Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=Tumbleweed&build=20200512 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=Kubic&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20200224.7105b32 -> 84.87+git20200507.e2243a4) bash cilium coreutils curl (7.69.1 -> 7.70.0) dracut (050+suse.60.ged08acac -> 050+suse.61.g0fe0e854) e2fsprogs (1.45.5 -> 1.45.6) ebtables file freetype2 (2.10.1 -> 2.10.2) gcc10 (10.0.1+git175037 -> 10.1.1+git40) gettext-runtime (0.20.1 -> 0.20.2) grub2 installation-images-MicroOS (14.468 -> 14.470) kernel-64kb (5.6.8 -> 5.6.11) kernel-default-base (5.6.8 -> 5.6.11) kernel-source (5.6.8 -> 5.6.11) krb5 kured (1.3.0 -> 1.4.0) libressl (3.0.2 -> 3.1.1) libslirp (4.2.0 -> 4.3.0) libunwind (1.3.1 -> 1.4.0) microos-tools (1.0+git20200214.c7654a7 -> 2.0) ncurses (6.2.20200418 -> 6.2.20200502) openldap2 (2.4.49 -> 2.4.50) patterns-base (20200417 -> 20200505) patterns-microos permissions (1550_20200324 -> 1550_20200506) python-packaging python-pyparsing (2.4.6 -> 2.4.7) python-pyzmq (19.0.0 -> 19.0.1) salt shared-mime-info (1.15 -> 2.0) sudo (1.9.0rc2 -> 1.9.0rc4) utempter (1.1.6 -> 1.2.0) yast2 (4.2.83 -> 4.2.84) === Details === ==== aaa_base ==== Version update (84.87+git20200224.7105b32 -> 84.87+git20200507.e2243a4) - Update to version 84.87+git20200507.e2243a4: * handle non-existing /etc/nsswitch.conf * set SYSTEMD_OFFLINE=1 if there's no systemd * Better support of Midnight Commander (bsc#1170527) * improve sysconf_addword: remove/cleanup spaces while adding/removing flags/modules - Require xz (boo#1162581). - Update to version 84.87+git20200312.411a96b: * get_kernel_version: support xz compressed kernel (boo#1162581). ==== bash ==== - Fix usage of update-alternatives ==== cilium ==== - enable build for all 64 bit arches (adds ppc64le, s390x) ==== coreutils ==== - add coreutils-use-python3.patch to minimally port away from python 2.x use of pyinotify in the testsuite ==== curl ==== Version update (7.69.1 -> 7.70.0) Subpackages: libcurl4 - Update to 7.70.0 * Changes: - curl: add --ssl-revoke-best-effort to allow a "best effort" revocation check - mqtt: add new experimental protocol - schannel: add "best effort" revocation check option: CURLSSLOPT_REVOKE_BEST_EFFORT - writeout: support to generate JSON output with '%{json}' * Bugfixes: - gnutls: Don't skip really long certificate fields - gnutls: ensure TLS 1.3 when SRP isn't requested - lib: never define CURL_CA_BUNDLE with a getenv - libcurl-multi.3: added missing full stop - libssh: avoid options override by configuration files - libssh: Use new ECDSA key types to check known hosts - tons of other fixes ==== dracut ==== Version update (050+suse.60.ged08acac -> 050+suse.61.g0fe0e854) Subpackages: dracut-ima - Update to version 050+suse.61.g0fe0e854: * Fix test in lsinitrd (https://progress.opensuse.org/issues/65334) ==== e2fsprogs ==== Version update (1.45.5 -> 1.45.6) Subpackages: libcom_err2 libext2fs2 - Update to 1.45.6: * Debugfs will ignore lines in its command files which start with a comment character ("#") * Fix a number of potential out of bounds memory accesses caused by fuzzed / malicious file systems * Fix a spurious complaint from e2fsck when a directory which previously had more than 32000 subdirectories has the number of subdirectories drops below 32000 * Fix an ismounted check when an LVM device is renamed while the device is mounted * Mke2fs -d now correctly sets permission with files where the owner permissions are not rwx * Improve e2fsck's ability to deal with file systems with very large number of directories, such that various data structures take more than 2GiB of memory. Use better structure packing to improve the memory efficiency of these data structures. * Fix debugfs so it correctly prints inode numbers > 2**31. * Filefrag now supports very large files (with > 4 billion blocks), as well as block sizes up to 1 GiB. * Update and clarify various man pages * Reserved the error code EXT2_ET_NO_GDESC (which will be used in e2fsprogs v1.46+) * Add a thread-safe variant of e2p_feature2string(), e2p_feature_to_string() to the libe2p library. * Fixed portability problems caused by gcc 10. * Synchroniz changes from Android's AOSP e2fsprogs tree * Update the Malay translation from the translation project - add upstream signing key and verify source signature ==== ebtables ==== Subpackages: libebtc0 - Revert last /bin/bash -> /bin/sh change - Use /bin/sh for ebtables.systemd - Don't hard require systemd, we don't need that in a container ==== file ==== Subpackages: file-magic libmagic1 - Add temporary patch undo-24c9c0.patch to undo commit 24c9c0 (boo#1169192) ==== freetype2 ==== Version update (2.10.1 -> 2.10.2) - Update to version 2.10.2 * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec) * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1 MM fonts. * Type 1 fonts with non-integer metrics are now supported by the new (CFF) engine introduced in FreeType 2.9. * Drop support for Python 2 in Freetype's API reference generator * Auto-hinter support for Hanifi Rohingya * Document the `FT2_KEEP_ALIVE' debugging environment variable. ==== gcc10 ==== Version update (10.0.1+git175037 -> 10.1.1+git40) Subpackages: libgcc_s1 libgomp1 libstdc++6 - Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40. * Includes GCC 10.1 release. - Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5. * Includes first release candidate for GCC 10.1. * Includes gcc10-pr94734.patch - Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017. - Add gcc10-pr94734.patch - Update to master head (b835645c7a51b7e99092abe61d677), git175845. - Drop to 4 jobs as constraint for s390x. - Update to master head (effcb4181e143bc390286a489ff84), git175831. - Package arm_cde.h and arm_mve_types.h for arm. - Alter _constraints to also constrain jobs. - Add libzstd-devel BuildRequires to cross compiler specs. - Switch to release checking builds. - Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805. - Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688. - Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641. - Update to master head (038769535a8cbdd3dd3e100bde314), git175499. - Update to master head (75c24a08d697d6442fe6c26142f05), git175422. - Update to master head (7d4549b2cd209eb621453ce13be7f), git175366. - Update to master head (c7e9019681857b329bbe4c1e7ec8d), git175348. - Package arm_mve.h for arm. - Update to master head (4e3d3e40726e1b68bf52fa205c68495124ea60b8). - libgphobos and libgdruntime SONAME versions were reset to 1. - Update to master head (3604480a6fe493c51d6ebd53d9b1abeebbbb828f). - Update embedded newlib to newlib-3.3.0.tar.xz, drop old newlib-3.1.0.tar.xz - Enable support for amdgcn-amdhsa OpenMP/OpenACC offloading. - Update to master head (655e5c29ae4080666154b3e10ac81116a1b7a638). - Re-add gcc9-reproducible-builds.patch and gcc9-reproducible-builds-buildid-for-checksum.patch. ==== gettext-runtime ==== Version update (0.20.1 -> 0.20.2) Subpackages: libtextstyle0 - update to 0.20.2: * The programs 'gettext', 'ngettext', when invoked with option -e, now expand '\\' and octal escape sequences, instead of swallowing them * xgettext now recognizes 'gettext' program invocations with the '-e' option, such as gettext -e 'some\nstring\n' * xgettext now assumes a Python source file is in UTF-8 encoding by default, as stated in PEP 3120 * The value of the 'Icon' property is no longer extracted into the POT file by xgettext ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Fix boot failure as journaled data not get drained due to abrupt power off after grub-install (bsc#1167756) * grub-install-force-journal-draining-to-ensure-data-i.patch ==== installation-images-MicroOS ==== Version update (14.468 -> 14.470) - merge gh#openSUSE/installation-images#374 - support MicroOSNG (bsc#1170885) - 14.470 - prepare for MicroOSNG - merge gh#openSUSE/installation-images#373 - beware of bash using update-alternatives - 14.469 ==== kernel-64kb ==== Version update (5.6.8 -> 5.6.11) - Linux 5.6.11 (bnc#1012628). - drm/scheduler: fix drm_sched_get_cleanup_job (bnc#1012628). - dma-buf: Fix SET_NAME ioctl uapi (bnc#1012628). - drm/amdgpu: invalidate L2 before SDMA IBs (v2) (bnc#1012628). - drm/edid: Fix off-by-one in DispID DTD pixel clock (bnc#1012628). - drm/amd/display: Fix green screen issue after suspend (bnc#1012628). - drm/i915/gem: Hold obj->vma.lock over for_each_ggtt_vma() (bnc#1012628). - drm/i915/gt: Check cacheline is valid before acquiring (bnc#1012628). - drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bnc#1012628). - drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bnc#1012628). - drm/qxl: qxl_release use after free (bnc#1012628). - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bnc#1012628). - btrfs: fix transaction leak in btrfs_recover_relocation (bnc#1012628). - btrfs: fix block group leak when removing fails (bnc#1012628). - btrfs: fix partial loss of prealloc extent past i_size after fsync (bnc#1012628). - btrfs: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info (bnc#1012628). - mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout loop (bnc#1012628). - mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bnc#1012628). - mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bnc#1012628). - mmc: sdhci-msm: Enable host capabilities pertains to R1b response (bnc#1012628). - mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY (bnc#1012628). - mmc: meson-mx-sdio: remove the broken ->card_busy() op (bnc#1012628). - crypto: caam - fix the address of the last entry of S/G (bnc#1012628). - ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bnc#1012628). - ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bnc#1012628). - ALSA: hda/hdmi: fix without unlocked before return (bnc#1012628). - ALSA: line6: Fix POD HD500 audio playback (bnc#1012628). - i2c: amd-mp2-pci: Fix Oops in amd_mp2_pci_init() error handling (bnc#1012628). - x86/hyperv: Suspend/resume the VP assist page for hibernation (bnc#1012628). - Drivers: hv: vmbus: Fix Suspend-to-Idle for Generation-2 VM (bnc#1012628). - dlmfs_file_write(): fix the bogosity in handling non-zero *ppos (bnc#1012628). - selinux: properly handle multiple messages in selinux_netlink_send() (bnc#1012628). - IB/rdmavt: Always return ERR_PTR from rvt_create_mmap_info() (bnc#1012628). - PM: ACPI: Output correct message on target power state (bnc#1012628). - PM: hibernate: Freeze kernel threads in software_resume() (bnc#1012628). - dm verity fec: fix hash block number in verity_fec_decode (bnc#1012628). - dm writecache: fix data corruption when reloading the target (bnc#1012628). - dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath (bnc#1012628). - ARM: dts: imx6qdl-sr-som-ti: indicate powering off wifi is safe (bnc#1012628). - block: remove the bd_openers checks in blk_drop_partitions (bnc#1012628). - scsi: qla2xxx: set UNLOADING before waiting for session deletion (bnc#1012628). - scsi: qla2xxx: check UNLOADING before posting async work (bnc#1012628). - RDMA/mlx5: Set GRH fields in query QP on RoCE (bnc#1012628). - RDMA/uverbs: Fix a race with disassociate and exit_mmap() (bnc#1012628). - RDMA/mlx4: Initialize ib_spec on the stack (bnc#1012628). - RDMA/siw: Fix potential siw_mem refcnt leak in siw_fastreg_mr() (bnc#1012628). - RDMA/core: Prevent mixed use of FDs between shared ufiles (bnc#1012628). - RDMA/core: Fix overwriting of uobj in case of error (bnc#1012628). - RDMA/core: Fix race between destroy and release FD object (bnc#1012628). - RDMA/cm: Fix ordering of xa_alloc_cyclic() in ib_create_cm_id() (bnc#1012628). - RDMA/cm: Fix an error check in cm_alloc_id_priv() (bnc#1012628). - i2c: iproc: generate stop event for slave writes (bnc#1012628). - dmaengine: hisilicon: Fix build error without PCI_MSI (bnc#1012628). - vfio: avoid possible overflow in vfio_iommu_type1_pin_pages (bnc#1012628). - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (bnc#1012628). - iommu/qcom: Fix local_base status check (bnc#1012628). - dmaengine: ti: k3-psil: fix deadlock on error path (bnc#1012628). - dmaengine: fix channel index enumeration (bnc#1012628). - scsi: target/iblock: fix WRITE SAME zeroing (bnc#1012628). - iommu: Properly export iommu_group_get_for_dev() (bnc#1012628). - iommu/vt-d: Use right Kconfig option name (bnc#1012628). - iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bnc#1012628). - i2c: aspeed: Avoid i2c interrupt status clear race condition (bnc#1012628). - ALSA: opti9xx: shut up gcc-10 range warning (bnc#1012628). - Fix use after free in get_tree_bdev() (bnc#1012628). - nvme: prevent double free in nvme_alloc_ns() error handling (bnc#1012628). - drm/i915/selftests: Fix i915_address_space refcnt leak (bnc#1012628). - nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl (bnc#1012628). - dmaengine: dmatest: Fix iteration non-stop logic (bnc#1012628). - drm/i915: Use proper fault mask in interrupt postinstall too (bnc#1012628). - dmaengine: dmatest: Fix process hang when reading 'wait' parameter (bnc#1012628). - arm64: vdso: Add -fasynchronous-unwind-tables to cflags (bnc#1012628). - io_uring: statx must grab the file table for valid fd (bnc#1012628). - commit 91c024a - ipc/util.c: sysvipc_find_ipc() incorrectly updates position index (bnc#1171211). - commit cff4a7c - Linux 5.6.10 (bnc#1012628). - Revert "ASoC: meson: axg-card: fix codec-to-codec link setup" (bnc#1012628). - commit de48f93 - Linux 5.6.9 (bnc#1012628). - ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans() (bnc#1012628). - printk: queue wake_up_klogd irq_work only if per-CPU areas are ready (bnc#1012628). - ASoC: stm32: sai: fix sai probe (bnc#1012628). - usb: dwc3: gadget: Do link recovery for SS and SSP (bnc#1012628). - ARM: dts: bcm283x: Add cells encoding format to firmware bus (bnc#1012628). - kbuild: fix DT binding schema rule again to avoid needless rebuilds (bnc#1012628). - usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (bnc#1012628). - usb: gadget: udc: atmel: Fix vbus disconnect handling (bnc#1012628). - afs: Make record checking use TASK_UNINTERRUPTIBLE when appropriate (bnc#1012628). - afs: Fix to actually set AFS_SERVER_FL_HAVE_EPOCH (bnc#1012628). - iio:ad7797: Use correct attribute_group (bnc#1012628). - iio: imu: st_lsm6dsx: fix read misalignment on untagged FIFO (bnc#1012628). - iio: imu: st_lsm6dsx: specify slave odr in slv_odr (bnc#1012628). - propagate_one(): mnt_set_mountpoint() needs mount_lock (bnc#1012628). - counter: 104-quad-8: Add lock guards - generic interface (bnc#1012628). - s390/ftrace: fix potential crashes when switching tracers (bnc#1012628). - ASoC: q6dsp6: q6afe-dai: add missing channels to MI2S DAIs (bnc#1012628). - iwlwifi: actually check allocated conf_tlv pointer (bnc#1012628). - ASoC: samsung: s3c24xx-i2s: Fix build after removal of DAI suspend/resume (bnc#1012628). - ASoC: tas571x: disable regulators on failed probe (bnc#1012628). - ASoC: meson: axg-card: fix codec-to-codec link setup (bnc#1012628). - ASoC: wm8960: Fix wrong clock after suspend & resume (bnc#1012628). - drivers: soc: xilinx: fix firmware driver Kconfig dependency (bnc#1012628). - nfsd: memory corruption in nfsd4_lock() (bnc#1012628). - ARM: dts: OMAP3: disable RNG on N950/N9 (bnc#1012628). - bpf: Forbid XADD on spilled pointers for unprivileged users (bnc#1012628). - brcmfmac: add stub for monitor interface xmit (bnc#1012628). - i2c: altera: use proper variable to hold errno (bnc#1012628). - hwmon: (drivetemp) Use drivetemp's true module name in Kconfig section (bnc#1012628). - clk: asm9260: fix __clk_hw_register_fixed_rate_with_accuracy typo (bnc#1012628). - rtw88: avoid unused function warnings (bnc#1012628). - hwmon: (drivetemp) Return -ENODATA for invalid temperatures (bnc#1012628). - rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket (bnc#1012628). - netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag (bnc#1012628). - net/cxgb4: Check the return from t4_query_params properly (bnc#1012628). - tipc: fix incorrect increasing of link window (bnc#1012628). - xfs: acquire superblock freeze protection on eofblocks scans (bnc#1012628). - svcrdma: Fix trace point use-after-free race (bnc#1012628). - svcrdma: Fix leak of svc_rdma_recv_ctxt objects (bnc#1012628). - net/mlx5e: Don't trigger IRQ multiple times on XSK wakeup to avoid WQ overruns (bnc#1012628). - net/mlx5e: Get the latest values from counters in