerate symbols and API docs - Regenerate EXSLT website * Portability: - Remove stubs when compiling without debugger or profiler - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries - configure.ac: Conditionally determine whether xml2-config should pass shared libraries or static libraries - xslt-config.in: Fix broken --prefix=DIR support - libexslt.pc.in: Do not expose private library dependencies unless invoked - libxslt.pc.in: Do not expose private library dependencies unless invoked - Fix -Wformat-overflow warning (GCC 9) - Stop including ansidecl.h - Remove WIN32_EXTRA_* variables - Build without winsock * Bug Fixes: - xsl:template without name and match attributes should not be allowed - Make sure that Python tests exit with error code - Improve handling of invalid UTF-8 in format-number - Fix dangling pointer in xsltCopyText - Fix memory leak in pattern compilation error path - Fix uninitialized read with UTF-8 grouping chars - Fix integer overflow in FORMAT_GYEAR - Fix performance regression with xsl:number - Backup XPath context node in xsltInitCtxtKey - Fix unsigned integer overflow in date.c - Fix insertion of xsl:fallback content - Avoid quadratic behavior in xsltSaveResultTo - Fix numbering in non-Latin scripts - Fix uninitialized read of xsl:number token - Fix integer overflow in _exsltDateDayInWeek - Rework xsltAttrVT allocation - Fix check of xsltTestCompMatch return value - Fix security framework bypass - Use xmlNewTextChild in EXSLT dyn:map - Fix float casts in exsltDateDuration - Always set context node before calling XPath iterators - Fix attribute precedence with xsl:use-attribute-sets - Backup context node in exsltFuncFunctionFunction - Initialize ctxt->output before evaluating global vars - Fix memory leak in EXSLT functions error path * Improvements: - Fix -Wimplicit-fallthrough warnings - Adjust number of API index pages - Make xsltCompileRelativePathPattern non-recursive - Check that crypto:rc4_decrypt produces valid UTF-8 - Avoid recursion in keys.c:skipPredicate - xslt-config.in: Simply handling of $all_flags - xslt-config.in: Add a --dynamic option to --libs - xslt-config.in: Simplify basic library handling - xslt-config.in: Remove unused variable - xslt-config: Simply handling of --cflags - Improve fuzzers - Always reuse XPath context - Compile with -Wextra - Make profiler support optional - Hide unused code when compiling without debugger - Reorganize fuzzing code - Optional operation limit - Improve seed corpus and dictionary - Reuse XPath context when compiling stylesheets - Reuse XPath context in dyn:map - Reuse XPath context in saxon:expression - Add libFuzzer targets - Adjust error message in expected test output - Change bug tracker URL - Change git repo URL - Regenerate NEWS - Fix misleading indentation in security.c * Cleanups: - Remove empty TODO file - Remove generated file libxsltclass.txt from version control - Rebuild docs - Rebase patch libxslt-config-fixes.patch - Remove patches fixed upstream: * libxslt-CVE-2019-11068.patch * libxslt-CVE-2019-13117.patch * libxslt-CVE-2019-13118.patch * libxslt-CVE-2019-18197.patch ==== libzypp ==== Version update (17.15.0 -> 17.17.0) - Introduce PurgeKernels class (bsc#1155198) Adds libzypp API to mark all obsolete kernels according to the existing purge-kernel script rules. - Add solver jobs for retracted packages and ptfs. Support for ptf packages and retract ed patches. - Do not enforce 'en' being in RequestedLocales (bsc#1155678) If the user decides to have a system without explicit language support he may do so. - Pass correct posttrans script argument (fixes #190) - BuildRequires: libsolv-devel >= 0.7.8. - version 17.17.0 (12) - Expose new libsolv API via C++ counterparts (openSUSE/zypper#214) - BuildRequires: libsolv-devel >= 0.7.7 - version 17.16.0 (12) ==== nano ==== Version update (4.5 -> 4.6) - update to 4.6: * re-introduce the formatter command (M-F) * ^T will try to run 'hunspell' before 'spell', because it checks spelling for the locale's language and understands UTF-8 * Multiple errors or warnings on startup will no longer slow nano down but will be indicated on the status bar with trailing dots ==== openssl ==== - Remove Obsoletes: pkgconfig(*): Only package names can be obsoleted. Until RPM 4.15, those lines were simply ineffective and being ignored, but with RPM 4.15 they result in an error. ==== perl ==== Subpackages: perl-base - Add perl-Adapt-Configure-to-GCC-version-10.patch in order to fix boo#1158254. ==== permissions ==== Version update (1550_20191118 -> 1550_20191205) Subpackages: chkstat permissions-config - Update to version 20191205: * fix privilege escalation through untrusted symlinks (bsc#1150734, CVE-2019-3690) - Update to version 20191122: * faxq-helper: correct "secure" permission for trusted group (bsc#1157498) ==== python-PyYAML ==== Version update (5.1.2 -> 5.2) - update to 5.2 * A more flexible fix for custom tag constructors * Change default loader for yaml.add_constructor * Change default loader for add_implicit_resolver, add_path_resolver * Move constructor for object/apply to UnsafeConstructor * Fix logic for quoting special characters ==== read-only-root-fs ==== Version update (1.0+git20191112.42add9e -> 1.0+git20191203.3f7cc07) - Update to version 1.0+git20191203.3f7cc07: * Workaround /var being RO during systemd-journal-flush (boo#1156421) ==== sssd ==== Version update (2.2.0 -> 2.2.2) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.2.2 * New options were added which allow sssd-kcm to handle bigger data. See manual pages for max_ccaches, max_uid_caches and max_ccache_size. * SSSD can now automatically refresh cached user data from subdomains in IPA/AD trust. * Fixed issue with SSSD hanging when connecting to non-responsive server with ldaps://. * SSSD is now restarted by systemd after crashes. ==== tallow ==== Version update (19+git20191104.5dfb982 -> 19+git20191106.4b071b0) - 0001-Add-extra-path-for-firewall-cmd.patch: firewall-cmd can be in a different path than ipset/iptables - Update to version 19+git20191106.4b071b0: * Need configure in this workflow. * Fix dependency. * Add github workflow integration. ==== transactional-update ==== Version update (2.17 -> 2.20) Subpackages: transactional-update-zypp-config - Update to version 2.20 - Add the option `--continue` to extend an existing snapshot. This can be used to perform multiple operations before rebooting into the new state. [gh#openSUSE/transactional-update#16] - Make sure the dracut service to print warnings on /etc overlay conflicts also runs in the pre-made images. - Add "none" reboot method - Remove conflicting overlay artifacts in case an existing overlay directory will be reused ==== vim ==== Version update (8.1.2233 -> 8.1.2383) Subpackages: vim-data-common - Updated to version 8.1.2383, fixes the following problems + refreshed patches: vim-7.3-help_tags.patch vim-7.3-name_vimrc.patch vim-8.1.0297-dump3.patch * Cannot get the Vim command line arguments. * get_short_pathname() fails depending on encoding. * "C" with 'virtualedit' set does not include multi-byte char. * Ml_get error if pattern matches beyond last line. * Mode() result after usign "r" depends on whether CURSOR_SHAPE is defined. (Christian Brabandt) * Error in docs tags goes unnoticed. * Popup window width changes when