September 2020 - openSUSE Kubic - openSUSE Mailing Lists

[opensuse-kubic] MicroOS error when setting container memory limit
by Sébastien 'sogal' Poher 11 Mar '21

11 Mar '21

Hi, On a fresh MicroOS install with podman, when I want to set memory limit for a container (using the -m flag) I get the following error: Error: container_linux.go:367: starting container process caused: process_linux.go:459: container init caused: process_linux.go:422: setting cgroup config for procHooks process caused: cannot set memory limit: container could not join or create cgroup: OCI runtime error I am not able to understand the nature of the error. Searching around, I found similar issue where adding cgroup_enable=memory parameter to boot settings in Grub might solve the issue. Is that correct ? If so, what is the proper way to update Grub config on a RO filesystem ? podman version 2.0.4 podman info (ociRuntime part): ociRuntime: name: runc package: runc-1.0.0~rc91-1.2.x86_64 path: /usr/bin/runc version: |- runc version 1.0.0-rc91 spec: 1.0.2-dev Regards, -- Sébastien 'sogal' Poher > When there's no more room at school, the dumb will walk the Earth!

5 10

[opensuse-kubic] What is the purpose of kubic-control compared to skuba
by Francisco Freitas 30 Sep '20

30 Sep '20

Hello everyone, I've stumbled on the skuba project[1]. It is a tool made by the SUSE team wich is a "Tool to manage the full lifecycle of a cluster." As I see it, it is a rewrite of kubic-control wich relies on SSH instead of the Salt Stack to manage the deployment and the maintainance of a Kubernetes cluster. Why is there two projects? Should I switch to skuba when using OpenSUSE kubic or is kubic-control still the way to go ? Best regards, Francisco [1] https://github.com/SUSE/skuba -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

3 2

[opensuse-kubic] New MicroOS snapshot 20200928 released!
by Richard Brown 30 Sep '20

30 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (050+suse.226.gb86d9bcf -> 050+suse.227.g7a9b782d) installation-images-MicroOS (16.18 -> 16.19) timezone transactional-update (2.24.1 -> 2.26) webkit2gtk3 (2.30.0 -> 2.30.1) === Details === ==== dracut ==== Version update (050+suse.226.gb86d9bcf -> 050+suse.227.g7a9b782d) Subpackages: dracut-ima - Update to version 050+suse.227.g7a9b782d: * Revert "install: also install post weak dependencies of kernel modules" (boo#1177016) ==== installation-images-MicroOS ==== Version update (16.18 -> 16.19) - merge gh#openSUSE/installation-images#424 - adjust to openssh package split - 16.19 ==== timezone ==== - Fixup tzdata-china.diff: zone.tab and zone1970.tab MUST be tab delimited (boo#1176927). - modify tzdata-china.diff * systemd now reads zone1970.tab * link Asia/Shanghai to Asia/Beijing is enough and more precise ==== transactional-update ==== Version update (2.24.1 -> 2.26) Subpackages: transactional-update-zypp-config - Version 2.26 - Fix broken sync for second snapshot [boo#1176989] - Add new options to allow separate cleanup of snapshots and overlays - Check for existence of inotifywait before using it - Check that mount options don't exceed maximum length - Version 2.25.1 - Fix inotify watcher setup - Use log_{info,error} for more messages to avoid messing up Salt logs - Version 2.25 - Reduce number of overlays: Instead of using transparent overlays for all previous layers only add the previous snapshot's overlay; this will greatly reduce the number of overlays while still making sure that /etc changes in the running system will be visible in the next snapshot - When using --drop-if-no-change synchronize potential /etc changes with running system - Exclude all non-root-fs mounts from inotify watcher ==== webkit2gtk3 ==== Version update (2.30.0 -> 2.30.1) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.30.1: + Bring back the environment variable to force single process mode when PSON is disabled. + Fix downloads started by an ephemeral web context. + Updated translations. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

4 4

[opensuse-kubic] New ARM MicroOS snapshot 20200928 released!
by Guillaume Gardet 30 Sep '20

