Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20190805 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20190418.d83e9d6 -> 84.87+git20190718.ce933cb) bzip2 (1.0.7 -> 1.0.8) e2fsprogs glib2 (2.60.5 -> 2.60.6) haveged installation-images-MicroOS (14.427 -> 14.431) iputils kernel-source (5.2.3 -> 5.2.5) krb5 openldap2 (2.4.47 -> 2.4.48) parted patterns-containers perl-Bootloader (0.923 -> 0.925) pinentry shadow sysuser-tools (2.0 -> 3.0) wpa_supplicant yast2 (4.2.3 -> 4.2.17) zlib zstd (1.4.1 -> 1.4.2) === Details === ==== aaa_base ==== Version update (84.87+git20190418.d83e9d6 -> 84.87+git20190718.ce933cb) - Drop /bin/login requirement - Update to version 84.87+git20190718.ce933cb: * Make systemd detection cgroup oblivious (bsc#1140647) ==== bzip2 ==== Version update (1.0.7 -> 1.0.8) - Update to version 1.0.8: * Accept as many selectors as the file format allows. This relaxes the fix for CVE-2019-12900 from 1.0.7 so that bzip2 allows decompression of bz2 files that use (too) many selectors again. * Fix handling of large (> 4GB) files on Windows. * Cleanup of bzdiff and bzgrep scripts so they don't use any bash extensions and handle multiple archives correctly. - remove (applied upstream) * bzip2-1.0.6-fix-bashisms.patch * bzip2-1.0.6-bzgrep_return_value.patch - use a new Source url ==== e2fsprogs ==== Subpackages: libcom_err2 libext2fs2 - Fix build with gettext 0.20: * Add e2fsprogs-1.45.2-gettext.patch. * Exclude in-sources intl/ directory from build. - Fix install_info_delete usage: It must be called in preun. ==== glib2 ==== Version update (2.60.5 -> 2.60.6) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.60.6: + Fix various bugs with use of the `GKeyfileSettingsBackend` within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985, glgo#GNOME/GLib#1825). + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984, glgo#GNOME/GLib!985. - Drop glib2-keyfile-handle-filename-being-null.patch: Fixed upstream. ==== haveged ==== Subpackages: libhavege1 - get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error checking (bsc#1111047) ==== installation-images-MicroOS ==== Version update (14.427 -> 14.431) - merge gh#openSUSE/installation-images#326 - merge branch master - data/root/etc/xorg.conf.template: disable acceleration for modeset driver - xorg.conf.template: disable acceleration for modeset driver - 14.431 - merge gh#openSUSE/installation-images#325 - allow explicit setting of product name - 14.430 - add 'Conflicts: rescue-server' to skelcd-installer-* - merge gh#openSUSE/installation-images#322 - aarch64: fix kernel and initrd location in grub config (bsc#1141038) - 14.429 - Complete the tftpboot subpackage rename for the Kubic flavor: also rename the directory inside tftpboot-installation, matching the package name. - merge gh#openSUSE/installation-images#320 - remove SuSEfirewall2 dependency that was introduced in bnc#887406 - 14.428 - Rename the tftpboot subpackage for Kubic to be kubic relevant, not using the generic MicroOS name. ==== iputils ==== - Set caps for clockdiff (boo#1140994), based on change in permissions package https://github.com/openSUSE/permissions/commit/5da6a81e38bb74f2090d73208b1a0... - With new permissions package both clockdiff and ping have capabilities cap_net_raw+p instead of cap_net_raw+ep (boo#1140993), also ping6 does not try to set permissions on links (boo#1140991) - Pass -DNO_SETCAP_OR_SUID=true (don't run setcap via distro script build-aux/setcap-setuid.sh, we set capabilities with rpm) ==== kernel-source ==== Version update (5.2.3 -> 5.2.5) Subpackages: kernel-debug kernel-default - driver core: Fix use-after-free and double free on glue directory (bsc#1131281). - Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207 bsc#1142857 bsc#1123959). - commit 79b6a9c - Update config files: ARCH_HAS_DMA_MMAP_PGPROT is now selected - commit 0a5eef3 - Linux 5.2.5 (bnc#1012628). - io_uring: don't use iov_iter_advance() for fixed buffers (bnc#1012628). - io_uring: fix counter inc/dec mismatch in async_list (bnc#1012628). - io_uring: ensure ->list is initialized for poll commands (bnc#1012628). - io_uring: add a memory barrier before atomic_read (bnc#1012628). - access: avoid the RCU grace period for the temporary subjective credentials (bnc#1012628). - drm/i915: Make the semaphore saturation mask global (bnc#1012628). - structleak: disable STRUCTLEAK_BYREF in combination with KASAN_STACK (bnc#1012628). - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bnc#1012628). - libnvdimm/region: Register badblocks before namespaces (bnc#1012628). - libnvdimm/bus: Prevent duplicate device_unregister() calls (bnc#1012628). - drivers/base: Introduce kill_device() (bnc#1012628). - iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA (bnc#1012628). - iommu/iova: Remove stale cached32_node (bnc#1012628). - iommu/vt-d: Don't queue_iova() if there is no flush queue (bnc#1012628). - io_uring: fix the sequence comparison in io_sequence_defer (bnc#1012628). - powerpc/pmu: Set pmcregs_in_use in paca when running as LPAR (bnc#1012628). - powerpc/tm: Fix oops on sigreturn on systems without TM (bnc#1012628). - powerpc/mm: Limit rma_size to 1TB when running without HV mode (bnc#1012628). - powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask() (bnc#1012628). - powerpc/dma: Fix invalid DMA mmap behavior (bnc#1012628). - ALSA: hda - Add a conexant codec entry to let mute led work (bnc#1012628). - ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips (bnc#1012628). - ALSA: pcm: Fix refcount_inc() on zero usage (bnc#1012628). - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1 (bnc#1012628). - ALSA: ac97: Fix double free of ac97_codec_device (bnc#1012628). - drm/panel: Add support for Armadeus ST0700 Adapt (bnc#1012628). - hpet: Fix division by zero in hpet_time_div() (bnc#1012628). - eeprom: make older eeprom drivers select NVMEM_SYSFS (bnc#1012628). - mei: me: add mule creek canyon (EHL) device ids (bnc#1012628). - fpga-manager: altera-ps-spi: Fix build error (bnc#1012628). - binder: prevent transactions to context manager from its own process (bnc#1012628). - binder: Set end of SG buffer area properly (bnc#1012628). - x86/stacktrace: Prevent access_ok() warnings in arch_stack_walk_user() (bnc#1012628). - x86/speculation/mds: Apply more accurate check on hypervisor platform (bnc#1012628). - x86/sysfb_efi: Add quirks for some devices with swapped width and height (bnc#1012628). - selinux: check sidtab limit before adding a new entry (bnc#1012628). - btrfs: inode: Don't compress if NODATASUM or NODATACOW set (bnc#1012628). - media: videodev2.h: change V4L2_PIX_FMT_BGRA444 define: fourcc was already in use (bnc#1012628). - KVM: PPC: Book3S HV: XIVE: fix rollback when kvmppc_xive_create fails (bnc#1012628). - KVM: PPC: Book3S HV: Save and restore guest visible PSSCR bits on pseries (bnc#1012628). - KVM: PPC: Book3S HV: Always save guest pmu for guest capable of nesting (bnc#1012628). - KVM: X86: Fix fpu state crash in kvm guest (bnc#1012628). - usb: usb251xb: Reallow swap-dx-lanes to apply to the upstream port (bnc#1012628). - Revert "usb: usb251xb: Add US port lanes inversion property" (bnc#1012628). - Revert "usb: usb251xb: Add US lanes inversion dts-bindings" (bnc#1012628). - usb: pci-quirks: Correct AMD PLL quirk detection (bnc#1012628). - usb: wusbcore: fix unbalanced get/put cluster_id (bnc#1012628). - usb-storage: Add a limitation for blk_queue_max_hw_sectors() (bnc#1012628). - xhci: Fix crash if scatter gather is used with Immediate Data Transfer (IDT) (bnc#1012628). - locking/lockdep: Hide unused 'class' variable (bnc#1012628). - mm, swap: fix race between swapoff and some swap operations (bnc#1012628). - mm: use down_read_killable for locking mmap_sem in access_remote_vm (bnc#1012628). - locking/lockdep: Fix lock used or unused stats error (bnc#1012628). - proc: use down_read_killable mmap_sem for /proc/pid/maps (bnc#1012628). - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bnc#1012628). - proc: use down_read_killable mmap_sem for /proc/pid/map_files (bnc#1012628). - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs (bnc#1012628). - proc: use down_read_killable mmap_sem for /proc/pid/pagemap (bnc#1012628). - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup (bnc#1012628). - mm/mmu_notifier: use hlist_add_head_rcu() (bnc#1012628). - memcg, fsnotify: no oom-kill for remote memcg charging (bnc#1012628). - mm/gup.c: remove some BUG_ONs from get_gate_page() (bnc#1012628). - mm/gup.c: mark undo_dev_pagemap as __maybe_unused (bnc#1012628). - mm/mincore.c: fix race between swapoff and mincore (bnc#1012628). - 9p: pass the correct prototype to read_cache_page (bnc#1012628). - mm/kmemleak.c: fix check for softirq context (bnc#1012628). - sh: prevent warnings when using iounmap (bnc#1012628). - nvme: fix NULL deref for fabrics options (bnc#1012628). - block/bio-integrity: fix a memory leak bug (bnc#1012628). - platform/x86: Fix PCENGINES_APU2 Kconfig warning (bnc#1012628). - powerpc/eeh: Handle hugepages in ioremap space (bnc#1012628). - dlm: check if workqueues are NULL before flushing/destroying (bnc#1012628). - mailbox: handle failed named mailbox channel request (bnc#1012628). - f2fs: avoid out-of-range memory access (bnc#1012628). - f2fs: fix to avoid long latency during umount (bnc#1012628). - rds: Accept peer connection reject messages due to incompatible version (bnc#1012628). - block: init flush rq ref count to 1 (bnc#1012628). - powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h (bnc#1012628). - powerpc/irq: Don't WARN continuously in arch_local_irq_restore() (bnc#1012628). - nvme-tcp: set the STABLE_WRITES flag when data digests are enabled (bnc#1012628). - io_uring: fix io_sq_thread_stop running in front of io_sq_thread (bnc#1012628). - nvme-tcp: don't use sendpage for SLAB pages (bnc#1012628). - nvme-pci: limit max_hw_sectors based on the DMA max mapping size (bnc#1012628). - nvme-pci: check for NULL return from pci_alloc_p2pmem() (bnc#1012628). - RDMA/core: Fix race when resolving IP address (bnc#1012628). - perf intel-bts: Fix potential NULL pointer dereference found by the smatch tool (bnc#1012628). - PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB (bnc#1012628). - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bnc#1012628). - perf hists browser: Fix potential NULL pointer dereference found by the smatch tool (bnc#1012628). - perf annotate: Fix dereferencing freed memory found by the smatch tool (bnc#1012628). - perf map: Fix potential NULL pointer dereference found by smatch tool (bnc#1012628). - perf session: Fix potential NULL pointer dereference found by the smatch tool (bnc#1012628). - perf trace: Fix potential NULL pointer dereference found by the smatch tool (bnc#1012628). - perf top: Fix potential NULL pointer dereference detected by the smatch tool (bnc#1012628). - rseq/selftests: Fix Thumb mode build failure on arm32 (bnc#1012628). - perf stat: Fix use-after-freed pointer detected by the smatch tool (bnc#1012628). - perf test mmap-thread-lookup: Initialize variable to suppress memory sanitizer warning (bnc#1012628). - PCI: mobiveil: Use the 1st inbound window for MEM inbound transactions (bnc#1012628). - PCI: mobiveil: Initialize Primary/Secondary/Subordinate bus numbers (bnc#1012628). - kallsyms: exclude kasan local symbols on s390 (bnc#1012628). - PCI: mobiveil: Fix the Class Code field (bnc#1012628). - PCI: mobiveil: Fix PCI base address in MEM/IO outbound windows (bnc#1012628). - KVM: nVMX: Stash L1's CR3 in vmcs01.GUEST_CR3 on nested entry w/o EPT (bnc#1012628). - arm64: assembler: Switch ESB-instruction with a vanilla nop if !ARM64_HAS_RAS (bnc#1012628). - IB/ipoib: Add child to parent list only if device initialized (bnc#1012628). - powerpc/mm: Handle page table allocation failures (bnc#1012628). - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE (bnc#1012628). - serial: sh-sci: Fix TX DMA buffer flushing and workqueue races (bnc#1012628). - serial: sh-sci: Terminate TX DMA during buffer flushing (bnc#1012628). - RDMA/i40iw: Set queue pair state when being queried (bnc#1012628). - powerpc/mm: mark more tlb functions as __always_inline (bnc#1012628). - powerpc/4xx/uic: clear pending interrupt after irq type/pol change (bnc#1012628). - powerpc: silence a -Wcast-function-type warning in dawr_write_file_bool (bnc#1012628). - f2fs: fix is_idle() check for discard type (bnc#1012628). - um: Silence lockdep complaint about mmap_sem (bnc#1012628). - mm/swap: fix release_pages() when releasing devmap pages (bnc#1012628). - mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk (bnc#1012628). - mfd: arizona: Fix undefined behavior (bnc#1012628). - mfd: core: Set fwnode for created devices (bnc#1012628). - mfd: madera: Add missing of table registration (bnc#1012628). - mfd: cros_ec: Register cros_ec_lid_angle driver when presented (bnc#1012628). - recordmcount: Fix spurious mcount entries on powerpc (bnc#1012628). - fixdep: check return value of printf() and putchar() (bnc#1012628). - powerpc/rtas: retry when cpu offline races with suspend/migration (bnc#1012628). - powerpc/xmon: Fix disabling tracing while in xmon (bnc#1012628). - powerpc/cacheflush: fix variable set but not used (bnc#1012628). - dt-bindings: backlight: lm3630a: correct schema validation (bnc#1012628). - iio: iio-utils: Fix possible incorrect mask calculation (bnc#1012628). - PCI: xilinx-nwl: Fix Multi MSI data programming (bnc#1012628). - phy: meson-g12a-usb3-pcie: disable locking for cr_regmap (bnc#1012628). - genksyms: Teach parser about 128-bit built-in types (bnc#1012628). - kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS (bnc#1012628). - i2c: stm32f7: fix the get_irq error cases (bnc#1012628). - PCI: sysfs: Ignore lockdep for remove attribute (bnc#1012628). - phy: renesas: rcar-gen3-usb2: fix imbalance powered flag (bnc#1012628). - serial: mctrl_gpio: Check if GPIO property exisits before requesting it (bnc#1012628). - drm/msm: Depopulate platform on probe failure (bnc#1012628). - powerpc/pci/of: Fix OF flags parsing for 64bit BARs (bnc#1012628). - drm/msm/adreno: Ensure that the zap shader region is big enough (bnc#1012628). - kvm: vmx: segment limit check: use access length (bnc#1012628). - KVM: nVMX: Intercept VMWRITEs to GUEST_{CS,SS}_AR_BYTES (bnc#1012628). - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width (bnc#1012628). - kvm: vmx: fix limit checking in get_vmx_mem_address() (bnc#1012628). - usb: dwc3: Fix core