scrolling. * Match highlight does not combine with 'wincolor'. * Creating docs tags uses user preferences. (Tony Mechelynck) * 'wrapscan' is not used for "gn". * Third character of 'listchars' tab shows in wrong place when 'breakindent' is set. * Some tests are still in old style. * "make vimtags" does not work in runtime/doc. * CTRL-W dot does not work in a terminal when modifyOtherKeys is enabled. * "make vimtags" does not print any message. * CTRL-U and CTRL-D don't work in popup window. * ":term command" may not work without a shell. * Compiler warning for int size. * Using "which" to check for an executable is not reliable. * May get hit-enter prompt after entering a number. (Malcolm Rowe) * Running tests may leave XfakeHOME behind. * With modifyOtherKeys set 'noesckeys' doesn't work. (James McCoy) * Unpack assignment in function not recognized. * 'noesckeys' test fails in GUI. * There are two test files for :let. * When popup with "botleft" does not fit it flips incorrectly. * Position unknown for a mouse click in a popup window. * Compiler warning for uninitialized variable. (Tony Mechelynck) * Spell file flag zero is not recognized. * Tags file with very long line stops using binary search. * "gf" is not tested in Visual mode. * Build error if FEAT_TAG_BINS is not defined. (John Marriott) * Test may hang at more prompt. * Wrong default when "pos" is changed with popup_atcursor(). * Newlines in 'balloonexpr' result only work in the GUI. * Using "seesion" looks like a mistake. * Terminal window is not updated when info popup changes. * Using "cd" with "exe" may fail. * Computation of highlight attributes is too complicated. * Crash when passing partial to substitute(). * 'showbreak' cannot be set for one window. * Crash when passing many arguments through a partial. (Andy Massimino) * Missed on use of p_sbr. * Compiler warning for unused variable. (Tony Mechelynck) * Padding in structures wastes memory. * Using border highlight in popup window leaks memory. * Using EndOfBuffer highlight in popup does not look good. * Not using all space when popup with "topleft" flips to above. * After :diffsplit closing the window does not disable diff. * Autocommand test fails. * Memory leak when executing command in a terminal. * v:mouse_winid not set on click in popup window. * Join adds trailing space when second line is empty. (Brennan Vincent) * Cursor position wrong when characters are concealed and asearch causes a scroll. * If buffer of popup is in another window cursorline sign shows. * Text properties are not combined with syntax by default. * The ex_vimgrep() function is too long. * Missing part of 8.1.2296. * ConPTY in MS-Windows 1909 is still wrong. * Redraw breaks going through list of popup windows. * :lockmarks does not work for '[ and ']. * Cursor in wrong position after horizontal scroll. * Cannot get the mouse position when getting a mouse click. * No warning for wrong entry in translations. * Double and triple clicks are not tested. * Positioning popup doesn't work for buffer-local textprop. * Deleting text before zero-width textprop removes it. * Compiler warning for argument type. * No proper test for directory changes in quickfix. * Warning for missing function prototype. * "line:" field in tags file not used. * Debugging where a delay comes from is not easy. * vi' sometimes does not select anything. * Not always using the right window when jumping to an error. * FORTIFY_SOURCE can also be present in CPPFLAGS. * No test for spell affix file with flag on suffix. * Compiler warning for int size. * Insufficient test coverage for quickfix. * Cannot select all text with the mouse. (John Marriott) * Quickfix test fails in very big terminal. * Width of scrollbar in popup menu not taken into account. * Crash when using balloon with empty line. * Cannot parse a date/time string. * Cannot build with Hangul input. * A few hangul input pieces remain. * Mouse multiple click test is a bit flaky. * vi' does not always work when 'selection' is exclusive. * The option.c file is still very big. * Missing file in refactoring. * With modifyOtherKeys CTRL-^ doesn't work. * Possible NULL pointer dereference in popup_locate(). (Coverity) * Error message for function arguments may use NULL pointer. (Coverity) * When an expr mapping moves the cursor it is not restored. * Double-click time sometimes miscomputed. * Using Visual mark sith :s gives E20 if not set. * Insufficient testing for quickfix. * Quickfix test fails under valgrind and asan. * Not so easy to interrupt a script programatically. * Random number generator in Vim script is slow. * Using time() for srand() is not very random. * .cjs files are not recognized as Javascript. * CTRL-R CTRL-R doesn't work with modifyOtherKeys. * :const cannot be followed by "| endif". * :lockvar and :unlockvar cannot be followed by "| endif". * Other text for CTRL-V in Insert mode with modifyOtherKeys. * 'wincolor' not used for > for not fitting double width char. Also: popup drawn on right half of double width character looks wrong. * rand() does not use the best algorithm. * No test with wrong argument for rand(). * Cannot build without FEAT_FLOAT. (John Marriott) * Quickfix test coverage can still be improved. * Cannot place signs in a popup window. (Maxim Kim) * ml_get error when accessing Visual area in 'statusline'. * Missing tests for recent popupwin changes. * Using old C style comments. * Registers are not sufficiently tested. * Using old C style comments. * Cannot build with quickfix and without text properties. * Build problems on VMS. * FEAT_TEXT_PROP is a confusing name. * Cannot build with +popupwin but without +quickfix. (John Marriott) * Unused parts of libvterm are included. * No suffucient testing for registers. * Preprocessor indents are incorrect. * GUI: when losing focus a pending operator is executed. * Using old C style comments. * Not all register related code is covered by tests. ==== zypper ==== Version update (1.14.32 -> 1.14.33) Subpackages: zypper-needs-restarting - Introduce purge-kernels command (bsc#1155198) Adds a new zypper command to cleanup all obsolete kernels as configured by the user. - Request root privs for zypper addlocale and removelocale. - Load only target resolvables for removelocale. - Load only target resolvables for zypper rm (bsc#1157377) - Fix broken search by filelist (bsc#1135114 ) - zypper-log: Replace python by a bash script (fixes#304, fixes#306, bsc#1156158) - locales: do not sort out requested locales which are not available (bsc#1155678) - list_patches_by_issue: rewrite table output and add xml output (bsc#1154805) Prevent listing duplicate matches in tables. XML result is provided within the new <list-patches-byissue> element. - list-patches: XML add patch <issue-date> and <issue-list> (bsc#1154805) - Fix zypper lp --cve/bugzilla/issue options (bsc#1155298) - Always execute commit when adding/removing locales (fixes bsc#1155205) - man page: fix description of --table-style,-s (bsc#1154804) - Provide reverse search in zypper (fixes #214) This patch adds a new set of switches to zypper to support searching reverse dependencies for a package or a set of packages. - BuildRequires: libzypp-devel >= 17.16.1. - version 1.14.33 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191207 released!