30 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (20.1.7 -> 20.1.8) Mesa-drivers (20.1.7 -> 20.1.8) PackageKit appstream-glib (0.7.17 -> 0.7.18) at-spi2-core (2.36.0 -> 2.36.1) branding-openSUSE busybox-links clutter conmon (2.0.20 -> 2.0.21) containers-systemd (0.0+git20200901.c31b0cc -> 0.0+git20200918.c14836a) dhcp dracut (050+suse.75.g266a76d9 -> 050+suse.227.g7a9b782d) elfutils (0.179 -> 0.181) ell (0.32 -> 0.33) glib2 (2.64.4 -> 2.64.5) glib2-branding-openSUSE gnome-desktop (3.36.5 -> 3.36.6) gnome-settings-daemon gnome-shell gsettings-desktop-schemas harfbuzz (2.6.8 -> 2.7.2) hwdata (0.338 -> 0.339) installation-images-MicroOS (16.16 -> 16.19) json-glib (1.4.4 -> 1.6.0) kaccounts-integration kernel-firmware (20200827 -> 20200916) kernel-source (5.8.7 -> 5.8.10) kio-extras5 ldb (2.1.4 -> 2.2.0) libdbusmenu-qt5 (0.9.3+15.10.20150604 -> 0.9.3+16.04.20160218) libfido2 (1.4.0 -> 1.5.0) libiptcdata (1.0.4 -> 1.0.5) libproxy libqt5-qtbase libsolv (0.7.14 -> 0.7.15) libssh (0.9.4 -> 0.9.5) libyui-qt (2.54.0 -> 2.55.0) libzypp (17.24.2 -> 17.25.0) multipath-tools (0.8.4+183+suse.1817ce2 -> 0.8.4+192+suse.1bc10ad) musepack noto-coloremoji-fonts (20200722 -> 20200916) openSUSE-build-key pango (1.46.1 -> 1.46.2) perl (5.30.1 -> 5.30.3) perl-libwww-perl (6.47 -> 6.49) pipewire (0.3.10 -> 0.3.11) qrencode (4.0.2 -> 4.1.0) samba (4.12.5+git.168.88cc07e6cbf -> 4.13.0+git.138.ff2d5480c67) shadow snapper (0.8.13 -> 0.8.14) sysconfig (0.85.5 -> 0.85.6) systemd (245.7 -> 246.4) timezone tracker2 (2.3.5 -> 2.3.6) transactional-update (2.24.1 -> 2.26) vim (8.2.1551 -> 8.2.1719) wpa_supplicant xterm (353 -> 359) yast2 (4.3.27 -> 4.3.29) zlib zypper (1.14.38 -> 1.14.39) === Details === ==== Mesa ==== Version update (20.1.7 -> 20.1.8) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - buildfix-ppc64le.patch * buildfix for ppc64le (boo#1176562) - update to 20.1.8: * mainly bugfixes, highlights: - Crash in ruvd_end_frame when calling vaBeginPicture/vaEndPicture without rendering anything - khr_debug-push-pop-group_gl: ../src/util/simple_mtx.h:86: simple_mtx_lock: Assertion `c != _SIMPLE_MTX_INVALID_VALUE' failed. - Amber test opt_peel_loop_initial_if: Assertion failed - Dirt Rally: Flickering glitches on certain foliage since Mesa 20.1.0 caused by MSAA - [BRW] WRC 5 asserts with gallium nine and iris. ==== Mesa-drivers ==== Version update (20.1.7 -> 20.1.8) Subpackages: Mesa-dri Mesa-gallium - buildfix-ppc64le.patch * buildfix for ppc64le (boo#1176562) - update to 20.1.8: * mainly bugfixes, highlights: - Crash in ruvd_end_frame when calling vaBeginPicture/vaEndPicture without rendering anything - khr_debug-push-pop-group_gl: ../src/util/simple_mtx.h:86: simple_mtx_lock: Assertion `c != _SIMPLE_MTX_INVALID_VALUE' failed. - Amber test opt_peel_loop_initial_if: Assertion failed - Dirt Rally: Flickering glitches on certain foliage since Mesa 20.1.0 caused by MSAA - [BRW] WRC 5 asserts with gallium nine and iris. ==== PackageKit ==== Subpackages: PackageKit-backend-zypp libpackagekit-glib2-18 - Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315). ==== appstream-glib ==== Version update (0.7.17 -> 0.7.18) Subpackages: libappstream-glib8 - Update to version 0.7.18: * Don't ignore localized strings that are the same as original * Croatian translation 2nd attempt (#373) * Test launchable tags in validation * Add missing dependency to the readme * as-app: Don't initialize mutex twice * as-content-rating: Expand translator comments to link to OARS website * as-content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense * po: Import gs-content-rating.c translations from gnome-software * po: Update po files * as-content-rating: Add content rating system APIs from gnome-software * Allow timestamp in the future in validate-relax * Fix crash with invalid children of <ul/> * as-app: Properly initialize unique_id_mutex * The AppData files now go to /usr/share/metainfo * util: Complete new validate-version command * util: Add "validate-version" command * trivial: Actually use the correct NEWS contents * trivial: post release version bump - Drop patch as-glib-PR359.patch (fixed upstream) - Run spec-cleaner * Remove rpm groups ==== at-spi2-core ==== Version update (2.36.0 -> 2.36.1) Subpackages: libatspi0 typelib-1_0-Atspi-2_0 - Update to version 2.36.1: + meson: De-duplicate deps of 'Requires' in pkgconfig file + Make at-spi-dbus-bus.desktop Validat + Fix ucs2keysym line for Euro sign + Fix Qt annotations in DBus xml files + constants: Fix typos in two _COUNT constants + Fix a couple of memory leaks. + Fix use after free when a device listener is destroyed. + Fix use after free when an event listener is destroyed. - Run spec-cleaner + Remove rpm groups ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE wallpaper-branding-openSUSE - Update branding-tumbleweed.zip: Rebrand all components of SLES/D in boot progress (jsc#SLE-14772). ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-psmisc busybox-xz - Add post/postun requires for busybox to busybox-sh (/usr/bin/ash is a symlink to busybox) ==== clutter ==== - Make documentation build reproducible ==== conmon ==== Version update (2.0.20 -> 2.0.21) - Update to version 2.0.21: * bump to v2.0.21 * protect against kill(-1) * Makefile: enable debuginfo generation * Remove go.sum file and add go.mod * Fail if conmon config could not be written * nix: remove double definition for e2fsprogs * Speedup static build by utilizing CI cache on `/nix` folder * Fix nix build for failing e2fsprogs tests * test: fix CI * Use Podman for building ==== containers-systemd ==== Version update (0.0+git20200901.c31b0cc -> 0.0+git20200918.c14836a) - Update to version 0.0+git20200918.c14836a: * All services should 'Want=' targets not just 'After=' ==== dhcp ==== Subpackages: dhcp-client - Don't create dhclient.leases in %post. It affects transactional updates and the files don't need to pre-exist (boo#1129951). - Drop dependency on insserv-compat It was required to call the rc_status helpers from the sysvinit scripts. These scripts are supposed to be called by systemd, which has its own mechanism to report service status. Please note that this package still needs to be converted to ship proper systemd units. - /var/run is legacy -> /run should be used instead ==== dracut ==== Version update (050+suse.75.g266a76d9 -> 050+suse.227.g7a9b782d) Subpackages: dracut-ima - Update to version 050+suse.227.g7a9b782d: * Revert "install: also install post weak dependencies of kernel modules" (boo#1177016) - Update to version 050+suse.226.gb86d9bcf: We are now tracking the master branch, preparing for a 051 release within the next weeks. (the list includes changes previously backported) * 01fips: modprobe failures during manual module loading is not fatal * 01fips: turn info calls into fips_info calls * 04watchdog: split the watchdog module install * 35network-legacy: simplify fallback dhcp setup * 51-dracut-rescue.install: Don't use BLS fragment shipped by kernel package * 90crypt: make `rd.luks.key` usable with encrypted keydev. * 90crypt/module-setup.sh: try to catch kernel config changes * 90kernel-modules: add pci_hyperv * 90kernel-modules/module-setup.sh: add sg kernel module * 90kernel-modules: remove nfit from static module list * 90lvm: do not add newline to cmdline * 90nvdimm: include nvdimm keys in initrd * 90ppcmac: respect DRACUT_ARCH, don't exclude ppcle * 91zipl: parse-zipl.sh: honor SYSTEMD_READY * 95cifs: install new softdeps (sha512, gcm, ccm, aead2) * 95cifs: pass rootflags to mount * 95dcssblk: fix script permissions * 95fcoe: default rd.nofcoe to false * 95iscsi: fix ipv6 target discovery * 95iscsi: fix missing space when compiling cmdline args * 95iscsi: use ip_params_for_remote_addr() * 95nfs: only install rpc services for NFS < 4 when hostonly is strict * 95nfs: use ip_params_for_remote_addr() * 95nvmf: add module for NVMe-oF * 95nvmf: add NVMe over TCP support * 95nvmf: fix typo in the example documentation * 95resume: Do not resume on iSCSI, FCoE or NBD * 95zfcp_rules/parse-zfcp.sh: remove rule existence check * 95znet: Add a rd.znet_ifname= option * 99base: Remove duplicate nfsroot_to_var from dracut-lib.sh * 99memstrack: hook script should not call exit * 99memstrack: Only start tracking service when rd.memdebug=4|5 * 99squash: Don't hardcode the squash sub directories * 99squash: improve pre-requirements check * 99squash: simplify the code * Add 99memstrack module * Adding a bug report template * Adding a feature request template * Adding a pull request template * Adding code of conduct * Adding documentation template * Adding security policy * Adding the labels file for master * Adding the labels file for the RHEL-6 branch * Adding the labels file for the RHEL-7 branch * Adding the labels file for the RHEL-8 branch * Adding the labels trigger file for the Master branch * Adding the labels trigger file for the RHEL-6 branch * Adding the labels trigger file for the RHEL-7 branch * Adding the labels trigger file for the RHEL-8 branch * Add module "90nvdimm" for NVDIMM support * Add --version to man page * Allow $DRACUT_INSTALL to be not an absolute path * Always pull in machinery to read ifcfg files * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated * btrfs: force preload btrfs module * busybox: simplify listing of supported utilities * Change the order of NFS servers during the boot NFS server provided by DHCP in next-server option has higher priority than DHCP-server itself * CI: remove Fedora 30, add Fedora 32 * cms: regenerate NetworkManager connections * cryptroot-ask: no warn if /run/cryptsetup exist * dasd: only install /etc/dasd.conf if present * dhclient-script: Fix typo in output of BOUND & BOUND6 cases * dmsquash-live-root: Remove obsolete osmin.img processing. * Document initqueue/online hook * Do not start inside container * don't prefer $TMPDIR over --tmpdir * dracut.cmdline.7.asc: clarify usage of `rd.lvm.vg` and `rd.lvm.lv` * dracut.cmdline.7.asc: fix typo * dracut.conf.5.asc: document how to config --no-compress in the config * dracut-functions: add ip_params_for_remote_addr() helper * dracut-functions: fix find_binary() to return full path * dracut-initqueue: Print more useful info in case of timeout * dracut-lib.sh: quote variables in parameter expansion patterns * dracut.modules.7.asc: fix another typo * dracut.modules.7.asc: fix reference to insmodpost module * dracut.sh: add check for invalid configuration files * dracut.sh: Add --version * dracut.sh: don't call fsfreeze on subvol of root file system * dracut.sh: FIPS workaround for openssl-libs on Fedora/RHEL * dracut.sh: fix early microcode detection logic * dracut.sh: fix errors pointed out by shellcheck. * dracut.sh: fix ia32 detection for uefi executables * dracut.sh: fix some indentation. * dracut.sh: Move the library workaround after squash * dracut.spec: add 90nvdimm * dracut.spec: add version check for deprecated files * Fix CI badges in README.md and fix dracut description * Fix CoC URL * fix graphics startup failure with the rhgb paramter in CentOS8.2 * Fix pre-trigger stage by replacing exit with return in lldpad.sh * Fix test in lsinitrd * Fix Unicode * Fix Unicode and dracut install labeler * github actions: use test container directly * .github: fix path to label workflow mapping file * i18n: Always install /etc/vconsole.conf * install: also install post weak dependencies of kernel modules * Install crypto modules in 90kernel-modules * install dependant libs too * lvm: fix removal of pvscan from udev rules * lvm: remove unnecessary ${initdir} from lvm_scan.sh * Make externally defined CFLAGS work * Makefile: fix VERSION again * Makefile: merge main-version and git-version earlier * Makefile: really make externally defined CFLAGS work * match simplified rd.zfcp format too * match the whole string * mkinitrd-dracut.sh: use vmlinux regex for ppc*, vmlinuz for i686 * mkinitrd-suse.sh: Fix i586 platform detection * mount-root.sh: fix writing fstab file with missing fsck flag * multipath: add automatic configuration for multipath * net-lib.sh: support infiniband network mac addresses * network: fix glob matching ipv6 addresses * network-manager: ensure that nm-run.sh is executed when needed * network-manager: install libnss DNS and mDNS plugins * network-manager: move connection generation to a lib file * network-manager: set kernel hostname from the command line * New labels file * New label trigger file * README.md: fix github action badge links * Remove cleanup_trace_mem calls * Remove memtrace-ko and rd.memdebug=4 support in dracut * Remove stratis module * Removing dracut entry not compat with new plugin * Switching label triggers from pull requests to cron * systemd: skip dependency add for non-existent units * TEST-03-USR-MOUNT/test.sh: increase loglevel * TEST-12-RAID-DEG/create-root.sh: more udevadm settle * TEST-41-NBD-NM/Makefile: should be based on TEST-40-NBD not TEST-20-NFS * TEST-99: exclude /etc/dnf/* from check * test/TEST-35-ISCSI-MULTI: bump disk space * test: use dd from /dev/zero, instead of creating files with a hole * .travis.yml: reformat * UEFI Mode: only write kernel cmdline to UEFI binary * Update master-labels.yml * url-lib: drop NSS if it's not in curl --version * Use TMPDIR if available ==== elfutils ==== Version update (0.179 -> 0.181) Subpackages: libasm1 libdw1 libelf1 - Update to version 0.181: libelf: elf_update now compensates (fixes up) a bad sh_addralign for SHF_COMPRESSED sections. libdebuginfod: configure now takes --enable-libdebuginfod=dummy or - -disable-libdebuginfod for bootstrapping. DEBUGINFOD_URLS now accepts "scheme-free" urls (guessing at what the user meant, either http:// or file://) readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu property notes. libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding on arm64 for code that is compiled for PAC (Pointer Authentication Code) as long as it isn't enabled - Drop upstream patch: * 0001-tests-Add-GCOV-flags-when-necessary.patch - Remove cfi-fix.patch - should not be needed now. - Remove remove-run-large-elf-file.sh.patch as it now checks for memory size. - Use autosetup. - Update to version 0.180: elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given. libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix. libdw: Use correct CU to resolve file names in dwarf_decl_file. libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo. size: Also obey radix printing for bsd format. nm: Explicitly print weak 'V' or 'T' and common 'C' symbols. - Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix an unresolved symbol. - Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage. ==== ell ==== Version update (0.32 -> 0.33) - Update to release 0.33 * Fixed an issue with overflow in DHCP lease T2 computation. * Added support for DHCPv6 client implementation. * Removed support for ARC4 and RC4 cipher suites. ==== glib2 ==== Version update (2.64.4 -> 2.64.5) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.64.5: + Fix deadlock in `g_subprocess_communicate_async()`. + Bugs fixed: glgo#GNOME/GLib!1519, glgo#GNOME/GLib!1520, glgo#GNOME/GLib!1565, glgo#GNOME/GLib!1608, glgo#GNOME/GLib!1618, glgo#GNOME/GLib!1621. ==== glib2-branding-openSUSE ==== - Update .gschema.override.in (jsc#SLE-14772): * add different key for screenlock * update background color for SLE. ==== gnome-desktop ==== Version update (3.36.5 -> 3.36.6) Subpackages: gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0 - Add gnome-desktop-invalid-size-crash.patch: fix a crash caused by a malformed background xml file (bsc#1176596 glgo#GNOME/gnome-desktop#169). - Update to version 3.36.6: + No changes, version bump only. ==== gnome-settings-daemon ==== - fix build on s390x (wacom=false but wayland=true) ==== gnome-shell ==== Subpackages: gnome-shell-calendar - Update gnome-shell-fate324570-Make-GDM-background-image-configurable.patch: Bring noise-texture.png back which will be used as the default value of org.gnome.desktop.background.lockdialog picture-uri (boo#1176418). ==== gsettings-desktop-schemas ==== - Update gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch: Set noise-texture.png as the default value of picture-uri to avoid failed to load background error (boo#1176418). ==== harfbuzz ==== Version update (2.6.8 -> 2.7.2) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - update to 2.7.2: - Fix a regression in the previous release that caused a crash with Kaithi. - More OOM fixes. - ot-funcs now handles variable empty glyphs better when hvar/vvar isn't present. - Reverted a GDEF processing regression. - A couple of fixes to handle OOM better. - Use an implementation for round that always rounds up, some minor fluctuations are expected on var font specially when hb-ot callback is used. - Fix an AAT's `kerx` issue on broken rendering of Devanagari Sangam MN. - Remove AAT's `lcar` table support from _get_ligature_carets API, not even much use on macOS installed fonts (only two files). GDEF support is the recommended one and expected to work properly after issues fixed two releases ago. - Minor memory fixes to handle OOM better specially in hb-ft. - Minor .so files versioning scheme change and remove stable/unstable scheme differences, was never used in practice (always default to stable scheme). - We are now suggesting careful packaging of the library using meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson for more information. - Distribution package URL is changed, either use GitHub generated tarballs, `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz` or, even more preferably use commit hash of the release and git checkouts like, `git+https://github.com/harfbuzz/harfbuzz#commit=$commit` ==== hwdata ==== Version update (0.338 -> 0.339) - Update to version 0.339: + Updated pci, usb and vendor ids. ==== installation-images-MicroOS ==== Version update (16.16 -> 16.19) - merge gh#openSUSE/installation-images#424 - adjust to openssh package split - 16.19 - merge gh#openSUSE/installation-images#422 - prevent cross-filesystem relative symlinks to kmod in initrd (bsc#1169094) - 16.18 - merge gh#openSUSE/installation-images#421 - plymouthd.defaults will be moved to branding package (jsc#SLE-11637) - 16.17 ==== json-glib ==== Version update (1.4.4 -> 1.6.0) Subpackages: libjson-glib-1_0-0 typelib-1_0-Json-1_0 - Update to version 1.6.0: + docs: Add missing index for 1.6 symbols. + Updated translations. - Add gtk-doc BuildRequires and build gtk-doc api documentation and manpages via passing man=true and gtk_doc=enabled to meson. - Add check section and run meson_test macro during build. - Drop obsolete nuking of .la files, no longer needed. - Update to version 1.5.2: + Add getters with default fallback for JsonObject. + Clarify some expections of the json_object_get_*_member APIs. + Fix getting immutable root nodes from empty input. + Add `--output` option to json-glib-format. + Support loading files via memory mapping. + Add a symbol version to all exported symbols. - Pass -Dgtk_doc=disabled to meson: keep the gtk-doc disabled for now. ==== kaccounts-integration ==== - The -devel package needs intltool - Don't hardcode sover everywhere - Mention the sover in %files ==== kernel-firmware ==== Version update (20200827 -> 20200916) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20200916 (git commit 00a84c516078): * linux-firmware: Update AMD SEV firmware * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * Mellanox: Add new mlxsw_spectrum firmware xx.2008.1310 * mediatek: update MT7915 firmware to 20200819 * brcm: Fix a stale symlink for RPi3 model b+ * qcom: Add updated a5xx and a6xx microcode * wl18xx: update firmware file 8.9.0.0.83 ==== kernel-source ==== Version update (5.8.7 -> 5.8.10) - Update patches.kernel.org/5.8.10-047-block-restore-a-specific-error-code-in-bdev_d… (bsc#1012628 bsc#1176770). Add a reference. - commit af3e800 - RDMA/bnxt_re: Remove set but not used variable 'qplib_ctx' (git-fixes). - commit 33939e8 - Linux 5.8.10 (bsc#1012628). - gcov: add support for GCC 10.1 (bsc#1012628). - drm/msm/gpu: make ringbuffer readonly (bsc#1012628). - usb: typec: intel_pmc_mux: Do not configure SBU and HSL Orientation in Alternate modes (bsc#1012628). - usb: typec: intel_pmc_mux: Do not configure Altmode HPD High (bsc#1012628). - usb: typec: intel_pmc_mux: Un-register the USB role switch (bsc#1012628). - usb: typec: ucsi: acpi: Check the _DEP dependencies (bsc#1012628). - usb: Fix out of sync data toggle if a configured device is reconfigured (bsc#1012628). - USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (bsc#1012628). - USB: serial: option: support dynamic Quectel USB compositions (bsc#1012628). - USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (bsc#1012628). - usb: core: fix slab-out-of-bounds Read in read_descriptors (bsc#1012628). - phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init (bsc#1012628). - staging: greybus: audio: fix uninitialized value issue (bsc#1012628). - video: fbdev: fix OOB read in vga_8planes_imageblit() (bsc#1012628). - ARM: dts: vfxxx: Add syscon compatible with OCOTP (bsc#1012628). - arm64: dts: imx8mp: correct sdma1 clk setting (bsc#1012628). - test_firmware: Test platform fw loading on non-EFI systems (bsc#1012628). - debugfs: Fix module state check condition (bsc#1012628). - Revert "usb: dwc3: meson-g12a: fix shared reset control use" (bsc#1012628). - KVM: fix memory leak in kvm_io_bus_unregister_dev() (bsc#1012628). - kvm x86/mmu: use KVM_REQ_MMU_SYNC to sync when needed (bsc#1012628). - KVM: arm64: Do not try to map PUDs when they are folded into PMD (bsc#1012628). - KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit (bsc#1012628). - vgacon: remove software scrollback support (bsc#1012628). - fbcon: remove now unusued 'softback_lines' cursor() argument (bsc#1012628). - fbcon: remove soft scrollback code (bsc#1012628). - RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1012628). - RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1012628). - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (bsc#1012628). - nvme: Revert: Fix controller creation races with teardown flow (bsc#1012628). - mmc: sdhci-of-esdhc: Don't walk device-tree on every interrupt (bsc#1012628). - mmc: sdio: Use mmc_pre_req() / mmc_post_req() (bsc#1012628). - drm/msm: Disable the RPTR shadow (bsc#1012628). - drm/msm: Disable preemption on all 5xx targets (bsc#1012628). - drm/msm: Split the a5xx preemption record (bsc#1012628). - drm/tve200: Stabilize enable/disable (bsc#1012628). - scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem (bsc#1012628). - scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (bsc#1012628). - scsi: target: iscsi: Fix data digest calculation (bsc#1012628). - misc: eeprom: at24: register nvmem only after eeprom is ready to use (bsc#1012628). - regulator: core: Fix slab-out-of-bounds in regulator_unlock_recursive() (bsc#1012628). - regulator: plug of_node leak in regulator_register()'s error path (bsc#1012628). - regulator: push allocation in set_consumer_device_supply() out of lock (bsc#1012628). - regulator: push allocations in create_regulator() outside of lock (bsc#1012628). - regulator: push allocation in regulator_init_coupling() outside of lock (bsc#1012628). - kobject: Restore old behaviour of kobject_del(NULL) (bsc#1012628). - thunderbolt: Disable ports that are not implemented (bsc#1012628). - btrfs: fix wrong address when faulting in pages in the search ioctl (bsc#1012628). - btrfs: free data reloc tree on failed mount (bsc#1012628). - btrfs: fix lockdep splat in add_missing_dev (bsc#1012628). - btrfs: require only sector size alignment for parent eb bytenr (bsc#1012628). - staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (bsc#1012628). - iio:accel:mma8452: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:accel:mma7455: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio: accel: kxsd9: Fix alignment of local buffer (bsc#1012628). - iio:chemical:ccs811: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:light:max44000 Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:magnetometer:ak8975 Fix alignment and data leak issues (bsc#1012628). - iio:adc:ti-adc081c Fix alignment and data leak issues (bsc#1012628). - iio:adc:max1118 Fix alignment of timestamp and data leak issues (bsc#1012628). - iio:adc:ina2xx Fix timestamp alignment issue (bsc#1012628). - iio:adc:ti-adc084s021 Fix alignment and data leak issues (bsc#1012628). - iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:proximity:mb1232: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:light:ltr501 Fix timestamp alignment issue (bsc#1012628). - iio: cros_ec: Set Gyroscope default frequency to 25Hz (bsc#1012628). - iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (bsc#1012628). - iio: adc: mcp3422: fix locking on error path (bsc#1012628). - iio: adc: mcp3422: fix locking scope (bsc#1012628). - gcov: Disable gcov build with GCC 10 (bsc#1012628). - iommu/amd: Do not use IOMMUv2 functionality when SME is active (bsc#1012628). - iommu/amd: Do not force direct mapping when SME is active (bsc#1012628). - drm/amdgpu: Fix bug in reporting voltage for CIK (bsc#1012628). - drivers/net/wan/hdlc: Change the default of hard_header_len to 0 (bsc#1012628). - ALSA: hda: use consistent HDAudio spelling in comments/docs (bsc#1012628). - ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (bsc#1012628). - ALSA: hda: hdmi - add Rocketlake support (bsc#1012628). - arm64/module: set trampoline section flags regardless of CONFIG_DYNAMIC_FTRACE (bsc#1012628). - cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled (bsc#1012628). - cpufreq: intel_pstate: Refuse to turn off with HWP enabled (bsc#1012628). - ARC: [plat-hsdk]: Switch ethernet phy-mode to rgmii-id (bsc#1012628). - HID: elan: Fix memleak in elan_input_configured (bsc#1012628). - drivers/net/wan/hdlc_cisco: Add hard_header_len (bsc#1012628). - HID: microsoft: Add rumble support for the 8bitdo SN30 Pro+ controller (bsc#1012628). - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for all Saitek X52 devices (bsc#1012628). - nvme-pci: cancel nvme device request before disabling (bsc#1012628). - nvme-rdma: fix reset hang if controller died in the middle of a reset (bsc#1012628). - nvme-rdma: fix timeout handler (bsc#1012628). - nvme-rdma: serialize controller teardown sequences (bsc#1012628). - nvme-tcp: fix reset hang if controller died in the middle of a reset (bsc#1012628). - nvme-tcp: fix timeout handler (bsc#1012628). - nvme-tcp: serialize controller teardown sequences (bsc#1012628). - nvme: have nvme_wait_freeze_timeout return if it timed out (bsc#1012628). - nvme-fabrics: don't check state NVME_CTRL_NEW for request acceptance (bsc#1012628). - nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu (bsc#1012628). - media: gpio-ir-tx: spinlock is not needed to disable interrupts (bsc#1012628). - irqchip/eznps: Fix build error for !ARC700 builds (bsc#1012628). - ARC: show_regs: fix r12 printing and simplify (bsc#1012628). - xfs: initialize the shortform attr header padding entry (bsc#1012628). - cfg80211: Adjust 6 GHz frequency to channel conversion (bsc#1012628). - mac80211: reduce packet loss event false positives (bsc#1012628). - wireless: fix wrong 160/80+80 MHz setting (bsc#1012628). - drivers/net/wan/lapbether: Set network_header before transmitting (bsc#1012628). - xfs: fix off-by-one in inode alloc block reservation calculation (bsc#1012628). - net: hns3: Fix for geneve tx checksum bug (bsc#1012628). - drivers/dma/dma-jz4780: Fix race condition between probe and irq handler (bsc#1012628). - ALSA: hda/tegra: Program WAKEEN register for Tegra (bsc#1012628). - ALSA: hda: Fix 2 channel swapping for Tegra (bsc#1012628). - scsi: qedf: Fix null ptr reference in qedf_stag_change_work (bsc#1012628). - firestream: Fix memleak in fs_open (bsc#1012628). - NFC: st95hf: Fix memleak in st95hf_in_send_cmd (bsc#1012628). - drivers/net/wan/lapbether: Added needed_tailroom (bsc#1012628). - netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match (bsc#1012628). - netfilter: conntrack: allow sctp hearbeat after connection re-use (bsc#1012628). - MIPS: Loongson64: Do not override watch and ejtag feature (bsc#1012628). - dmaengine: acpi: Put the CSRT table after using it (bsc#1012628). - ARC: HSDK: wireup perf irq (bsc#1012628). - KVM: x86: always allow writing '0' to MSR_KVM_ASYNC_PF_EN (bsc#1012628). - KVM: nVMX: Fix the update value of nested load IA32_PERF_GLOBAL_CTRL control (bsc#1012628). - arm64: dts: ns2: Fixed QSPI compatible string (bsc#1012628). - ARM: dts: BCM5301X: Fixed QSPI compatible string (bsc#1012628). - ARM: dts: NSP: Fixed QSPI compatible string (bsc#1012628). - ARM: dts: bcm: HR2: Fixed QSPI compatible string (bsc#1012628). - IB/isert: Fix unaligned immediate-data handling (bsc#1012628). - RDMA/rtrs-srv: Set .release function for rtrs srv device during device init (bsc#1012628). - block: Set same_page to false in __bio_try_merge_page if ret is false (bsc#1012628). - spi: stm32: fix pm_runtime_get_sync() error checking (bsc#1012628). - nvme-fabrics: allow to queue requests for live queues (bsc#1012628). - seccomp: don't leak memory when filter install races (bsc#1012628). - block: restore a specific error code in bdev_del_partition (bsc#1012628). - i2c: npcm7xx: Fix timeout calculation (bsc#1012628). - btrfs: fix NULL pointer dereference after failure to create snapshot (bsc#1012628). - spi: stm32: Rate-limit the 'Communication suspended' message (bsc#1012628). - mmc: sdhci-msm: Add retries when all tuning phases are found valid (bsc#1012628). - mmc: sdhci-acpi: Clear amd_sdhci_host on reset (bsc#1012628). - ARM: dts: imx6sx: fix the pad QSPI1B_SCLK mux mode for uart3 (bsc#1012628). - KVM: arm64: Update page shift if stage 2 block mapping not supported (bsc#1012628). - drm/sun4i: backend: Disable alpha on the lowest plane on the A20 (bsc#1012628). - drm/sun4i: backend: Support alpha property on lowest plane (bsc#1012628). - drm/sun4i: Fix DE2 YVU handling (bsc#1012628). - padata: fix possible padata_works_lock deadlock (bsc#1012628). - interconnect: qcom: Fix small BW votes being truncated to zero (bsc#1012628). - Revert "kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled" (bsc#1012628). - soundwire: fix double free of dangling pointer (bsc#1012628). - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler (bsc#1012628). - scsi: megaraid_sas: Don't call disable_irq from process IRQ poll (bsc#1012628). - RDMA/core: Fix reported speed and width (bsc#1012628). - RDMA/core: Fix unsafe linked list traversal after failing to allocate CQ (bsc#1012628). - drm/virtio: fix unblank (bsc#1012628). - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA (bsc#1012628). - scsi: qla2xxx: Fix regression on sparc64 (bsc#1012628). - drm/sun4i: Fix dsi dcs long write function (bsc#1012628). - arm64: dts: imx8mq: Fix TMU interrupt property (bsc#1012628). - drm/sun4i: add missing put_device() call in sun8i_r40_tcon_tv_set_mux() (bsc#1012628). - RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (bsc#1012628). - RDMA/bnxt_re: Fix driver crash on unaligned PSN entry address (bsc#1012628). - RDMA/bnxt_re: Static NQ depth allocation (bsc#1012628). - RDMA/bnxt_re: Fix the qp table indexing (bsc#1012628). - RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1012628). - RDMA/rxe: Fix panic when calling kmem_cache_create() (bsc#1012628). - RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1012628). - RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1012628). - RDMA/rtrs-srv: Replace device_register with device_initialize and device_add (bsc#1012628). - ARM: dts: imx7d-zii-rmu2: fix rgmii phy-mode for ksz9031 phy (bsc#1012628). - arm64: dts: imx: Add missing imx8mm-beacon-kit.dtb to build (bsc#1012628). - ARM: dts: imx7ulp: Correct gpio ranges (bsc#1012628). - ARM: dts: ls1021a: fix QuadSPI-memory reg range (bsc#1012628). - selftests/timers: Turn off timeout setting (bsc#1012628). - ARM: dts: omap5: Fix DSI base address and clocks (bsc#1012628). - ARM: dts: socfpga: fix register entry for timer3 on Arria10 (bsc#1012628). - regulator: remove superfluous lock in regulator_resolve_coupling() (bsc#1012628). - regulator: push allocation in regulator_ena_gpio_request() out of lock (bsc#1012628). - ARM: dts: logicpd-som-lv-baseboard: Fix missing video (bsc#1012628). - ARM: dts: logicpd-som-lv-baseboard: Fix broken audio (bsc#1012628). - ARM: dts: logicpd-torpedo-baseboard: Fix broken audio (bsc#1012628). - ARM: OMAP2+: Fix an IS_ERR() vs NULL check in _get_pwrdm() (bsc#1012628). - commit 83e873a - Linux 5.8.9 (bsc#1012628). - mptcp: free acked data before waiting for more memory (bsc#1012628). - net: disable netpoll on fresh napis (bsc#1012628). - tipc: fix using smp_processor_id() in preemptible (bsc#1012628). - tipc: fix shutdown() of connectionless socket (bsc#1012628). - taprio: Fix using wrong queues in gate mask (bsc#1012628). - sctp: not disable bh in the whole sctp_get_port_local() (bsc#1012628). - net: usb: dm9601: Add USB ID of Keenetic Plus DSL (bsc#1012628). - netlabel: fix problems with mapping removal (bsc#1012628). - ipv6: Fix sysctl max for fib_multipath_hash_policy (bsc#1012628). - ipv4: Silence suspicious RCU usage warning (bsc#1012628). - RDMA/cma: Execute rdma_cm destruction from a handler properly (bsc#1012628). - RDMA/cma: Remove unneeded locking for req paths (bsc#1012628). - RDMA/cma: Using the standard locking pattern when delivering the removal event (bsc#1012628). - RDMA/cma: Simplify DEVICE_REMOVAL for internal_id (bsc#1012628). - io_uring: fix linked deferred ->files cancellation (bsc#1012628). - io_uring: fix cancel of deferred reqs with ->files (bsc#1012628). - commit 52f63c2 - Linux 5.8.8 (bsc#1012628). - hwmon: (pmbus/isl68137) remove READ_TEMPERATURE_1 telemetry for RAA228228 (bsc#1012628). - HID: quirks: Always poll three more Lenovo PixArt mice (bsc#1012628). - drm/msm/dpu: Fix reservation failures in modeset (bsc#1012628). - drm/msm/dpu: Fix scale params in plane validation (bsc#1012628). - drm/msm/dpu: fix unitialized variable error (bsc#1012628). - tty: serial: qcom_geni_serial: Drop __init from qcom_geni_console_setup (bsc#1012628). - drm/msm: add shutdown support for display platform_driver (bsc#1012628). - hwmon: (applesmc) check status earlier (bsc#1012628). - nvmet: Disable keep-alive timer when kato is cleared to 0h (bsc#1012628). - drm/msm: enable vblank during atomic commits (bsc#1012628). - habanalabs: unmap PCI bars upon iATU failure (bsc#1012628). - habanalabs: validate packet id during CB parse (bsc#1012628). - habanalabs: set clock gating according to mask (bsc#1012628). - habanalabs: proper handling of alloc size in coresight (bsc#1012628). - habanalabs: set max power according to card type (bsc#1012628). - habanalabs: validate FW file size (bsc#1012628). - habanalabs: check correct vmalloc return code (bsc#1012628). - drm/msm/a6xx: fix gmu start on newer firmware (bsc#1012628). - gfs2: add some much needed cleanup for log flushes that fail (bsc#1012628). - hv_utils: return error if host timesysnc update is stale (bsc#1012628). - hv_utils: drain the timesync packets on onchannelcallback (bsc#1012628). - ceph: don't allow setlease on cephfs (bsc#1012628). - i2c: iproc: Fix shifting 31 bits (bsc#1012628). - drm/omap: fix incorrect lock state (bsc#1012628). - irqchip/ingenic: Leave parent IRQ unmasked on suspend (bsc#1012628). - cpuidle: Fixup IRQ state (bsc#1012628). - nbd: restore default timeout when setting it to zero (bsc#1012628). - s390: don't trace preemption in percpu macros (bsc#1012628). - drm/amd/display: should check error using DC_OK (bsc#1012628). - drm/amd/display: Reject overlay plane configurations in multi-display scenarios (bsc#1012628). - drivers: gpu: amd: Initialize amdgpu_dm_backlight_caps object to 0 in amdgpu_dm_update_backlight_caps (bsc#1012628). - drm/amd/display: Revert HDCP disable sequence change (bsc#1012628). - drm/amd/display: Fix passive dongle mistaken as active dongle in EDID emulation (bsc#1012628). - drm/amd/display: Keep current gain when ABM disable immediately (bsc#1012628). - drm/amd/display: Retry AUX write when fail occurs (bsc#1012628). - drm/amd/display: Fix memleak in amdgpu_dm_mode_config_init (bsc#1012628). - xen/xenbus: Fix granting of vmalloc'd memory (bsc#1012628). - fsldma: fix very broken 32-bit ppc ioread64 functionality (bsc#1012628). - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (bsc#1012628). - batman-adv: Avoid uninitialized chaddr when handling DHCP (bsc#1012628). - batman-adv: Fix own OGM check in aggregated OGMs (bsc#1012628). - batman-adv: bla: use netif_rx_ni when not in interrupt context (bsc#1012628). - dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (bsc#1012628). - dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (bsc#1012628). - dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (bsc#1012628). - rxrpc: Keep the ACK serial in a var in rxrpc_input_ack() (bsc#1012628). - rxrpc: Fix loss of RTT samples due to interposed ACK (bsc#1012628). - rxrpc: Make rxrpc_kernel_get_srtt() indicate validity (bsc#1012628). - MIPS: mm: BMIPS5000 has inclusive physical caches (bsc#1012628). - MIPS: BMIPS: Also call bmips_cpu_setup() for secondary cores (bsc#1012628). - mmc: sdhci-acpi: Fix HS400 tuning for AMDI0040 (bsc#1012628). - perf sched timehist: Fix use of CPU list with summary option (bsc#1012628). - perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set (bsc#1012628). - netfilter: nf_tables: add NFTA_SET_USERDATA if not null (bsc#1012628). - netfilter: nf_tables: incorrect enum nft_list_attributes definition (bsc#1012628). - netfilter: nf_tables: fix destination register zeroing (bsc#1012628). - net: hns: Fix memleak in hns_nic_dev_probe (bsc#1012628). - net: systemport: Fix memleak in bcm_sysport_probe (bsc#1012628). - ravb: Fixed to be able to unload modules (bsc#1012628). - net: arc_emac: Fix memleak in arc_mdio_probe (bsc#1012628). - bpf: Fix a buffer out-of-bound access when filling raw_tp link_info (bsc#1012628). - dmaengine: pl330: Fix burst length if burst size is smaller than bus width (bsc#1012628). - dmaengine: ti: k3-udma: Fix the TR initialization for prep_slave_sg (bsc#1012628). - gtp: add GTPA_LINK info to msg sent to userspace (bsc#1012628). - net: ethernet: ti: cpsw: fix clean up of vlan mc entries for host port (bsc#1012628). - net: ethernet: ti: cpsw_new: fix clean up of vlan mc entries for host port (bsc#1012628). - bnxt_en: Don't query FW when netif_running() is false (bsc#1012628). - bnxt_en: Check for zero dir entries in NVRAM (bsc#1012628). - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled (bsc#1012628). - bnxt_en: Fix PCI AER error recovery flow (bsc#1012628). - bnxt_en: Fix possible crash in bnxt_fw_reset_task() (bsc#1012628). - bnxt_en: fix HWRM error when querying VF temperature (bsc#1012628). - xfs: finish dfops on every insert range shift iteration (bsc#1012628). - xfs: fix boundary test in xfs_attr_shortform_verify (bsc#1012628). - bnxt: don't enable NAPI until rings are ready (bsc#1012628). - media: vicodec: add missing v4l2_ctrl_request_hdl_put() (bsc#1012628). - media: cedrus: Add missing v4l2_ctrl_request_hdl_put() (bsc#1012628). - net: ethernet: ti: cpsw_new: fix error handling in cpsw_ndo_vlan_rx_kill_vid() (bsc#1012628). - media: i2c: imx214: select V4L2_FWNODE (bsc#1012628). - selftests/bpf: Fix massive output from test_maps (bsc#1012628). - net: dsa: mt7530: fix advertising unsupported 1000baseT_Half (bsc#1012628). - netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS (bsc#1012628). - nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()' (bsc#1012628). - nvme: fix controller instance leak (bsc#1012628). - netfilter: conntrack: do not auto-delete clash entries on reply (bsc#1012628). - opp: Don't drop reference for an OPP table that was never parsed (bsc#1012628). - cxgb4: fix thermal zone device registration (bsc#1012628). - net: ethernet: ti: am65-cpsw: fix rmii 100Mbit link mode (bsc#1012628). - MIPS: perf: Fix wrong check condition of Loongson event IDs (bsc#1012628). - block: fix locking in bdev_del_partition (bsc#1012628). - perf top/report: Fix infinite loop in the TUI for grouped events (bsc#1012628). - perf cs-etm: Fix corrupt data after perf inject from (bsc#1012628). - perf intel-pt: Fix corrupt data after perf inject from (bsc#1012628). - perf tools: Correct SNOOPX field offset (bsc#1012628). - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (bsc#1012628). - fix regression in "epoll: Keep a reference on files added to the check list" (bsc#1012628). - net: bcmgenet: fix mask check in bcmgenet_validate_flow() (bsc#1012628). - net: gemini: Fix another missing clk_disable_unprepare() in probe (bsc#1012628). - nfp: flower: fix ABI mismatch between driver and firmware (bsc#1012628). - net: dp83867: Fix WoL SecureOn password (bsc#1012628). - MIPS: add missing MSACSR and upper MSA initialization (bsc#1012628). - MIPS: SNI: Fix SCSI interrupt (bsc#1012628). - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files (bsc#1012628). - perf jevents: Fix suspicious code in fixregex() (bsc#1012628). - perf stat: Turn off summary for interval mode by default (bsc#1012628). - perf bench: The do_run_multi_threaded() function must use IS_ERR(perf_session__new()) (bsc#1012628). - tg3: Fix soft lockup when tg3_reset_task() fails (bsc#1012628). - x86, fakenuma: Fix invalid starting node ID (bsc#1012628). - iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1012628). - thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (bsc#1012628). - thermal: qcom-spmi-temp-alarm: Don't suppress negative temp (bsc#1012628). - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1012628). - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1012628). - include/linux/log2.h: add missing () around n in roundup_pow_of_two() (bsc#1012628). - iommu/vt-d: Handle 36bit addressing for x86-32 (bsc#1012628). - tracing/kprobes, x86/ptrace: Fix regs argument order for i386 (bsc#1012628). - x86/entry: Fix AC assertion (bsc#1012628). - x86/debug: Allow a single level of #DB recursion (bsc#1012628). - ext2: don't update mtime on COW faults (bsc#1012628). - xfs: don't update mtime on COW faults (bsc#1012628). - ARC: perf: don't bail setup if pct irq missing in device-tree (bsc#1012628). - arc: fix memory initialization for systems with two memory banks (bsc#1012628). - btrfs: drop path before adding new uuid tree entry (bsc#1012628). - btrfs: fix potential deadlock in the search ioctl (bsc#1012628). - btrfs: allocate scrub workqueues outside of locks (bsc#1012628). - btrfs: set the correct lockdep class for new nodes (bsc#1012628). - btrfs: set the lockdep class for log tree extent buffers (bsc#1012628). - btrfs: block-group: fix free-space bitmap threshold (bsc#1012628). - btrfs: tree-checker: fix the error message for transid error (bsc#1012628). - Bluetooth: Return NOTIFY_DONE for hci_suspend_notifier (bsc#1012628). - x86/mm/32: Bring back vmalloc faulting on x86_32 (bsc#1012628). - ALSA: ca0106: fix error code handling (bsc#1012628). - ALSA: usb-audio: Add basic capture support for Pioneer DJ DJM-250MK2 (bsc#1012628). - ALSA: usb-audio: Add implicit feedback quirk for UR22C (bsc#1012628). - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (bsc#1012628). - ALSA: hda/hdmi: always check pin power status in i915 pin fixup (bsc#1012628). - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (bsc#1012628). - ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (bsc#1012628). - ALSA; firewire-tascam: exclude Tascam FE-8 from detection (bsc#1012628). - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (bsc#1012628). - ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (bsc#1012628). - arm64: dts: mt7622: add reset node for mmc device (bsc#1012628). - mmc: mediatek: add optional module reset property (bsc#1012628). - mmc: dt-bindings: Add resets/reset-names for Mediatek MMC bindings (bsc#1012628). - mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (bsc#1012628). - media: rc: do not access device via sysfs after rc_unregister_device() (bsc#1012628). - media: rc: uevent sysfs file races with rc_unregister_device() (bsc#1012628). - affs: fix basic permission bits to actually work (bsc#1012628). - block: allow for_each_bvec to support zero len bvec (bsc#1012628). - block: ensure bdi->io_pages is always initialized (bsc#1012628). - io_uring: set table->files[i] to NULL when io_sqe_file_register failed (bsc#1012628). - io_uring: fix removing the wrong file in __io_sqe_files_update() (bsc#1012628). - s390: fix GENERIC_LOCKBREAK dependency typo in Kconfig (bsc#1012628). - libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks (bsc#1012628). - mips/oprofile: Fix fallthrough placement (bsc#1012628). - blk-iocost: ioc_pd_free() shouldn't assume irq disabled (bsc#1012628). - blk-stat: make q->stats->lock irqsafe (bsc#1012628). - dmaengine: dw-edma: Fix scatter-gather address calculation (bsc#1012628). - drm/i915: Fix sha_text population code (bsc#1012628). - drm/amd/pm: avoid false alarm due to confusing softwareshutdowntemp setting (bsc#1012628). - drm/amdgpu: Specify get_argument function for ci_smu_funcs (bsc#1012628). - dm writecache: handle DAX to partitions on persistent memory correctly (bsc#1012628). - dm mpath: fix racey management of PG initialization (bsc#1012628). - dm integrity: fix error reporting in bitmap mode after creation (bsc#1012628). - dm crypt: Initialize crypto wait structures (bsc#1012628). - dm cache metadata: Avoid returning cmd->bm wild pointer on error (bsc#1012628). - dm thin metadata: Avoid returning cmd->bm wild pointer on error (bsc#1012628). - dm thin metadata: Fix use-after-free in dm_bm_set_read_only (bsc#1012628). - mm: slub: fix conversion of freelist_corrupted() (bsc#1012628). - mm: track page table modifications in __apply_to_page_range() (bsc#1012628). - mm: madvise: fix vma user-after-free (bsc#1012628). - mm/rmap: fixup copying of soft dirty and uffd ptes (bsc#1012628). - io_uring: no read/write-retry on -EAGAIN error and O_NONBLOCK marked file (bsc#1012628). - perf record: Correct the help info of option "--no-bpf-event" (bsc#1012628). - kconfig: streamline_config.pl: check defined(ENV variable) before using it (bsc#1012628). - sdhci: tegra: Add missing TMCLK for data timeout (bsc#1012628). - checkpatch: fix the usage of capture group ( ... ) (bsc#1012628). - mm/migrate: fixup setting UFFD_WP flag (bsc#1012628). - mm/hugetlb: try preferred node first when alloc gigantic page from cma (bsc#1012628). - mm/hugetlb: fix a race between hugetlb sysctl handlers (bsc#1012628). - mm/khugepaged.c: fix khugepaged's request size in collapse_file (bsc#1012628). - cfg80211: regulatory: reject invalid hints (bsc#1012628). - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr() (bsc#1012628). - commit 8b2a0ec - rpm/kernel-source.spec.in: Also use bz compression (boo#1175882). - commit 375ec84 - rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618). - commit 971fc3d - coresight: fix offset by one error in counting ports (bsc#1175054). - commit 038472f - Update config files: enable a few missing Intel SOF and SST ASoC entries (bsc#1176200) - commit 87f4d0a ==== kio-extras5 ==== Subpackages: libkioarchive5 - Remove obsolete build dependencies: openslp, KDELibs4Support, KHtml, exiv2 ==== ldb ==== Version update (2.1.4 -> 2.2.0) Subpackages: libldb2 python3-ldb - Release ldb 2.2.0 + Fix memory leak in ldb_kv_index_dn_ordered(); (bso#14299) + Fix off-by-one increment in lldb_add_msg_attr; (bso#14413) ==== libdbusmenu-qt5 ==== Version update (0.9.3+15.10.20150604 -> 0.9.3+16.04.20160218) - Rework patch trusting the compiler will remove dead code properly when debug output is disabled (as it is in the spec file): * noqDebug-qWarnings.patch - Update to 0.9.3+16.04.20160218: * Ported tests to Qt5 - Use a Source url that works ==== libfido2 ==== Version update (1.4.0 -> 1.5.0) Subpackages: libfido2-1 libfido2-udev - Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream to fix 32bit compilation issues. - Update to version 1.5.0 * hid_linux: return FIDO_OK if no devices are found. * hid_osx: + repair communication with U2F tokens, gh#166; + reliability fixes. * fido2-{assert,cred}: new options to explicitly toggle UP, UV. * Support for configurable report lengths. * New API calls: + fido_cbor_info_maxcredcntlst + fido_cbor_info_maxcredidlen + fido_cred_aaguid_len + fido_cred_aaguid_ptr + fido_dev_get_touch_begin + fido_dev_get_touch_status * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154. * Allow CTAP messages up to 2048 bytes; gh#171. * Ensure we only list USB devices by default. ==== libiptcdata ==== Version update (1.0.4 -> 1.0.5) Subpackages: libiptcdata0 - update to 1.0.5: * Omnibus python3 update * Modernize autoconf/automake init * Update to latest gtk-doc * Fix python3 module init ==== libproxy ==== - Build with KDE on Tumbleweed, Leap and SLE releases greater than SLE-15-SP2 (jsc#SLE-12256). ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 - Revert commit to fix screen geometry on startup (boo#1176750, QTBUG-86604): * 0001-Revert-Emit-QScreen-availableG-g-eometryChanged-on-l.patch ==== libsolv ==== Version update (0.7.14 -> 0.7.15) - fix deduceq2addedmap clearing bits outside of the map - conda: feature depriorization first - conda: fix startswith implementation - move find_update_seeds() call in cleandeps calculation - set SOLVABLE_BUILDHOST in rpm and rpmmd parsers - new testcase_mangle_repo_names() function - new solv_fmemopen() function - bump version to 0.7.15 - Enable zstd compression support for sle15 - Enable zstd compression support for sle15-sp2 ==== libssh ==== Version update (0.9.4 -> 0.9.5) Subpackages: libssh-config libssh4 - Add missing BR for openssh needed for tests - update to 0.9.5 (bsc#1174713, CVE-2020-16135): * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232) * Improve handling of library initialization (T222) * Fix parsing of subsecond times in SFTP (T219) * Make the documentation reproducible * Remove deprecated API usage in OpenSSL * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN * Define version in one place (T226) * Prevent invalid free when using different C runtimes than OpenSSL (T229) * Compatibility improvements to testsuite ==== libyui-qt ==== Version update (2.54.0 -> 2.55.0) - Hide heading of the dialog when no title is defined. - Related to bsc#1175489. - 2.55.0 ==== libzypp ==== Version update (17.24.2 -> 17.25.0) - RepoInfo: Return the type of the local metadata cache as fallback (bsc#1176435) - VendorAttr: Fix broken "suse,opensuse" equivalence handling. Enhance API and testcases. (bsc#1174918) - Update docs regarding 'opensuse' namepace matching. - New solver testcase format. - Link against libzsd to close libsolvs open references (as we link statically) - BuildRequires: libsolv-devel >= 0.7.15. - version 17.25.0 (22) ==== multipath-tools ==== Version update (0.8.4+183+suse.1817ce2 -> 0.8.4+192+suse.1bc10ad) Subpackages: kpartx libmpath0 - Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670) - Added README.alua - Update to version 0.8.4+192+suse.1bc10ad: * Fix handling of hardware properties for maps without paths (bsc#1176644) - Update to version 0.8.4+190+suse.fe234ea: * Fixes for daemon shutdown issues from SLE(bsc#1110060, bsc#1110439) - multipathd: allow shutdown during configure() * fix compilation of external programs with -lmultipath (bsc#1133957, necessary after the above fix) * Minor upstream fixes ==== musepack ==== - Add libmpcdec-fastmath-no-const.patch: remove const declarations from some arrays which should not have them (boo#1176374). ==== noto-coloremoji-fonts ==== Version update (20200722 -> 20200916) - Update to v2020-09-16-unicode13_1 * Unicode 13.1 update ==== openSUSE-build-key ==== - the container keys for openSUSE and SUSE Linux Enterprise are actually not the build keys. (bsc#1176818) - build(a)suse.de key for SLE12 was extended. (bsc#1176759) ==== pango ==== Version update (1.46.1 -> 1.46.2) Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0 - Update to version 1.46.2: + Fix pango_win32_font_map_load_font with falback families. + Fix an assertion in pango_language_get_scripts. + Fix a crash in get_items_log_attrs. + Fix attribute iterators with overlapping attributes. + Fix rendering of Emoji keycap sequences. + ci: Run the testsuite under asan and fix all reported issues. + build: Make libthai, cairo, xft, fontconfig, freetype dependencies meson features. ==== perl ==== Version update (5.30.1 -> 5.30.3) Subpackages: perl-base - update to 5.30.3 (bsc#1171863, bsc#1171864, bsc#1171866): * https://perldoc.perl.org/5.30.3/perl5302delta.html * https://perldoc.perl.org/5.30.3/perldelta.html * fixes [CVE-2020-10543] buffer overflow caused by a crafted regular expression * fixes [CVE-2020-10878] integer overflow via malformed bytecode produced by a crafted regular expression * fixes [CVE-2020-12723] buffer overflow caused by a crafted regular expression - dropped patches: * perl-Adapt-Configure-to-GCC-version-10.patch ==== perl-libwww-perl ==== Version update (6.47 -> 6.49) - updated to 6.49 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.49 2020-09-24 00:27:56Z - Require network testing enabled for t/redirect.t (GH#351) (Olaf Alders) - updated to 6.48 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.48 2020-09-20 15:25:51Z - Support 308 Permanent Redirect (GH#349) (Galen Huntington) ==== pipewire ==== Version update (0.3.10 -> 0.3.11) Subpackages: libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.11: * PipeWire improvements + Properly cleanup the mixer structures when a port is removed, this should fix client crashes related to port config changes and other random crashes. + Optimize the preferred formats in the audio converter. Higher quality formats with higher performance are chosen first. + Make sure the time reported by pw_stream is always increasing, even when the driver and clock changes. + There is now also a system service and socket that can be used to enable PipeWire systemwide. This is however not recommended and disabled by default. + Fix channelmixer 5.1 to stereo mix matrix. It was not reading the conversion matrix correctly and cause channels to be dropped. The channelmixer will now also normalize the volume, like what pulseaudio does. + The channelmixer will now just copy channels when no layout has been given. It has also optimized paths for this. This makes it possible for apps to request > 8 channels from the alsa plugin (ardour). + Port, Node and Link will now also emit an error on the resources in addition to updating the error in the info. This would make it easier to track negotiation errors in the session manager later. + many small fixes and cleanups. + Fix compatibility: - DOSBox: fix crash because of double free in pw_stream * Session manager improvements + The session manager will now try to configure the client to the channel configuration of the sink/source. It will only do this for downmixing, never for upmixing and also never when the client has the dont-remix property set. It will also renegotiate the channel layout when moving a stream to a new sink/source. + Configuration state is now saved in XDG_CONFIG_HOME. Previously it was saved in $HOME/.pipewire-media-session/ You can migrate the state by moving the files to $XDG_CONFIG_HOME/pipewire-media-session (or $HOME/.config/pipewire-media-session as a fallback when XDG_CONFIG_HOME is not set). * Device support + Bluetooth sources and sinks should work better now. + There is now also a new bluetooth backend using hsphfpd. + fix the ALSA UCM Off profile for alsa pcm devices + improve ALSA port and profile switching. The ACP device will now switch to the best port and profile when availability changes. * PulseAudio layer improvements + Implement some more callbacks. The pulse layer will now also notify applications of stream moved, started and latency changes. + Fix error code when an object was not found. We now return PA_ERR_NOENTITY instead of PA_ERR_INVALID. + Add some support for loading new null sinks. Applications such as pulseeffects use this. Note that pulseeffects does not yet work reliably but can start now. + Improve handling of profile and port updates, it should work much more reliable now. Apps should now also again receive volume updates from sinks/sources. + Fix compatibility: - openal-soft 1.20 - pavucontrol (checks PA_ERR_NOENTITY) * JACK layer improvements + improve default source and sink handling. It was not updated correctly in all cases. + add samplerate and period to the pw-jack wrapper to easily configure the desired samplerate and perdiod for the app. * ALSA plugin improvements + Add a mixer entry in the alsa config file. + Implement support for planar types, rework the processing function to make it more robust. + refuse to load the alsa plugin when linked against 0.2. This catches some old apps linked against 0.2 that want to use the alsa plugin. + Fix compatibility: - linphone (ALSA SIGFPE when _status() is called before _prepare()). - Add patch from upstream to fix audio stutters in discord and probably other applications when using alsa directly. * 0001-alsa-dont-change-the-resampler-delay-value.patch ==== qrencode ==== Version update (4.0.2 -> 4.1.0) - update to 4.1.0: * Command line tool "qrencode" has been improved: * New option "--inline" has been added. (Thanks to @jp-bennett) * New option "--strict-version" has been added. * UTF8 mode now supports ANSI256 color. (Thanks to András Veres- Szentkirályi) * Micro QR Code no longer requires to specify the version number. * 'make check' allows to run the test programs. (Thanks to Jan Tojnar) * Some compile time warnings have been fixed. * Various CMake support improvements. (Thanks to @mgorny and @sdf5) * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang) * Some documentation/manpage improvements. (Thanks to Dan Jacobson) * Some performance improvements. (Thanks to @4061N and Mika Lindqvist) - remove qrencode-fix-installation.patch (upstream) ==== samba ==== Version update (4.12.5+git.168.88cc07e6cbf -> 4.13.0+git.138.ff2d5480c67) Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr1 libnetapi0 libsamba-credentials0 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-libs samba-libs-python3 - Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428) - Update to samba 4.12.7 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.12.6 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403). + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424). + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450). + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426). + PANIC: Assert failed in get_lease_type(); (bso#14428). + util: Fix build on AIX by fixing the order of replace.h include; (bso#14422). + srvsvc_NetFileEnum asserts with open files; (bso#14355). + KDC breaks with DES keys still in the database and msDS-SupportedEncryptionTypes 31 indicating support for it; (bso#14354). + s3:smbd: Make sure vfs_ChDir() always sets conn->cwd_fsp->fh->fd = AT_FDCWD; (bso#14427). + PANIC: Assert failed in get_lease_type(); (bso#14428). + docs: Fix documentation for require_membership_of of pam_winbind.conf; (bso#14358). + ctdb-scripts: Use nfsconf utility for variable values in CTDB NFS scripts; (bso#14444). + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425). ==== shadow ==== - login.defs: Add support for new util-linux-2.36 login variable MOTD_FIRSTONLY (shadow-util-linux.patch). - shadow-login_defs-comments.patch: Remove duplicated LASTLOG_UID_MAX. - shadow-login_defs-check.sh: Update for new build system. - shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is not used in SUSE Linux. - Refresh shadow-login_defs-suse.patch and shadow-login_defs-comments.patch. ==== snapper ==== Version update (0.8.13 -> 0.8.14) Subpackages: libsnapper5 - added option to cleanup to make requested free space available (jsc#SLE-15765) - version 0.8.14 ==== sysconfig ==== Version update (0.85.5 -> 0.85.6) Subpackages: sysconfig-netconfig - version 0.85.6 - netconfig: execute chrony/helper in /usr/libexec with fallback to it's previous location in /usr/lib (boo#1176285) - netconfig: only write files like /etc/resolv.conf on content change to avoid that e.g. dnsmasq (if running) re-reads the /etc/resolv.conf and re-initializes itself (bsc#1176325) ==== systemd ==== Version update (245.7 -> 246.4) Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Drop 0001-udev-temporarly-restore-the-creation-a-few-symlinks-.patch linuxrc has already been fixed. - Add 0001-udev-temporarly-restore-the-creation-a-few-symlinks-.patch A temporary patch until the installer environment is updated to create some of the symlinks that udevd used to create during its startup but now udevd relies on the init system to do so. - Rework how we prevent journald from both enabling auditd and recording audit messages journald.conf gained a new setting Audit= to control whether journald enables audit during the boot process. So let's use it and make sure it's disabled by default by shipping a drop-in that overrides upstream default. Also we used to patch systemd to prevent journald from reading the audit messages. There's still no way for downstream to configure that properly (we would need to mask systemd-journald-audit.socket meaning shipping a symlink in /etc) but I think dropping systemd-journald-audit.socket from the package is a nicer way to do that as some users might choose to reenable this setting (by reintroducing the socket unit in /etc). - Enable audit support (bsc#1175883) Enabling audit support in systemd will only make PID1 (and some of its services) to generate some audit records for certain events. But it doesn't affect journald, which has been prevented from recording audit messages in the journal (SUSE specific behavior). - Upgrade to v246.4 (commit f1344d5b7f31e98aedb01e606f41d74d3caaf446) See https://github.com/openSUSE/systemd/blob/SUSE/v246/NEWS for details. Now that the number of SUSE specific patches has been shrinked and is pretty low (12 at the time of this writing), they are no more tracked by the git repo and are now handled at the package level. Hence It is easier to maintain and identify them. This effectively means that SUSE/v246 will contain upstream commits only. Added 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch Added 0002-rc-local-fix-ordering-startup-for-etc-init.d-boot.lo.patch Added 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch Added 0004-tmpfiles-support-exclude-statements-based-on-file-ow.patch Added 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch Added 0006-sysv-generator-add-back-support-for-SysV-scripts-for.patch Added 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch Added 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch Added 0009-pid1-handle-console-specificities-weirdness-for-s390.patch Added 0010-journald-disable-audit-support-completely-from-the-j.patch Added 0011-core-disable-session-keyring-per-system-sevice-entir.patch Added 0012-resolved-create-etc-resolv.conf-symlink-at-runtime.patch ==== timezone ==== - Fixup tzdata-china.diff: zone.tab and zone1970.tab MUST be tab delimited (boo#1176927). - modify tzdata-china.diff * systemd now reads zone1970.tab * link Asia/Shanghai to Asia/Beijing is enough and more precise ==== tracker2 ==== Version update (2.3.5 -> 2.3.6) Subpackages: libtracker-common-2_0 libtracker-control-2_0-0 libtracker-miner-2_0-0 libtracker-sparql-2_0-0 - Update to version 2.3.6: + Do not autostart tracker-store. + Updated translations. - Rename to tracker2: compatibility package while the world moves to Tracker 3. - Provide/Obsolete tracker and tracker-lang from the main package, and tracker-devel from tracker2-devel. ==== transactional-update ==== Version update (2.24.1 -> 2.26) Subpackages: transactional-update-zypp-config - Version 2.26 - Fix broken sync for second snapshot [boo#1176989] - Add new options to allow separate cleanup of snapshots and overlays - Check for existence of inotifywait before using it - Check that mount options don't exceed maximum length - Version 2.25.1 - Fix inotify watcher setup - Use log_{info,error} for more messages to avoid messing up Salt logs - Version 2.25 - Reduce number of overlays: Instead of using transparent overlays for all previous layers only add the previous snapshot's overlay; this will greatly reduce the number of overlays while still making sure that /etc changes in the running system will be visible in the next snapshot - When using --drop-if-no-change synchronize potential /etc changes with running system - Exclude all non-root-fs mounts from inotify watcher ==== vim ==== Version update (8.2.1551 -> 8.2.1719) Subpackages: vim-data-common vim-small - Updated to version 8.2.1719, fixes the following problems * Vim9: error for argument type does not mention the number. * Warnings from asan with clang-11. (James McCoy) * Crash in edit test. * Crash in normal test. * Not all tests are executed on Github Actions. * Cursorline highlighting always overrules sign highlighting. * Crash in :vimgrep when started as "vim -n". (Raul Segura) * Signs test fails. * s390x tests work again. * Using NULL pointers in some code. (James McCoy) * Using NULL pointers in fold code. * Vim9: error when using "%" where a buffer is expected. * Vim9: error when using '%" with setbufvar() or getbufvar(). * A few remaining errors from ubsan. * Spellfile test sometimes fails. * Not all Bazel files are recognized. * No example to use ubsan with clang. * prop_find() skips properties in the same line if "skipstart" is used. * Vim9: fixes for functions not tested; failure in getchangelist(). * Configure check for dirfd() does not work on HPUX. (Michael Osipov) * Vim9: count() third argument cannot be "true". * Vim9: expand() does not take "true" as argument. * Vim9: getreg() does not take "true" as argument. * Vim9: glob() doesnot take "true" as argument. * Vim9: globpath() doesnot take "true" as argument. * Vim9: index() does not take "true" as argument. * Vim9: hasmapto(), mapcheck() and maparg() do not take "true" as argument. * Vim9: popup_clear() does not take "true" as argument. * Reports from asan are not optimal. * Wildmenu does not work properly. * Using line() for global popup window doesn't work. * The channel log does not show typed text. * Vim9: cannot use "true" for "skipstart" in prop_find(). * Messages in globals.h not translated, xgettext on MS-Windows not fully supported. * :resize command not fully tested. * Loop for handling keys for the command line is too long. * Cannot read back the prompt of a prompt buffer. * Term_start() options for size are overruled by 'termwinsize'. (Sergey Vlasov) * Vim9: bufnr() doesn't take "true" argument. * Using winheight('.') in tests works but is wrong. * Vim9: passing "true" to char2nr() fails. * Tests do not check the error number properly.0 * Pull requests on github do not notify a maintainer. * Cannot easily see what Vim sends to the terminal. * Using win_screenpos('.') in tests works but is wrong. * The channel source file is too big. * Starting a hidden terminal resizes the current window. * Missing line end when skipping a long line with :cgetfile. * Vim9: cannot use "true" with deepcopy(). * Vim9: cannot use 'true" with garbagecollect(). * Vim9: cannot use 'true" with getbufinfo(). * Vim9: cannot use "true" with getchar(). * Vim9: cannot use "true" with getcompletion(). * Vim9: cannot use "true" with has(). * Vim9: getchar() test fails with GUI. * Vim9: test fails when build without +channel. * Vim9: cannot pass "true" to list2str() and str2list(). * Vim9: cannot pass "true" to nr2char(). * Vim9: cannot pass "true" to prop_remove(). * Vim9: cannot pass "true" to prop_type_add(). * Vim9: cannot pass "true" to searchcount(). * Vim9: cannot pass "true" to searchdecl(). * Vim9: cannot pass "true" to synID(). * Vim9: cannot pass "true" to win_splitmove(). * Vim9: cannot pass "true" to setloclist(). * Vim9: cannot pass "true" to spellsuggest(). * searchcount() test fails. * Crash when using submatch(0, 1) in substitute(). * Loop to handle keys for the command line is too long. * Vim9: using :call where it is not needed. * Vim9: cannot pass "true" to split(), str2nr() and strchars(). * Compiler warning for use of fptr_T. * Test for strchars() fails with different error number. * Vim9: cannot pass "true" to submatch(), term_gettty() and term_start() * Vim9: cannot pass "true" to timer_paused(). * Test fails without terminal feature. * Terminal test fails. * test_fails() does not check the context of the line number. * Not checking the context of test_fails(). * Some error messages are internal but do not use iemsg(). * Loop to handle keys for the command line is too long. * No digraph for 0x2022 BULLET. * Get stuck if a popup filter causes an error. * Vim9: :put ={expr} does not work inside :def function. * Leaking memory when popup filter function can't be called. * Options window cannot be translated. * Amiga: missing header for getgrgid(). * Vim9: cannot use 0 or 1 where a bool is expected. * Otions test fails. * Vim9: :defcompile compiles dead functions. * Vim9: cannot assign 1 and 0 to bool at script level. * GTK3: icons become broken images when resized. * Vim9: result of expression with && and || cannot be assigned to a bool variable. * Amiga: no common build file for Amiga (-like) systems. * GTK3: using old file chooser. * Vim9: result of && and || expression cannot be assigned to a bool at the script level. * Spellfile code not completely tested. * Cannot translate lines in the options window. * Expand('<stack>') does not include the final line number. * When job writes to hidden buffer current window has display errors. (Johnny McArthur) * Cannot build with Strawberry Perl 5.32.0. * Vim9: callstack wrong if :def function calls :def function. * Vim9: no proper error for nested ":def!". * Expand('<stack>') has trailing "..". * Spellfile code not completely tested. * Assert functions require passing expected result as the first argument, which isn't obvious. * Cannot connect to 127.0.0.1 for host with only IPv6 addresses. * :mksession does not restore shared terminal buffer properly. * Options window entries cannot be translated. * Memory leak when using :mkview with a terminal buffer. * Cannot do fuzzy string matching. * The initial value of 'backupskip' can have duplicate items. * Local function name cannot shadow a global function name. * Vim9: not accepting 0 or 1 as bool when type is any. * Vim9: memory leak when storing a value fails. * A couple of gcc compiler warnings. * Vim9: stray error for missing white space. * v_lock is used when it is not initialized. (Yegappan Lakshmanan) * complete_info() selected index has an invalid value. (Ben Jackson) * Vim9: internal error when using variable that was not set. * MinGW: testdir makefile deletes non-existing file. * Compiler warnings for function typecast. * Memory access errors when calling setloclist() in an autocommand. * Crash when using ":set" after ":ownsyntax". (Dhiraj Mishra) * Vim9: ":*" is not recognized as a range. * Vim9: line number for compare error is wrong. * Vim9: unnessary :call commands in tests. * Vim9: const works in an unexpected way. * Vim9: assignment test fails. * "gF" does not use line number after file in Visual mode. * Vim9: cannot declare a constant value. * Vim9: "const!" not sufficiently tested. * Vim9: out of bounds error. * Increment/decrement removes text property. * 'colorcolumn' doesn't show in indent. * Text properties not adjusted for "I" in Visual block mode. * Vim9: list<any> is not accepted where list<number> is expected. * Build fails because TTFLAG_STATIC is missing. * "hi def" does not work for cleared highlight. * Compiler warning for loss if data. * Vim9: crash when using varargs type "any". * Unused (duplicate) macros. * Inconsistent capitalization of error messages. * Cannot lock a variable in legacy Vim script like in Vim9. * Build failure due to missing error message. * Vim9: try/catch causes wrong value to be returned. * Vim9: sort("i") does not work. * Crash when using undo after deleting folded lines. * ":highlight clear" does not restore default link. * Vim9: crash in for loop when autoload script has an error. * "verbose hi Name" reports incorrect info after ":hi clear". * Vim9: crash after running into the "Multiple closures" error. * Small inconsitency in highlight test. * Vim9: error message for function has unpritable characters. * Vim9: memory leak when using multiple closures. * Vim9: list of list type can be wrong. * Vim9: leaking memory when using partial. * Vim9: leaking memory when calling a lambda. * Motif GUI: crash when setting menu colors. (Andrzej Bylicki) * Text properties corrupted with substitute command. (Filipe Brandenburger) * Motif GUI: commented out code missed {}. * Options window has duplicate translations. * Vim9: :def function disallows "firstline" and "lastline" argument names for no good reason. ==== wpa_supplicant ==== - Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build - Enable SAE support(jsc#SLE-14992). ==== xterm ==== Version update (353 -> 359) - update urls to use https (its 2020 after all) - Update to Patch#359 - 2020/08/17 * add special case in WriteText to allow colors 8-15 to override colorBDMode * add utf8Weblike resource, to provide an alternate scheme for handling ill-formed UTF-8 sequences * improve computation for the number of lines needed to scroll-up a SIXEL graphic * correct manpage description for default value of disallowWindowOps from changes in xterm #331 * correct a loop starting-point in refresh_graphics from optimization in patch #358 changes * add a new mouse mode 1016, which uses the same format as mode 1006, but sends the mouse's position in pixels * fix an issue from patch #338 changes where only the first selection buffer specified in the request would be updated using OSC 52 * modify makefile/scripts to allow DESTDIR to prefix the target directory for desktop-file-install * enable SIXEL feature by default. * update config.guess, config.sub * correct logic for decodeTerminalID changes in patch #357 * modify makefile to use plink.sh when linking test-programs, to fix build when using pcre * build-fix for test_ptydata program * several minor optimizations for the ReGIS and SIXEL features, improving performance by 10%. * add resource decGraphicsID to allow displaying graphics when the emulation level would ordinarily disallow this * add control sequences for fast switching of color palettes: XTPUSHCOLORS, XTPOPCOLORS, XTREPORTCOLORS * amend change for soft-hyphen from patch #328 to avoid stripping replacement-characters which would be shown with malformed or overlong UTF-8 input. * corrected an error-handling case in decodeUtf8, matching a similar fix in patch #268 * add a test-driver for ptydata.c * minor cleanup of macros * fix some errata in ctlseqs.ms * allow immediate repaint-on-palette-changed if double-buffering is enabled. * deprecate codes 10/11 in sgr push controls, changing those to 30/31, to avoid confusion with sgr 10-19. * modify SGR parameter handling to stop if an unrecognized parameter is encountered, to guard against malformed or nonstandard sequences * modify DECERA color for consistency with other erasures/clearing * ECH should not be masked by DECSCA * extend DECFRA and REP to accept any ?graphic? character rather than just Latin1, etc. * add -C option to 256colors2.pl and 88colors2.pl, to demonstrate mixed semicolon/colon separators which are implied by ECMA-48. * update sample terminfo to reflect the documentation improvements. * update description of 88/256/direct color in ctlseqs.ms to point out that using semicolons is a deprecated legacy feature, and standard terminal applications should use colons * modify configure-check for tgetent to conditionally include termcap.h, enabling configuration using clang's pedantic-errors option * remove some unnecessary pointer checks * accept terminal-id and add DA response for VT131, VT132. * revise fix for Debian #954730, which interfered with wheel mouse events * revise fix for Debian #954730, which interfered with wheel mouse events * fix typos in documentation * add mapping for decTerminalID for ?100? overlooked in patch #354. * update tables in wcwidth.c based on Unicode 13.0.0 * build-fix for ?make check? when building out-of-tree * work around performance problems of XDrawImageString and XDrawImageString16 functions * add a control sequence which reports xterm's version * temporarily set numeric locale category to "C" when parsing resources, so that scaleHeight and faceSize settings do not depend on locale * improve DA/DA2 response by ensuring that the decTerminalID maps to one of the known identifiers, as well as providing DA2 response for VT241 and VT382. * terminfo improvements: * add comments from ncurses which explain the keypad layouts. * add vt52+keypad from ncurses * use improved xm example for xterm+x11mouse, xterm+sm+1006 from ncurses 6.2 terminfo.src * two fixes for left/right wheel mouse event reporting * filter identical button-events * correct order of button-range versus protocol type * change ?make check? makefile-rule to use test-drivers for charclass and wcwidth data. * quiet ?did not find a usable xxx TrueType font? warnings by making fontWarnings apply to these messages * improve reinitialization of parameter list * temporarily set numeric locale category to "C" when formatting SVG or XHTML screendumps, to make the radix separator used in RGB values consistent * add resource forceXftHeight to control whether workaround from Debian #880407 is used. * apply updated ascent/descent in workaround from Debian #880407 to fix a 1-pixel gap in built-in vertical lines * improve round-off of scaling for built-in line-drawing * adjust fonts in svg-icon files to accommodate reduced functionality of new pango * improve configure check for X Toolkit library. * correct Y-coordinate transformation in ClearCurBackground, overlooked in changes for patch #334 * remove --vendor option from test-packages' install of desktop files; the feature is badly broken in gnome-shell. * modify uxterm to make it possible to select nonstandard locale C.UTF-8, e.g, if the user's locale is set to ?C? * re-save/tweak ?.svg? icon-files to work around breakage in toolset since the files were created in patch #283. ==== yast2 ==== Version update (4.3.27 -> 4.3.29) - Added "--plain" and "--full" options for the "systemctl" calls, these are recommended when processing the output by scripts (bsc#1176714) - 4.3.29 - Decrease error logging to avoid false positives in the y2log (bsc#1176653) - 4.3.28 ==== zlib ==== Subpackages: libminizip1 libz1 - Provide a testsuite subpackage to run post-build validation ==== zypper ==== Version update (1.14.38 -> 1.14.39) Subpackages: zypper-needs-restarting - Use new testcase API in libzypp. - BuildRequires: libzypp-devel >= 17.25.0. - help: prevent 'whatis' from writing to stderr (bsc#1176712) - wp: point out that command is aliased to a search command and searches case-insensitive (jsc#SLE-16271) - version 1.14.39