validation in probe, move after clocks are enabled (bnc#1012628). - usb: gadget: Zero ffs_io_data (bnc#1012628). - tty: serial_core: Set port active bit in uart_port_activate (bnc#1012628). - serial: uartps: Use the same dynamic major number for all ports (bnc#1012628). - serial: imx: fix locking in set_termios() (bnc#1012628). - iio: adxl372: fix iio_triggered_buffer_{pre,post}enable positions (bnc#1012628). - platform/x86: asus-wmi: Increase input buffer size of WMI methods (bnc#1012628). - drm/rockchip: Properly adjust to a true clock in adjusted_mode (bnc#1012628). - dma-remap: Avoid de-referencing NULL atomic_pool (bnc#1012628). - powerpc/pseries/mobility: prevent cpu hotplug during DT update (bnc#1012628). - drm/bridge: tfp410: fix use of cancel_delayed_work_sync (bnc#1012628). - sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (bnc#1012628). - drm/amd/display: fix compilation error (bnc#1012628). - phy: renesas: rcar-gen2: Fix memory leak at error paths (bnc#1012628). - drm/amd/display: set link->dongle_max_pix_clk to 0 on a disconnect (bnc#1012628). - drm/virtio: Add memory barriers for capset cache (bnc#1012628). - drm/amd/display: Update link rate from DPCD 10 (bnc#1012628). - drm/amd/display: Always allocate initial connector state state (bnc#1012628). - PCI: endpoint: Allocate enough space for fixed size BAR (bnc#1012628). - serial: 8250: Fix TX interrupt handling condition (bnc#1012628). - tty: serial: msm_serial: avoid system lockup condition (bnc#1012628). - tty/serial: digicolor: Fix digicolor-usart already registered warning (bnc#1012628). - memstick: Fix error cleanup path of memstick_init (bnc#1012628). - drm/omap: don't check dispc timings for DSI (bnc#1012628). - mm/hmm: fix use after free with struct hmm in the mmu notifiers (bnc#1012628). - i2c: nvidia-gpu: resume ccgx i2c client (bnc#1012628). - drm/vkms: Forward timer right after drm_crtc_handle_vblank (bnc#1012628). - drm/crc-debugfs: Also sprinkle irqrestore over early exits (bnc#1012628). - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry (bnc#1012628). - gpu: host1x: Increase maximum DMA segment size (bnc#1012628). - f2fs: Lower threshold for disable_cp_again (bnc#1012628). - f2fs: Fix accounting for unusable blocks (bnc#1012628). - drm/amd/display: Increase Backlight Gain Step Size (bnc#1012628). - drm/amd/display: CS_TFM_1D only applied post EOTF (bnc#1012628). - drm/amd/display: Reset planes for color management changes (bnc#1012628). - drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz (bnc#1012628). - drm/bridge: tc358767: read display_props in get_modes() (bnc#1012628). - staging: kpc2000: report error status to spi core (bnc#1012628). - PCI: Return error if cannot probe VF (bnc#1012628). - tools: PCI: Fix broken pcitest compilation (bnc#1012628). - drm/edid: Fix a missing-check bug in drm_load_edid_firmware() (bnc#1012628). - drm/amdkfd: Fix sdma queue map issue (bnc#1012628). - drm/amdkfd: Fix a potential memory leak (bnc#1012628). - drm/amd/display: Disable ABM before destroy ABM struct (bnc#1012628). - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE (bnc#1012628). - f2fs: fix to avoid deadloop if data_flush is on (bnc#1012628). - drm/amdgpu: Reserve shared fence for eviction fence (bnc#1012628). - drm/amd/display: Fill plane attrs only for valid pxl format (bnc#1012628). - drm/amd/display: Disable cursor when offscreen in negative direction (bnc#1012628). - drm/msm/a6xx: Avoid freeing gmu resources multiple times (bnc#1012628). - drm/amd/display: fix multi display seamless boot case (bnc#1012628). - drm/amd/display: Fill prescale_params->scale for