by Richard Brown 10 Dec '19

10 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ceph (14.2.4.373+gc3e67ed133 -> 15.0.0.7456+ge089cead79) cloud-init cyrus-sasl gpg2 (2.2.17 -> 2.2.18) hwdata (0.329 -> 0.330) libnftnl (1.1.4 -> 1.1.5) libsolv (0.7.7 -> 0.7.9) libxml2 (2.9.9 -> 2.9.10) libxslt (1.1.33 -> 1.1.34) libzypp (17.15.0 -> 17.17.0) nano (4.5 -> 4.6) openssl perl permissions (1550_20191118 -> 1550_20191205) python-PyYAML (5.1.2 -> 5.2) python-psutil (5.6.5 -> 5.6.7) python-simplejson (3.16.1 -> 3.17.0) rdma-core read-only-root-fs (1.0+git20191112.42add9e -> 1.0+git20191203.3f7cc07) rook (1.1.6+git0.g91d6f635 -> 1.1.7+git0.g50c6ca1f) salt (2019.2.0 -> 2019.2.2) sssd (2.2.0 -> 2.2.2) tallow (19+git20191104.5dfb982 -> 19+git20191106.4b071b0) transactional-update (2.17 -> 2.20) vim (8.1.2233 -> 8.1.2383) zypper (1.14.32 -> 1.14.33) === Details === ==== ceph ==== Version update (14.2.4.373+gc3e67ed133 -> 15.0.0.7456+ge089cead79) Subpackages: ceph-common libcephfs2 librados2 libradosstriper1 librbd1 librgw2 python3-ceph-argparse python3-cephfs python3-rados python3-rbd python3-rgw - Update to 15.0.0-7456-ge089cead79: + rebase on tip of upstream master, SHA1 e4b3036422df70e3c911240e3bba6a8bd3e9c792 - Update to 15.0.0-7219-g353896020b: + rebase on tip of upstream master, SHA1 7ffb5d9e79207da81af933f4e95655e16558c739 - Update to 14.2.4-386-g73475e3ee1: + os/bluestore: consolidate extents from the same device only (bsc#1156282) - Update to 14.2.4-378-gac1bcd6547: + qa/suse: move dashboard-e2e to tier3 and add debugging code to src/script/dashboard_e2e_tests.sh ==== cloud-init ==== - Add cloud-init-proper-ipv6-setting.patch (bsc#1156139) + Set proper IPv6 interface variable in ifcfg file ==== cyrus-sasl ==== Subpackages: cyrus-sasl-gssapi libsasl2-3 - added backport-patch cyrus-sasl-bug587.patch which fixes off-by-one error in _sasl_add_string function (see https://github.com/cyrusimap/cyrus-sasl/issues/587) ==== gpg2 ==== Version update (2.2.17 -> 2.2.18) - Update to 2.2.18 [bsc#1157900, CVE-2019-14855] * gpg: Changed the way keys are detected on a smartcards; this allows the use of non-OpenPGP cards. In the case of a not very likely regression the new option --use-only-openpgp-card is available. [#4681] * gpg: The commands --full-gen-key and --quick-gen-key now allow direct key generation from supported cards. [#4681] * gpg: Prepare against chosen-prefix SHA-1 collisions in key signatures. This change removes all SHA-1 based key signature newer than 2019-01-19 from the web-of-trust. Note that this includes all key signature created with dsa1024 keys. The new option --allow-weak-key-signatues can be used to override the new and safer behaviour. [#4755,CVE-2019-14855] * gpg: Improve performance for import of large keyblocks. [#4592] * gpg: Implement a keybox compression run. [#4644] * gpg: Show warnings from dirmngr about redirect and certificate problems (details require --verbose as usual). * gpg: Allow to pass the empty string for the passphrase if the '--passphase=' syntax is used. [#4633] * gpg: Fix printing of the KDF object attributes. * gpg: Avoid surprises with --locate-external-key and certain - -auto-key-locate settings. [#4662] * gpg: Improve selection of best matching key. [#4713] * gpg: Delete key binding signature when deletring a subkey. [#4665,#4457] * gpg: Fix a potential loss of key sigantures during import with self-sigs-only active. [#4628] * gpg: Silence "marked as ultimately trusted" diagnostics if option --quiet is used. [#4634] * gpg: Silence some diagnostics during in key listsing even with option --verbose. [#4627] * gpg, gpgsm: Change parsing of agent's pkdecrypt results. [#4652] * gpgsm: Support AES-256 keys. * gpgsm: Fix a bug in triggering a keybox compression run if - -faked-system-time is used. * dirmngr: System CA certificates are no longer used for the SKS pool if GNUTLS instead of NTBTLS is used as TLS library. [#4594] * dirmngr: On Windows detect usability of IPv4 and IPv6 interfaces to avoid long timeouts. [#4165] * scd: Fix BWI value for APDU level transfers to make Gemalto Ezio Shield and Trustica Cryptoucan work. [#4654,#4566] * wkd: gpg-wks-client --install-key now installs the required policy file. - Rebase patches: * gnupg-2.2.8-files-are-digests.patch * gnupg-add_legacy_FIPS_mode_option.patch ==== hwdata ==== Version update (0.329 -> 0.330) - Update to version 0.330: * Updated pci, usb and vendor ids. ==== libnftnl ==== Version update (1.1.4 -> 1.1.5) - Update to release 1.1.5 * flowtable: add support for handle attribute * obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() ==== libsolv ==== Version update (0.7.7 -> 0.7.9) - support conda constrains dependencies - bump version to 0.7.9 - support arch<->noarch package changes when creating patch conflicts from the updateinfo data - support for SOLVER_BLACKLIST jobs that block the installation of matched packages unless they are directly selected by an SOLVER_INSTALL job - libsolv now also parses the patch status in the updateinfo parser - new solvable_matchessolvable() function - bump version to 0.7.8 ==== libxml2 ==== Version update (2.9.9 -> 2.9.10) Subpackages: libxml2-2 libxml2-tools - Since libxml2-2.9.10 perl-XML-LibXSLT fails to build: [bsc#1157450] * Revert upstream commit to make xmlFreeNodeList non-recursive https://github.com/GNOME/libxml2/commit/0762c9b69ba01628f72eada1c64ff3d361f… - Add patch libxml2-xmlFreeNodeList-recursive.patch - Version update to 2.9.10: * Portability: + Fix exponent digits when running tests under old MSVC + Work around buggy ceil() function on AIX + Don't call printf with NULL string in runtest.c + Switched from unsigned long to ptrdiff_t in parser.c + timsort.h: support older GCCs + Make configure.ac work with older pkg-config * Bug Fixes: + Fix for conditional sections at end of document + Make sure that Python tests exit with error code + Audit memory error handling in xpath.c + Fix error code in xmlTextWriterStartDocument + Fix integer overflow when counting written bytes + Fix uninitialized memory access in HTML parser + Fix memory leak in xmlSchemaValAtomicType + Disallow conditional sections in internal subset + Fix use-after-free in xmlTextReaderFreeNodeList + Fix Regextests + Fix empty branch in regex + Fix integer overflow in entity recursion check + Don't read external entities or XIncludes from stdin + Fix Schema determinism check of ##other namespaces + Fix potential null deref in xmlSchemaIDCFillNodeTables + Fix potential memory leak in xmlBufBackToBuffer + Fix error message when processing XIncludes with fallbacks + Fix memory leak in xmlRegEpxFromParse + 14:00 is a valid timezone for xs:dateTime + Fix memory leak in xmlParseBalancedChunkMemoryRecover + Fix potential null deref in xmlRelaxNGParsePatterns + Misleading error message with xs:{min|max}Inclusive + Fix memory leak in xmlXIncludeLoadTxt + Partial fix for comparison of xs:durations + Fix null deref in xmlreader buffer + Fix unability to RelaxNG-validate grammar with choice-based name class + Fix unability to validate ambiguously constructed interleave for RelaxNG + Fix possible null dereference in xmlXPathIdFunction + fix memory leak in xmlAllocOutputBuffer + Fix unsigned int overflow + dict.h: gcc 2.95 doesn't allow multiple storage classes + Fix another code path in xmlParseQName + Make sure that xmlParseQName returns NULL in error case + Fix build without reader but with pattern + Fix memory leak in xmlAllocOutputBufferInternal error path + Fix unsigned integer overflow + Fix return value of xmlOutputBufferWrite + Fix parser termination from "Double hyphen within comment" error + Fix call stack overflow in xmlFreePattern + Fix null deref in previous commit + Fix memory leaks in xmlXPathParseNameComplex error paths + Check for integer overflow in xmlXPtrEvalChildSeq + Fix xmllint dump of XPath namespace nodes + Fix float casts in xmlXPathSubstringFunction + Fix null deref in xmlregexp error path + Fix null pointer dereference in xmlTextReaderReadOuterXml + Fix memory leaks in xmlParseStartTag2 error paths + Fix memory leak in xmlSAX2StartElement + Fix commit "Memory leak in xmlFreeID (xmlreader.c)" + Fix