1 0

[opensuse-kubic] New ARM Kubic snapshot 20200928 released!
by Guillaume Gardet 30 Sep '20

30 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: branding-openSUSE busybox-links ceph (16.0.0.4863+g5d95d9d41d -> 16.0.0.5613+gb1a0951432) conmon (2.0.20 -> 2.0.21) containers-systemd (0.0+git20200901.c31b0cc -> 0.0+git20200918.c14836a) dhcp dracut (050+suse.75.g266a76d9 -> 050+suse.227.g7a9b782d) elfutils (0.179 -> 0.181) glib2 (2.64.4 -> 2.64.5) glib2-branding-openSUSE helm (3.3.1 -> 3.3.3) installation-images-MicroOS (16.16 -> 16.19) kernel-firmware (20200827 -> 20200916) kernel-source (5.8.7 -> 5.8.10) kubernetes (1.19.1 -> 1.19.2) kubernetes1.18 (1.18.8 -> 1.18.9) kubernetes1.19 (1.19.1 -> 1.19.2) kured (1.4.5 -> 1.5.0) kustomize (3.8.0 -> 3.8.4) ldb (2.1.4 -> 2.2.0) libfido2 (1.4.0 -> 1.5.0) libproxy libsolv (0.7.14 -> 0.7.15) libssh (0.9.4 -> 0.9.5) libzypp (17.24.2 -> 17.25.0) multipath-tools (0.8.4+183+suse.1817ce2 -> 0.8.4+192+suse.1bc10ad) openSUSE-build-key perl (5.30.1 -> 5.30.3) qrencode (4.0.2 -> 4.1.0) rook (1.4.0+git0.g801c5934 -> 1.4.3+git18.g42e1675e) shadow snapper (0.8.13 -> 0.8.14) sysconfig (0.85.5 -> 0.85.6) systemd (245.7 -> 246.4) timezone transactional-update (2.24.1 -> 2.26) vim (8.2.1551 -> 8.2.1719) wpa_supplicant yast2 (4.3.27 -> 4.3.29) zlib zypper (1.14.38 -> 1.14.39) === Details === ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE - Update branding-tumbleweed.zip: Rebrand all components of SLES/D in boot progress (jsc#SLE-14772). ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-xz - Add post/postun requires for busybox to busybox-sh (/usr/bin/ash is a symlink to busybox) ==== ceph ==== Version update (16.0.0.4863+g5d95d9d41d -> 16.0.0.5613+gb1a0951432) Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw - Update to 16.0.0-5613-gb1a0951432: + rebase on tip of upstream "master" branch, SHA1 5df5d8f8ff463f2560180dc8e9722d6690b0fa12 ==== conmon ==== Version update (2.0.20 -> 2.0.21) - Update to version 2.0.21: * bump to v2.0.21 * protect against kill(-1) * Makefile: enable debuginfo generation * Remove go.sum file and add go.mod * Fail if conmon config could not be written * nix: remove double definition for e2fsprogs * Speedup static build by utilizing CI cache on `/nix` folder * Fix nix build for failing e2fsprogs tests * test: fix CI * Use Podman for building ==== containers-systemd ==== Version update (0.0+git20200901.c31b0cc -> 0.0+git20200918.c14836a) - Update to version 0.0+git20200918.c14836a: * All services should 'Want=' targets not just 'After=' ==== dhcp ==== Subpackages: dhcp-client - Don't create dhclient.leases in %post. It affects transactional updates and the files don't need to pre-exist (boo#1129951). - Drop dependency on insserv-compat It was required to call the rc_status helpers from the sysvinit scripts. These scripts are supposed to be called by systemd, which has its own mechanism to report service status. Please note that this package still needs to be converted to ship proper systemd units. - /var/run is legacy -> /run should be used instead ==== dracut ==== Version update (050+suse.75.g266a76d9 -> 050+suse.227.g7a9b782d) Subpackages: dracut-ima - Update to version 050+suse.227.g7a9b782d: * Revert "install: also install post weak dependencies of kernel modules" (boo#1177016) - Update to version 050+suse.226.gb86d9bcf: We are now tracking the master branch, preparing for a 051 release within the next weeks. (the list includes changes previously backported) * 01fips: modprobe failures during manual module loading is not fatal * 01fips: turn info calls into fips_info calls * 04watchdog: split the watchdog module install * 35network-legacy: simplify fallback dhcp setup * 51-dracut-rescue.install: Don't use BLS fragment shipped by kernel package * 90crypt: make `rd.luks.key` usable with encrypted keydev. * 90crypt/module-setup.sh: try to catch kernel config changes * 90kernel-modules: add pci_hyperv * 90kernel-modules/module-setup.sh: add sg kernel module * 90kernel-modules: remove nfit from static module list * 90lvm: do not add newline to cmdline * 90nvdimm: include nvdimm keys in initrd * 90ppcmac: respect DRACUT_ARCH, don't exclude ppcle * 91zipl: parse-zipl.sh: honor SYSTEMD_READY * 95cifs: install new softdeps (sha512, gcm, ccm, aead2) * 95cifs: pass rootflags to mount * 95dcssblk: fix script permissions * 95fcoe: default rd.nofcoe to false * 95iscsi: fix ipv6 target discovery * 95iscsi: fix missing space when compiling cmdline args * 95iscsi: use ip_params_for_remote_addr() * 95nfs: only install rpc services for NFS < 4 when hostonly is strict * 95nfs: use ip_params_for_remote_addr() * 95nvmf: add module for NVMe-oF * 95nvmf: add NVMe over TCP support * 95nvmf: fix typo in the example documentation * 95resume: Do not resume on iSCSI, FCoE or NBD * 95zfcp_rules/parse-zfcp.sh: remove rule existence check * 95znet: Add a rd.znet_ifname= option * 99base: Remove duplicate nfsroot_to_var from dracut-lib.sh * 99memstrack: hook script should not call exit * 99memstrack: Only start tracking service when rd.memdebug=4|5 * 99squash: Don't hardcode the squash sub directories * 99squash: improve pre-requirements check * 99squash: simplify the code * Add 99memstrack module * Adding a bug report template * Adding a feature request template * Adding a pull request template * Adding code of conduct * Adding documentation template * Adding security policy * Adding the labels file for master * Adding the labels file for the RHEL-6 branch * Adding the labels file for the RHEL-7 branch * Adding the labels file for the RHEL-8 branch * Adding the labels trigger file for the Master branch * Adding the labels trigger file for the RHEL-6 branch * Adding the labels trigger file for the RHEL-7 branch * Adding the labels trigger file for the RHEL-8 branch * Add module "90nvdimm" for NVDIMM support * Add --version to man page * Allow $DRACUT_INSTALL to be not an absolute path * Always pull in machinery to read ifcfg files * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated * btrfs: force preload btrfs module * busybox: simplify listing of supported utilities * Change the order of NFS servers during the boot NFS server provided by DHCP in next-server option has higher priority than DHCP-server itself * CI: remove Fedora 30, add Fedora 32 * cms: regenerate NetworkManager connections * cryptroot-ask: no warn if /run/cryptsetup exist * dasd: only install /etc/dasd.conf if present * dhclient-script: Fix typo in output of BOUND & BOUND6 cases * dmsquash-live-root: Remove obsolete osmin.img processing. * Document initqueue/online hook * Do not start inside container * don't prefer $TMPDIR over --tmpdir * dracut.cmdline.7.asc: clarify usage of `rd.lvm.vg` and `rd.lvm.lv` * dracut.cmdline.7.asc: fix typo * dracut.conf.5.asc: document how to config --no-compress in the config * dracut-functions: add ip_params_for_remote_addr() helper * dracut-functions: fix find_binary() to return full path * dracut-initqueue: Print more useful info in case of timeout * dracut-lib.sh: quote variables in parameter expansion patterns * dracut.modules.7.asc: fix another typo * dracut.modules.7.asc: fix reference to insmodpost module * dracut.sh: add check for invalid configuration files * dracut.sh: Add --version * dracut.sh: don't call fsfreeze on subvol of root file system * dracut.sh: FIPS workaround for openssl-libs on Fedora/RHEL * dracut.sh: fix early microcode detection logic * dracut.sh: fix errors pointed out by shellcheck. * dracut.sh: fix ia32 detection for uefi executables * dracut.sh: fix some indentation. * dracut.sh: Move the library workaround after squash * dracut.spec: add 90nvdimm * dracut.spec: add version check for deprecated files * Fix CI badges in README.md and fix dracut description * Fix CoC URL * fix graphics startup failure with the rhgb paramter in CentOS8.2 * Fix pre-trigger stage by replacing exit with return in lldpad.sh * Fix test in lsinitrd * Fix Unicode * Fix Unicode and dracut install labeler * github actions: use test container directly * .github: fix path to label workflow mapping file * i18n: Always install /etc/vconsole.conf * install: also install post weak dependencies of kernel modules * Install crypto modules in 90kernel-modules * install dependant libs too * lvm: fix removal of pvscan from udev rules * lvm: remove unnecessary ${initdir} from lvm_scan.sh * Make externally defined CFLAGS work * Makefile: fix VERSION again * Makefile: merge main-version and git-version earlier * Makefile: really make externally defined CFLAGS work * match simplified rd.zfcp format too * match the whole string * mkinitrd-dracut.sh: use vmlinux regex for ppc*, vmlinuz for i686 * mkinitrd-suse.sh: Fix i586 platform detection * mount-root.sh: fix writing fstab file with missing fsck flag * multipath: add automatic configuration for multipath * net-lib.sh: support infiniband network mac addresses * network: fix glob matching ipv6 addresses * network-manager: ensure that nm-run.sh is executed when needed * network-manager: install libnss DNS and mDNS plugins * network-manager: move connection generation to a lib file * network-manager: set kernel hostname from the command line * New labels file * New label trigger file * README.md: fix github action badge links * Remove cleanup_trace_mem calls * Remove memtrace-ko and rd.memdebug=4 support in dracut * Remove stratis module * Removing dracut entry not compat with new plugin * Switching label triggers from pull requests to cron * systemd: skip dependency add for non-existent units * TEST-03-USR-MOUNT/test.sh: increase loglevel * TEST-12-RAID-DEG/create-root.sh: more udevadm settle * TEST-41-NBD-NM/Makefile: should be based on TEST-40-NBD not TEST-20-NFS * TEST-99: exclude /etc/dnf/* from check * test/TEST-35-ISCSI-MULTI: bump disk space * test: use dd from /dev/zero, instead of creating files with a hole * .travis.yml: reformat * UEFI Mode: only write kernel cmdline to UEFI binary * Update master-labels.yml * url-lib: drop NSS if it's not in curl --version * Use TMPDIR if available ==== elfutils ==== Version update (0.179 -> 0.181) Subpackages: libasm1 libdw1 libelf1 - Update to version 0.181: libelf: elf_update now compensates (fixes up) a bad sh_addralign for SHF_COMPRESSED sections. libdebuginfod: configure now takes --enable-libdebuginfod=dummy or - -disable-libdebuginfod for bootstrapping. DEBUGINFOD_URLS now accepts "scheme-free" urls (guessing at what the user meant, either http:// or file://) readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu property notes. libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding on arm64 for code that is compiled for PAC (Pointer Authentication Code) as long as it isn't enabled - Drop upstream patch: * 0001-tests-Add-GCOV-flags-when-necessary.patch - Remove cfi-fix.patch - should not be needed now. - Remove remove-run-large-elf-file.sh.patch as it now checks for memory size. - Use autosetup. - Update to version 0.180: elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given. libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix. libdw: Use correct CU to resolve file names in dwarf_decl_file. libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo. size: Also obey radix printing for bsd format. nm: Explicitly print weak 'V' or 'T' and common 'C' symbols. - Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix an unresolved symbol. - Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage. ==== glib2 ==== Version update (2.64.4 -> 2.64.5) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.64.5: + Fix deadlock in `g_subprocess_communicate_async()`. + Bugs fixed: glgo#GNOME/GLib!1519, glgo#GNOME/GLib!1520, glgo#GNOME/GLib!1565, glgo#GNOME/GLib!1608, glgo#GNOME/GLib!1618, glgo#GNOME/GLib!1621. ==== glib2-branding-openSUSE ==== - Update .gschema.override.in (jsc#SLE-14772): * add different key for screenlock * update background color for SLE. ==== helm ==== Version update (3.3.1 -> 3.3.3) - Update to version 3.3.3: * fix: allow serverInfo field on index files - Update to version 3.3.2: * fix rebase * fix(cmd/helm): add build tags for architecture * switched to stricter YAML parsing on plugin metadata files * Merge pull request from GHSA-m54r-vrmv-hw33 * Merge pull request from GHSA-jm56-5h66-w453 * Merge pull request from GHSA-9vp5-m38w-j776 * fixed bug that caused helm create to not overwrite modified files * replace --no-update with --force-update and invert default. BREAKING. * improve the HTTP detection for tar archives * handle case where dependency name collisions break dependency resolution * validate the name passed in during helm create * refactor the release name validation to be consistent across Helm * fix: check mode bits on kubeconfig file ==== installation-images-MicroOS ==== Version update (16.16 -> 16.19) - merge gh#openSUSE/installation-images#424 - adjust to openssh package split - 16.19 - merge gh#openSUSE/installation-images#422 - prevent cross-filesystem relative symlinks to kmod in initrd (bsc#1169094) - 16.18 - merge gh#openSUSE/installation-images#421 - plymouthd.defaults will be moved to branding package (jsc#SLE-11637) - 16.17 ==== kernel-firmware ==== Version update (20200827 -> 20200916) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20200916 (git commit 00a84c516078): * linux-firmware: Update AMD SEV firmware * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * Mellanox: Add new mlxsw_spectrum firmware xx.2008.1310 * mediatek: update MT7915 firmware to 20200819 * brcm: Fix a stale symlink for RPi3 model b+ * qcom: Add updated a5xx and a6xx microcode * wl18xx: update firmware file 8.9.0.0.83 ==== kernel-source ==== Version update (5.8.7 -> 5.8.10) - Update patches.kernel.org/5.8.10-047-block-restore-a-specific-error-code-in-bdev_d… (bsc#1012628 bsc#1176770). Add a reference. - commit af3e800 - RDMA/bnxt_re: Remove set but not used variable 'qplib_ctx' (git-fixes). - commit 33939e8 - Linux 5.8.10 (bsc#1012628). - gcov: add support for GCC 10.1 (bsc#1012628). - drm/msm/gpu: make ringbuffer readonly (bsc#1012628). - usb: typec: intel_pmc_mux: Do not configure SBU and HSL Orientation in Alternate modes (bsc#1012628). - usb: typec: intel_pmc_mux: Do not configure Altmode HPD High (bsc#1012628). - usb: typec: intel_pmc_mux: Un-register the USB role switch (bsc#1012628). - usb: typec: ucsi: acpi: Check the _DEP dependencies (bsc#1012628). - usb: Fix out of sync data toggle if a configured device is reconfigured (bsc#1012628). - USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (bsc#1012628). - USB: serial: option: support dynamic Quectel USB compositions (bsc#1012628). - USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (bsc#1012628). - usb: core: fix slab-out-of-bounds Read in read_descriptors (bsc#1012628). - phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init (bsc#1012628). - staging: greybus: audio: fix uninitialized value issue (bsc#1012628). - video: fbdev: fix OOB read in vga_8planes_imageblit() (bsc#1012628). - ARM: dts: vfxxx: Add syscon compatible with OCOTP (bsc#1012628). - arm64: dts: imx8mp: correct sdma1 clk setting (bsc#1012628). - test_firmware: Test platform fw loading on non-EFI systems (bsc#1012628). - debugfs: Fix module state check condition (bsc#1012628). - Revert "usb: dwc3: meson-g12a: fix shared reset control use" (bsc#1012628). - KVM: fix memory leak in kvm_io_bus_unregister_dev() (bsc#1012628). - kvm x86/mmu: use KVM_REQ_MMU_SYNC to sync when needed (bsc#1012628). - KVM: arm64: Do not try to map PUDs when they are folded into PMD (bsc#1012628). - KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit (bsc#1012628). - vgacon: remove software scrollback support (bsc#1012628). - fbcon: remove now unusued 'softback_lines' cursor() argument (bsc#1012628). - fbcon: remove soft scrollback code (bsc#1012628). - RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1012628). - RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1012628). - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (bsc#1012628). - nvme: Revert: Fix controller creation races with teardown flow (bsc#1012628). - mmc: sdhci-of-esdhc: Don't walk device-tree on every interrupt (bsc#1012628). - mmc: sdio: Use mmc_pre_req() / mmc_post_req() (bsc#1012628). - drm/msm: Disable the RPTR shadow (bsc#1012628). - drm/msm: Disable preemption on all 5xx targets (bsc#1012628). - drm/msm: Split the a5xx preemption record (bsc#1012628). - drm/tve200: Stabilize enable/disable (bsc#1012628). - scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem (bsc#1012628). - scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (bsc#1012628). - scsi: target: iscsi: Fix data digest calculation (bsc#1012628). - misc: eeprom: at24: register nvmem only after eeprom is ready to use (bsc#1012628). - regulator: core: Fix slab-out-of-bounds in regulator_unlock_recursive() (bsc#1012628). - regulator: plug of_node leak in regulator_register()'s error path (bsc#1012628). - regulator: push allocation in set_consumer_device_supply() out of lock (bsc#1012628). - regulator: push allocations in create_regulator() outside of lock (bsc#1012628). - regulator: push allocation in regulator_init_coupling() outside of lock (bsc#1012628). - kobject: Restore old behaviour of kobject_del(NULL) (bsc#1012628). - thunderbolt: Disable ports that are not implemented (bsc#1012628). - btrfs: fix wrong address when faulting in pages in the search ioctl (bsc#1012628). - btrfs: free data reloc tree on failed mount (bsc#1012628). - btrfs: fix lockdep splat in add_missing_dev (bsc#1012628). - btrfs: require only sector size alignment for parent eb bytenr (bsc#1012628). - staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (bsc#1012628). - iio:accel:mma8452: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:accel:mma7455: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio: accel: kxsd9: Fix alignment of local buffer (bsc#1012628). - iio:chemical:ccs811: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:light:max44000 Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:magnetometer:ak8975 Fix alignment and data leak issues (bsc#1012628). - iio:adc:ti-adc081c Fix alignment and data leak issues (bsc#1012628). - iio:adc:max1118 Fix alignment of timestamp and data leak issues (bsc#1012628). - iio:adc:ina2xx Fix timestamp alignment issue (bsc#1012628). - iio:adc:ti-adc084s021 Fix alignment and data leak issues (bsc#1012628). - iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:proximity:mb1232: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:light:ltr501 Fix timestamp alignment issue (bsc#1012628). - iio: cros_ec: Set Gyroscope default frequency to 25Hz (bsc#1012628). - iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (bsc#1012628). - iio: adc: mcp3422: fix locking on error path (bsc#1012628). - iio: adc: mcp3422: fix locking scope (bsc#1012628). - gcov: Disable gcov build with GCC 10 (bsc#1012628). - iommu/amd: Do not use IOMMUv2 functionality when SME is active (bsc#1012628). - iommu/amd: Do not force direct mapping when SME is active (bsc#1012628). - drm/amdgpu: Fix bug in reporting voltage for CIK (bsc#1012628). - drivers/net/wan/hdlc: Change the default of hard_header_len to 0 (bsc#1012628). - ALSA: hda: use consistent HDAudio spelling in comments/docs (bsc#1012628). - ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (bsc#1012628). - ALSA: hda: hdmi - add Rocketlake support (bsc#1012628). - arm64/module: set trampoline section flags regardless of CONFIG_DYNAMIC_FTRACE (bsc#1012628). - cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled (bsc#1012628). - cpufreq: intel_pstate: Refuse to turn off with HWP enabled (bsc#1012628). - ARC: [plat-hsdk]: Switch ethernet phy-mode to rgmii-id (bsc#1012628). - HID: elan: Fix memleak in elan_input_configured (bsc#1012628). - drivers/net/wan/hdlc_cisco: Add hard_header_len (bsc#1012628). - HID: microsoft: Add rumble support for the 8bitdo SN30 Pro+ controller (bsc#1012628). - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for all Saitek X52 devices (bsc#1012628). - nvme-pci: cancel nvme device request before disabling (bsc#1012628). - nvme-rdma: fix reset hang if controller died in the middle of a reset (bsc#1012628). - nvme-rdma: fix timeout handler (bsc#1012628). - nvme-rdma: serialize controller teardown sequences (bsc#1012628). - nvme-tcp: fix reset hang if controller died in the middle of a reset (bsc#1012628). - nvme-tcp: fix timeout handler (bsc#1012628). - nvme-tcp: serialize controller teardown sequences (bsc#1012628). - nvme: have nvme_wait_freeze_timeout return if it timed out (bsc#1012628). - nvme-fabrics: don't check state NVME_CTRL_NEW for request acceptance (bsc#1012628). - nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu (bsc#1012628). - media: gpio-ir-tx: spinlock is not needed to disable interrupts (bsc#1012628). - irqchip/eznps: Fix build error for !ARC700 builds (bsc#1012628). - ARC: show_regs: fix r12 printing and simplify (bsc#1012628). - xfs: initialize the shortform attr header padding entry (bsc#1012628). - cfg80211: Adjust 6 GHz frequency to channel conversion (bsc#1012628). - mac80211: reduce packet loss event false positives (bsc#1012628). - wireless: fix wrong 160/80+80 MHz setting (bsc#1012628). - drivers/net/wan/lapbether: Set network_header before transmitting (bsc#1012628). - xfs: fix off-by-one in inode alloc block reservation calculation (bsc#1012628). - net: hns3: Fix for geneve tx checksum bug (bsc#1012628). - drivers/dma/dma-jz4780: Fix race condition between probe and irq handler (bsc#1012628). - ALSA: hda/tegra: Program WAKEEN register for Tegra (bsc#1012628). - ALSA: hda: Fix 2 channel swapping for Tegra (bsc#1012628). - scsi: qedf: Fix null ptr reference in qedf_stag_change_work (bsc#1012628). - firestream: Fix memleak in fs_open (bsc#1012628). - NFC: st95hf: Fix memleak in st95hf_in_send_cmd (bsc#1012628). - drivers/net/wan/lapbether: Added needed_tailroom (bsc#1012628). - netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match (bsc#1012628). - netfilter: conntrack: allow sctp hearbeat after connection re-use (bsc#1012628). - MIPS: Loongson64: Do not override watch and ejtag feature (bsc#1012628). - dmaengine: acpi: Put the CSRT table after using it (bsc#1012628). - ARC: HSDK: wireup perf irq (bsc#1012628). - KVM: x86: always allow writing '0' to MSR_KVM_ASYNC_PF_EN (bsc#1012628). - KVM: nVMX: Fix the update value of nested load IA32_PERF_GLOBAL_CTRL control (bsc#1012628). - arm64: dts: ns2: Fixed QSPI compatible string (bsc#1012628). - ARM: dts: BCM5301X: Fixed QSPI compatible string (bsc#1012628). - ARM: dts: NSP: Fixed QSPI compatible string (bsc#1012628). - ARM: dts: bcm: HR2: Fixed QSPI compatible string (bsc#1012628). - IB/isert: Fix unaligned immediate-data handling (bsc#1012628). - RDMA/rtrs-srv: Set .release function for rtrs srv device during device init (bsc#1012628). - block: Set same_page to false in __bio_try_merge_page if ret is false (bsc#1012628). - spi: stm32: fix pm_runtime_get_sync() error checking (bsc#1012628). - nvme-fabrics: allow to queue requests for live queues (bsc#1012628). - seccomp: don't leak memory when filter install races (bsc#1012628). - block: restore a specific error code in bdev_del_partition (bsc#1012628). - i2c: npcm7xx: Fix timeout calculation (bsc#1012628). - btrfs: fix NULL pointer dereference after failure to create snapshot (bsc#1012628). - spi: stm32: Rate-limit the 'Communication suspended' message (bsc#1012628). - mmc: sdhci-msm: Add retries when all tuning phases are found valid (bsc#1012628). - mmc: sdhci-acpi: Clear amd_sdhci_host on reset (bsc#1012628). - ARM: dts: imx6sx: fix the pad QSPI1B_SCLK mux mode for uart3 (bsc#1012628). - KVM: arm64: Update page shift if stage 2 block mapping not supported (bsc#1012628). - drm/sun4i: backend: Disable alpha on the lowest plane on the A20 (bsc#1012628). - drm/sun4i: backend: Support alpha property on lowest plane (bsc#1012628). - drm/sun4i: Fix DE2 YVU handling (bsc#1012628). - padata: fix possible padata_works_lock deadlock (bsc#1012628). - interconnect: qcom: Fix small BW votes being truncated to zero (bsc#1012628). - Revert "kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled" (bsc#1012628). - soundwire: fix double free of dangling pointer (bsc#1012628). - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler (bsc#1012628). - scsi: megaraid_sas: Don't call disable_irq from process IRQ poll (bsc#1012628). - RDMA/core: Fix reported speed and width (bsc#1012628). - RDMA/core: Fix unsafe linked list traversal after failing to allocate CQ (bsc#1012628). - drm/virtio: fix unblank (bsc#1012628). - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA (bsc#1012628). - scsi: qla2xxx: Fix regression on sparc64 (bsc#1012628). - drm/sun4i: Fix dsi dcs long write function (bsc#1012628). - arm64: dts: imx8mq: Fix TMU interrupt property (bsc#1012628). - drm/sun4i: add missing put_device() call in sun8i_r40_tcon_tv_set_mux() (bsc#1012628). - RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (bsc#1012628). - RDMA/bnxt_re: Fix driver crash on unaligned PSN entry address (bsc#1012628). - RDMA/bnxt_re: Static NQ depth allocation (bsc#1012628). - RDMA/bnxt_re: Fix the qp table indexing (bsc#1012628). - RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1012628). - RDMA/rxe: Fix panic when calling kmem_cache_create() (bsc#1012628). - RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1012628). - RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1012628). - RDMA/rtrs-srv: Replace device_register with device_initialize and device_add (bsc#1012628). - ARM: dts: imx7d-zii-rmu2: fix rgmii phy-mode for ksz9031 phy (bsc#1012628). - arm64: dts: imx: Add missing imx8mm-beacon-kit.dtb to build (bsc#1012628). - ARM: dts: imx7ulp: Correct gpio ranges (bsc#1012628). - ARM: dts: ls1021a: fix QuadSPI-memory reg range (bsc#1012628). - selftests/timers: Turn off timeout setting (bsc#1012628). - ARM: dts: omap5: Fix DSI base address and clocks (bsc#1012628). - ARM: dts: socfpga: fix register entry for timer3 on Arria10 (bsc#1012628). - regulator: remove superfluous lock in regulator_resolve_coupling() (bsc#1012628). - regulator: push allocation in regulator_ena_gpio_request() out of lock (bsc#1012628). - ARM: dts: logicpd-som-lv-baseboard: Fix missing video (bsc#1012628). - ARM: dts: logicpd-som-lv-baseboard: Fix broken audio (bsc#1012628). - ARM: dts: logicpd-torpedo-baseboard: Fix broken audio (bsc#1012628). - ARM: OMAP2+: Fix an IS_ERR() vs NULL check in _get_pwrdm() (bsc#1012628). - commit 83e873a - Linux 5.8.9 (bsc#1012628). - mptcp: free acked data before waiting for more memory (bsc#1012628). - net: disable netpoll on fresh napis (bsc#1012628). - tipc: fix using smp_processor_id() in preemptible (bsc#1012628). - tipc: fix shutdown() of connectionless socket (bsc#1012628). - taprio: Fix using wrong queues in gate mask (bsc#1012628). - sctp: not disable bh in the whole sctp_get_port_local() (bsc#1012628). - net: usb: dm9601: Add USB ID of Keenetic Plus DSL (bsc#1012628). - netlabel: fix problems with mapping removal (bsc#1012628). - ipv6: Fix sysctl max for fib_multipath_hash_policy (bsc#1012628). - ipv4: Silence suspicious RCU usage warning (bsc#1012628). - RDMA/cma: Execute rdma_cm destruction from a handler properly (bsc#1012628). - RDMA/cma: Remove unneeded locking for req paths (bsc#1012628). - RDMA/cma: Using the standard locking pattern when delivering the removal event (bsc#1012628). - RDMA/cma: Simplify DEVICE_REMOVAL for internal_id (bsc#1012628). - io_uring: fix linked deferred ->files cancellation (bsc#1012628). - io_uring: fix cancel of deferred reqs with ->files (bsc#1012628). - commit 52f63c2 - Linux 5.8.8 (bsc#1012628). - hwmon: (pmbus/isl68137) remove READ_TEMPERATURE_1 telemetry for RAA228228 (bsc#1012628). - HID: quirks: Always poll three more Lenovo PixArt mice (bsc#1012628). - drm/msm/dpu: Fix reservation failures in modeset (bsc#1012628). - drm/msm/dpu: Fix scale params in plane validation (bsc#1012628). - drm/msm/dpu: fix unitialized variable error (bsc#1012628). - tty: serial: qcom_geni_serial: Drop __init from qcom_geni_console_setup (bsc#1012628). - drm/msm: add shutdown support for display platform_driver (bsc#1012628). - hwmon: (applesmc) check status earlier (bsc#1012628). - nvmet: Disable keep-alive timer when kato is cleared to 0h (bsc#1012628). - drm/msm: enable vblank during atomic commits (bsc#1012628). - habanalabs: unmap PCI bars upon iATU failure (bsc#1012628). - habanalabs: validate packet id during CB parse (bsc#1012628). - habanalabs: set clock gating according to mask (bsc#1012628). - habanalabs: proper handling of alloc size in coresight (bsc#1012628). - habanalabs: set max power according to card type (bsc#1012628). - habanalabs: validate FW file size (bsc#1012628). - habanalabs: check correct vmalloc return code (bsc#1012628). - drm/msm/a6xx: fix gmu start on newer firmware (bsc#1012628). - gfs2: add some much needed cleanup for log flushes that fail (bsc#1012628). - hv_utils: return error if host timesysnc update is stale (bsc#1012628). - hv_utils: drain the timesync packets on onchannelcallback (bsc#1012628). - ceph: don't allow setlease on cephfs (bsc#1012628). - i2c: iproc: Fix shifting 31 bits (bsc#1012628). - drm/omap: fix incorrect lock state (bsc#1012628). - irqchip/ingenic: Leave parent IRQ unmasked on suspend (bsc#1012628). - cpuidle: Fixup IRQ state (bsc#1012628). - nbd: restore default timeout when setting it to zero (bsc#1012628). - s390: don't trace preemption in percpu macros (bsc#1012628). - drm/amd/display: should check error using DC_OK (bsc#1012628). - drm/amd/display: Reject overlay plane configurations in multi-display scenarios (bsc#1012628). - drivers: gpu: amd: Initialize amdgpu_dm_backlight_caps object to 0 in amdgpu_dm_update_backlight_caps (bsc#1012628). - drm/amd/display: Revert HDCP disable sequence change (bsc#1012628). - drm/amd/display: Fix passive dongle mistaken as active dongle in EDID emulation (bsc#1012628). - drm/amd/display: Keep current gain when ABM disable immediately (bsc#1012628). - drm/amd/display: Retry AUX write when fail occurs (bsc#1012628). - drm/amd/display: Fix memleak in amdgpu_dm_mode_config_init (bsc#1012628). - xen/xenbus: Fix granting of vmalloc'd memory (bsc#1012628). - fsldma: fix very broken 32-bit ppc ioread64 functionality (bsc#1012628). - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (bsc#1012628). - batman-adv: Avoid uninitialized chaddr when handling DHCP (bsc#1012628). - batman-adv: Fix own OGM check in aggregated OGMs (bsc#1012628). - batman-adv: bla: use netif_rx_ni when not in interrupt context (bsc#1012628). - dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (bsc#1012628). - dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (bsc#1012628). - dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (bsc#1012628). - rxrpc: Keep the ACK serial in a var in rxrpc_input_ack() (bsc#1012628). - rxrpc: Fix loss of RTT samples due to interposed ACK (bsc#1012628). - rxrpc: Make rxrpc_kernel_get_srtt() indicate validity (bsc#1012628). - MIPS: mm: BMIPS5000 has inclusive physical caches (bsc#1012628). - MIPS: BMIPS: Also call bmips_cpu_setup() for secondary cores (bsc#1012628). - mmc: sdhci-acpi: Fix HS400 tuning for AMDI0040 (bsc#1012628). - perf sched timehist: Fix use of CPU list with summary option (bsc#1012628). - perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set (bsc#1012628). - netfilter: nf_tables: add NFTA_SET_USERDATA if not null (bsc#1012628). - netfilter: nf_tables: incorrect enum nft_list_attributes definition (bsc#1012628). - netfilter: nf_tables: fix destination register zeroing (bsc#1012628). - net: hns: Fix memleak in hns_nic_dev_probe (bsc#1012628). - net: systemport: Fix memleak in bcm_sysport_probe (bsc#1012628). - ravb: Fixed to be able to unload modules (bsc#1012628). - net: arc_emac: Fix memleak in arc_mdio_probe (bsc#1012628). - bpf: Fix a buffer out-of-bound access when filling raw_tp link_info (bsc#1012628). - dmaengine: pl330: Fix burst length if burst size is smaller than bus width (bsc#1012628). - dmaengine: ti: k3-udma: Fix the TR initialization for prep_slave_sg (bsc#1012628). - gtp: add GTPA_LINK info to msg sent to userspace (bsc#1012628). - net: ethernet: ti: cpsw: fix clean up of vlan mc entries for host port (bsc#1012628). - net: ethernet: ti: cpsw_new: fix clean up of vlan mc entries for host port (bsc#1012628). - bnxt_en: Don't query FW when netif_running() is false (bsc#1012628). - bnxt_en: Check for zero dir entries in NVRAM (bsc#1012628). - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled (bsc#1012628). - bnxt_en: Fix PCI AER error recovery flow (bsc#1012628). - bnxt_en: Fix possible crash in bnxt_fw_reset_task() (bsc#1012628). - bnxt_en: fix HWRM error when querying VF temperature (bsc#1012628). - xfs: finish dfops on every insert range shift iteration (bsc#1012628). - xfs: fix boundary test in xfs_attr_shortform_verify (bsc#1012628). - bnxt: don't enable NAPI until rings are ready (bsc#1012628). - media: vicodec: add missing v4l2_ctrl_request_hdl_put() (bsc#1012628). - media: cedrus: Add missing v4l2_ctrl_request_hdl_put() (bsc#1012628). - net: ethernet: ti: cpsw_new: fix error handling in cpsw_ndo_vlan_rx_kill_vid() (bsc#1012628). - media: i2c: imx214: select V4L2_FWNODE (bsc#1012628). - selftests/bpf: Fix massive output from test_maps (bsc#1012628). - net: dsa: mt7530: fix advertising unsupported 1000baseT_Half (bsc#1012628). - netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS (bsc#1012628). - nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()' (bsc#1012628). - nvme: fix controller instance leak (bsc#1012628). - netfilter: conntrack: do not auto-delete clash entries