switchdev mode (bnc#1012628). - PCI: Avoid ASMedia XHCI USB PME# from D0 defect (bnc#1012628). - PCI: Add Zhaoxin Vendor ID (bnc#1012628). - PCI: Add ACS quirk for Zhaoxin multi-function devices (bnc#1012628). - PCI: Add ACS quirk for Zhaoxin Root/Downstream Ports (bnc#1012628). - PCI: Move Apex Edge TPU class quirk to fix BAR assignment (bnc#1012628). - ARM: dts: bcm283x: Disable dsi0 node (bnc#1012628). - cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled (bnc#1012628). - s390/pci: do not set affinity for floating irqs (bnc#1012628). - remoteproc: mtk_scp: use dma_addr_t for DMA API (bnc#1012628). - net/mlx5: Fix failing fw tracer allocation on s390 (bnc#1012628). - sched/core: Fix reset-on-fork from RT with uclamp (bnc#1012628). - perf/core: fix parent pid/tid in task exit events (bnc#1012628). - netfilter: nat: fix error handling upon registering inet hook (bnc#1012628). - PM: sleep: core: Switch back to async_schedule_dev() (bnc#1012628). - blk-iocost: Fix error on iocost_ioc_vrate_adj (bnc#1012628). - um: ensure `make ARCH=um mrproper` removes arch/$(SUBARCH)/include/generated/ (bnc#1012628). - bpf: Fix handling of XADD on BTF memory (bnc#1012628). - bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B (bnc#1012628). - bpf, x86_32: Fix incorrect encoding in BPF_LDX zero-extension (bnc#1012628). - bpf, x86_32: Fix clobbering of dst for BPF_JSET (bnc#1012628). - bpf, x86_32: Fix logic error in BPF_LDX zero-extension (bnc#1012628). - bpf: Propagate expected_attach_type when verifying freplace programs (bnc#1012628). - selftests/bpf: Fix a couple of broken test_btf cases (bnc#1012628). - mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path (bnc#1012628). - xfs: clear PF_MEMALLOC before exiting xfsaild thread (bnc#1012628). - libbpf: Initialize *nl_pid so gcc 10 is happy (bnc#1012628). - net: fec: set GPR bit on suspend by DT configuration (bnc#1012628). - x86: hyperv: report value of misc_features (bnc#1012628). - signal: check sig before setting info in kill_pid_usb_asyncio (bnc#1012628). - afs: Fix length of dump of bad YFSFetchStatus record (bnc#1012628). - xfs: fix partially uninitialized structure in xfs_reflink_remap_extent (bnc#1012628). - ALSA: hda: Release resources at error in delayed probe (bnc#1012628). - ALSA: hda: Keep the controller initialization even if no codecs found (bnc#1012628). - ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bnc#1012628). - drm/amdgpu: fix wrong vram lost counter increment V2 (bnc#1012628). - scsi: target: fix PR IN / READ FULL STATUS for FC (bnc#1012628). - scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN (bnc#1012628). - objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings (bnc#1012628). - objtool: Support Clang non-section symbols in ORC dump (bnc#1012628). - xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status (bnc#1012628). - ALSA: hda: call runtime_allow() for all hda controllers (bnc#1012628). - net: stmmac: socfpga: Allow all RGMII modes (bnc#1012628). - mac80211: fix channel switch trigger from unknown mesh peer (bnc#1012628). - sched/isolation: Allow "isolcpus=" to skip unknown sub-parameters (bnc#1012628). - sched/vtime: Work around an unitialized variable warning (bnc#1012628). - arm64: Delete the space separator in __emit_inst (bnc#1012628). - ext4: use matching invalidatepage in ext4_writepage (bnc#1012628). - ext4: increase wait time needed before reuse of deleted inode numbers (bnc#1012628). - ext4: convert BUG_ON's to WARN_ON's in mballoc.c (bnc#1012628). - irqchip/gic-v4.1: Add support for VPENDBASER's Dirty+Valid signaling (bnc#1012628). - blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (bnc#1012628). - irqchip/meson-gpio: Fix HARDIRQ-safe -> HARDIRQ-unsafe lock order (bnc#1012628). - hwmon: (jc42) Fix name to have no illegal characters (bnc#1012628). - sfc: fix XDP-redirect in this driver (bnc#1012628). - taprio: do not use BIT() in TCA_TAPRIO_ATTR_FLAG_* definitions (bnc#1012628). - tipc: Add a missing case of TIPC_DIRECT_MSG type (bnc#1012628). - qed: Fix race condition between scheduling and destroying the slowpath workqueue (bnc#1012628). - Crypto: chelsio - Fixes a hang issue during driver registration (bnc#1012628). - net: use indirect call wrappers for skb_copy_datagram_iter() (bnc#1012628). - qed: Fix use after free in qed_chain_free (bnc#1012628). - ext4: check for non-zero journal inum in ext4_calculate_overhead (bnc#1012628). - ASoC: soc-pcm: fix regression in soc_new_pcm() (bnc#1012628). - ASoC: soc-core: disable route checks for legacy devices (bnc#1012628). - ASoC: stm32: spdifrx: fix regmap status check (bnc#1012628). - commit 46be1cc ==== kernel-default-base ==== Version update (5.6.8 -> 5.6.11) - Add hardware-specific crc32c implementations (boo#1171065) ==== kernel-source ==== Version update (5.6.8 -> 5.6.11) - Linux 5.6.11 (bnc#1012628). - drm/scheduler: fix drm_sched_get_cleanup_job (bnc#1012628). - dma-buf: Fix SET_NAME ioctl uapi (bnc#1012628). - drm/amdgpu: invalidate L2 before SDMA IBs (v2) (bnc#1012628). - drm/edid: Fix off-by-one in DispID DTD pixel clock (bnc#1012628). - drm/amd/display: Fix green screen issue after suspend (bnc#1012628). - drm/i915/gem: Hold obj->vma.lock over for_each_ggtt_vma() (bnc#1012628). - drm/i915/gt: Check cacheline is valid before acquiring (bnc#1012628). - drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bnc#1012628). - drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bnc#1012628). - drm/qxl: qxl_release use after free (bnc#1012628). - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bnc#1012628). - btrfs: fix transaction leak in btrfs_recover_relocation (bnc#1012628). - btrfs: fix block group leak when removing fails (bnc#1012628). - btrfs: fix partial loss of prealloc extent past i_size after fsync (bnc#1012628). - btrfs: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info (bnc#1012628). - mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout loop (bnc#1012628). - mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bnc#1012628). - mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bnc#1012628). - mmc: sdhci-msm: Enable host capabilities pertains to R1b response (bnc#1012628). - mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY (bnc#1012628). - mmc: meson-mx-sdio: remove the broken ->card_busy() op (bnc#1012628). - crypto: caam - fix the address of the last entry of S/G (bnc#1012628). - ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bnc#1012628). - ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bnc#1012628). - ALSA: hda/hdmi: fix without unlocked before return (bnc#1012628). - ALSA: line6: Fix POD HD500 audio playback (bnc#1012628). - i2c: amd-mp2-pci: Fix Oops in amd_mp2_pci_init() error handling (bnc#1012628). - x86/hyperv: Suspend/resume the VP assist page for hibernation (bnc#1012628). - Drivers: hv: vmbus: Fix Suspend-to-Idle for Generation-2 VM (bnc#1012628). - dlmfs_file_write(): fix the bogosity in handling non-zero *ppos (bnc#1012628). - selinux: properly handle multiple messages in selinux_netlink_send() (bnc#1012628). - IB/rdmavt: Always return ERR_PTR from rvt_create_mmap_info() (bnc#1012628). - PM: ACPI: Output correct message on target power state (bnc#1012628). - PM: hibernate: Freeze kernel threads in software_resume() (bnc#1012628). - dm verity fec: fix hash block number in verity_fec_decode (bnc#1012628). - dm writecache: fix data corruption when reloading the target (bnc#1012628). - dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath (bnc#1012628). - ARM: dts: imx6qdl-sr-som-ti: indicate powering off wifi is safe (bnc#1012628). - block: remove the bd_openers checks in blk_drop_partitions (bnc#1012628). - scsi: qla2xxx: set UNLOADING before waiting for session deletion (bnc#1012628). - scsi: qla2xxx: check UNLOADING before posting async work (bnc#1012628). - RDMA/mlx5: Set GRH fields in query QP on RoCE (bnc#1012628). - RDMA/uverbs: Fix a race with disassociate and exit_mmap() (bnc#1012628). - RDMA/mlx4: Initialize ib_spec on the stack (bnc#1012628). - RDMA/siw: Fix potential siw_mem refcnt leak in siw_fastreg_mr() (bnc#1012628). - RDMA/core: Prevent mixed use of FDs between shared ufiles (bnc#1012628). - RDMA/core: Fix overwriting of uobj in case of error (bnc#1012628). - RDMA/core: Fix race between destroy and release FD object (bnc#1012628). - RDMA/cm: Fix ordering of xa_alloc_cyclic() in ib_create_cm_id() (bnc#1012628). - RDMA/cm: Fix an error check in cm_alloc_id_priv() (bnc#1012628). - i2c: iproc: generate stop event for slave writes (bnc#1012628). - dmaengine: hisilicon: Fix build error without PCI_MSI (bnc#1012628). - vfio: avoid possible overflow in vfio_iommu_type1_pin_pages (bnc#1012628). - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (bnc#1012628). - iommu/qcom: Fix local_base status check (bnc#1012628). - dmaengine: ti: k3-psil: fix deadlock on error path (bnc#1012628). - dmaengine: fix channel index enumeration (bnc#1012628). - scsi: target/iblock: fix WRITE SAME zeroing (bnc#1012628). - iommu: Properly export iommu_group_get_for_dev() (bnc#1012628). - iommu/vt-d: Use right Kconfig option name (bnc#1012628). - iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bnc#1012628). - i2c: aspeed: Avoid i2c interrupt status clear race condition (bnc#1012628). - ALSA: opti9xx: shut up gcc-10 range warning (bnc#1012628). - Fix use after free in get_tree_bdev() (bnc#1012628). - nvme: prevent double free in nvme_alloc_ns() error handling (bnc#1012628). - drm/i915/selftests: Fix i915_address_space refcnt leak (bnc#1012628). - nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl (bnc#1012628). - dmaengine: dmatest: Fix iteration non-stop logic (bnc#1012628). - drm/i915: Use proper fault mask in interrupt postinstall too (bnc#1012628). - dmaengine: dmatest: Fix process hang when reading 'wait' parameter (bnc#1012628). - arm64: vdso: Add -fasynchronous-unwind-tables to cflags (bnc#1012628). - io_uring: statx must grab the file table for valid fd (bnc#1012628). - commit 91c024a - ipc/util.c: sysvipc_find_ipc() incorrectly updates position index (bnc#1171211). - commit cff4a7c - Linux 5.6.10 (bnc#1012628). - Revert "ASoC: meson: axg-card: fix codec-to-codec link setup" (bnc#1012628). - commit de48f93 - Linux 5.6.9 (bnc#1012628). - ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans() (bnc#1012628). - printk: queue wake_up_klogd irq_work only if per-CPU areas are ready (bnc#1012628). - ASoC: stm32: sai: fix sai probe (bnc#1012628). - usb: dwc3: gadget: Do link recovery for SS and SSP (bnc#1012628). - ARM: dts: bcm283x: Add cells encoding format to firmware bus (bnc#1012628). - kbuild: fix DT binding schema rule again to avoid needless rebuilds (bnc#1012628). - usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (bnc#1012628). - usb: gadget: udc: atmel: Fix vbus disconnect handling (bnc#1012628). - afs: Make record checking use TASK_UNINTERRUPTIBLE when appropriate (bnc#1012628). - afs: Fix to actually set AFS_SERVER_FL_HAVE_EPOCH (bnc#1012628). - iio:ad7797: Use correct attribute_group (bnc#1012628). - iio: imu: st_lsm6dsx: fix read misalignment on untagged FIFO (bnc#1012628). - iio: imu: st_lsm6dsx: specify slave odr in slv_odr (bnc#1012628). - propagate_one(): mnt_set_mountpoint() needs mount_lock (bnc#1012628). - counter: 104-quad-8: Add lock guards - generic interface (bnc#1012628). - s390/ftrace: fix potential crashes when switching tracers (bnc#1012628). - ASoC: q6dsp6: q6afe-dai: add missing channels to MI2S DAIs (bnc#1012628). - iwlwifi: actually check allocated conf_tlv pointer (bnc#1012628). - ASoC: samsung: s3c24xx-i2s: Fix build after removal of DAI suspend/resume (bnc#1012628). - ASoC: tas571x: disable regulators on failed probe (bnc#1012628). - ASoC: meson: axg-card: fix codec-to-codec link setup (bnc#1012628). - ASoC: wm8960: Fix wrong clock after suspend & resume (bnc#1012628). - drivers: soc: xilinx: fix firmware driver Kconfig dependency (bnc#1012628). - nfsd: memory corruption in nfsd4_lock() (bnc#1012628). - ARM: dts: OMAP3: disable RNG on N950/N9 (bnc#1012628). - bpf: Forbid XADD on spilled pointers for unprivileged users (bnc#1012628). - brcmfmac: add stub for monitor interface xmit (bnc#1012628). - i2c: altera: use proper variable to hold errno (bnc#1012628). - hwmon: (drivetemp) Use drivetemp's true module name in Kconfig section (bnc#1012628). - clk: asm9260: fix __clk_hw_register_fixed_rate_with_accuracy typo (bnc#1012628). - rtw88: avoid unused function warnings (bnc#1012628). - hwmon: (drivetemp) Return -ENODATA for invalid temperatures (bnc#1012628). - rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket (bnc#1012628). - netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag (bnc#1012628). - net/cxgb4: Check the return from t4_query_params properly (bnc#1012628). - tipc: fix incorrect increasing of link window (bnc#1012628). - xfs: acquire superblock freeze protection on eofblocks scans (bnc#1012628). - svcrdma: Fix trace point use-after-free race (bnc#1012628). - svcrdma: Fix leak of svc_rdma_recv_ctxt objects (bnc#1012628). - net/mlx5e: Don't trigger IRQ multiple times on XSK wakeup to avoid WQ overruns (bnc#1012628). - net/mlx5e: Get the latest values from counters in switchdev mode (bnc#1012628). - PCI: Avoid ASMedia XHCI USB PME# from D0 defect (bnc#1012628). - PCI: Add Zhaoxin Vendor ID (bnc#1012628). - PCI: Add ACS quirk for Zhaoxin multi-function devices (bnc#1012628). - PCI: Add ACS quirk for Zhaoxin Root/Downstream Ports (bnc#1012628). - PCI: Move Apex Edge TPU class quirk to fix BAR assignment (bnc#1012628). - ARM: dts: bcm283x: Disable dsi0 node (bnc#1012628). - cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled (bnc#1012628). - s390/pci: do not set affinity for floating irqs (bnc#1012628). - remoteproc: mtk_scp: use dma_addr_t for DMA API (bnc#1012628). - net/mlx5: Fix failing fw tracer allocation on s390 (bnc#1012628). - sched/core: Fix reset-on-fork from RT with uclamp (bnc#1012628). - perf/core: fix parent pid/tid in task exit events (bnc#1012628). - netfilter: nat: fix error handling upon registering inet hook (bnc#1012628). - PM: sleep: core: Switch back to async_schedule_dev() (bnc#1012628). - blk-iocost: Fix error on iocost_ioc_vrate_adj (bnc#1012628). - um: ensure `make ARCH=um mrproper` removes arch/$(SUBARCH)/include/generated/ (bnc#1012628). - bpf: Fix handling of XADD on BTF memory (bnc#1012628). - bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B (bnc#1012628). - bpf, x86_32: Fix incorrect encoding in BPF_LDX zero-extension (bnc#1012628). - bpf, x86_32: Fix clobbering of dst for BPF_JSET (bnc#1012628). - bpf, x86_32: Fix logic error in BPF_LDX zero-extension (bnc#1012628). - bpf: Propagate expected_attach_type when verifying freplace programs (bnc#1012628). - selftests/bpf: Fix a couple of broken test_btf cases (bnc#1012628). - mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path (bnc#1012628). - xfs: clear PF_MEMALLOC before exiting xfsaild thread (bnc#1012628). - libbpf: Initialize *nl_pid so gcc 10 is happy (bnc#1012628). - net: fec: set GPR bit on suspend by DT configuration (bnc#1012628). - x86: hyperv: report value of misc_features (bnc#1012628). - signal: check sig before setting info in kill_pid_usb_asyncio (bnc#1012628). - afs: Fix length of dump of bad YFSFetchStatus record (bnc#1012628). - xfs: fix partially uninitialized structure in xfs_reflink_remap_extent (bnc#1012628). - ALSA: hda: Release resources at error in delayed probe (bnc#1012628). - ALSA: hda: Keep the controller initialization even if no codecs found (bnc#1012628). - ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bnc#1012628). - drm/amdgpu: fix wrong vram lost counter increment V2 (bnc#1012628). - scsi: target: fix PR IN / READ FULL STATUS for FC (bnc#1012628). - scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN (bnc#1012628). - objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings (bnc#1012628). - objtool: Support Clang non-section symbols in ORC dump (bnc#1012628). - xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status (bnc#1012628). - ALSA: hda: call runtime_allow() for all hda controllers (bnc#1012628). - net: stmmac: socfpga: Allow all RGMII modes (bnc#1012628). - mac80211: fix channel switch trigger from unknown mesh peer (bnc#1012628). - sched/isolation: Allow "isolcpus=" to skip unknown sub-parameters (bnc#1012628). - sched/vtime: Work