NULL pointer deref in xmlTextReaderValidateEntity + Memory leak in xmlFreeTextReader + Memory leak in xmlFreeID (xmlreader.c) * Improvements: + Propagate memory errors in valuePush + Propagate memory errors in xmlXPathCompExprAdd + Make xmlFreeDocElementContent non-recursive + Avoid ignored attribute warnings under GCC + Make xmlDumpElementContent non-recursive + Make apibuild.py ignore ATTRIBUTE_NO_SANITIZE + Mark xmlExp* symbols as removed + Make xmlParseConditionalSections non-recursive + Adjust expected error in Python tests + Make xmlTextReaderFreeNodeList non-recursive + Make xmlFreeNodeList non-recursive + Make xmlParseContent and xmlParseElement non-recursive + Remove executable bit from non-executable files + Fix expected output of test/schemas/any4 + Optimize build instructions in README + xml2-config.in: Output CFLAGS and LIBS on the same line + xml2-config: Add a --dynamic switch to print only shared libraries + Annotate functions with __attribute__((no_sanitize)) + Fix warnings when compiling without reader or push parser + Remove unused member `doc` in xmlSaveCtxt + Limit recursion depth in xmlXPathCompOpEvalPredicate + Remove -Wno-array-bounds + Remove unreachable code in xmlXPathCountFunction + Improve XPath predicate and filter evaluation + Limit recursion depth in xmlXPathOptimizeExpression + Disable hash randomization when fuzzing + Optional recursion limit when parsing XPath expressions + Optional recursion limit when evaluating XPath expressions + Use break statements in xmlXPathCompOpEval + Optional XPath operation limit + Fix compilation with --with-minimum + Check XPath stack after calling functions + Remove debug printf in xmlreader.c + Always define LIBXML_THREAD_ENABLED when enabled + Fix unused function warning in testapi.c + Remove unneeded function pointer casts + Fix -Wcast-function-type warnings (GCC 8) + Fix -Wformat-truncation warnings (GCC 8) * Cleanups: + Rebuild docs + Disable xmlExp regex code + Remove redundant code in xmlRelaxNGValidateState + Remove redundant code in xmlXPathCompRelationalExpr - Rebase patch fix-perl.diff ==== libxslt ==== Version update (1.1.33 -> 1.1.34) - Update to 1.1.34: Oct 30 2019 * Documentation: - Fix EXSLT web pages, Regenerate web pages - Fix Git link in news.html - Minor documentation fixes after recent changes - Regenerate symbols and API docs - Regenerate EXSLT website * Portability: - Remove stubs when compiling without debugger or profiler - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries - configure.ac: Conditionally determine whether xml2-config should pass shared libraries or static libraries - xslt-config.in: Fix broken --prefix=DIR support - libexslt.pc.in: Do not expose private library dependencies unless invoked - libxslt.pc.in: Do not expose private library dependencies unless invoked - Fix -Wformat-overflow warning (GCC 9) - Stop including ansidecl.h - Remove WIN32_EXTRA_* variables - Build without winsock * Bug Fixes: - xsl:template without name and match attributes should not be allowed - Make sure that Python tests exit with error code - Improve handling of invalid UTF-8 in format-number - Fix dangling pointer in xsltCopyText - Fix memory leak in pattern compilation error path - Fix uninitialized read with UTF-8 grouping chars - Fix integer overflow in FORMAT_GYEAR - Fix performance regression with xsl:number - Backup XPath context node in xsltInitCtxtKey - Fix unsigned integer overflow in date.c - Fix insertion of xsl:fallback content - Avoid quadratic behavior in xsltSaveResultTo - Fix numbering in non-Latin scripts - Fix uninitialized read of xsl:number token - Fix integer overflow in _exsltDateDayInWeek - Rework xsltAttrVT allocation - Fix check of xsltTestCompMatch return value - Fix security framework bypass - Use xmlNewTextChild in EXSLT dyn:map - Fix float casts in exsltDateDuration - Always set context node before calling XPath iterators - Fix attribute precedence with xsl:use-attribute-sets - Backup context node in exsltFuncFunctionFunction - Initialize ctxt->output before evaluating global vars - Fix memory leak in EXSLT functions error path * Improvements: - Fix -Wimplicit-fallthrough warnings - Adjust number of API index pages - Make xsltCompileRelativePathPattern non-recursive - Check that crypto:rc4_decrypt produces valid UTF-8 - Avoid recursion in keys.c:skipPredicate - xslt-config.in: Simply handling of $all_flags - xslt-config.in: Add a --dynamic option to --libs - xslt-config.in: Simplify basic library handling - xslt-config.in: Remove unused variable - xslt-config: Simply handling of --cflags - Improve fuzzers - Always reuse XPath context - Compile with -Wextra - Make profiler support optional - Hide unused code when compiling without debugger - Reorganize fuzzing code - Optional operation limit - Improve seed corpus and dictionary - Reuse XPath context when compiling stylesheets - Reuse XPath context in dyn:map - Reuse XPath context in saxon:expression - Add libFuzzer targets - Adjust error message in expected test output - Change bug tracker URL - Change git repo URL - Regenerate NEWS - Fix misleading indentation in security.c * Cleanups: - Remove empty TODO file - Remove generated file libxsltclass.txt from version control - Rebuild docs - Rebase patch libxslt-config-fixes.patch - Remove patches fixed upstream: * libxslt-CVE-2019-11068.patch * libxslt-CVE-2019-13117.patch * libxslt-CVE-2019-13118.patch * libxslt-CVE-2019-18197.patch ==== libzypp ==== Version update (17.15.0 -> 17.17.0) - Introduce PurgeKernels class (bsc#1155198) Adds libzypp API to mark all obsolete kernels according to the existing purge-kernel script rules. - Add solver jobs for retracted packages and ptfs. Support for ptf packages and retract ed patches. - Do not enforce 'en' being in RequestedLocales (bsc#1155678) If the user decides to have a system without explicit language support he may do so. - Pass correct posttrans script argument (fixes #190) - BuildRequires: libsolv-devel >= 0.7.8. - version 17.17.0 (12) - Expose new libsolv API via C++ counterparts (openSUSE/zypper#214) - BuildRequires: libsolv-devel >= 0.7.7 - version 17.16.0 (12) ==== nano ==== Version update (4.5 -> 4.6) - update to 4.6: * re-introduce the formatter command (M-F) * ^T will try to run 'hunspell' before 'spell', because it checks spelling for the locale's language and understands UTF-8 * Multiple errors or warnings on startup will no longer slow nano down but will be indicated on the status bar with trailing dots ==== openssl ==== - Remove Obsoletes: pkgconfig(*): Only package names can be obsoleted. Until RPM 4.15, those lines were simply ineffective and being ignored, but with RPM 4.15 they result in an error. ==== perl ==== Subpackages: perl-base - Add perl-Adapt-Configure-to-GCC-version-10.patch in order to fix boo#1158254. ==== permissions ==== Version update (1550_20191118 -> 1550_20191205) Subpackages: chkstat permissions-config - Update to version 20191205: * fix privilege escalation through untrusted symlinks (bsc#1150734, CVE-2019-3690) - Update to version 20191122: * faxq-helper: correct "secure" permission for trusted group (bsc#1157498) ==== python-PyYAML ==== Version update (5.1.2 -> 5.2) - update to 5.2 * A more flexible fix for custom tag constructors * Change default loader for yaml.add_constructor * Change default loader for add_implicit_resolver, add_path_resolver * Move constructor for object/apply to UnsafeConstructor * Fix logic for quoting special characters ==== python-psutil ==== Version update (5.6.5 -> 5.6.7) - update to version 5.6.7: * Bug fixes + 1630: [Windows] can't compile source distribution due to C syntax error. - changes from version 5.6.6: * Bug fixes + 1179: [Linux] Process cmdline() now takes into account misbehaving processes renaming the command line and using inappropriate chars to separate args. + 1616: use of Py_DECREF instead of Py_CLEAR will result in double free and segfault (CVE). (patch by Riccardo Schirone) + 1619: [OpenBSD] compilation fails due to C syntax error. (patch by Nathan Houghton) ==== python-simplejson ==== Version update (3.16.1 -> 3.17.0) - specfile: * update copyright year - update