on reply (bsc#1012628). - opp: Don't drop reference for an OPP table that was never parsed (bsc#1012628). - cxgb4: fix thermal zone device registration (bsc#1012628). - net: ethernet: ti: am65-cpsw: fix rmii 100Mbit link mode (bsc#1012628). - MIPS: perf: Fix wrong check condition of Loongson event IDs (bsc#1012628). - block: fix locking in bdev_del_partition (bsc#1012628). - perf top/report: Fix infinite loop in the TUI for grouped events (bsc#1012628). - perf cs-etm: Fix corrupt data after perf inject from (bsc#1012628). - perf intel-pt: Fix corrupt data after perf inject from (bsc#1012628). - perf tools: Correct SNOOPX field offset (bsc#1012628). - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (bsc#1012628). - fix regression in "epoll: Keep a reference on files added to the check list" (bsc#1012628). - net: bcmgenet: fix mask check in bcmgenet_validate_flow() (bsc#1012628). - net: gemini: Fix another missing clk_disable_unprepare() in probe (bsc#1012628). - nfp: flower: fix ABI mismatch between driver and firmware (bsc#1012628). - net: dp83867: Fix WoL SecureOn password (bsc#1012628). - MIPS: add missing MSACSR and upper MSA initialization (bsc#1012628). - MIPS: SNI: Fix SCSI interrupt (bsc#1012628). - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files (bsc#1012628). - perf jevents: Fix suspicious code in fixregex() (bsc#1012628). - perf stat: Turn off summary for interval mode by default (bsc#1012628). - perf bench: The do_run_multi_threaded() function must use IS_ERR(perf_session__new()) (bsc#1012628). - tg3: Fix soft lockup when tg3_reset_task() fails (bsc#1012628). - x86, fakenuma: Fix invalid starting node ID (bsc#1012628). - iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1012628). - thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (bsc#1012628). - thermal: qcom-spmi-temp-alarm: Don't suppress negative temp (bsc#1012628). - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1012628). - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1012628). - include/linux/log2.h: add missing () around n in roundup_pow_of_two() (bsc#1012628). - iommu/vt-d: Handle 36bit addressing for x86-32 (bsc#1012628). - tracing/kprobes, x86/ptrace: Fix regs argument order for i386 (bsc#1012628). - x86/entry: Fix AC assertion (bsc#1012628). - x86/debug: Allow a single level of #DB recursion (bsc#1012628). - ext2: don't update mtime on COW faults (bsc#1012628). - xfs: don't update mtime on COW faults (bsc#1012628). - ARC: perf: don't bail setup if pct irq missing in device-tree (bsc#1012628). - arc: fix memory initialization for systems with two memory banks (bsc#1012628). - btrfs: drop path before adding new uuid tree entry (bsc#1012628). - btrfs: fix potential deadlock in the search ioctl (bsc#1012628). - btrfs: allocate scrub workqueues outside of locks (bsc#1012628). - btrfs: set the correct lockdep class for new nodes (bsc#1012628). - btrfs: set the lockdep class for log tree extent buffers (bsc#1012628). - btrfs: block-group: fix free-space bitmap threshold (bsc#1012628). - btrfs: tree-checker: fix the error message for transid error (bsc#1012628). - Bluetooth: Return NOTIFY_DONE for hci_suspend_notifier (bsc#1012628). - x86/mm/32: Bring back vmalloc faulting on x86_32 (bsc#1012628). - ALSA: ca0106: fix error code handling (bsc#1012628). - ALSA: usb-audio: Add basic capture support for Pioneer DJ DJM-250MK2 (bsc#1012628). - ALSA: usb-audio: Add implicit feedback quirk for UR22C (bsc#1012628). - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (bsc#1012628). - ALSA: hda/hdmi: always check pin power status in i915 pin fixup (bsc#1012628). - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (bsc#1012628). - ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (bsc#1012628). - ALSA; firewire-tascam: exclude Tascam FE-8 from detection (bsc#1012628). - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (bsc#1012628). - ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (bsc#1012628). - arm64: dts: mt7622: add reset node for mmc device (bsc#1012628). - mmc: mediatek: add optional module reset property (bsc#1012628). - mmc: dt-bindings: Add resets/reset-names for Mediatek MMC bindings (bsc#1012628). - mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (bsc#1012628). - media: rc: do not access device via sysfs after rc_unregister_device() (bsc#1012628). - media: rc: uevent sysfs file races with rc_unregister_device() (bsc#1012628). - affs: fix basic permission bits to actually work (bsc#1012628). - block: allow for_each_bvec to support zero len bvec (bsc#1012628). - block: ensure bdi->io_pages is always initialized (bsc#1012628). - io_uring: set table->files[i] to NULL when io_sqe_file_register failed (bsc#1012628). - io_uring: fix removing the wrong file in __io_sqe_files_update() (bsc#1012628). - s390: fix GENERIC_LOCKBREAK dependency typo in Kconfig (bsc#1012628). - libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks (bsc#1012628). - mips/oprofile: Fix fallthrough placement (bsc#1012628). - blk-iocost: ioc_pd_free() shouldn't assume irq disabled (bsc#1012628). - blk-stat: make q->stats->lock irqsafe (bsc#1012628). - dmaengine: dw-edma: Fix scatter-gather address calculation (bsc#1012628). - drm/i915: Fix sha_text population code (bsc#1012628). - drm/amd/pm: avoid false alarm due to confusing softwareshutdowntemp setting (bsc#1012628). - drm/amdgpu: Specify get_argument function for ci_smu_funcs (bsc#1012628). - dm writecache: handle DAX to partitions on persistent memory correctly (bsc#1012628). - dm mpath: fix racey management of PG initialization (bsc#1012628). - dm integrity: fix error reporting in bitmap mode after creation (bsc#1012628). - dm crypt: Initialize crypto wait structures (bsc#1012628). - dm cache metadata: Avoid returning cmd->bm wild pointer on error (bsc#1012628). - dm thin metadata: Avoid returning cmd->bm wild pointer on error (bsc#1012628). - dm thin metadata: Fix use-after-free in dm_bm_set_read_only (bsc#1012628). - mm: slub: fix conversion of freelist_corrupted() (bsc#1012628). - mm: track page table modifications in __apply_to_page_range() (bsc#1012628). - mm: madvise: fix vma user-after-free (bsc#1012628). - mm/rmap: fixup copying of soft dirty and uffd ptes (bsc#1012628). - io_uring: no read/write-retry on -EAGAIN error and O_NONBLOCK marked file (bsc#1012628). - perf record: Correct the help info of option "--no-bpf-event" (bsc#1012628). - kconfig: streamline_config.pl: check defined(ENV variable) before using it (bsc#1012628). - sdhci: tegra: Add missing TMCLK for data timeout (bsc#1012628). - checkpatch: fix the usage of capture group ( ... ) (bsc#1012628). - mm/migrate: fixup setting UFFD_WP flag (bsc#1012628). - mm/hugetlb: try preferred node first when alloc gigantic page from cma (bsc#1012628). - mm/hugetlb: fix a race between hugetlb sysctl handlers (bsc#1012628). - mm/khugepaged.c: fix khugepaged's request size in collapse_file (bsc#1012628). - cfg80211: regulatory: reject invalid hints (bsc#1012628). - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr() (bsc#1012628). - commit 8b2a0ec - rpm/kernel-source.spec.in: Also use bz compression (boo#1175882). - commit 375ec84 - rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618). - commit 971fc3d - coresight: fix offset by one error in counting ports (bsc#1175054). - commit 038472f - Update config files: enable a few missing Intel SOF and SST ASoC entries (bsc#1176200) - commit 87f4d0a ==== kubernetes ==== Version update (1.19.1 -> 1.19.2) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Bump kubernetes to 1.19.2 and 1.18.9 ==== kubernetes1.18 ==== Version update (1.18.8 -> 1.18.9) - Update to version 1.18.9: * e2e: backport regenerate namespace name if the name is already taken #90591 * Update CNI plugins to v0.8.7 * azure: use the parsed value from the configuration * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered * Update snapshot controller to use k8s.gcr.io * test(kuberuntime): deflake TestRemoveContainer * kubectl describe pod: use ReportingController as an event source * Fix an issue when rotated logs of dead containers are not removed. * Append suffix 'i' only if needed * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5 * let panics propagate up when processLoop panic * Add impersonated user to system:authenticated group * cleanup: print warning message after timeout * Revert "cleanup: decrease log level from warn to v3" * cleanup: decrease log level from warn to v3 * Remove duplicate nodeSelector * fix(azure): check error returned by scaleSet.getVMSS * remove oom TestStartingWatcher ""unit"" test * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted. * If firstTimestamp is not set use eventTime when printing event * kubectl: fix the Scheduled eventTime is <unknown> when use kubectl describe pod xxx * Update json-patch to v4.9.0 tagged release * Improve EndpointController's handling of headless services under dual-stack * Improve EndpointController dual-stack testing * Fix Endpoint/EndpointSlice pod change detection * Updating EndpointSlice controller to wait for all caches to be synced * Fix bug for inconsistent lists served from etcd * test(kubelet): add a regression test to verify kubelet would not panic * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes * Keep track of remaining pods when a node is deleted. * add sjenning as kubelet approver * Remove direct accesses to cache's node map * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8 * Add tests for out of band attachments * Update e2e csi images to k8s.gcr.io * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error * Make AttachDisk idempotent again * Do not evict pods which tolerate all NoExecute taints * Fix namespace controller cleanup orphaning * Add labelSelector validation to Affinity/AntiAffinity score plugin * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB * Make nested /volume/ repo images overridable * fix: update max azure disk max count * Do not swallow NotFound error for DeletePod in dsc.manage ==== kubernetes1.19 ==== Version update (1.19.1 -> 1.19.2) Subpackages: kubernetes1.19-client kubernetes1.19-client-common kubernetes1.19-kubeadm kubernetes1.19-kubelet kubernetes1.19-kubelet-common - Update to version 1.19.2: * Fix index out of range panic for kubectl alpha debug * kubectl describe pod: use ReportingController as an event source * Update CNI plugins to v0.8.7 * Add roundtrip tests for metrics repo * Cleanup custom metrics conversion functions * Update CHANGELOG/CHANGELOG-1.19.md for v1.19.1 * Sort list of formats for --logging-format description to make it deterministic ==== kured ==== Version update (1.4.5 -> 1.5.0) - Update to version 1.5.0: * Prepare 1.5.0 release * Bump helm/kind-action from v1.0.0-rc.1 to v1.0.0 * Bump helm/chart-testing-action from v1.0.0-rc.2 to v1.0.0 * Add dependabot * Prepare for k8s release 1.19 (Aug 25) ==== kustomize ==== Version update (3.8.0 -> 3.8.4) - Update to version 3.8.4 - Update api to v0.6.2 - Update kyaml to v0.8.1 - Refresh vendor.tar.xz ==== ldb ==== Version update (2.1.4 -> 2.2.0) - Release ldb 2.2.0 + Fix memory leak in ldb_kv_index_dn_ordered(); (bso#14299) + Fix off-by-one increment in lldb_add_msg_attr; (bso#14413) ==== libfido2 ==== Version update (1.4.0 -> 1.5.0) Subpackages: libfido2-1 libfido2-udev - Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream to fix 32bit compilation issues. - Update to version 1.5.0 * hid_linux: return FIDO_OK if no devices are found. * hid_osx: + repair communication with U2F tokens, gh#166; + reliability fixes. * fido2-{assert,cred}: new options to explicitly toggle UP, UV. * Support for configurable report lengths. * New API calls: + fido_cbor_info_maxcredcntlst + fido_cbor_info_maxcredidlen + fido_cred_aaguid_len + fido_cred_aaguid_ptr + fido_dev_get_touch_begin + fido_dev_get_touch_status * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154. * Allow CTAP messages up to 2048 bytes; gh#171. * Ensure we only list USB devices by default. ==== libproxy ==== - Build with KDE on Tumbleweed, Leap and SLE releases greater than SLE-15-SP2 (jsc#SLE-12256). ==== libsolv ==== Version update (0.7.14 -> 0.7.15) - fix deduceq2addedmap clearing bits outside of the map - conda: feature depriorization first - conda: fix startswith implementation - move find_update_seeds() call in cleandeps calculation - set SOLVABLE_BUILDHOST in rpm and rpmmd parsers - new testcase_mangle_repo_names() function - new solv_fmemopen() function - bump version to 0.7.15 - Enable zstd compression support for sle15 - Enable zstd compression support for sle15-sp2 ==== libssh ==== Version update (0.9.4 -> 0.9.5) Subpackages: libssh-config libssh4 - Add missing BR for openssh needed for tests - update to 0.9.5 (bsc#1174713, CVE-2020-16135): * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232) * Improve handling of library initialization (T222) * Fix parsing of subsecond times in SFTP (T219) * Make the documentation reproducible * Remove deprecated API usage in OpenSSL * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN * Define version in one place (T226) * Prevent invalid free when using different C runtimes than OpenSSL (T229) * Compatibility improvements to testsuite ==== libzypp ==== Version update (17.24.2 -> 17.25.0) - RepoInfo: Return the type of the local metadata cache as fallback (bsc#1176435) - VendorAttr: Fix broken "suse,opensuse" equivalence handling. Enhance API and testcases. (bsc#1174918) - Update docs regarding 'opensuse' namepace matching. - New solver testcase format. - Link against libzsd to close libsolvs open references (as we link statically) - BuildRequires: libsolv-devel >= 0.7.15. - version 17.25.0 (22) ==== multipath-tools ==== Version update (0.8.4+183+suse.1817ce2 -> 0.8.4+192+suse.1bc10ad) Subpackages: kpartx libmpath0 - Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670) - Added README.alua - Update to version 0.8.4+192+suse.1bc10ad: * Fix handling of hardware properties for maps without paths (bsc#1176644) - Update to version 0.8.4+190+suse.fe234ea: * Fixes for daemon shutdown issues from SLE(bsc#1110060, bsc#1110439) - multipathd: allow shutdown during configure() * fix compilation of external programs with -lmultipath (bsc#1133957, necessary after the above fix) * Minor upstream fixes ==== openSUSE-build-key ==== - the container keys for openSUSE and SUSE Linux Enterprise are actually not the build keys. (bsc#1176818) - build(a)suse.de key for SLE12 was extended. (bsc#1176759) ==== perl ==== Version update (5.30.1 -> 5.30.3) Subpackages: perl-base - update to 5.30.3 (bsc#1171863, bsc#1171864, bsc#1171866): * https://perldoc.perl.org/5.30.3/perl5302delta.html * https://perldoc.perl.org/5.30.3/perldelta.html * fixes [CVE-2020-10543] buffer overflow caused by a crafted regular expression * fixes [CVE-2020-10878] integer overflow via malformed bytecode produced by a crafted regular expression * fixes [CVE-2020-12723] buffer overflow caused by a crafted regular expression - dropped patches: * perl-Adapt-Configure-to-GCC-version-10.patch ==== qrencode ==== Version update (4.0.2 -> 4.1.0) - update to 4.1.0: * Command line tool "qrencode" has been improved: * New option "--inline" has been added. (Thanks to @jp-bennett) * New option "--strict-version" has been added. * UTF8 mode now supports ANSI256 color. (Thanks to András Veres- Szentkirályi) * Micro QR Code no longer requires to specify the version number. * 'make check' allows to run the test programs. (Thanks to Jan Tojnar) * Some compile time warnings have been fixed. * Various CMake support improvements. (Thanks to @mgorny and @sdf5) * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang) * Some documentation/manpage improvements. (Thanks to Dan Jacobson) * Some performance improvements. (Thanks to @4061N and Mika Lindqvist) - remove qrencode-fix-installation.patch (upstream) ==== rook ==== Version update (1.4.0+git0.g801c5934 -> 1.4.3+git18.g42e1675e) - fixed spec-file: * operator.yaml does not get changed to use the SUSE-images - helm chart, manifests: * fixed tolerations * Update SUSE documentation URL in NOTES.txt - ceph: fix drive group deployment failure (bsc#1176170) - helm chart, manifests: * Add tolerations to cluster & CRDs * Require kubeVersion >= 1.11 * Use rbac.authorization.k8s.io/v1 * Add affinities for label schema * Set Rook log level to DEBUG * Remove FlexVolume agent * Require currentNamespaceOnly=true * Replace NOTES.txt with SUSE specific version - Include operator and common yamls in manifest package - Update to v1.4.3 * The Ceph-CSI driver was being unexpectedly removed by the garbage collector in some clusters. For more details to apply a fix during the upgrade to this patch release, see these steps. (#616) * Add storageClassDeviceSet label to osd pods (#6225) * DNS suffix issue for OBCs in custom DNS suffix clusters (#6234) * Cleanup mon canary pvc if the failover failed (#6224) * Only enable mgr init container if the dashboard is enabled (#6198) * cephobjectstore monitoring goroutine must be stopped during uninstall (#6208) * Remove NParts and Cache_Size from MDCACHE block in the NFS configuration (#6207) * Purge a down osd with a job created by the admin (#6127) * Do not use label selector on external mgr service (#6142) * Allow uninstall even if volumes still exist with a new CephCluster setting (#6145) - Update to v1.4.2 - Patch release focusing on small feature additions and bug fixes. * Improve check for LVM on the host to allow installing of OSDs (#6175) * Set the OSD prepare resource limits (#6118) * Allow memory limits below recommended settings (#6116) * Use full DNS suffix for object endpoint with OBCs (#6170) * Remove the CSI driver lifecycle preStop hook (#6141) * External cluster optional settings for provisioners (#6048) * Operator watches nodes that match OSD placement rules (#6156) * Allow user to add labels to the cluster daemon pods (#6084 #6082) * Fix vulnerability in package golang.org/x/text (#6136) * Add expansion support for encrypted osd on pvc (#6126) * Do not use realPath for OSDs on PVCs (#6120, @leseb) * Example object store manifests updated for consistency (#6123) * Separate topology spread constrinats for osd prepare jobs and osd daemons (#6103) * Pass CSI resources as strings in the helm chart (#6104) * Improve callCephVolume() for list and prepare (#6059) * Improved multus support for the CSI driver configuration (#5740) * Object store healthcheck yaml examples (#6090) * Add support for wal encrypted device on pvc (#6062) * Updated helm usage in documentation (#6086) * More details for RBD Mirroring documentation (#6083) - Build process changes: - Set CSI sidecar versions through _service, and set all versions in code through a single patch file + csi-images-SUSE.patch - csi-dummy-images.patch - Use github.com/SUSE/rook and suse-release-1.4 tag in update.sh - Create module dependencies through _service, and store these dependencies in vendor.tar.gz (replacing rook-[version]-vendor.tar.xz) - Modify build commands to include "-mod=vendor" to use new vendor tarball - Add CSI sidecars as BuildRequires, in order to determine versions through _service process - Replace %setup of vendor tarball with a simple tar extraction - Move registry detection to %prep, and set correct registry through a search and replace on the SUSE_REGISTRY string - Use variables to track rook, ceph and cephcsi versions - Add '#!BuildTag', and 'appVersion' to chart.yaml - Add required versioning to helm chart - Leave ceph-csi templates in /etc, and include them in main rook package. - csi-template-paths.patch - Include only designated yaml examples in rook-k8s-yaml package ==== shadow ==== - login.defs: Add support for new util-linux-2.36 login variable MOTD_FIRSTONLY (shadow-util-linux.patch). - shadow-login_defs-comments.patch: Remove duplicated LASTLOG_UID_MAX. - shadow-login_defs-check.sh: Update for new build system. - shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is not used in SUSE Linux. - Refresh shadow-login_defs-suse.patch and shadow-login_defs-comments.patch. ==== snapper ==== Version update (0.8.13 -> 0.8.14) Subpackages: libsnapper5 - added option to cleanup to make requested free space available (jsc#SLE-15765) - version 0.8.14 ==== sysconfig ==== Version update (0.85.5 -> 0.85.6) Subpackages: sysconfig-netconfig - version 0.85.6 - netconfig: execute chrony/helper in /usr/libexec with fallback to it's previous location in /usr/lib (boo#1176285) - netconfig: only write files like /etc/resolv.conf on content change to avoid that e.g. dnsmasq (if running) re-reads the /etc/resolv.conf and re-initializes itself (bsc#1176325) ==== systemd ==== Version update (245.7 -> 246.4) Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Drop 0001-udev-temporarly-restore-the-creation-a-few-symlinks-.patch linuxrc has already been fixed. - Add 0001-udev-temporarly-restore-the-creation-a-few-symlinks-.patch A temporary patch until the installer environment is updated to create some of the symlinks that udevd used to create during its startup but now udevd relies on the init system to do so. - Rework how we prevent journald from both enabling auditd and recording audit messages journald.conf gained a new setting Audit= to control whether journald enables audit during the boot process. So let's use it and make sure it's disabled by default by shipping a drop-in that overrides upstream default. Also we used to patch systemd to prevent journald from reading the audit messages. There's still no way for downstream to configure that properly (we would need to mask systemd-journald-audit.socket meaning shipping a symlink in /etc) but I think dropping systemd-journald-audit.socket from the package is a nicer way to do that as some users might choose to reenable this setting (by reintroducing the socket unit in /etc). - Enable audit support (bsc#1175883) Enabling audit support in systemd will only make PID1 (and some of its services) to generate some audit records for certain events. But it doesn't affect journald, which has been prevented from recording audit messages in the journal (SUSE specific behavior). - Upgrade to v246.4 (commit f1344d5b7f31e98aedb01e606f41d74d3caaf446) See https://github.com/openSUSE/systemd/blob/SUSE/v246/NEWS for details. Now that the number of SUSE specific patches has been shrinked and is pretty low (12 at the time of this writing), they are no more tracked by the git repo and are now handled at the package level. Hence It is easier to maintain and identify them. This effectively means that SUSE/v246 will contain upstream commits only. Added 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch Added 0002-rc-local-fix-ordering-startup-for-etc-init.d-boot.lo.patch Added 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch Added 0004-tmpfiles-support-exclude-statements-based-on-file-ow.patch Added 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch Added 0006-sysv-generator-add-back-support-for-SysV-scripts-for.patch Added 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch Added 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch Added 0009-pid1-handle-console-specificities-weirdness-for-s390.patch Added 0010-journald-disable-audit-support-completely-from-the-j.patch Added 0011-core-disable-session-keyring-per-system-sevice-entir.patch Added 0012-resolved-create-etc-resolv.conf-symlink-at-runtime.patch ==== timezone ==== - Fixup tzdata-china.diff: zone.tab and zone1970.tab MUST be tab delimited (boo#1176927). - modify tzdata-china.diff * systemd now reads zone1970.tab * link Asia/Shanghai to Asia/Beijing is enough and more precise ==== transactional-update ==== Version update (2.24.1 -> 2.26) Subpackages: transactional-update-zypp-config - Version 2.26 - Fix broken sync for second snapshot [boo#1176989] - Add new options to allow separate cleanup of snapshots and overlays - Check for existence of inotifywait before using it - Check that mount options don't exceed maximum length - Version 2.25.1 - Fix inotify watcher setup - Use log_{info,error} for more messages to avoid messing up Salt logs - Version 2.25 - Reduce number of overlays: Instead of using transparent overlays for all previous layers only add the previous snapshot's overlay; this will greatly reduce the number of overlays while still making sure that /etc changes in the running system will be visible in the next snapshot - When using --drop-if-no-change synchronize potential /etc changes with running system - Exclude all non-root-fs mounts from inotify watcher ==== vim ==== Version update (8.2.1551 -> 8.2.1719) Subpackages: vim-data-common vim-small - Updated to version 8.2.1719, fixes the following problems * Vim9: error for argument type does not mention the number. * Warnings from asan with clang-11. (James McCoy) * Crash in edit test. * Crash in normal test. * Not all tests are executed on Github Actions. * Cursorline highlighting always overrules sign highlighting. * Crash in :vimgrep when started as "vim -n". (Raul Segura) * Signs test fails. * s390x tests work again. * Using NULL pointers in some code. (James McCoy) * Using NULL pointers in fold code. * Vim9: error when using "%" where a buffer is expected. * Vim9: error when using '%" with setbufvar() or getbufvar(). * A few remaining errors from ubsan. * Spellfile test sometimes fails. * Not all Bazel files are recognized. * No example to use ubsan with clang. * prop_find() skips properties in the same line if "skipstart" is used. * Vim9: fixes for functions not tested; failure in getchangelist(). * Configure check for dirfd() does not work on HPUX. (Michael Osipov) * Vim9: count() third argument cannot be "true". * Vim9: expand() does not take "true" as argument. * Vim9: getreg() does not take "true" as argument. * Vim9: glob() doesnot take "true" as argument. * Vim9: globpath() doesnot take "true" as argument. * Vim9: index() does not take "true" as argument. * Vim9: hasmapto(), mapcheck() and maparg() do not take "true" as argument. * Vim9: popup_clear() does not take "true" as argument. * Reports from asan are not optimal. * Wildmenu does not work properly. * Using line() for global popup window doesn't work. * The channel log does not show typed text. * Vim9: cannot use "true" for "skipstart" in prop_find(). * Messages in globals.h not translated, xgettext on MS-Windows not fully supported. * :resize command not fully tested. * Loop for handling keys for the command line is too long. * Cannot read back the prompt of a prompt buffer. * Term_start() options for size are overruled by 'termwinsize'. (Sergey Vlasov) * Vim9: bufnr() doesn't take "true" argument. * Using winheight('.') in tests works but is wrong. * Vim9: passing "true" to char2nr() fails. * Tests do not check the error number properly.0 * Pull requests on github do not notify a maintainer. * Cannot easily see what Vim sends to the terminal. * Using win_screenpos('.') in tests works but is wrong. * The channel source file is too big. * Starting a hidden terminal resizes the current window. * Missing line end when skipping a long line with :cgetfile. * Vim9: cannot use "true" with deepcopy(). * Vim9: cannot use 'true" with garbagecollect(). * Vim9: cannot use 'true" with getbufinfo(). * Vim9: cannot use "true" with getchar(). * Vim9: cannot use "true" with getcompletion(). * Vim9: cannot use "true" with has(). * Vim9: getchar() test fails with GUI. * Vim9: test fails when build without +channel. * Vim9: cannot pass "true" to list2str() and str2list(). * Vim9: cannot pass "true" to nr2char(). * Vim9: cannot pass "true" to prop_remove(). * Vim9: cannot pass "true" to prop_type_add(). * Vim9: cannot pass "true" to searchcount(). * Vim9: cannot pass "true" to searchdecl(). * Vim9: cannot pass "true" to synID(). * Vim9: cannot pass "true" to win_splitmove(). * Vim9: cannot pass "true" to setloclist(). * Vim9: cannot pass "true" to spellsuggest(). * searchcount() test fails. * Crash when using submatch(0, 1) in substitute(). * Loop to handle keys for the command line is too long. * Vim9: using :call where it is not needed. * Vim9: cannot pass "true" to split(), str2nr() and strchars(). * Compiler warning for use of fptr_T. * Test for strchars() fails with different error number. * Vim9: cannot pass "true" to submatch(), term_gettty() and term_start() * Vim9: cannot pass "true" to timer_paused(). * Test fails without terminal feature. * Terminal test fails. * test_fails() does not check the context of the line number. * Not checking the context of test_fails(). * Some error messages are internal but do not use iemsg(). * Loop to handle keys for the command line is too long. * No digraph for 0x2022 BULLET. * Get stuck if a popup filter causes an error. * Vim9: :put ={expr} does not work inside :def function. * Leaking memory when popup filter function can't be called. * Options window cannot be translated. * Amiga: missing header for getgrgid(). * Vim9: cannot use 0 or 1 where a bool is expected. * Otions test fails. * Vim9: :defcompile compiles dead functions. * Vim9: cannot assign 1 and 0 to bool at script level. * GTK3: icons become broken images when resized. * Vim9: result of expression with && and || cannot be assigned to a bool variable. * Amiga: no common build file for Amiga (-like) systems. * GTK3: using old file chooser. * Vim9: result of && and || expression cannot be assigned to a bool at the script level. * Spellfile code not completely tested. * Cannot translate lines in the options window. * Expand('<stack>') does not include the final line number. * When job writes to hidden buffer current window has display errors. (Johnny McArthur) * Cannot build with Strawberry Perl 5.32.0. * Vim9: callstack wrong if :def function calls :def function. * Vim9: no proper error for nested ":def!". * Expand('<stack>') has trailing "..". * Spellfile code not completely tested. * Assert functions require passing expected result as the first argument, which isn't obvious. * Cannot connect to 127.0.0.1 for host with only IPv6 addresses. * :mksession does not restore shared terminal buffer properly. * Options window entries cannot be translated. * Memory leak when using :mkview with a terminal buffer. * Cannot do fuzzy string matching. * The initial value of 'backupskip' can have duplicate items. * Local function name cannot shadow a global function name. * Vim9: not accepting 0 or 1 as bool when type is any. * Vim9: memory leak when storing a value fails. * A couple of gcc compiler warnings. * Vim9: stray error for missing white space. * v_lock is used when it is not initialized. (Yegappan Lakshmanan) * complete_info() selected index has an invalid value. (Ben Jackson) * Vim9: internal error when using variable that was not set. * MinGW: testdir makefile deletes non-existing file. * Compiler warnings for function typecast. * Memory access errors when calling setloclist() in an autocommand. * Crash when using ":set" after ":ownsyntax". (Dhiraj Mishra) * Vim9: ":*" is not recognized as a range. * Vim9: line number for compare error is wrong. * Vim9: unnessary :call commands in tests. * Vim9: const works in an unexpected way. * Vim9: assignment test fails. * "gF" does not use line number after file in Visual mode. * Vim9: cannot declare a constant value. * Vim9: "const!" not sufficiently tested. * Vim9: out of bounds error. * Increment/decrement removes text property. * 'colorcolumn' doesn't show in indent. * Text properties not adjusted for "I" in Visual block mode. * Vim9: list<any> is not accepted where list<number> is expected. * Build fails because TTFLAG_STATIC is missing. * "hi def" does not work for cleared highlight. * Compiler warning for loss if data. * Vim9: crash when using varargs type "any". * Unused (duplicate) macros. * Inconsistent capitalization of error messages. * Cannot lock a variable in legacy Vim script like in Vim9. * Build failure due to missing error message. * Vim9: try/catch causes wrong value to be returned. * Vim9: sort("i") does not work. * Crash when using undo after deleting folded lines. * ":highlight clear" does not restore default link. * Vim9: crash in for loop when autoload script has an error. * "verbose hi Name" reports incorrect info after ":hi clear". * Vim9: crash after running into the "Multiple closures" error. * Small inconsitency in highlight test. * Vim9: error message for function has unpritable characters. * Vim9: memory leak when using multiple closures. * Vim9: list of list type can be wrong. * Vim9: leaking memory when using partial. * Vim9: leaking memory when calling a lambda. * Motif GUI: crash when setting menu colors. (Andrzej Bylicki) * Text properties corrupted with substitute command. (Filipe Brandenburger) * Motif GUI: commented out code missed {}. * Options window has duplicate translations. * Vim9: :def function disallows "firstline" and "lastline" argument names for no good reason. ==== wpa_supplicant ==== - Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build - Enable SAE support(jsc#SLE-14992). ==== yast2 ==== Version update (4.3.27 -> 4.3.29) - Added "--plain" and "--full" options for the "systemctl" calls, these are recommended when processing the output by scripts (bsc#1176714) - 4.3.29 - Decrease error logging to avoid false positives in the y2log (bsc#1176653) - 4.3.28 ==== zlib ==== - Provide a testsuite subpackage to run post-build validation ==== zypper ==== Version update (1.14.38 -> 1.14.39) Subpackages: zypper-needs-restarting - Use new testcase API in libzypp. - BuildRequires: libzypp-devel >= 17.25.0. - help: prevent 'whatis' from writing to stderr (bsc#1176712) - wp: point out that command is aliased to a search command and searches case-insensitive (jsc#SLE-16271) - version 1.14.39