around an unitialized variable warning (bnc#1012628). - arm64: Delete the space separator in __emit_inst (bnc#1012628). - ext4: use matching invalidatepage in ext4_writepage (bnc#1012628). - ext4: increase wait time needed before reuse of deleted inode numbers (bnc#1012628). - ext4: convert BUG_ON's to WARN_ON's in mballoc.c (bnc#1012628). - irqchip/gic-v4.1: Add support for VPENDBASER's Dirty+Valid signaling (bnc#1012628). - blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (bnc#1012628). - irqchip/meson-gpio: Fix HARDIRQ-safe -> HARDIRQ-unsafe lock order (bnc#1012628). - hwmon: (jc42) Fix name to have no illegal characters (bnc#1012628). - sfc: fix XDP-redirect in this driver (bnc#1012628). - taprio: do not use BIT() in TCA_TAPRIO_ATTR_FLAG_* definitions (bnc#1012628). - tipc: Add a missing case of TIPC_DIRECT_MSG type (bnc#1012628). - qed: Fix race condition between scheduling and destroying the slowpath workqueue (bnc#1012628). - Crypto: chelsio - Fixes a hang issue during driver registration (bnc#1012628). - net: use indirect call wrappers for skb_copy_datagram_iter() (bnc#1012628). - qed: Fix use after free in qed_chain_free (bnc#1012628). - ext4: check for non-zero journal inum in ext4_calculate_overhead (bnc#1012628). - ASoC: soc-pcm: fix regression in soc_new_pcm() (bnc#1012628). - ASoC: soc-core: disable route checks for legacy devices (bnc#1012628). - ASoC: stm32: spdifrx: fix regmap status check (bnc#1012628). - commit 46be1cc ==== krb5 ==== - Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d notation: libexecdir is likely changing away from /usr/lib to /usr/libexec. ==== kured ==== Version update (1.3.0 -> 1.4.0) - Update to version 1.4.0 - Updated kubectl, client-go, etc to k8s 1.17 (#127, #135) - Update to go 1.13 (#130) - print node id when commanding reboot (#134) ==== libressl ==== Version update (3.0.2 -> 3.1.1) - Update to release 3.1.1 * Completed initial TLS 1.3 implementation with a completely new state machine and record layer. TLS 1.3 is now enabled by default for the client side, with the server side to be enabled in a future release. Note that the OpenSSL TLS 1.3 API is not yet visible/available. * Improved cipher suite handling to automatically include TLSv1.3 cipher suites when they are not explicitly referred to in the cipher string. * Provided TLSv1.3 cipher suite aliases to match the names used in RFC 8446. * Added cms subcommand to openssl(1). * Added -addext option to openssl(1) req subcommand. * Added -groups option to openssl(1) s_server subcommand. * Added TLSv1.3 extension types to openssl(1) -tlsextdebug. ==== libslirp ==== Version update (4.2.0 -> 4.3.0) - Update to 4.3.0 - Fix use-afte-free in ip_reass() (CVE-2020-1983) ==== libunwind ==== Version update (1.3.1 -> 1.4.0) - Update to 1.4.0 - Fix compilation with -fno-common. - arm: clear ip thumb/arm mode bit before move to previous instruction (#131) - tests: fix test-coredump-unwind without HAVE_EXECINFO_H (#165) - There are 20 not 9 failing tests on Solaris (#162) - change asm to __asm__ to support -std=c11 or similar (#149) - x86-64: make `is_cached_valid_mem` functional (#146) - Allow to build without weak `backtrace` symbol. (#142) - fix compile issue on SH platform (#137) - Add support for zlib compressed elf .debug_frame sections - README: add libc requirement description (#121) - Older systems (e.g. RHEL5) do not have pipe2(). (#122) - x86_64: Add fixup code if previous RIP was invalid (#120) - Fix format specifier for int64_t:29 (#117) - Delete hardcode of address size to support MIPS64. (#114) - Added braces to suppress empty if/else warnings (#112) - mips: make _step_n64 as a static function - x86_64: Fix tdep_init_done when built with libatomic_ops - x86_64: tsan clean (#109) - Fixed a missing dependency in dwarf-eh.h - dwarf: clang doesn't respect the static alias (#102) - Update libunwind.keyring - Remove libunwind-gcc10-build-fno-common.patch fixed upstream ==== microos-tools ==== Version update (1.0+git20200214.c7654a7 -> 2.0) - Update to version 2.0 - use autoconf tools to support libexecdir ==== ncurses ==== Version update (6.2.20200418 -> 6.2.20200502) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add ncurses patch 20200502 + add details on the change to Linux SGR 21 in 2018 -TD + add xterm-direct16 and xterm-direct256 -TD + modify lib_mouse.c to check for out-of-range button numbers, convert those to position reports. - Add ncurses patch 20200425 + use vt100+fnkeys in putty -TD + fix a typo in tput.1; "columns" should be "cols". ==== openldap2 ==== Version update (2.4.49 -> 2.4.50) - updated to 2.4.50 - added 0014-ITS-8650-fix-debug-usage.patch - enabled new contrib overlay pw-argon2 - replaced FTP by HTTPS download URL for source - removed 0009-Fix-ldap-host-lookup-ipv6.patch (see bsc#1171127) OpenLDAP 2.4.50 Release (2020/04/28) Fixed client benign typos (ITS#8890) Fixed libldap type cast (ITS#9175) Fixed libldap retry loop in ldap_int_tls_connect (ITS#8650) Fixed libldap_r race on Windows mutex initialization (ITS#9181) Fixed liblunicode memory leak (ITS#9198) Fixed slapd benign typos (ITS#8890) Fixed slapd to limit depth of nested filters (ITS#9202) Fixed slapd-mdb memory leak in dnSuperiorMatch (ITS#9214) Fixed slapo-pcache database initialization (ITS#9182) Fixed slapo-ppolicy callback (ITS#9171) Build Fix olcDatabaseDummy initialization for windows (ITS#7074) Fix detection for ws2tcpip.h for windows (ITS#8383) Fix back-mdb types