to version 3.17.0: * Updated documentation to be Python 3 first, and have removed documentation notes about version changes that occurred more than five years ago. https://github.com/simplejson/simplejson/pull/257 https://github.com/simplejson/simplejson/pull/254 * Update build matrix for Python 3.8 https://github.com/simplejson/simplejson/pull/255 https://github.com/simplejson/simplejson/pull/256 ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Add Broadcom fixes (bsc#1157891) - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch ==== read-only-root-fs ==== Version update (1.0+git20191112.42add9e -> 1.0+git20191203.3f7cc07) - Update to version 1.0+git20191203.3f7cc07: * Workaround /var being RO during systemd-journal-flush (boo#1156421) ==== rook ==== Version update (1.1.6+git0.g91d6f635 -> 1.1.7+git0.g50c6ca1f) - Update rook to v1.1.7: * Skip osd prepare job creation if osd daemon exists for the pvc (#4277) * Stop osd process more quickly during pod shutdown to reduce IO unresponsiveness (#4328) * Add osd anti-affinity to the example of OSDs on PVCs (#4326) * Properly set app name on the cmdreporter (#4323) * Ensure disruption draining state is set and checked correctly (#4319) * Update LVM filter for OSDs on PVCs (#4312) * Fix topology logic for disruption drains (#4221) * Skip restorecon during ceph-volume configuration (#4260) * Added a note around snapshot CRD cleanup (#4302) * Storage utilization alert threshold and timing updated (#4286) * Silence disruption errors if necessary and add missing errors (#4288) * Create csi keys and secrets for external cluster (#4276) * Add retry to ObjectUser creation (#4149) ==== salt ==== Version update (2019.2.0 -> 2019.2.2) Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Prevent test_mod_del_repo_multiline_values to fail - Read repo info without using interpolation (bsc#1135656) - Requires vs BuildRequires - Limiting M2Crypto to >= SLE15 - Replacing pycrypto with M2Crypto - Fix for log checking in x509 test - Update to 2019.2.2 release - Added: * fix-for-log-checking-in-x509-test.patch * prevent-test_mod_del_repo_multiline_values-to-fail.patch * read-repo-info-without-using-interpolation-bsc-11356.patch - Modified: * async-batch-implementation.patch * add-hold-unhold-functions.patch * adds-the-possibility-to-also-use-downloadonly-in-kwa.patch * decide-if-the-source-should-be-actually-skipped.patch * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch * add-batch_presence_ping_timeout-and-batch_presence_p.patch * run-salt-master-as-dedicated-salt-user.patch * run-salt-api-as-user-salt-bsc-1064520.patch * fix-unit-test-for-grains-core.patch * add-environment-variable-to-know-if-yum-is-invoked-f.patch * fix-async-batch-multiple-done-events.patch * activate-all-beacons-sources-config-pillar-grains.patch * fix-for-older-mock-module.patch * do-not-break-repo-files-with-multiple-line-values-on.patch * fall-back-to-pymysql.patch * add-missing-fun-for-returns-from-wfunc-executions.patch * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch * add-virt.volume_infos-and-virt.volume_delete.patch * fix-issue-2068-test.patch * switch-firewalld-state-to-use-change_interface.patch * make-aptpkg.list_repos-compatible-on-enabled-disable.patch * fix-ipv6-scope-bsc-1108557.patch * 2019.2.0-pr-54196-backport-173.patch * do-not-make-ansiblegate-to-crash-on-python3-minions.patch * x509-fixes-111.patch * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch * add-cpe_name-for-osversion-grain-parsing-u-49946.patch * fix-failing-unit-tests-for-batch-async.patch * temporary-fix-extend-the-whitelist-of-allowed-comman.patch * improve-batch_async-to-release-consumed-memory-bsc-1.patch * batch.py-avoid-exception-when-minion-does-not-respon.patch * preserve-already-defined-destructive_tests-and-expen.patch * virt.volume_infos-fix-for-single-vm.patch * move-server_id-deprecation-warning-to-reduce-log-spa.patch * include-aliases-in-the-fqdns-grains.patch * don-t-call-zypper-with-more-than-one-no-refresh.patch * add-custom-suse-capabilities-as-grains.patch * get-os_arch-also-without-rpm-package-installed.patch * add-saltssh-multi-version-support-across-python-inte.patch * accumulated-changes-required-for-yomi-165.patch * use-adler32-algorithm-to-compute-string-checksums.patch * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch * use-current-ioloop-for-the-localclient-instance-of-b.patch * remove-virt.pool_delete-fast-parameter-178.patch * add-multi-file-support-and-globbing-to-the-filetree-.patch * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch * prevent-systemd-run-description-issue-when-running-a.patch * integration-of-msi-authentication-with-azurearm-clou.patch * virt.volume_infos-needs-to-ignore-inactive-pools-174.patch * virt-1.volume_infos-fix-for-single-vm.patch * add-supportconfig-module-for-remote-calls-and-saltss.patch * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch * strip-trailing-from-repo.uri-when-comparing-repos-in.patch * preserving-signature-in-module.run-state-u-50049.patch * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch * fix-aptpkg-systemd-call-bsc-1143301.patch * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch * debian-info_installed-compatibility-50453.patch * add-standalone-configuration-file-for-enabling-packa.patch * accumulated-changes-from-yomi-167.patch * add-virt.all_capabilities.patch * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch * do-not-report-patches-as-installed-when-not-all-the-.patch * support-config-non-root-permission-issues-fixes-u-50.patch * add-all_versions-parameter-to-include-all-installed-.patch * fixes-cve-2018-15750-cve-2018-15751.patch * fix-bsc-1065792.patch * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch * avoid-traceback-when-http.query-request-cannot-be-pe.patch * restore-default-behaviour-of-pkg-list-return.patch * take-checksums-arg-into-account-for-postgres.datadir.patch * early-feature-support-config.patch * provide-the-missing-features-required-for-yomi-yet-o.patch * implement-network.fqdns-module-function-bsc-1134860-.patch * fix-virt.full_info-176.patch * checking-for-jid-before-returning-data.patch * virt.volume_infos-silence-libvirt-error-message-175.patch * do-not-crash-when-there-are-ipv6-established-connect.patch * fix-for-suse-expanded-support-detection.patch * fix-a-wrong-rebase-in-test_core.py-180.patch * add-ppc64le-as-a-valid-rpm-package-architecture.patch * make-profiles-a-package.patch * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch * fix-git_pillar-merging-across-multiple-__env__-repos.patch * return-the-expected-powerpc-os-arch-bsc-1117995.patch * fix-async-batch-race-conditions.patch * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch - Removed: * fix-syndic-start-issue.patch * prevent-already-reading-continuous-exception-message.patch * virt.pool_running-fix-pool-start.patch * azurefs-gracefully-handle-attributeerror.patch * virt-handle-whitespaces-in-vm-names.patch * mount-fix-extra-t-parameter.patch * try-except-undefineflags-as-this-operation-is-not-su.patch ==== sssd ==== Version update (2.2.0 -> 2.2.2) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.2.2 * New options were added which allow sssd-kcm to handle bigger data. See manual pages for max_ccaches, max_uid_caches and max_ccache_size. * SSSD can now automatically refresh cached user data from subdomains in IPA/AD trust. * Fixed issue with SSSD hanging when connecting to non-responsive server with ldaps://. * SSSD is now restarted by systemd after crashes. ==== tallow ==== Version update (19+git20191104.5dfb982 -> 19+git20191106.4b071b0) - 0001-Add-extra-path-for-firewall-cmd.patch: firewall-cmd can be in a different path than ipset/iptables - Update to version 19+git20191106.4b071b0: * Need configure in this workflow. * Fix dependency. * Add github workflow integration. ==== transactional-update ==== Version update (2.17 -> 2.20) Subpackages: transactional-update-zypp-config - Update to version 2.20 - Add the option `--continue` to extend an existing snapshot. This can be used to perform multiple operations before rebooting into the new state. [gh#openSUSE/transactional-update#16] - Make