1 0

[opensuse-kubic] New Kubic snapshot 20200928 released!
by Richard Brown 29 Sep '20

29 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (050+suse.226.gb86d9bcf -> 050+suse.227.g7a9b782d) installation-images-MicroOS (16.18 -> 16.19) timezone transactional-update (2.24.1 -> 2.26) === Details === ==== dracut ==== Version update (050+suse.226.gb86d9bcf -> 050+suse.227.g7a9b782d) Subpackages: dracut-ima - Update to version 050+suse.227.g7a9b782d: * Revert "install: also install post weak dependencies of kernel modules" (boo#1177016) ==== installation-images-MicroOS ==== Version update (16.18 -> 16.19) - merge gh#openSUSE/installation-images#424 - adjust to openssh package split - 16.19 ==== timezone ==== - Fixup tzdata-china.diff: zone.tab and zone1970.tab MUST be tab delimited (boo#1176927). - modify tzdata-china.diff * systemd now reads zone1970.tab * link Asia/Shanghai to Asia/Beijing is enough and more precise ==== transactional-update ==== Version update (2.24.1 -> 2.26) Subpackages: transactional-update-zypp-config - Version 2.26 - Fix broken sync for second snapshot [boo#1176989] - Add new options to allow separate cleanup of snapshots and overlays - Check for existence of inotifywait before using it - Check that mount options don't exceed maximum length - Version 2.25.1 - Fix inotify watcher setup - Use log_{info,error} for more messages to avoid messing up Salt logs - Version 2.25 - Reduce number of overlays: Instead of using transparent overlays for all previous layers only add the previous snapshot's overlay; this will greatly reduce the number of overlays while still making sure that /etc changes in the running system will be visible in the next snapshot - When using --drop-if-no-change synchronize potential /etc changes with running system - Exclude all non-root-fs mounts from inotify watcher -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20200925 released!
by Richard Brown 27 Sep '20