for windows (ITS#7878) Contrib Update ldapc++ config.guess and config.sub to support newer architectures (ITS#7855) Added pw-argon2 module (ITS#9233, ITS#8575, ITS#9203, ITS#9206) Documentation slapd-ldap(5) - Clarify idassert-authzfrom behavior (ITS#9003) slapd-meta(5) - Remove client-pr option (ITS#8683) slapdinex(8) - Fix truncate option information for back-mdb (ITS#9230) ==== patterns-base ==== Version update (20200417 -> 20200505) Subpackages: patterns-base-apparmor patterns-base-base patterns-base-bootloader patterns-base-minimal_base - Require pam_pwquality in base as it's the replacement for pam_cracklib, previously part of the required pam package - Use requires in update-test pattern so it also works when installing with recommends disabled. - Require update-test pattern from sw_management pattern instead of subtle supplements for same reason. - basic_desktop: Fix icon ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - require issue-generator - requires update_test pattern during beta test of stable distro. Need to require it as recommends is turned off for MicroOS installations. ==== permissions ==== Version update (1550_20200324 -> 1550_20200506) Subpackages: chkstat permissions-config - Update to version 20200506: * add whitelist for files in /usr/lib to be also allowed in /usr/libexec (bsc#1171164) ==== python-packaging ==== - Ignore clamav scan as it bogusly calls one file to be infected while it is just a testcase of malformed binary: [#]!BuildIgnore: post-build-checks-malwarescan ==== python-pyparsing ==== Version update (2.4.6 -> 2.4.7) - update to 2.4.7: . Each bug with Regex expressions . And expressions not properly constructing with generator . Traceback abbreviation . Bug in delta_time example . Fix regexen in pyparsing_common.real and .sci_real . Avoid FutureWarning on Python 3.7 or later . Cleanup output in runTests if comments are embedded in test string ==== python-pyzmq ==== Version update (19.0.0 -> 19.0.1) - update to version 19.0.1: * Fix TypeError during garbage collection * Fix compilation with some C++ compilers * Fixes in tests and examples ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Python 3.8 compatibility changes - msgpack support for version >= 1.0.0 (bsc#1171257) - Added: * python3.8-compatibility-pr-s-235.patch * msgpack-support-versions-1.0.0.patch - Prevent sporious "salt-api" stuck processes when managing SSH minions because of logging deadlock (bsc#1159284) - Avoid segfault from "salt-api" under certain conditions of heavy load managing SSH minions (bsc#1169604) - Added: * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch * make-lazyloader.__init__-call-to-_refresh_file_mappi.patch ==== shared-mime-info ==== Version update (1.15 -> 2.0) - Update to version 2.0 + Port build system to meson, and ship test suite with tarball. + Install ITS file to allow gettext to translate mime-type descriptions. + Add BPS and IPS patch formats. + Lower weight for "use strict" and similar in the perl mimetype. + Add new magic for Sega Mega Drive ROMs. + Add Common Lisp mime-type. + Rename text/x-tcl to text/tcl. + Add text/vbscript. + Add PySpread spreadsheet mime-types. + Add Kotlin source mime-type. + Add AVIF image mime-type. + Split versions of the Audible audio mime types. + Add *.spx glob for audio/x-speex+ogg. + Add Apple System Profiler XML mime-type. - Adjust build dependencies: Add meson and xmlto, drop intltool. ==== sudo ==== Version update (1.9.0rc2 -> 1.9.0rc4) - Update to 1.9.0rc4 * Various spelling fixes. Bug #925. * The struct passwd passed to PAM session modules is now looked up by user name, not user-ID, when possible. Fixes a problem with the pam_limits module and configurations where multiple user names share the same ID. Debian bug #734752. * Sudo command line options that take a value may only be specified once. This is to help guard against problems caused by poorly written scripts that invoke sudo with user-controlled input. Bug #924. - Update to 1.9.0rc3 * The sudo-logsrvd package now installs a systemd service on Linux distros that use systemd. * The I/O plugin is now closed before the policy plugin on command exit. * When copying the edited files to the original path, sudoedit now allocates any additional space needed before writing. Previously, it could truncate the destination file if the file system was full. Bug #922. * Fixed a compilation issue with Python 3.8. * Changed how TLS connections are made to the log server. Instead of using a starttls type approach where TLS and plaintext connections share the same point we now use separate ports for plaintext and TLS connections. A (tls) flag can be specified after the host:port to indicate that the connection should be secured with TLS. This avoids a potention man-in-the-middle attack that could cause the connection to be forced into plaintext mode. Unfortunately, this change breaks compatibility with the previous release candidates. ==== utempter ==== Version update (1.1.6 -> 1.2.0) - version update to 1.2.0 * maintenance work: https://github.com/altlinux/libutempter/commits/ - modified patches % utempter-no-staticlib.patch (refreshed) - modified sources % utempter.keyring - set now libexecdir=%{_libexecdir} as utemper binary complies FHS definition ==== yast2 ==== Version update (4.2.83 -> 4.2.84) - AutoYaST: Cleanup/improve issue handling (bsc#1171335). - 4.2.84 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kubic+owner@opensuse.org