sure the dracut service to print warnings on /etc overlay conflicts also runs in the pre-made images. - Add "none" reboot method - Remove conflicting overlay artifacts in case an existing overlay directory will be reused ==== vim ==== Version update (8.1.2233 -> 8.1.2383) Subpackages: vim-data-common - Updated to version 8.1.2383, fixes the following problems + refreshed patches: vim-7.3-help_tags.patch vim-7.3-name_vimrc.patch vim-8.1.0297-dump3.patch * Cannot get the Vim command line arguments. * get_short_pathname() fails depending on encoding. * "C" with 'virtualedit' set does not include multi-byte char. * Ml_get error if pattern matches beyond last line. * Mode() result after usign "r" depends on whether CURSOR_SHAPE is defined. (Christian Brabandt) * Error in docs tags goes unnoticed. * Popup window width changes when scrolling. * Match highlight does not combine with 'wincolor'. * Creating docs tags uses user preferences. (Tony Mechelynck) * 'wrapscan' is not used for "gn". * Third character of 'listchars' tab shows in wrong place when 'breakindent' is set. * Some tests are still in old style. * "make vimtags" does not work in runtime/doc. * CTRL-W dot does not work in a terminal when modifyOtherKeys is enabled. * "make vimtags" does not print any message. * CTRL-U and CTRL-D don't work in popup window. * ":term command" may not work without a shell. * Compiler warning for int size. * Using "which" to check for an executable is not reliable. * May get hit-enter prompt after entering a number. (Malcolm Rowe) * Running tests may leave XfakeHOME behind. * With modifyOtherKeys set 'noesckeys' doesn't work. (James McCoy) * Unpack assignment in function not recognized. * 'noesckeys' test fails in GUI. * There are two test files for :let. * When popup with "botleft" does not fit it flips incorrectly. * Position unknown for a mouse click in a popup window. * Compiler warning for uninitialized variable. (Tony Mechelynck) * Spell file flag zero is not recognized. * Tags file with very long line stops using binary search. * "gf" is not tested in Visual mode. * Build error if FEAT_TAG_BINS is not defined. (John Marriott) * Test may hang at more prompt. * Wrong default when "pos" is changed with popup_atcursor(). * Newlines in 'balloonexpr' result only work in the GUI. * Using "seesion" looks like a mistake. * Terminal window is not updated when info popup changes. * Using "cd" with "exe" may fail. * Computation of highlight attributes is too complicated. * Crash when passing partial to substitute(). * 'showbreak' cannot be set for one window. * Crash when passing many arguments through a partial. (Andy Massimino) * Missed on use of p_sbr. * Compiler warning for unused variable. (Tony Mechelynck) * Padding in structures wastes memory. * Using border highlight in popup window leaks memory. * Using EndOfBuffer highlight in popup does not look good. * Not using all space when popup with "topleft" flips to above. * After :diffsplit closing the window does not disable diff. * Autocommand test fails. * Memory leak when executing command in a terminal. * v:mouse_winid not set on click in popup window. * Join adds trailing space when second line is empty. (Brennan Vincent) * Cursor position wrong when characters are concealed and asearch causes a scroll. * If buffer of popup is in another window cursorline sign shows. * Text properties are not combined with syntax by default. * The ex_vimgrep() function is too long. * Missing part of 8.1.2296. * ConPTY in MS-Windows 1909 is still wrong. * Redraw breaks going through list of popup windows. * :lockmarks does not work for '[ and ']. * Cursor in wrong position after horizontal scroll. * Cannot get the mouse position when getting a mouse click. * No warning for wrong entry in translations. * Double and triple clicks are not tested. * Positioning popup doesn't work for buffer-local textprop. * Deleting text before zero-width textprop removes it. * Compiler warning for argument type. * No proper test for directory changes in quickfix. * Warning for missing function prototype. * "line:" field in tags file not used. * Debugging where a delay comes from is not easy. * vi' sometimes does not select anything. * Not always using the right window when jumping to an error. * FORTIFY_SOURCE can also be present in CPPFLAGS. * No test for spell affix file with flag on suffix. * Compiler warning for int size. * Insufficient test coverage for quickfix. * Cannot select all text with the mouse. (John Marriott) * Quickfix test fails in very big terminal. * Width of scrollbar in popup menu not taken into account. * Crash when using balloon with empty line. * Cannot parse a date/time string. * Cannot build with Hangul input. * A few hangul input pieces remain. * Mouse multiple click test is a bit flaky. * vi' does not always work when 'selection' is exclusive. * The option.c file is still very big. * Missing file in refactoring. * With modifyOtherKeys CTRL-^ doesn't work. * Possible NULL pointer dereference in popup_locate(). (Coverity) * Error message for function arguments may use NULL pointer. (Coverity) * When an expr mapping moves the cursor it is not restored. * Double-click time sometimes miscomputed. * Using Visual mark sith :s gives E20 if not set. * Insufficient testing for quickfix. * Quickfix test fails under valgrind and asan. * Not so easy to interrupt a script programatically. * Random number generator in Vim script is slow. * Using time() for srand() is not very random. * .cjs files are not recognized as Javascript. * CTRL-R CTRL-R doesn't work with modifyOtherKeys. * :const cannot be followed by "| endif". * :lockvar and :unlockvar cannot be followed by "| endif". * Other text for CTRL-V in Insert mode with modifyOtherKeys. * 'wincolor' not used for > for not fitting double width char. Also: popup drawn on right half of double width character looks wrong. * rand() does not use the best algorithm. * No test with wrong argument for rand(). * Cannot build without FEAT_FLOAT. (John Marriott) * Quickfix test coverage can still be improved. * Cannot place signs in a popup window. (Maxim Kim) * ml_get error when accessing Visual area in 'statusline'. * Missing tests for recent popupwin changes. * Using old C style comments. * Registers are not sufficiently tested. * Using old C style comments. * Cannot build with quickfix and without text properties. * Build problems on VMS. * FEAT_TEXT_PROP is a confusing name. * Cannot build with +popupwin but without +quickfix. (John Marriott) * Unused parts of libvterm are included. * No suffucient testing for registers. * Preprocessor indents are incorrect. * GUI: when losing focus a pending operator is executed. * Using old C style comments. * Not all register related code is covered by tests. ==== zypper ==== Version update (1.14.32 -> 1.14.33) Subpackages: zypper-needs-restarting - Introduce purge-kernels command (bsc#1155198) Adds a new zypper command to cleanup all obsolete kernels as configured by the user. - Request root privs for zypper addlocale and removelocale. - Load only target resolvables for removelocale. - Load only target resolvables for zypper rm (bsc#1157377) - Fix broken search by filelist (bsc#1135114 ) - zypper-log: Replace python by a bash script (fixes#304, fixes#306, bsc#1156158) - locales: do not sort out requested locales which are not available (bsc#1155678) - list_patches_by_issue: rewrite table output and add xml output (bsc#1154805) Prevent listing duplicate matches in tables. XML result is provided within the new <list-patches-byissue> element. - list-patches: XML add patch <issue-date> and <issue-list> (bsc#1154805) - Fix zypper lp --cve/bugzilla/issue options (bsc#1155298) - Always execute commit when adding/removing locales (fixes bsc#1155205) - man page: fix description of --table-style,-s (bsc#1154804) - Provide reverse search in zypper (fixes #214) This patch adds a new set of switches to zypper to support searching reverse dependencies for a package or a set of packages. - BuildRequires: libzypp-devel >= 17.16.1. - version 1.14.33 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191202 released!