27 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: PackageKit appstream-glib (0.7.17 -> 0.7.18) at-spi2-core (2.36.0 -> 2.36.1) branding-openSUSE busybox-links clutter conmon (2.0.20 -> 2.0.21) dracut (050+suse.75.g266a76d9 -> 050+suse.226.gb86d9bcf) glib2 (2.64.4 -> 2.64.5) glib2-branding-openSUSE gnome-desktop (3.36.5 -> 3.36.6) gnome-settings-daemon gnome-shell gsettings-desktop-schemas harfbuzz (2.6.8 -> 2.7.2) installation-images-MicroOS (16.16 -> 16.18) json-glib (1.4.4 -> 1.6.0) kaccounts-integration kio-extras5 ldb (2.1.4 -> 2.2.0) libiptcdata (1.0.4 -> 1.0.5) libproxy libqt5-qtbase libsolv (0.7.14 -> 0.7.15) libssh (0.9.4 -> 0.9.5) libzypp (17.24.2 -> 17.25.0) mozilla-nss (3.55 -> 3.56) openSUSE-build-key pango (1.46.1 -> 1.46.2) perl-libwww-perl (6.47 -> 6.49) pipewire (0.3.10 -> 0.3.11) samba (4.12.5+git.168.88cc07e6cbf -> 4.13.0+git.138.ff2d5480c67) snapper (0.8.13 -> 0.8.14) sysconfig (0.85.5 -> 0.85.6) tracker2 (2.3.5 -> 2.3.6) vim (8.2.1551 -> 8.2.1719) webkit2gtk3 (2.28.4 -> 2.30.0) wpa_supplicant xen (4.14.0_06 -> 4.14.0_08) yast2 (4.3.27 -> 4.3.29) zypper (1.14.38 -> 1.14.39) === Details === ==== PackageKit ==== Subpackages: PackageKit-backend-zypp libpackagekit-glib2-18 - Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315). ==== appstream-glib ==== Version update (0.7.17 -> 0.7.18) Subpackages: libappstream-glib8 - Update to version 0.7.18: * Don't ignore localized strings that are the same as original * Croatian translation 2nd attempt (#373) * Test launchable tags in validation * Add missing dependency to the readme * as-app: Don't initialize mutex twice * as-content-rating: Expand translator comments to link to OARS website * as-content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense * po: Import gs-content-rating.c translations from gnome-software * po: Update po files * as-content-rating: Add content rating system APIs from gnome-software * Allow timestamp in the future in validate-relax * Fix crash with invalid children of <ul/> * as-app: Properly initialize unique_id_mutex * The AppData files now go to /usr/share/metainfo * util: Complete new validate-version command * util: Add "validate-version" command * trivial: Actually use the correct NEWS contents * trivial: post release version bump - Drop patch as-glib-PR359.patch (fixed upstream) - Run spec-cleaner * Remove rpm groups ==== at-spi2-core ==== Version update (2.36.0 -> 2.36.1) Subpackages: libatspi0 typelib-1_0-Atspi-2_0 - Update to version 2.36.1: + meson: De-duplicate deps of 'Requires' in pkgconfig file + Make at-spi-dbus-bus.desktop Validat + Fix ucs2keysym line for Euro sign + Fix Qt annotations in DBus xml files + constants: Fix typos in two _COUNT constants + Fix a couple of memory leaks. + Fix use after free when a device listener is destroyed. + Fix use after free when an event listener is destroyed. - Run spec-cleaner + Remove rpm groups ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE wallpaper-branding-openSUSE - Update branding-tumbleweed.zip: Rebrand all components of SLES/D in boot progress (jsc#SLE-14772). ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-psmisc busybox-xz - Add post/postun requires for busybox to busybox-sh (/usr/bin/ash is a symlink to busybox) ==== clutter ==== - Make documentation build reproducible ==== conmon ==== Version update (2.0.20 -> 2.0.21) - Update to version 2.0.21: * bump to v2.0.21 * protect against kill(-1) * Makefile: enable debuginfo generation * Remove go.sum file and add go.mod * Fail if conmon config could not be written * nix: remove double definition for e2fsprogs * Speedup static build by utilizing CI cache on `/nix` folder * Fix nix build for failing e2fsprogs tests * test: fix CI * Use Podman for building ==== dracut ==== Version update (050+suse.75.g266a76d9 -> 050+suse.226.gb86d9bcf) Subpackages: dracut-ima - Update to version 050+suse.226.gb86d9bcf: We are now tracking the master branch, preparing for a 051 release within the next weeks. (the list includes changes previously backported) * 01fips: modprobe failures during manual module loading is not fatal * 01fips: turn info calls into fips_info calls * 04watchdog: split the watchdog module install * 35network-legacy: simplify fallback dhcp setup * 51-dracut-rescue.install: Don't use BLS fragment shipped by kernel package * 90crypt: make `rd.luks.key` usable with encrypted keydev. * 90crypt/module-setup.sh: try to catch kernel config changes * 90kernel-modules: add pci_hyperv * 90kernel-modules/module-setup.sh: add sg kernel module * 90kernel-modules: remove nfit from static module list * 90lvm: do not add newline to cmdline * 90nvdimm: include nvdimm keys in initrd * 90ppcmac: respect DRACUT_ARCH, don't exclude ppcle * 91zipl: parse-zipl.sh: honor SYSTEMD_READY * 95cifs: install new softdeps (sha512, gcm, ccm, aead2) * 95cifs: pass rootflags to mount * 95dcssblk: fix script permissions * 95fcoe: default rd.nofcoe to false * 95iscsi: fix ipv6 target discovery * 95iscsi: fix missing space when compiling cmdline args * 95iscsi: use ip_params_for_remote_addr() * 95nfs: only install rpc services for NFS < 4 when hostonly is strict * 95nfs: use ip_params_for_remote_addr() * 95nvmf: add module for NVMe-oF * 95nvmf: add NVMe over TCP support * 95nvmf: fix typo in the example documentation * 95resume: Do not resume on iSCSI, FCoE or NBD * 95zfcp_rules/parse-zfcp.sh: remove rule existence check * 95znet: Add a rd.znet_ifname= option * 99base: Remove duplicate nfsroot_to_var from dracut-lib.sh * 99memstrack: hook script should not call exit * 99memstrack: Only start tracking service when rd.memdebug=4|5 * 99squash: Don't hardcode the squash sub directories * 99squash: improve pre-requirements check * 99squash: simplify the code * Add 99memstrack module * Adding a bug report template * Adding a feature request template * Adding a pull request template * Adding code of conduct * Adding documentation template * Adding security policy * Adding the labels file for master * Adding the labels file for the RHEL-6 branch * Adding the labels file for the RHEL-7 branch * Adding the labels file for the RHEL-8 branch * Adding the labels trigger file for the Master branch * Adding the labels trigger file for the RHEL-6 branch * Adding the labels trigger file for the RHEL-7 branch * Adding the labels trigger file for the RHEL-8 branch * Add module "90nvdimm" for NVDIMM support * Add --version to man page * Allow $DRACUT_INSTALL to be not an absolute path * Always pull in machinery to read ifcfg files * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated * btrfs: force preload btrfs module * busybox: simplify listing of supported utilities * Change the order of NFS servers during the boot NFS server provided by DHCP in next-server option has higher priority than DHCP-server itself * CI: remove Fedora 30, add Fedora 32 * cms: regenerate NetworkManager connections * cryptroot-ask: no warn if /run/cryptsetup exist * dasd: only install /etc/dasd.conf if present * dhclient-script: Fix typo in output of BOUND & BOUND6 cases * dmsquash-live-root: Remove obsolete osmin.img processing. * Document initqueue/online hook * Do not start inside container * don't prefer $TMPDIR over --tmpdir * dracut.cmdline.7.asc: clarify usage of `rd.lvm.vg` and `rd.lvm.lv` * dracut.cmdline.7.asc: fix typo * dracut.conf.5.asc: document how to config --no-compress in the config * dracut-functions: add ip_params_for_remote_addr() helper * dracut-functions: fix find_binary() to return full path * dracut-initqueue: Print more useful info in case of timeout * dracut-lib.sh: quote variables in parameter expansion patterns * dracut.modules.7.asc: fix another typo * dracut.modules.7.asc: fix reference to insmodpost module * dracut.sh: add check for invalid configuration files * dracut.sh: Add --version * dracut.sh: don't call fsfreeze on subvol of root file system * dracut.sh: FIPS workaround for openssl-libs on Fedora/RHEL * dracut.sh: fix early microcode detection logic * dracut.sh: fix errors pointed out by shellcheck. * dracut.sh: fix ia32 detection for uefi executables * dracut.sh: fix some indentation. * dracut.sh: Move the library workaround after squash * dracut.spec: add 90nvdimm * dracut.spec: add version check for deprecated files * Fix CI badges in README.md and fix dracut description * Fix CoC URL * fix graphics startup failure with the rhgb paramter in CentOS8.2 * Fix pre-trigger stage by replacing exit with return in lldpad.sh * Fix test in lsinitrd * Fix Unicode * Fix Unicode and dracut install labeler * github actions: use test container directly * .github: fix path to label workflow mapping file * i18n: Always install /etc/vconsole.conf * install: also install post weak dependencies of kernel modules * Install crypto modules in 90kernel-modules * install dependant libs too * lvm: fix removal of pvscan from udev rules * lvm: remove unnecessary ${initdir} from lvm_scan.sh * Make externally defined CFLAGS work * Makefile: fix VERSION again * Makefile: merge main-version and git-version earlier * Makefile: really make externally defined CFLAGS work * match simplified rd.zfcp format too * match the whole string * mkinitrd-dracut.sh: use vmlinux regex for ppc*, vmlinuz for i686 * mkinitrd-suse.sh: Fix i586 platform detection * mount-root.sh: fix writing fstab file with missing fsck flag * multipath: add automatic configuration for multipath * net-lib.sh: support infiniband network mac addresses * network: fix glob matching ipv6 addresses * network-manager: ensure that nm-run.sh is executed when needed * network-manager: install libnss DNS and mDNS plugins * network-manager: move connection generation to a lib file * network-manager: set kernel hostname from the command line * New labels file * New label trigger file * README.md: fix github action badge links * Remove cleanup_trace_mem calls * Remove memtrace-ko and rd.memdebug=4 support in dracut * Remove stratis module * Removing dracut entry not compat with new plugin * Switching label triggers from pull requests to cron * systemd: skip dependency add for non-existent units * TEST-03-USR-MOUNT/test.sh: increase loglevel * TEST-12-RAID-DEG/create-root.sh: more udevadm settle * TEST-41-NBD-NM/Makefile: should be based on TEST-40-NBD not TEST-20-NFS * TEST-99: exclude /etc/dnf/* from check * test/TEST-35-ISCSI-MULTI: bump disk space * test: use dd from /dev/zero, instead of creating files with a hole * .travis.yml: reformat * UEFI Mode: only write kernel cmdline to UEFI binary * Update master-labels.yml * url-lib: drop NSS if it's not in curl --version * Use TMPDIR if available ==== glib2 ==== Version update (2.64.4 -> 2.64.5) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.64.5: + Fix deadlock in `g_subprocess_communicate_async()`. + Bugs fixed: glgo#GNOME/GLib!1519, glgo#GNOME/GLib!1520, glgo#GNOME/GLib!1565, glgo#GNOME/GLib!1608, glgo#GNOME/GLib!1618, glgo#GNOME/GLib!1621. ==== glib2-branding-openSUSE ==== - Update .gschema.override.in (jsc#SLE-14772): * add different key for screenlock * update background color for SLE. ==== gnome-desktop ==== Version update (3.36.5 -> 3.36.6) Subpackages: gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0 - Add gnome-desktop-invalid-size-crash.patch: fix a crash caused by a malformed background xml file (bsc#1176596 glgo#GNOME/gnome-desktop#169). - Update to version 3.36.6: + No changes, version bump only. ==== gnome-settings-daemon ==== - fix build on s390x (wacom=false but wayland=true) ==== gnome-shell ==== Subpackages: gnome-shell-calendar - Update gnome-shell-fate324570-Make-GDM-background-image-configurable.patch: Bring noise-texture.png back which will be used as the default value of org.gnome.desktop.background.lockdialog picture-uri (boo#1176418). ==== gsettings-desktop-schemas ==== - Update gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch: Set noise-texture.png as the default value of picture-uri to avoid failed to load background error (boo#1176418). ==== harfbuzz ==== Version update (2.6.8 -> 2.7.2) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - update to 2.7.2: - Fix a regression in the previous release that caused a crash with Kaithi. - More OOM fixes. - ot-funcs now handles variable empty glyphs better when hvar/vvar isn't present. - Reverted a GDEF processing regression. - A couple of fixes to handle OOM better. - Use an implementation for round that always rounds up, some minor fluctuations are expected on var font specially when hb-ot callback is used. - Fix an AAT's `kerx` issue on broken rendering of Devanagari Sangam MN. - Remove AAT's `lcar` table support from _get_ligature_carets API, not even much use on macOS installed fonts (only two files). GDEF support is the recommended one and expected to work properly after issues fixed two releases ago. - Minor memory fixes to handle OOM better specially in hb-ft. - Minor .so files versioning scheme change and remove stable/unstable scheme differences, was never used in practice (always default to stable scheme). - We are now suggesting careful packaging of the library using meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson for more information. - Distribution package URL is changed, either use GitHub generated tarballs, `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz` or, even more preferably use commit hash of the release and git checkouts like, `git+https://github.com/harfbuzz/harfbuzz#commit=$commit` ==== installation-images-MicroOS ==== Version update (16.16 -> 16.18) - merge gh#openSUSE/installation-images#422 - prevent cross-filesystem relative symlinks to kmod in initrd (bsc#1169094) - 16.18 - merge gh#openSUSE/installation-images#421 - plymouthd.defaults will be moved to branding package (jsc#SLE-11637) - 16.17 ==== json-glib ==== Version update (1.4.4 -> 1.6.0) Subpackages: libjson-glib-1_0-0 typelib-1_0-Json-1_0 - Update to version 1.6.0: + docs: Add missing index for 1.6 symbols. + Updated translations. - Add gtk-doc BuildRequires and build gtk-doc api documentation and manpages via passing man=true and gtk_doc=enabled to meson. - Add check section and run meson_test macro during build. - Drop obsolete nuking of .la files, no longer needed. - Update to version 1.5.2: + Add getters with default fallback for JsonObject. + Clarify some expections of the json_object_get_*_member APIs. + Fix getting immutable root nodes from empty input. + Add `--output` option to json-glib-format. + Support loading files via memory mapping. + Add a symbol version to all exported symbols. - Pass -Dgtk_doc=disabled to meson: keep the gtk-doc disabled for now. ==== kaccounts-integration ==== - The -devel package needs intltool - Don't hardcode sover everywhere - Mention the sover in %files ==== kio-extras5 ==== Subpackages: libkioarchive5 - Remove obsolete build dependencies: openslp, KDELibs4Support, KHtml, exiv2 ==== ldb ==== Version update (2.1.4 -> 2.2.0) Subpackages: libldb2 python3-ldb - Release ldb 2.2.0 + Fix memory leak in ldb_kv_index_dn_ordered(); (bso#14299) + Fix off-by-one increment in lldb_add_msg_attr; (bso#14413) ==== libiptcdata ==== Version update (1.0.4 -> 1.0.5) Subpackages: libiptcdata0 - update to 1.0.5: * Omnibus python3 update * Modernize autoconf/automake init * Update to latest gtk-doc * Fix python3 module init ==== libproxy ==== - Build with KDE on Tumbleweed, Leap and SLE releases greater than SLE-15-SP2 (jsc#SLE-12256). ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 - Revert commit to fix screen geometry on startup (boo#1176750, QTBUG-86604): * 0001-Revert-Emit-QScreen-availableG-g-eometryChanged-on-l.patch ==== libsolv ==== Version update (0.7.14 -> 0.7.15) - fix deduceq2addedmap clearing bits outside of the map - conda: feature depriorization first - conda: fix startswith implementation - move find_update_seeds() call in cleandeps calculation - set SOLVABLE_BUILDHOST in rpm and rpmmd parsers - new testcase_mangle_repo_names() function - new solv_fmemopen() function - bump version to 0.7.15 - Enable zstd compression support for sle15 - Enable zstd compression support for sle15-sp2 ==== libssh ==== Version update (0.9.4 -> 0.9.5) Subpackages: libssh-config libssh4 - Add missing BR for openssh needed for tests - update to 0.9.5 (bsc#1174713, CVE-2020-16135): * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232) * Improve handling of library initialization (T222) * Fix parsing of subsecond times in SFTP (T219) * Make the documentation reproducible * Remove deprecated API usage in OpenSSL * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN * Define version in one place (T226) * Prevent invalid free when using different C runtimes than OpenSSL (T229) * Compatibility improvements to testsuite ==== libzypp ==== Version update (17.24.2 -> 17.25.0) - RepoInfo: Return the type of the local metadata cache as fallback (bsc#1176435) - VendorAttr: Fix broken "suse,opensuse" equivalence handling. Enhance API and testcases. (bsc#1174918) - Update docs regarding 'opensuse' namepace matching. - New solver testcase format. - Link against libzsd to close libsolvs open references (as we link statically) - BuildRequires: libsolv-devel >= 0.7.15. - version 17.25.0 (22) ==== mozilla-nss ==== Version update (3.55 -> 3.56) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - Update nss-fips-approved-crypto-non-ec.patch to match RC2 code being moved to deprecated/. - Remove nss-fix-dh-pkcs-derive-inverted-logic.patch. This was made obsolete by upstream changes. - update to NSS 3.56 Notable changes * bmo#1650702 - Support SHA-1 HW acceleration on ARMv8 * bmo#1656981 - Use MPI comba and mulq optimizations on x86-64 MacOS. * bmo#1654142 - Add CPU feature detection for Intel SHA extension. * bmo#1648822 - Add stricter validation of DH keys in FIPS mode. * bmo#1656986 - Properly detect arm64 during GYP build architecture detection. * bmo#1652729 - Add build flag to disable RC2 and relocate to lib/freebl/deprecated. * bmo#1656429 - Correct RTT estimate used in 0-RTT anti-replay. * bmo#1588941 - Send empty certificate message when scheme selection fails. * bmo#1652032 - Fix failure to build in Windows arm64 makefile cross-compilation. * bmo#1625791 - Fix deadlock issue in nssSlot_IsTokenPresent. * bmo#1653975 - Fix 3.53 regression by setting "all" as the default makefile target. * bmo#1659792 - Fix broken libpkix tests with unexpired PayPal cert. * bmo#1659814 - Fix interop.sh failures with newer tls-interop commit and dependencies. * bmo#1656519 - NSPR dependency updated to 4.28 - do not hard require mozilla-nss-certs-32bit via baselibs (boo#1176206) ==== openSUSE-build-key ==== - the container keys for openSUSE and SUSE Linux Enterprise are actually not the build keys. (bsc#1176818) - build(a)suse.de key for SLE12 was extended. (bsc#1176759) ==== pango ==== Version update (1.46.1 -> 1.46.2) Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0 - Update to version 1.46.2: + Fix pango_win32_font_map_load_font with falback families. + Fix an assertion in pango_language_get_scripts. + Fix a crash in get_items_log_attrs. + Fix attribute iterators with overlapping attributes. + Fix rendering of Emoji keycap sequences. + ci: Run the testsuite under asan and fix all reported issues. + build: Make libthai, cairo, xft, fontconfig, freetype dependencies meson features. ==== perl-libwww-perl ==== Version update (6.47 -> 6.49) - updated to 6.49 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.49 2020-09-24 00:27:56Z - Require network testing enabled for t/redirect.t (GH#351) (Olaf Alders) - updated to 6.48 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.48 2020-09-20 15:25:51Z - Support 308 Permanent Redirect (GH#349) (Galen Huntington) ==== pipewire ==== Version update (0.3.10 -> 0.3.11) Subpackages: libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.11: * PipeWire improvements + Properly cleanup the mixer structures when a port is removed, this should fix client crashes related to port config changes and other random crashes. + Optimize the preferred formats in the audio converter. Higher quality formats with higher performance are chosen first. + Make sure the time reported by pw_stream is always increasing, even when the driver and clock changes. + There is now also a system service and socket that can be used to enable PipeWire systemwide. This is however not recommended and disabled by default. + Fix channelmixer 5.1 to stereo mix matrix. It was not reading the conversion matrix correctly and cause channels to be dropped. The channelmixer will now also normalize the volume, like what pulseaudio does. + The channelmixer will now just copy channels when no layout has been given. It has also optimized paths for this. This makes it possible for apps to request > 8 channels from the alsa plugin (ardour). + Port, Node and Link will now also emit an error on the resources in addition to updating the error in the info. This would make it easier to track negotiation errors in the session manager later. + many small fixes and cleanups. + Fix compatibility: - DOSBox: fix crash because of double free in pw_stream * Session manager improvements + The session manager will now try to configure the client to the channel configuration of the sink/source. It will only do this for downmixing, never for upmixing and also never when the client has the dont-remix property set. It will also renegotiate the channel layout when moving a stream to a new sink/source. + Configuration state is now saved in XDG_CONFIG_HOME. Previously it was saved in $HOME/.pipewire-media-session/ You can migrate the state by moving the files to $XDG_CONFIG_HOME/pipewire-media-session (or $HOME/.config/pipewire-media-session as a fallback when XDG_CONFIG_HOME is not set). * Device support + Bluetooth sources and sinks should work better now. + There is now also a new bluetooth backend using hsphfpd. + fix the ALSA UCM Off profile for alsa pcm devices + improve ALSA port and profile switching. The ACP device will now switch to the best port and profile when availability changes. * PulseAudio layer improvements + Implement some more callbacks. The pulse layer will now also notify applications of stream moved, started and latency changes. + Fix error code when an object was not found. We now return PA_ERR_NOENTITY instead of PA_ERR_INVALID. + Add some support for loading new null sinks. Applications such as pulseeffects use this. Note that pulseeffects does not yet work reliably but can start now. + Improve handling of profile and port updates, it should work much more reliable now. Apps should now also again receive volume updates from sinks/sources. + Fix compatibility: - openal-soft 1.20 - pavucontrol (checks PA_ERR_NOENTITY) * JACK layer improvements + improve default source and sink handling. It was not updated correctly in all cases. + add samplerate and period to the pw-jack wrapper to easily configure the desired samplerate and perdiod for the app. * ALSA plugin improvements + Add a mixer entry in the alsa config file. + Implement support for planar types, rework the processing function to make it more robust. + refuse to load the alsa plugin when linked against 0.2. This catches some old apps linked against 0.2 that want to use the alsa plugin. + Fix compatibility: - linphone (ALSA SIGFPE when _status() is called before _prepare()). - Add patch from upstream to fix audio stutters in discord and probably other applications when using alsa directly. * 0001-alsa-dont-change-the-resampler-delay-value.patch ==== samba ==== Version update (4.12.5+git.168.88cc07e6cbf -> 4.13.0+git.138.ff2d5480c67) Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr1 libnetapi0 libsamba-credentials0 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-libs samba-libs-python3 - Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428) - Update to samba 4.12.7 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.12.6 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403). + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424). + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450). + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426). + PANIC: Assert failed in get_lease_type(); (bso#14428). + util: Fix build on AIX by fixing the order of replace.h include; (bso#14422). + srvsvc_NetFileEnum asserts with open files; (bso#14355). + KDC breaks with DES keys still in the database and msDS-SupportedEncryptionTypes 31 indicating support for it; (bso#14354). + s3:smbd: Make sure vfs_ChDir() always sets conn->cwd_fsp->fh->fd = AT_FDCWD; (bso#14427). + PANIC: Assert failed in get_lease_type(); (bso#14428). + docs: Fix documentation for require_membership_of of pam_winbind.conf; (bso#14358). + ctdb-scripts: Use nfsconf utility for variable values in CTDB NFS scripts; (bso#14444). + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425). ==== snapper ==== Version update (0.8.13 -> 0.8.14) Subpackages: libsnapper5 - added option to cleanup to make requested free space available (jsc#SLE-15765) - version 0.8.14 ==== sysconfig ==== Version update (0.85.5 -> 0.85.6) Subpackages: sysconfig-netconfig - version 0.85.6 - netconfig: execute chrony/helper in /usr/libexec with fallback to it's previous location in /usr/lib (boo#1176285) - netconfig: only write files like /etc/resolv.conf on content change to avoid that e.g. dnsmasq (if running) re-reads the /etc/resolv.conf and re-initializes itself (bsc#1176325) ==== tracker2 ==== Version update (2.3.5 -> 2.3.6) Subpackages: libtracker-common-2_0 libtracker-control-2_0-0 libtracker-miner-2_0-0 libtracker-sparql-2_0-0 - Update to version 2.3.6: + Do not autostart tracker-store. + Updated translations. - Rename to tracker2: compatibility package while the world moves to Tracker 3. - Provide/Obsolete tracker and tracker-lang from the main package, and tracker-devel from tracker2-devel. ==== vim ==== Version update (8.2.1551 -> 8.2.1719) Subpackages: vim-data-common vim-small - Updated to version 8.2.1719, fixes the following problems * Vim9: error for argument type does not mention the number. * Warnings from asan with clang-11. (James McCoy) * Crash in edit test. * Crash in normal test. * Not all tests are executed on Github Actions. * Cursorline highlighting always overrules sign highlighting. * Crash in :vimgrep when started as "vim -n". (Raul Segura) * Signs test fails. * s390x tests work again. * Using NULL pointers in some code. (James McCoy) * Using NULL pointers in fold code. * Vim9: error when using "%" where a buffer is expected. * Vim9: error when using '%" with setbufvar() or getbufvar(). * A few remaining errors from ubsan. * Spellfile test sometimes fails. * Not all Bazel files are recognized. * No example to use ubsan with clang. * prop_find() skips properties in the same line if "skipstart" is used. * Vim9: fixes for functions not tested; failure in getchangelist(). * Configure check for dirfd() does not work on HPUX. (Michael Osipov) * Vim9: count() third argument cannot be "true". * Vim9: expand() does not take "true" as argument. * Vim9: getreg() does not take "true" as argument. * Vim9: glob() doesnot take "true" as argument. * Vim9: globpath() doesnot take "true" as argument. * Vim9: index() does not take "true" as argument. * Vim9: hasmapto(), mapcheck() and maparg() do not take "true" as argument. * Vim9: popup_clear() does not take "true" as argument. * Reports from asan are not optimal. * Wildmenu does not work properly. * Using line() for global popup window doesn't work. * The channel log does not show typed text. * Vim9: cannot use "true" for "skipstart" in prop_find(). * Messages in globals.h not translated, xgettext on MS-Windows not fully supported. * :resize command not fully tested. * Loop for handling keys for the command line is too long. * Cannot read back the prompt of a prompt buffer. * Term_start() options for size are overruled by 'termwinsize'. (Sergey Vlasov) * Vim9: bufnr() doesn't take "true" argument. * Using winheight('.') in tests works but is wrong. * Vim9: passing "true" to char2nr() fails. * Tests do not check the error number properly.0 * Pull requests on github do not notify a maintainer. * Cannot easily see what Vim sends to the terminal. * Using win_screenpos('.') in tests works but is wrong. * The channel source file is too big. * Starting a hidden terminal resizes the current window. * Missing line end when skipping a long line with :cgetfile. * Vim9: cannot use "true" with deepcopy(). * Vim9: cannot use 'true" with garbagecollect(). * Vim9: cannot use 'true" with getbufinfo(). * Vim9: cannot use "true" with getchar(). * Vim9: cannot use "true" with getcompletion(). * Vim9: cannot use "true" with has(). * Vim9: getchar() test fails with GUI. * Vim9: test fails when build without +channel. * Vim9: cannot pass "true" to list2str() and str2list(). * Vim9: cannot pass "true" to nr2char(). * Vim9: cannot pass "true" to prop_remove(). * Vim9: cannot pass "true" to prop_type_add(). * Vim9: cannot pass "true" to searchcount(). * Vim9: cannot pass "true" to searchdecl(). * Vim9: cannot pass "true" to synID(). * Vim9: cannot pass "true" to win_splitmove(). * Vim9: cannot pass "true" to setloclist(). * Vim9: cannot pass "true" to spellsuggest(). * searchcount() test fails. * Crash when using submatch(0, 1) in substitute(). * Loop to handle keys for the command line is too long. * Vim9: using :call where it is not needed. * Vim9: cannot pass "true" to split(), str2nr() and strchars(). * Compiler warning for use of fptr_T. * Test for strchars() fails with different error number. * Vim9: cannot pass "true" to submatch(), term_gettty() and term_start() * Vim9: cannot pass "true" to timer_paused(). * Test fails without terminal feature. * Terminal test fails. * test_fails() does not check the context of the line number. * Not checking the context of test_fails(). * Some error messages are internal but do not use iemsg(). * Loop to handle keys for the command line is too long. * No digraph for 0x2022 BULLET. * Get stuck if a popup filter causes an error. * Vim9: :put ={expr} does not work inside :def function. * Leaking memory when popup filter function can't be called. * Options window cannot be translated. * Amiga: missing header for getgrgid(). * Vim9: cannot use 0 or 1 where a bool is expected. * Otions test fails. * Vim9: :defcompile compiles dead functions. * Vim9: cannot assign 1 and 0 to bool at script level. * GTK3: icons become broken images when resized. * Vim9: result of expression with && and || cannot be assigned to a bool variable. * Amiga: no common build file for Amiga (-like) systems. * GTK3: using old file chooser. * Vim9: result of && and || expression cannot be assigned to a bool at the script level. * Spellfile code not completely tested. * Cannot translate lines in the options window. * Expand('<stack>') does not include the final line number. * When job writes to hidden buffer current window has display errors. (Johnny McArthur) * Cannot build with Strawberry Perl 5.32.0. * Vim9: callstack wrong if :def function calls :def function. * Vim9: no proper error for nested ":def!". * Expand('<stack>') has trailing "..". * Spellfile code not completely tested. * Assert functions require passing expected result as the first argument, which isn't obvious. * Cannot connect to 127.0.0.1 for host with only IPv6 addresses. * :mksession does not restore shared terminal buffer properly. * Options window entries cannot be translated. * Memory leak when using :mkview with a terminal buffer. * Cannot do fuzzy string matching. * The initial value of 'backupskip' can have duplicate items. * Local function name cannot shadow a global function name. * Vim9: not accepting 0 or 1 as bool when type is any. * Vim9: memory leak when storing a value fails. * A couple of gcc compiler warnings. * Vim9: stray error for missing white space. * v_lock is used when it is not initialized. (Yegappan Lakshmanan) * complete_info() selected index has an invalid value. (Ben Jackson) * Vim9: internal error when using variable that was not set. * MinGW: testdir makefile deletes non-existing file. * Compiler warnings for function typecast. * Memory access errors when calling setloclist() in an autocommand. * Crash when using ":set" after ":ownsyntax". (Dhiraj Mishra) * Vim9: ":*" is not recognized as a range. * Vim9: line number for compare error is wrong. * Vim9: unnessary :call commands in tests. * Vim9: const works in an unexpected way. * Vim9: assignment test fails. * "gF" does not use line number after file in Visual mode. * Vim9: cannot declare a constant value. * Vim9: "const!" not sufficiently tested. * Vim9: out of bounds error. * Increment/decrement removes text property. * 'colorcolumn' doesn't show in indent. * Text properties not adjusted for "I" in Visual block mode. * Vim9: list<any> is not accepted where list<number> is expected. * Build fails because TTFLAG_STATIC is missing. * "hi def" does not work for cleared highlight. * Compiler warning for loss if data. * Vim9: crash when using varargs type "any". * Unused (duplicate) macros. * Inconsistent capitalization of error messages. * Cannot lock a variable in legacy Vim script like in Vim9. * Build failure due to missing error message. * Vim9: try/catch causes wrong value to be returned. * Vim9: sort("i") does not work. * Crash when using undo after deleting folded lines. * ":highlight clear" does not restore default link. * Vim9: crash in for loop when autoload script has an error. * "verbose hi Name" reports incorrect info after ":hi clear". * Vim9: crash after running into the "Multiple closures" error. * Small inconsitency in highlight test. * Vim9: error message for function has unpritable characters. * Vim9: memory leak when using multiple closures. * Vim9: list of list type can be wrong. * Vim9: leaking memory when using partial. * Vim9: leaking memory when calling a lambda. * Motif GUI: crash when setting menu colors. (Andrzej Bylicki) * Text properties corrupted with substitute command. (Filipe Brandenburger) * Motif GUI: commented out code missed {}. * Options window has duplicate translations. * Vim9: :def function disallows "firstline" and "lastline" argument names for no good reason. ==== webkit2gtk3 ==== Version update (2.28.4 -> 2.30.0) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.30.0: + Fix NTLM authentication. + Don't try to use SHM on wayland with older wpebackend-fdo. + Fix the build due to seccomp.h header not found. - Drop seccomp-build-fix.patch and wpe-shm-check.patch: fixed upstream. - Add wpe-shm-check.patch: make SHM initialization fail for wpebackend-fdo < 1.7.0. - Add seccomp-build-fix.patch: pass seccomp include directory to g++. - Re-enable bubblewrap sandbox for SLE-15-SP2 and Tumbleweed. - Update to version 2.29.92: + Fix user agent header after a redirect when a new quirk is required. + Stop using firefox user agent quirk for google docs. + Fix rendering frames timeline panel in web inspector. + Fix per-thread cpu usage in web inspector. + Fix several crashes and rendering issues. - Changes from version 2.29.91: + Fix a web process crash introduced in 2.29.90. - Changes from version 2.29.90: + Fix font variation settings when font smoothing setting is also present. + Fix HTML drag and drop operations. + Fix argument order for clone syscall seccomp filter on s390x. + Fix a crash when selecting text. + Fix several crashes and rendering issues. - Changes from version 2.29.4: + Add support for backdrop filters. + Add support for text-underline-offset and text-decoration-thickness. + Add OpenCDM and AV1 support to media backend. + Add new API to get ITP data summary. + Use mobile user-agent on tablets. + Fix several crashes and rendering issues. - Changes from version 2.29.3: + Add webkit_authentication_request_get_security_origin. + Change the cookies accept policy to always when no-third-party is set and ITP is enabled. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Add support for sndio to bubblewrap sandbox. + Also handle dark themes when the name ends with -Dark. + Fix a race condition causing a crash in media player. + Fix several crashes and rendering issues. - Changes from version 2.29.2: + Add Intelligent Tracking Prevention (ITP) support. + Add support for video formats in img elements. + Add API to handle video autoplay policy that now defaults to disallow autoplay videos with audio. + Add API to mute a web view. + Add API to allow applications to handle the HTTP authentication credential storage. + Add a WebKitSetting to set the media content types requiring hardware support. + Fix a crash during drag an drop due to a bug introduced in 2.29.1. + Do not start page load during animation in back/forward gesture. + Fix several crashes and rendering issues. - Changes from version 2.29.1: + Stop using GTK theming to render form controls. + Add API to disable GTK theming for scrollbars too. + Fix several race conditions and threading issues in the media player. + Add USER_AGENT_BRANDING build option. + Add paste as plain text option to the context menu for rich editable content. + Fix several crashes and rendering issues. + Updated translations. - Rebase webkit2gtk3-fdo-soname.patch. - Add pkgconfig(libsystemd) BuildRequires: new dependency. ==== wpa_supplicant ==== - Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build - Enable SAE support(jsc#SLE-14992). ==== xen ==== Version update (4.14.0_06 -> 4.14.0_08) - bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch - Fix problems in xen.spec with building on aarch64 - Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks. - Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin ==== yast2 ==== Version update (4.3.27 -> 4.3.29) - Added "--plain" and "--full" options for the "systemctl" calls, these are recommended when processing the output by scripts (bsc#1176714) - 4.3.29 - Decrease error logging to avoid false positives in the y2log (bsc#1176653) - 4.3.28 ==== zypper ==== Version update (1.14.38 -> 1.14.39) Subpackages: zypper-needs-restarting - Use new testcase API in libzypp. - BuildRequires: libzypp-devel >= 17.25.0. - help: prevent 'whatis' from writing to stderr (bsc#1176712) - wp: point out that command is aliased to a search command and searches case-insensitive (jsc#SLE-16271) - version 1.14.39 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20200925 released!
by Richard Brown 27 Sep '20