by Richard Brown 04 Dec '19

04 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20191017.bf0a315 -> 84.87+git20191120.98f1524) ca-certificates-mozilla dracut (049+git114.058e566c -> 049+git115.c2d8d6fb) findutils glib2 (2.62.2 -> 2.62.3) growpart hyper-v libtirpc (1.0.3 -> 1.1.4) lzo mozilla-nss (3.46.1 -> 3.47.1) pam-config patterns-containers pcre2 (10.33 -> 10.34) perl (5.28.1 -> 5.30.1) sed shared-mime-info xen (4.13.0_02 -> 4.13.0_03) === Details === ==== aaa_base ==== Version update (84.87+git20191017.bf0a315 -> 84.87+git20191120.98f1524) - Update to version 84.87+git20191120.98f1524: * merged PR 65 * dash fixes * handle /usr/etc/login.defs for wsl ==== ca-certificates-mozilla ==== - export correct p11kit trust attributes so Firefox detects built in certificates (boo#1154871). Courtesy of Fedora. ==== dracut ==== Version update (049+git114.058e566c -> 049+git115.c2d8d6fb) Subpackages: dracut-ima - Update to version 049+git115.c2d8d6fb: * suse: Remove incorrect usage of %_libexecdir (boo#1155785) ==== findutils ==== - Add disable-null-ptr-test.patch in order to fix boo#1157342. ==== glib2 ==== Version update (2.62.2 -> 2.62.3) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.62.3: + Use `poll()` in `g_spawn_sync()` rather than `select()`, which is subject to FD limits. + Fix undefined behaviour with `g_utf8_find_prev_char()`. + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318, glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903, glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917, glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184, glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203, glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215, glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222, glgo#GNOME/GLib!1228. ==== growpart ==== - Clean growpart.spec: * Drop obsolete tags * Use install instead of mkdir+cp+chmod * Fix build on SLE 12 SP4 - Replaced hardcoded systemd paths with macros in spec file - Reference entry for maintenance Tracker bug for the submission set to: bsc#1154357 - Deleted rootgrow source and sub-package build rootgrow is provided on github: https://github.com/SUSE-Enceladus/rootgrow and builds a standalone package now ==== hyper-v ==== - Update lsvmbus interpreter from python(1) to python3(1) again because only SLE12 lacked proper python3 support (bsc#1093910) - async name resolution in kvp_daemon (bsc#1100758) - kvp: eliminate 'may be used uninitialized' warning (89eb4d8d) - fix typos in toolchain (2d35c660) - fixed Python pep8/flake8 warnings for lsvmbus (5912e791) - Replace GPLv2 boilerplate/reference with SPDX (43aa3132) - Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780) ==== libtirpc ==== Version update (1.0.3 -> 1.1.4) Subpackages: libtirpc-netconfig libtirpc3 - Fix previous version: - actually delete 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch) - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch (renamed from 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch) - Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release) - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect upstream changes after 1.1.4 release - remove /etc/bindresvport.blacklist as it's still supported by glibc although it's not compiled with --enable-obsolete-rpc - Drop patches accepted in previous releases or not needed - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4) - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory) - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1) - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch (backport of 25d38d7, libtirpc-1-0-4-rc1) - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch (backport of 145272c, libtirpc-1-0-4-rc2) - Add fixes from upcomming release - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch ==== lzo ==== - Disable strict aliasing due to its violation (boo#1157271). ==== mozilla-nss ==== Version update (3.46.1 -> 3.47.1) - update to NSS 3.47.1 * CVE-2019-11745 - EncryptUpdate should use maxout, not block size * Fix a crash that could be caused by client certificates during startup (bmo#1590495) * Fix compile-time warnings from uninitialized variables in a perl script (bmo#1589810) - update to NSS 3.47 * required by Firefox 71.0 Notable changes * Support AES HW acceleration on ARMv8 (bmo#1152625) * Allow per-socket run-time ordering of the cipher suites presented in ClientHello (bmo#1267894) * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501) Bugfixes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_rele… - requires NSPR 4.23 ==== pam-config ==== - Prevent systemd-user to call pam_mount when opening/closing a (PAM) session as it drops privileges in between and so when closing it may be unable to undo things set up during opening. [bsc#1153630, bsc1153630-prevent-systemd-pam_mount.patch] ==== patterns-containers ==== - Add k9s to kubernetes utilities pattern ==== pcre2 ==== Version update (10.33 -> 10.34) - Enable JIT on aarch64 - pcre2 10.34: * implement the documented maximum number of capturing subpatterns of 65535 * Improve the invalid utf32 support of the JIT compiler * Add support for matching in invalid UTF strings to the pcre2_match() * Give more error detail for invalid UTF-8 when detected in pcre2grep * support for invalid UTF-8 to pcre2grep. * Adjust the limit for "must have" code unit searching, in particular, * increase it substantially for non-anchored patterns. * Allow (*ACCEPT) to be quantified, because an ungreedy quantifier with a zero minimum is potentially useful. * Some changes to the way the minimum subject length is handled * Check for integer overflow when computing lookbehind lengths * Implement non-atomic positive lookaround assertions * Upgraded to Unicode 12.1.0 * Make pcre2test -C show if libreadline or libedit is supported * Various bug fixes and improvements ==== perl ==== Version update (5.28.1 -> 5.30.1) Subpackages: perl-base - update to perl-5.30.1 * unicode 12.1 is supported * turkic UTF-8 locales are now seamlessly supported * assigning non-zero to $[ is fatal * some formerly deprecated uses of an unescaped left brace "{" in regular expression patterns are now illegal * previously deprecated sysread()/syswrite() on :utf8 handles is now fatal * my() in false conditional prohibited * remove File::Glob::glob() * various performance enhancements - updated patches: * perl-5.22.0_wrong_rpm_provides.diff * perl-gdbm-test-no-mmap.diff * perl-fix2020.patch * perl-reproducible2.patch - dropped patches: * perl-revert-caretx.diff * perl-regexp-refoverflow.diff ==== sed ==== - Add disable-null-ptr-argument.patch in order to fix boo#1157218. ==== shared-mime-info ==== - Drop no longer required PreReq's, obsolete with switch to file trigger based pre/post scripts. ==== xen ==== Version update (4.13.0_02 -> 4.13.0_03) - Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191202 released!
by Richard Brown 04 Dec '19

04 Dec '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20191017.bf0a315 -> 84.87+git20191120.98f1524) ca-certificates-mozilla cri-o (1.16.0 -> 1.16.1) dracut (049+git114.058e566c -> 049+git115.c2d8d6fb) findutils glib2 (2.62.2 -> 2.62.3) growpart hyper-v kubernetes (1.16.2 -> 1.16.3) libtirpc (1.0.3 -> 1.1.4) lzo mozilla-nspr (4.22 -> 4.23) mozilla-nss (3.46.1 -> 3.47.1) pam-config patterns-containers pcre2 (10.33 -> 10.34) perl (5.28.1 -> 5.30.1) sed shared-mime-info xen (4.13.0_02 -> 4.13.0_03) === Details === ==== aaa_base ==== Version update (84.87+git20191017.bf0a315 -> 84.87+git20191120.98f1524) - Update to version 84.87+git20191120.98f1524: * merged PR 65 * dash fixes * handle /usr/etc/login.defs for wsl ==== ca-certificates-mozilla ==== - export correct p11kit trust attributes so Firefox detects built in certificates (boo#1154871). Courtesy of Fedora. ==== cri-o ==== Version update (1.16.0 -> 1.16.1) Subpackages: cri-o-kubeadm-criconfig - Update to v1.16.1: * Add manifest list support * Default to system.slice for conmon cgroup * Don't set PodIPs on host network pods - switch to libcontainers-common requires, as the other two are provided by it already (avant-garde#1056) - Revert cgroup_manager from systemd to cgroupsfs for SLE15 k8s default is cgroupfs and in can be modified at runtime by the `--kubelet-cgroups` flag. However this flag is deprecated and avoinding it is currently preferred over introducing it. In order to switch to systemd as the cgroups manager in SLE15 further analysis is required to find a suitable configuration strategy. ==== dracut ==== Version update (049+git114.058e566c -> 049+git115.c2d8d6fb) Subpackages: dracut-ima - Update to version 049+git115.c2d8d6fb: * suse: Remove incorrect usage of %_libexecdir (boo#1155785) ==== findutils ==== - Add disable-null-ptr-test.patch in order to fix boo#1157342. ==== glib2 ==== Version update (2.62.2 -> 2.62.3) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.62.3: + Use `poll()` in `g_spawn_sync()` rather than `select()`, which is subject to FD limits. + Fix undefined behaviour with `g_utf8_find_prev_char()`. + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318, glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903, glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917, glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184, glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203, glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215, glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222, glgo#GNOME/GLib!1228. ==== growpart ==== - Clean growpart.spec: * Drop obsolete tags * Use install instead of mkdir+cp+chmod * Fix build on SLE 12 SP4 - Replaced hardcoded systemd paths with macros in spec file - Reference entry for maintenance Tracker bug for the submission set to: bsc#1154357 - Deleted rootgrow source and sub-package build rootgrow is provided on github: https://github.com/SUSE-Enceladus/rootgrow and builds a standalone package now ==== hyper-v ==== - Update lsvmbus interpreter from python(1) to python3(1) again because only SLE12 lacked proper python3 support (bsc#1093910) - async name resolution in kvp_daemon (bsc#1100758) - kvp: eliminate 'may be used uninitialized' warning (89eb4d8d) - fix typos in toolchain (2d35c660) - fixed Python pep8/flake8 warnings for lsvmbus (5912e791) - Replace GPLv2 boilerplate/reference with SPDX (43aa3132) - Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780) ==== kubernetes ==== Version update (1.16.2 -> 1.16.3) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Convert changes file to proper UTF-8 format: new version of RPM are getting strict in interpreting files. - Update to version 1.16.3: * kubeadm: fix skipped etcd upgrade on secondary cp nodes * Add testcases covering large valid patches * json unmarshal coded error at function applyJSPatch() * Stop Watching when there is encoding error * Remove HostPathV0 tests in preparation for removal in 1.17. This is so that upgrade tests dont fail when support for v0 drivers are removed in k8s 1.17 * add cache read type prefix for const * update getmetadata to use unsafe read * add allowunsafe read * Flush data cache during unmount device for GCE-PD in Windows * add a fallback for kube-scheduler when events.k8s.io is disabled * modify detach timeout to be csiTimeout * fix windows performance counter father information failed on Non-English environment * bump metrics server version o v0.3.6 * Bump metrics-server version to v0.3.5 * rename metric for apiserver request terminations and reword corresponding documentation * pluralize error metric name * Fix double counting issue for request metrics on timeout. * Do not bind block PV/PVCs when block feature gate is off * Return an error when zone info is not found. * Use --stamp flag in bazel builds * Update to use go1.12.12 * Update Cluster Autoscaler version to 1.16.2 * add tombstoones handle for pdb * Amend CHANGELOG-1.16.md for v1.16.2 * Fix proto.Merge of IntOrString type * Bump to etcd 3.3.17 and bbolt v1.3.3 * Add/Update CHANGELOG-1.16.md for v1.16.2. * Kubernetes version v1.16.3-beta.0 openapi-spec file updates * release: lib: revert docker_registry to constant k8s.gcr.io * Remove check causing informers to miss notifications * auth/cloud-platform is a superset of devstorage. * Remove e2e/common package usage in volumemode testsuite * Mark startupProbe test as NodeAlphaFeature and fix podClient instanciation ==== libtirpc ==== Version update (1.0.3 -> 1.1.4) Subpackages: libtirpc-netconfig libtirpc3 - Fix previous version: - actually delete 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch) - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch (renamed from 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch) - Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release) - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect upstream changes after 1.1.4 release - remove /etc/bindresvport.blacklist as it's still supported by glibc although it's not compiled with --enable-obsolete-rpc - Drop patches accepted in previous releases or not needed - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4) - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory) - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1) - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch (backport of 25d38d7, libtirpc-1-0-4-rc1) - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch (backport of 145272c, libtirpc-1-0-4-rc2) - Add fixes from upcomming release - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch ==== lzo ==== - Disable strict aliasing due to its violation (boo#1157271). ==== mozilla-nspr ==== Version update (4.22 -> 4.23) - update to version 4.23 * fixed a build failure that was introduced in 4.22 * correctness fix for Win64 socket polling * whitespace in C files was cleaned up and no longer uses tab characters for indenting ==== mozilla-nss ==== Version update (3.46.1 -> 3.47.1) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.47.1 * CVE-2019-11745 - EncryptUpdate should use maxout, not block size * Fix a crash that could be caused by client certificates during startup (bmo#1590495) * Fix compile-time warnings from uninitialized variables in a perl script (bmo#1589810) - update to NSS 3.47 * required by Firefox 71.0 Notable changes * Support AES HW acceleration on ARMv8 (bmo#1152625) * Allow per-socket run-time ordering of the cipher suites presented in ClientHello (bmo#1267894) * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501) Bugfixes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_rele… - requires NSPR 4.23 ==== pam-config ==== - Prevent systemd-user to call pam_mount when opening/closing a (PAM) session as it drops privileges in between and so when closing it may be unable to undo things set up during opening. [bsc#1153630, bsc1153630-prevent-systemd-pam_mount.patch] ==== patterns-containers ==== Subpackages: patterns-containers-container_runtime patterns-containers-container_runtime_kubernetes patterns-containers-kubeadm patterns-containers-kubernetes_utilities patterns-containers-kubic_admin patterns-containers-kubic_loadbalancer patterns-containers-kubic_worker - Add k9s to kubernetes utilities pattern ==== pcre2 ==== Version update (10.33 -> 10.34) - Enable JIT on aarch64 - pcre2 10.34: * implement the documented maximum number of capturing subpatterns of 65535 * Improve the invalid utf32 support of the JIT compiler * Add support for matching in invalid UTF strings to the pcre2_match() * Give more error detail for invalid UTF-8 when detected in pcre2grep * support for invalid UTF-8 to pcre2grep. * Adjust the limit for "must have" code unit searching, in particular, * increase it substantially for non-anchored patterns. * Allow (*ACCEPT) to be quantified, because an ungreedy quantifier with a zero minimum is potentially useful. * Some changes to the way the minimum subject length is handled * Check for integer overflow when computing lookbehind lengths * Implement non-atomic positive lookaround assertions * Upgraded to Unicode 12.1.0 * Make pcre2test -C show if libreadline or libedit is supported * Various bug fixes and improvements ==== perl ==== Version update (5.28.1 -> 5.30.1) Subpackages: perl-base - update to perl-5.30.1 * unicode 12.1 is supported * turkic UTF-8 locales are now seamlessly supported * assigning non-zero to $[ is fatal * some formerly deprecated uses of an unescaped left brace "{" in regular expression patterns are now illegal * previously deprecated sysread()/syswrite() on :utf8 handles is now fatal * my() in false conditional prohibited * remove File::Glob::glob() * various performance enhancements - updated patches: * perl-5.22.0_wrong_rpm_provides.diff * perl-gdbm-test-no-mmap.diff * perl-fix2020.patch * perl-reproducible2.patch - dropped patches: * perl-revert-caretx.diff * perl-regexp-refoverflow.diff ==== sed ==== - Add disable-null-ptr-argument.patch in order to fix boo#1157218. ==== shared-mime-info ==== - Drop no longer required PreReq's, obsolete with switch to file trigger based pre/post scripts. ==== xen ==== Version update (4.13.0_02 -> 4.13.0_03) - Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0