27 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: branding-openSUSE busybox-links conmon (2.0.20 -> 2.0.21) dracut (050+suse.75.g266a76d9 -> 050+suse.226.gb86d9bcf) glib2 (2.64.4 -> 2.64.5) glib2-branding-openSUSE helm (3.3.1 -> 3.3.3) installation-images-MicroOS (16.16 -> 16.18) kured (1.4.5 -> 1.5.0) kustomize (3.8.0 -> 3.8.4) ldb (2.1.4 -> 2.2.0) libproxy libsolv (0.7.14 -> 0.7.15) libssh (0.9.4 -> 0.9.5) libzypp (17.24.2 -> 17.25.0) mozilla-nss (3.55 -> 3.56) openSUSE-build-key rook (1.4.0+git0.g801c5934 -> 1.4.3+git18.g42e1675e) snapper (0.8.13 -> 0.8.14) sysconfig (0.85.5 -> 0.85.6) vim (8.2.1551 -> 8.2.1719) wpa_supplicant xen (4.14.0_06 -> 4.14.0_08) yast2 (4.3.27 -> 4.3.29) zypper (1.14.38 -> 1.14.39) === Details === ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE - Update branding-tumbleweed.zip: Rebrand all components of SLES/D in boot progress (jsc#SLE-14772). ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-xz - Add post/postun requires for busybox to busybox-sh (/usr/bin/ash is a symlink to busybox) ==== conmon ==== Version update (2.0.20 -> 2.0.21) - Update to version 2.0.21: * bump to v2.0.21 * protect against kill(-1) * Makefile: enable debuginfo generation * Remove go.sum file and add go.mod * Fail if conmon config could not be written * nix: remove double definition for e2fsprogs * Speedup static build by utilizing CI cache on `/nix` folder * Fix nix build for failing e2fsprogs tests * test: fix CI * Use Podman for building ==== dracut ==== Version update (050+suse.75.g266a76d9 -> 050+suse.226.gb86d9bcf) Subpackages: dracut-ima - Update to version 050+suse.226.gb86d9bcf: We are now tracking the master branch, preparing for a 051 release within the next weeks. (the list includes changes previously backported) * 01fips: modprobe failures during manual module loading is not fatal * 01fips: turn info calls into fips_info calls * 04watchdog: split the watchdog module install * 35network-legacy: simplify fallback dhcp setup * 51-dracut-rescue.install: Don't use BLS fragment shipped by kernel package * 90crypt: make `rd.luks.key` usable with encrypted keydev. * 90crypt/module-setup.sh: try to catch kernel config changes * 90kernel-modules: add pci_hyperv * 90kernel-modules/module-setup.sh: add sg kernel module * 90kernel-modules: remove nfit from static module list * 90lvm: do not add newline to cmdline * 90nvdimm: include nvdimm keys in initrd * 90ppcmac: respect DRACUT_ARCH, don't exclude ppcle * 91zipl: parse-zipl.sh: honor SYSTEMD_READY * 95cifs: install new softdeps (sha512, gcm, ccm, aead2) * 95cifs: pass rootflags to mount * 95dcssblk: fix script permissions * 95fcoe: default rd.nofcoe to false * 95iscsi: fix ipv6 target discovery * 95iscsi: fix missing space when compiling cmdline args * 95iscsi: use ip_params_for_remote_addr() * 95nfs: only install rpc services for NFS < 4 when hostonly is strict * 95nfs: use ip_params_for_remote_addr() * 95nvmf: add module for NVMe-oF * 95nvmf: add NVMe over TCP support * 95nvmf: fix typo in the example documentation * 95resume: Do not resume on iSCSI, FCoE or NBD * 95zfcp_rules/parse-zfcp.sh: remove rule existence check * 95znet: Add a rd.znet_ifname= option * 99base: Remove duplicate nfsroot_to_var from dracut-lib.sh * 99memstrack: hook script should not call exit * 99memstrack: Only start tracking service when rd.memdebug=4|5 * 99squash: Don't hardcode the squash sub directories * 99squash: improve pre-requirements check * 99squash: simplify the code * Add 99memstrack module * Adding a bug report template * Adding a feature request template * Adding a pull request template * Adding code of conduct * Adding documentation template * Adding security policy * Adding the labels file for master * Adding the labels file for the RHEL-6 branch * Adding the labels file for the RHEL-7 branch * Adding the labels file for the RHEL-8 branch * Adding the labels trigger file for the Master branch * Adding the labels trigger file for the RHEL-6 branch * Adding the labels trigger file for the RHEL-7 branch * Adding the labels trigger file for the RHEL-8 branch * Add module "90nvdimm" for NVDIMM support * Add --version to man page * Allow $DRACUT_INSTALL to be not an absolute path * Always pull in machinery to read ifcfg files * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated * btrfs: force preload btrfs module * busybox: simplify listing of supported utilities * Change the order of NFS servers during the boot NFS server provided by DHCP in next-server option has higher priority than DHCP-server itself * CI: remove Fedora 30, add Fedora 32 * cms: regenerate NetworkManager connections * cryptroot-ask: no warn if /run/cryptsetup exist * dasd: only install /etc/dasd.conf if present * dhclient-script: Fix typo in output of BOUND & BOUND6 cases * dmsquash-live-root: Remove obsolete osmin.img processing. * Document initqueue/online hook * Do not start inside container * don't prefer $TMPDIR over --tmpdir * dracut.cmdline.7.asc: clarify usage of `rd.lvm.vg` and `rd.lvm.lv` * dracut.cmdline.7.asc: fix typo * dracut.conf.5.asc: document how to config --no-compress in the config * dracut-functions: add ip_params_for_remote_addr() helper * dracut-functions: fix find_binary() to return full path * dracut-initqueue: Print more useful info in case of timeout * dracut-lib.sh: quote variables in parameter expansion patterns * dracut.modules.7.asc: fix another typo * dracut.modules.7.asc: fix reference to insmodpost module * dracut.sh: add check for invalid configuration files * dracut.sh: Add --version * dracut.sh: don't call fsfreeze on subvol of root file system * dracut.sh: FIPS workaround for openssl-libs on Fedora/RHEL * dracut.sh: fix early microcode detection logic * dracut.sh: fix errors pointed out by shellcheck. * dracut.sh: fix ia32 detection for uefi executables * dracut.sh: fix some indentation. * dracut.sh: Move the library workaround after squash * dracut.spec: add 90nvdimm * dracut.spec: add version check for deprecated files * Fix CI badges in README.md and fix dracut description * Fix CoC URL * fix graphics startup failure with the rhgb paramter in CentOS8.2 * Fix pre-trigger stage by replacing exit with return in lldpad.sh * Fix test in lsinitrd * Fix Unicode * Fix Unicode and dracut install labeler * github actions: use test container directly * .github: fix path to label workflow mapping file * i18n: Always install /etc/vconsole.conf * install: also install post weak dependencies of kernel modules * Install crypto modules in 90kernel-modules * install dependant libs too * lvm: fix removal of pvscan from udev rules * lvm: remove unnecessary ${initdir} from lvm_scan.sh * Make externally defined CFLAGS work * Makefile: fix VERSION again * Makefile: merge main-version and git-version earlier * Makefile: really make externally defined CFLAGS work * match simplified rd.zfcp format too * match the whole string * mkinitrd-dracut.sh: use vmlinux regex for ppc*, vmlinuz for i686 * mkinitrd-suse.sh: Fix i586 platform detection * mount-root.sh: fix writing fstab file with missing fsck flag * multipath: add automatic configuration for multipath * net-lib.sh: support infiniband network mac addresses * network: fix glob matching ipv6 addresses * network-manager: ensure that nm-run.sh is executed when needed * network-manager: install libnss DNS and mDNS plugins * network-manager: move connection generation to a lib file * network-manager: set kernel hostname from the command line * New labels file * New label trigger file * README.md: fix github action badge links * Remove cleanup_trace_mem calls * Remove memtrace-ko and rd.memdebug=4 support in dracut * Remove stratis module * Removing dracut entry not compat with new plugin * Switching label triggers from pull requests to cron * systemd: skip dependency add for non-existent units * TEST-03-USR-MOUNT/test.sh: increase loglevel * TEST-12-RAID-DEG/create-root.sh: more udevadm settle * TEST-41-NBD-NM/Makefile: should be based on TEST-40-NBD not TEST-20-NFS * TEST-99: exclude /etc/dnf/* from check * test/TEST-35-ISCSI-MULTI: bump disk space * test: use dd from /dev/zero, instead of creating files with a hole * .travis.yml: reformat * UEFI Mode: only write kernel cmdline to UEFI binary * Update master-labels.yml * url-lib: drop NSS if it's not in curl --version * Use TMPDIR if available ==== glib2 ==== Version update (2.64.4 -> 2.64.5) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.64.5: + Fix deadlock in `g_subprocess_communicate_async()`. + Bugs fixed: glgo#GNOME/GLib!1519, glgo#GNOME/GLib!1520, glgo#GNOME/GLib!1565, glgo#GNOME/GLib!1608, glgo#GNOME/GLib!1618, glgo#GNOME/GLib!1621. ==== glib2-branding-openSUSE ==== - Update .gschema.override.in (jsc#SLE-14772): * add different key for screenlock * update background color for SLE. ==== helm ==== Version update (3.3.1 -> 3.3.3) - Update to version 3.3.3: * fix: allow serverInfo field on index files - Update to version 3.3.2: * fix rebase * fix(cmd/helm): add build tags for architecture * switched to stricter YAML parsing on plugin metadata files * Merge pull request from GHSA-m54r-vrmv-hw33 * Merge pull request from GHSA-jm56-5h66-w453 * Merge pull request from GHSA-9vp5-m38w-j776 * fixed bug that caused helm create to not overwrite modified files * replace --no-update with --force-update and invert default. BREAKING. * improve the HTTP detection for tar archives * handle case where dependency name collisions break dependency resolution * validate the name passed in during helm create * refactor the release name validation to be consistent across Helm * fix: check mode bits on kubeconfig file ==== installation-images-MicroOS ==== Version update (16.16 -> 16.18) - merge gh#openSUSE/installation-images#422 - prevent cross-filesystem relative symlinks to kmod in initrd (bsc#1169094) - 16.18 - merge gh#openSUSE/installation-images#421 - plymouthd.defaults will be moved to branding package (jsc#SLE-11637) - 16.17 ==== kured ==== Version update (1.4.5 -> 1.5.0) - Update to version 1.5.0: * Prepare 1.5.0 release * Bump helm/kind-action from v1.0.0-rc.1 to v1.0.0 * Bump helm/chart-testing-action from v1.0.0-rc.2 to v1.0.0 * Add dependabot * Prepare for k8s release 1.19 (Aug 25) ==== kustomize ==== Version update (3.8.0 -> 3.8.4) - Update to version 3.8.4 - Update api to v0.6.2 - Update kyaml to v0.8.1 - Refresh vendor.tar.xz ==== ldb ==== Version update (2.1.4 -> 2.2.0) - Release ldb 2.2.0 + Fix memory leak in ldb_kv_index_dn_ordered(); (bso#14299) + Fix off-by-one increment in lldb_add_msg_attr; (bso#14413) ==== libproxy ==== - Build with KDE on Tumbleweed, Leap and SLE releases greater than SLE-15-SP2 (jsc#SLE-12256). ==== libsolv ==== Version update (0.7.14 -> 0.7.15) - fix deduceq2addedmap clearing bits outside of the map - conda: feature depriorization first - conda: fix startswith implementation - move find_update_seeds() call in cleandeps calculation - set SOLVABLE_BUILDHOST in rpm and rpmmd parsers - new testcase_mangle_repo_names() function - new solv_fmemopen() function - bump version to 0.7.15 - Enable zstd compression support for sle15 - Enable zstd compression support for sle15-sp2 ==== libssh ==== Version update (0.9.4 -> 0.9.5) Subpackages: libssh-config libssh4 - Add missing BR for openssh needed for tests - update to 0.9.5 (bsc#1174713, CVE-2020-16135): * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232) * Improve handling of library initialization (T222) * Fix parsing of subsecond times in SFTP (T219) * Make the documentation reproducible * Remove deprecated API usage in OpenSSL * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN * Define version in one place (T226) * Prevent invalid free when using different C runtimes than OpenSSL (T229) * Compatibility improvements to testsuite ==== libzypp ==== Version update (17.24.2 -> 17.25.0) - RepoInfo: Return the type of the local metadata cache as fallback (bsc#1176435) - VendorAttr: Fix broken "suse,opensuse" equivalence handling. Enhance API and testcases. (bsc#1174918) - Update docs regarding 'opensuse' namepace matching. - New solver testcase format. - Link against libzsd to close libsolvs open references (as we link statically) - BuildRequires: libsolv-devel >= 0.7.15. - version 17.25.0 (22) ==== mozilla-nss ==== Version update (3.55 -> 3.56) - Update nss-fips-approved-crypto-non-ec.patch to match RC2 code being moved to deprecated/. - Remove nss-fix-dh-pkcs-derive-inverted-logic.patch. This was made obsolete by upstream changes. - update to NSS 3.56 Notable changes * bmo#1650702 - Support SHA-1 HW acceleration on ARMv8 * bmo#1656981 - Use MPI comba and mulq optimizations on x86-64 MacOS. * bmo#1654142 - Add CPU feature detection for Intel SHA extension. * bmo#1648822 - Add stricter validation of DH keys in FIPS mode. * bmo#1656986 - Properly detect arm64 during GYP build architecture detection. * bmo#1652729 - Add build flag to disable RC2 and relocate to lib/freebl/deprecated. * bmo#1656429 - Correct RTT estimate used in 0-RTT anti-replay. * bmo#1588941 - Send empty certificate message when scheme selection fails. * bmo#1652032 - Fix failure to build in Windows arm64 makefile cross-compilation. * bmo#1625791 - Fix deadlock issue in nssSlot_IsTokenPresent. * bmo#1653975 - Fix 3.53 regression by setting "all" as the default makefile target. * bmo#1659792 - Fix broken libpkix tests with unexpired PayPal cert. * bmo#1659814 - Fix interop.sh failures with newer tls-interop commit and dependencies. * bmo#1656519 - NSPR dependency updated to 4.28 - do not hard require mozilla-nss-certs-32bit via baselibs (boo#1176206) ==== openSUSE-build-key ==== - the container keys for openSUSE and SUSE Linux Enterprise are actually not the build keys. (bsc#1176818) - build(a)suse.de key for SLE12 was extended. (bsc#1176759) ==== rook ==== Version update (1.4.0+git0.g801c5934 -> 1.4.3+git18.g42e1675e) - fixed spec-file: * operator.yaml does not get changed to use the SUSE-images - helm chart, manifests: * fixed tolerations * Update SUSE documentation URL in NOTES.txt - ceph: fix drive group deployment failure (bsc#1176170) - helm chart, manifests: * Add tolerations to cluster & CRDs * Require kubeVersion >= 1.11 * Use rbac.authorization.k8s.io/v1 * Add affinities for label schema * Set Rook log level to DEBUG * Remove FlexVolume agent * Require currentNamespaceOnly=true * Replace NOTES.txt with SUSE specific version - Include operator and common yamls in manifest package - Update to v1.4.3 * The Ceph-CSI driver was being unexpectedly removed by the garbage collector in some clusters. For more details to apply a fix during the upgrade to this patch release, see these steps. (#616) * Add storageClassDeviceSet label to osd pods (#6225) * DNS suffix issue for OBCs in custom DNS suffix clusters (#6234) * Cleanup mon canary pvc if the failover failed (#6224) * Only enable mgr init container if the dashboard is enabled (#6198) * cephobjectstore monitoring goroutine must be stopped during uninstall (#6208) * Remove NParts and Cache_Size from MDCACHE block in the NFS configuration (#6207) * Purge a down osd with a job created by the admin (#6127) * Do not use label selector on external mgr service (#6142) * Allow uninstall even if volumes still exist with a new CephCluster setting (#6145) - Update to v1.4.2 - Patch release focusing on small feature additions and bug fixes. * Improve check for LVM on the host to allow installing of OSDs (#6175) * Set the OSD prepare resource limits (#6118) * Allow memory limits below recommended settings (#6116) * Use full DNS suffix for object endpoint with OBCs (#6170) * Remove the CSI driver lifecycle preStop hook (#6141) * External cluster optional settings for provisioners (#6048) * Operator watches nodes that match OSD placement rules (#6156) * Allow user to add labels to the cluster daemon pods (#6084 #6082) * Fix vulnerability in package golang.org/x/text (#6136) * Add expansion support for encrypted osd on pvc (#6126) * Do not use realPath for OSDs on PVCs (#6120, @leseb) * Example object store manifests updated for consistency (#6123) * Separate topology spread constrinats for osd prepare jobs and osd daemons (#6103) * Pass CSI resources as strings in the helm chart (#6104) * Improve callCephVolume() for list and prepare (#6059) * Improved multus support for the CSI driver configuration (#5740) * Object store healthcheck yaml examples (#6090) * Add support for wal encrypted device on pvc (#6062) * Updated helm usage in documentation (#6086) * More details for RBD Mirroring documentation (#6083) - Build process changes: - Set CSI sidecar versions through _service, and set all versions in code through a single patch file + csi-images-SUSE.patch - csi-dummy-images.patch - Use github.com/SUSE/rook and suse-release-1.4 tag in update.sh - Create module dependencies through _service, and store these dependencies in vendor.tar.gz (replacing rook-[version]-vendor.tar.xz) - Modify build commands to include "-mod=vendor" to use new vendor tarball - Add CSI sidecars as BuildRequires, in order to determine versions through _service process - Replace %setup of vendor tarball with a simple tar extraction - Move registry detection to %prep, and set correct registry through a search and replace on the SUSE_REGISTRY string - Use variables to track rook, ceph and cephcsi versions - Add '#!BuildTag', and 'appVersion' to chart.yaml - Add required versioning to helm chart - Leave ceph-csi templates in /etc, and include them in main rook package. - csi-template-paths.patch - Include only designated yaml examples in rook-k8s-yaml package ==== snapper ==== Version update (0.8.13 -> 0.8.14) Subpackages: libsnapper5 - added option to cleanup to make requested free space available (jsc#SLE-15765) - version 0.8.14 ==== sysconfig ==== Version update (0.85.5 -> 0.85.6) Subpackages: sysconfig-netconfig - version 0.85.6 - netconfig: execute chrony/helper in /usr/libexec with fallback to it's previous location in /usr/lib (boo#1176285) - netconfig: only write files like /etc/resolv.conf on content change to avoid that e.g. dnsmasq (if running) re-reads the /etc/resolv.conf and re-initializes itself (bsc#1176325) ==== vim ==== Version update (8.2.1551 -> 8.2.1719) Subpackages: vim-data-common vim-small - Updated to version 8.2.1719, fixes the following problems * Vim9: error for argument type does not mention the number. * Warnings from asan with clang-11. (James McCoy) * Crash in edit test. * Crash in normal test. * Not all tests are executed on Github Actions. * Cursorline highlighting always overrules sign highlighting. * Crash in :vimgrep when started as "vim -n". (Raul Segura) * Signs test fails. * s390x tests work again. * Using NULL pointers in some code. (James McCoy) * Using NULL pointers in fold code. * Vim9: error when using "%" where a buffer is expected. * Vim9: error when using '%" with setbufvar() or getbufvar(). * A few remaining errors from ubsan. * Spellfile test sometimes fails. * Not all Bazel files are recognized. * No example to use ubsan with clang. * prop_find() skips properties in the same line if "skipstart" is used. * Vim9: fixes for functions not tested; failure in getchangelist(). * Configure check for dirfd() does not work on HPUX. (Michael Osipov) * Vim9: count() third argument cannot be "true". * Vim9: expand() does not take "true" as argument. * Vim9: getreg() does not take "true" as argument. * Vim9: glob() doesnot take "true" as argument. * Vim9: globpath() doesnot take "true" as argument. * Vim9: index() does not take "true" as argument. * Vim9: hasmapto(), mapcheck() and maparg() do not take "true" as argument. * Vim9: popup_clear() does not take "true" as argument. * Reports from asan are not optimal. * Wildmenu does not work properly. * Using line() for global popup window doesn't work. * The channel log does not show typed text. * Vim9: cannot use "true" for "skipstart" in prop_find(). * Messages in globals.h not translated, xgettext on MS-Windows not fully supported. * :resize command not fully tested. * Loop for handling keys for the command line is too long. * Cannot read back the prompt of a prompt buffer. * Term_start() options for size are overruled by 'termwinsize'. (Sergey Vlasov) * Vim9: bufnr() doesn't take "true" argument. * Using winheight('.') in tests works but is wrong. * Vim9: passing "true" to char2nr() fails. * Tests do not check the error number properly.0 * Pull requests on github do not notify a maintainer. * Cannot easily see what Vim sends to the terminal. * Using win_screenpos('.') in tests works but is wrong. * The channel source file is too big. * Starting a hidden terminal resizes the current window. * Missing line end when skipping a long line with :cgetfile. * Vim9: cannot use "true" with deepcopy(). * Vim9: cannot use 'true" with garbagecollect(). * Vim9: cannot use 'true" with getbufinfo(). * Vim9: cannot use "true" with getchar(). * Vim9: cannot use "true" with getcompletion(). * Vim9: cannot use "true" with has(). * Vim9: getchar() test fails with GUI. * Vim9: test fails when build without +channel. * Vim9: cannot pass "true" to list2str() and str2list(). * Vim9: cannot pass "true" to nr2char(). * Vim9: cannot pass "true" to prop_remove(). * Vim9: cannot pass "true" to prop_type_add(). * Vim9: cannot pass "true" to searchcount(). * Vim9: cannot pass "true" to searchdecl(). * Vim9: cannot pass "true" to synID(). * Vim9: cannot pass "true" to win_splitmove(). * Vim9: cannot pass "true" to setloclist(). * Vim9: cannot pass "true" to spellsuggest(). * searchcount() test fails. * Crash when using submatch(0, 1) in substitute(). * Loop to handle keys for the command line is too long. * Vim9: using :call where it is not needed. * Vim9: cannot pass "true" to split(), str2nr() and strchars(). * Compiler warning for use of fptr_T. * Test for strchars() fails with different error number. * Vim9: cannot pass "true" to submatch(), term_gettty() and term_start() * Vim9: cannot pass "true" to timer_paused(). * Test fails without terminal feature. * Terminal test fails. * test_fails() does not check the context of the line number. * Not checking the context of test_fails(). * Some error messages are internal but do not use iemsg(). * Loop to handle keys for the command line is too long. * No digraph for 0x2022 BULLET. * Get stuck if a popup filter causes an error. * Vim9: :put ={expr} does not work inside :def function. * Leaking memory when popup filter function can't be called. * Options window cannot be translated. * Amiga: missing header for getgrgid(). * Vim9: cannot use 0 or 1 where a bool is expected. * Otions test fails. * Vim9: :defcompile compiles dead functions. * Vim9: cannot assign 1 and 0 to bool at script level. * GTK3: icons become broken images when resized. * Vim9: result of expression with && and || cannot be assigned to a bool variable. * Amiga: no common build file for Amiga (-like) systems. * GTK3: using old file chooser. * Vim9: result of && and || expression cannot be assigned to a bool at the script level. * Spellfile code not completely tested. * Cannot translate lines in the options window. * Expand('<stack>') does not include the final line number. * When job writes to hidden buffer current window has display errors. (Johnny McArthur) * Cannot build with Strawberry Perl 5.32.0. * Vim9: callstack wrong if :def function calls :def function. * Vim9: no proper error for nested ":def!". * Expand('<stack>') has trailing "..". * Spellfile code not completely tested. * Assert functions require passing expected result as the first argument, which isn't obvious. * Cannot connect to 127.0.0.1 for host with only IPv6 addresses. * :mksession does not restore shared terminal buffer properly. * Options window entries cannot be translated. * Memory leak when using :mkview with a terminal buffer. * Cannot do fuzzy string matching. * The initial value of 'backupskip' can have duplicate items. * Local function name cannot shadow a global function name. * Vim9: not accepting 0 or 1 as bool when type is any. * Vim9: memory leak when storing a value fails. * A couple of gcc compiler warnings. * Vim9: stray error for missing white space. * v_lock is used when it is not initialized. (Yegappan Lakshmanan) * complete_info() selected index has an invalid value. (Ben Jackson) * Vim9: internal error when using variable that was not set. * MinGW: testdir makefile deletes non-existing file. * Compiler warnings for function typecast. * Memory access errors when calling setloclist() in an autocommand. * Crash when using ":set" after ":ownsyntax". (Dhiraj Mishra) * Vim9: ":*" is not recognized as a range. * Vim9: line number for compare error is wrong. * Vim9: unnessary :call commands in tests. * Vim9: const works in an unexpected way. * Vim9: assignment test fails. * "gF" does not use line number after file in Visual mode. * Vim9: cannot declare a constant value. * Vim9: "const!" not sufficiently tested. * Vim9: out of bounds error. * Increment/decrement removes text property. * 'colorcolumn' doesn't show in indent. * Text properties not adjusted for "I" in Visual block mode. * Vim9: list<any> is not accepted where list<number> is expected. * Build fails because TTFLAG_STATIC is missing. * "hi def" does not work for cleared highlight. * Compiler warning for loss if data. * Vim9: crash when using varargs type "any". * Unused (duplicate) macros. * Inconsistent capitalization of error messages. * Cannot lock a variable in legacy Vim script like in Vim9. * Build failure due to missing error message. * Vim9: try/catch causes wrong value to be returned. * Vim9: sort("i") does not work. * Crash when using undo after deleting folded lines. * ":highlight clear" does not restore default link. * Vim9: crash in for loop when autoload script has an error. * "verbose hi Name" reports incorrect info after ":hi clear". * Vim9: crash after running into the "Multiple closures" error. * Small inconsitency in highlight test. * Vim9: error message for function has unpritable characters. * Vim9: memory leak when using multiple closures. * Vim9: list of list type can be wrong. * Vim9: leaking memory when using partial. * Vim9: leaking memory when calling a lambda. * Motif GUI: crash when setting menu colors. (Andrzej Bylicki) * Text properties corrupted with substitute command. (Filipe Brandenburger) * Motif GUI: commented out code missed {}. * Options window has duplicate translations. * Vim9: :def function disallows "firstline" and "lastline" argument names for no good reason. ==== wpa_supplicant ==== - Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build - Enable SAE support(jsc#SLE-14992). ==== xen ==== Version update (4.14.0_06 -> 4.14.0_08) - bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch - Fix problems in xen.spec with building on aarch64 - Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks. - Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin ==== yast2 ==== Version update (4.3.27 -> 4.3.29) - Added "--plain" and "--full" options for the "systemctl" calls, these are recommended when processing the output by scripts (bsc#1176714) - 4.3.29 - Decrease error logging to avoid false positives in the y2log (bsc#1176653) - 4.3.28 ==== zypper ==== Version update (1.14.38 -> 1.14.39) Subpackages: zypper-needs-restarting - Use new testcase API in libzypp. - BuildRequires: libzypp-devel >= 17.25.0. - help: prevent 'whatis' from writing to stderr (bsc#1176712) - wp: point out that command is aliased to a search command and searches case-insensitive (jsc#SLE-16271) - version 1.14.39 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20200923 released!
by Richard Brown 24 Sep '20

24 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: biosdevname dhcp elfutils (0.179 -> 0.181) ell (0.32 -> 0.33) hwdata (0.338 -> 0.339) libdbusmenu-qt5 (0.9.3+15.10.20150604 -> 0.9.3+16.04.20160218) libfido2 (1.4.0 -> 1.5.0) perl (5.30.1 -> 5.30.3) qrencode (4.0.2 -> 4.1.0) shadow zlib === Details === ==== biosdevname ==== - Amend the package description ==== dhcp ==== Subpackages: dhcp-client - Don't create dhclient.leases in %post. It affects transactional updates and the files don't need to pre-exist (boo#1129951). - Drop dependency on insserv-compat It was required to call the rc_status helpers from the sysvinit scripts. These scripts are supposed to be called by systemd, which has its own mechanism to report service status. Please note that this package still needs to be converted to ship proper systemd units. - /var/run is legacy -> /run should be used instead ==== elfutils ==== Version update (0.179 -> 0.181) Subpackages: libasm1 libdw1 libelf1 - Update to version 0.181: libelf: elf_update now compensates (fixes up) a bad sh_addralign for SHF_COMPRESSED sections. libdebuginfod: configure now takes --enable-libdebuginfod=dummy or - -disable-libdebuginfod for bootstrapping. DEBUGINFOD_URLS now accepts "scheme-free" urls (guessing at what the user meant, either http:// or file://) readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu property notes. libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding on arm64 for code that is compiled for PAC (Pointer Authentication Code) as long as it isn't enabled - Drop upstream patch: * 0001-tests-Add-GCOV-flags-when-necessary.patch - Remove cfi-fix.patch - should not be needed now. - Remove remove-run-large-elf-file.sh.patch as it now checks for memory size. - Use autosetup. - Update to version 0.180: elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given. libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix. libdw: Use correct CU to resolve file names in dwarf_decl_file. libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo. size: Also obey radix printing for bsd format. nm: Explicitly print weak 'V' or 'T' and common 'C' symbols. - Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix an unresolved symbol. - Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage. ==== ell ==== Version update (0.32 -> 0.33) - Update to release 0.33 * Fixed an issue with overflow in DHCP lease T2 computation. * Added support for DHCPv6 client implementation. * Removed support for ARC4 and RC4 cipher suites. ==== hwdata ==== Version update (0.338 -> 0.339) - Update to version 0.339: + Updated pci, usb and vendor ids. ==== libdbusmenu-qt5 ==== Version update (0.9.3+15.10.20150604 -> 0.9.3+16.04.20160218) - Rework patch trusting the compiler will remove dead code properly when debug output is disabled (as it is in the spec file): * noqDebug-qWarnings.patch - Update to 0.9.3+16.04.20160218: * Ported tests to Qt5 - Use a Source url that works ==== libfido2 ==== Version update (1.4.0 -> 1.5.0) Subpackages: libfido2-1 libfido2-udev - Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream to fix 32bit compilation issues. - Update to version 1.5.0 * hid_linux: return FIDO_OK if no devices are found. * hid_osx: + repair communication with U2F tokens, gh#166; + reliability fixes. * fido2-{assert,cred}: new options to explicitly toggle UP, UV. * Support for configurable report lengths. * New API calls: + fido_cbor_info_maxcredcntlst + fido_cbor_info_maxcredidlen + fido_cred_aaguid_len + fido_cred_aaguid_ptr + fido_dev_get_touch_begin + fido_dev_get_touch_status * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154. * Allow CTAP messages up to 2048 bytes; gh#171. * Ensure we only list USB devices by default. ==== perl ==== Version update (5.30.1 -> 5.30.3) Subpackages: perl-base - update to 5.30.3 (bsc#1171863, bsc#1171864, bsc#1171866): * https://perldoc.perl.org/5.30.3/perl5302delta.html * https://perldoc.perl.org/5.30.3/perldelta.html * fixes [CVE-2020-10543] buffer overflow caused by a crafted regular expression * fixes [CVE-2020-10878] integer overflow via malformed bytecode produced by a crafted regular expression * fixes [CVE-2020-12723] buffer overflow caused by a crafted regular expression - dropped patches: * perl-Adapt-Configure-to-GCC-version-10.patch ==== qrencode ==== Version update (4.0.2 -> 4.1.0) - update to 4.1.0: * Command line tool "qrencode" has been improved: * New option "--inline" has been added. (Thanks to @jp-bennett) * New option "--strict-version" has been added. * UTF8 mode now supports ANSI256 color. (Thanks to András Veres- Szentkirályi) * Micro QR Code no longer requires to specify the version number. * 'make check' allows to run the test programs. (Thanks to Jan Tojnar) * Some compile time warnings have been fixed. * Various CMake support improvements. (Thanks to @mgorny and @sdf5) * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang) * Some documentation/manpage improvements. (Thanks to Dan Jacobson) * Some performance improvements. (Thanks to @4061N and Mika Lindqvist) - remove qrencode-fix-installation.patch (upstream) ==== shadow ==== - login.defs: Add support for new util-linux-2.36 login variable MOTD_FIRSTONLY (shadow-util-linux.patch). - shadow-login_defs-comments.patch: Remove duplicated LASTLOG_UID_MAX. - shadow-login_defs-check.sh: Update for new build system. - shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is not used in SUSE Linux. - Refresh shadow-login_defs-suse.patch and shadow-login_defs-comments.patch. ==== zlib ==== Subpackages: libminizip1 libz1 - Provide a testsuite subpackage to run post-build validation

1 0

[opensuse-kubic] New Kubic snapshot 20200923 released!
by Richard Brown 24 Sep '20

24 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: biosdevname ceph (16.0.0.4863+g5d95d9d41d -> 16.0.0.5613+gb1a0951432) dhcp elfutils (0.179 -> 0.181) libfido2 (1.4.0 -> 1.5.0) perl (5.30.1 -> 5.30.3) qrencode (4.0.2 -> 4.1.0) shadow zlib === Details === ==== biosdevname ==== - Amend the package description ==== ceph ==== Version update (16.0.0.4863+g5d95d9d41d -> 16.0.0.5613+gb1a0951432) Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw - Update to 16.0.0-5613-gb1a0951432: + rebase on tip of upstream "master" branch, SHA1 5df5d8f8ff463f2560180dc8e9722d6690b0fa12 ==== dhcp ==== Subpackages: dhcp-client - Don't create dhclient.leases in %post. It affects transactional updates and the files don't need to pre-exist (boo#1129951). - Drop dependency on insserv-compat It was required to call the rc_status helpers from the sysvinit scripts. These scripts are supposed to be called by systemd, which has its own mechanism to report service status. Please note that this package still needs to be converted to ship proper systemd units. - /var/run is legacy -> /run should be used instead ==== elfutils ==== Version update (0.179 -> 0.181) Subpackages: libasm1 libdw1 libelf1 - Update to version 0.181: libelf: elf_update now compensates (fixes up) a bad sh_addralign for SHF_COMPRESSED sections. libdebuginfod: configure now takes --enable-libdebuginfod=dummy or - -disable-libdebuginfod for bootstrapping. DEBUGINFOD_URLS now accepts "scheme-free" urls (guessing at what the user meant, either http:// or file://) readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu property notes. libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding on arm64 for code that is compiled for PAC (Pointer Authentication Code) as long as it isn't enabled - Drop upstream patch: * 0001-tests-Add-GCOV-flags-when-necessary.patch - Remove cfi-fix.patch - should not be needed now. - Remove remove-run-large-elf-file.sh.patch as it now checks for memory size. - Use autosetup. - Update to version 0.180: elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given. libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix. libdw: Use correct CU to resolve file names in dwarf_decl_file. libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo. size: Also obey radix printing for bsd format. nm: Explicitly print weak 'V' or 'T' and common 'C' symbols. - Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix an unresolved symbol. - Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage. ==== libfido2 ==== Version update (1.4.0 -> 1.5.0) Subpackages: libfido2-1 libfido2-udev - Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream to fix 32bit compilation issues. - Update to version 1.5.0 * hid_linux: return FIDO_OK if no devices are found. * hid_osx: + repair communication with U2F tokens, gh#166; + reliability fixes. * fido2-{assert,cred}: new options to explicitly toggle UP, UV. * Support for configurable report lengths. * New API calls: + fido_cbor_info_maxcredcntlst + fido_cbor_info_maxcredidlen + fido_cred_aaguid_len + fido_cred_aaguid_ptr + fido_dev_get_touch_begin + fido_dev_get_touch_status * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154. * Allow CTAP messages up to 2048 bytes; gh#171. * Ensure we only list USB devices by default. ==== perl ==== Version update (5.30.1 -> 5.30.3) Subpackages: perl-base - update to 5.30.3 (bsc#1171863, bsc#1171864, bsc#1171866): * https://perldoc.perl.org/5.30.3/perl5302delta.html * https://perldoc.perl.org/5.30.3/perldelta.html * fixes [CVE-2020-10543] buffer overflow caused by a crafted regular expression * fixes [CVE-2020-10878] integer overflow via malformed bytecode produced by a crafted regular expression * fixes [CVE-2020-12723] buffer overflow caused by a crafted regular expression - dropped patches: * perl-Adapt-Configure-to-GCC-version-10.patch ==== qrencode ==== Version update (4.0.2 -> 4.1.0) - update to 4.1.0: * Command line tool "qrencode" has been improved: * New option "--inline" has been added. (Thanks to @jp-bennett) * New option "--strict-version" has been added. * UTF8 mode now supports ANSI256 color. (Thanks to András Veres- Szentkirályi) * Micro QR Code no longer requires to specify the version number. * 'make check' allows to run the test programs. (Thanks to Jan Tojnar) * Some compile time warnings have been fixed. * Various CMake support improvements. (Thanks to @mgorny and @sdf5) * Some minor bug fixes. (Thanks to Lonnie Abelbeck and Frédéric Wang) * Some documentation/manpage improvements. (Thanks to Dan Jacobson) * Some performance improvements. (Thanks to @4061N and Mika Lindqvist) - remove qrencode-fix-installation.patch (upstream) ==== shadow ==== - login.defs: Add support for new util-linux-2.36 login variable MOTD_FIRSTONLY (shadow-util-linux.patch). - shadow-login_defs-comments.patch: Remove duplicated LASTLOG_UID_MAX. - shadow-login_defs-check.sh: Update for new build system. - shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is not used in SUSE Linux. - Refresh shadow-login_defs-suse.patch and shadow-login_defs-comments.patch. ==== zlib ==== - Provide a testsuite subpackage to run post-build validation

1 0