RGB565 (bnc#1012628). - ipmi_ssif: fix unexpected driver unregister warning (bnc#1012628). - drm/msm/a6xx: Check for ERR or NULL before iounmap (bnc#1012628). - f2fs: fix to check layout on last valid checkpoint park (bnc#1012628). - tty: serial: cpm_uart - fix init when SMC is relocated (bnc#1012628). - pinctrl: rockchip: fix leaked of_node references (bnc#1012628). - tty: max310x: Fix invalid baudrate divisors calculator (bnc#1012628). - usb: core: hub: Disable hub-initiated U1/U2 (bnc#1012628). - drm/bochs: Fix connector leak during driver unload (bnc#1012628). - staging: vt6656: use meaningful error code during buffer allocation (bnc#1012628). - ipmi_si: fix unexpected driver unregister warning (bnc#1012628). - staging: kpc2000: added missing clean-up to probe_core_uio (bnc#1012628). - drm/virtio: set seqno for dma-fence (bnc#1012628). - iio: adc: stm32-dfsdm: missing error case during probe (bnc#1012628). - iio: adc: stm32-dfsdm: manage the get_irq error case (bnc#1012628). - drm/panel: simple: Fix panel_simple_dsi_probe (bnc#1012628). - drm/lima: handle shared irq case for lima_pp_bcast_irq_handler (bnc#1012628). - btrfs: shut up bogus -Wmaybe-uninitialized warning (bnc#1012628). - media: drivers: media: coda: fix warning same module names (bnc#1012628). - regulator: 88pm800: fix warning same module names (bnc#1012628). - commit b607c27 - Linux 5.2.4 (bnc#1012628). - net: sched: verify that q!=NULL before setting q->flags (bnc#1012628). - block: Limit zone array allocation size (bnc#1012628). - sd_zbc: Fix report zones buffer allocation (bnc#1012628). - Revert "kvm: x86: Use task structs fpu field for user" (bnc#1012628). - KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested (bnc#1012628). - KVM: nVMX: do not use dangling shadow VMCS after guest reset (bnc#1012628). - ext4: allow directory holes (bnc#1012628). - ext4: use jbd2_inode dirty range scoping (bnc#1012628). - jbd2: introduce jbd2_inode dirty range scoping (bnc#1012628). - mm: add filemap_fdatawait_range_keep_errors() (bnc#1012628). - ext4: enforce the immutable flag on open files (bnc#1012628). - ext4: don't allow any modifications to an immutable file (bnc#1012628). - perf/core: Fix race between close() and fork() (bnc#1012628). - perf/core: Fix exclusive events' grouping (bnc#1012628). - perf script: Assume native_arch for pipe mode (bnc#1012628). - MIPS: lb60: Fix pin mappings (bnc#1012628). - gpio: davinci: silence error prints in case of EPROBE_DEFER (bnc#1012628). - gpiolib: of: fix a memory leak in of_gpio_flags_quirks() (bnc#1012628). - Revert "gpio/spi: Fix spi-gpio regression on active high CS" (bnc#1012628). - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc (bnc#1012628). - dma-buf: balance refcount inbalance (bnc#1012628). - mlxsw: spectrum: Do not process learned records with a dummy FID (bnc#1012628). - net/mlx5: E-Switch, Fix default encap mode (bnc#1012628). - mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed (bnc#1012628). - bnxt_en: Fix VNIC accounting when enabling aRFS on 57500 chips (bnc#1012628). - net/mlx5e: Fix error flow in tx reporter diagnose (bnc#1012628). - net/mlx5e: Fix return value from timeout recover function (bnc#1012628). - net/mlx5e: Rx, Fix checksum calculation for new hardware (bnc#1012628). - net/mlx5e: Fix port tunnel GRE entropy control (bnc#1012628). - net/tls: reject offload of TLS 1.3 (bnc#1012628). - net/tls: fix poll ignoring partially copied records (bnc#1012628). - selftests: txring_overwrite: fix incorrect test of mmap() return value (bnc#1012628). - netrom: hold sock when setting skb->destructor (bnc#1012628). - netrom: fix a memory leak in nr_rx_frame() (bnc#1012628). - macsec: fix checksumming after decryption (bnc#1012628). - macsec: fix use-after-free of skb during RX (bnc#1012628). - net: bridge: stp: don't cache eth dest pointer before skb pull (bnc#1012628). - net: bridge: don't cache ether dest pointer on input (bnc#1012628). - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query (bnc#1012628). - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling (bnc#1012628). - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn (bnc#1012628). - vrf: make sure skb->data contains ip header to make routing (bnc#1012628). - tcp: Reset bytes_acked and bytes_received when disconnecting (bnc#1012628). - tcp: fix tcp_set_congestion_control() use from bpf hook (bnc#1012628). - tcp: be more careful in tcp_fragment() (bnc#1012628). - sky2: Disable MSI on ASUS P6T (bnc#1012628). - sctp: not bind the socket in sctp_connect (bnc#1012628). - sctp: fix error handling on stream scheduler initialization (bnc#1012628). - rxrpc: Fix send on a connected, but unbound socket (bnc#1012628). - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b (bnc#1012628). - nfc: fix potential illegal memory access (bnc#1012628). - net/tls: make sure offload also gets the keys wiped (bnc#1012628). - net: stmmac: Re-work the queue selection for TSO packets (bnc#1012628). - net_sched: unset TCQ_F_CAN_BYPASS when adding filters (bnc#1012628). - net: phy: sfp: hwmon: Fix scaling of RX power (bnc#1012628). - net: openvswitch: fix csum updates for MPLS actions (bnc#1012628). - net: neigh: fix multiple neigh timer scheduling (bnc#1012628). - net: make skb_dst_force return true when dst is refcounted (bnc#1012628). - net: dsa: mv88e6xxx: wait after reset deactivation (bnc#1012628). - net: bcmgenet: use promisc for unsupported filters (bnc#1012628). - ipv6: Unlink sibling route in case of failure (bnc#1012628). - ipv6: rt6_check should return NULL if 'from' is NULL (bnc#1012628). - ipv4: don't set IPv6 only flags to IPv4 addresses (bnc#1012628). - igmp: fix memory leak in igmpv3_del_delrec() (bnc#1012628). - hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() (bnc#1012628). - caif-hsi: fix possible deadlock in cfhsi_exit_module() (bnc#1012628). - bnx2x: Prevent load reordering in tx completion processing (bnc#1012628). - commit d795a82 - rpm/macros.kernel-source: KMPs should depend on kmod-compat to build. kmod-compat links are used in find-provides.ksyms, find-requires.ksyms, and find-supplements.ksyms in rpm-config-SUSE. - commit f97ca49 - scripts/run_oldconfig.sh: Fix update-vanilla When CC is set we want to use it for native only. Cross-compilation still needs the crosscompilers. - commit 3b9fcdb ==== krb5 ==== - removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html ==== openldap2 ==== Version update (2.4.47 -> 2.4.48) - removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html - Update to upstream release 2.4.48 with security fixes: * CVE-2019-13057 (ITS#9038): rootdn of any db can assert any identity * CVE-2019-13565 (ITS#9052): Unauthorized access caused by incorrect handling of SASL SSF values - Fix CVE-2017-17740 by disabling nops overlay not maintained by upstream (see also bsc#1073313, comment #36) - Removed obsolete patches: * 0002-openldap-its8727-plug-ber-leaks.patch * 0017-Fix-segfault-in-nops.patch OpenLDAP 2.4.48 (2019/07/24) Added libldap OpenSSL Elliptic Curve support (ITS#7595) Added libldap Expose OpenLDAP specific interfaces via openldap.h (ITS#8671) Added slapd-monitor support for slapd-mdb (ITS#7770) Fixed liblber leaks (ITS#8727) Fixed liblber with partial flush (ITS#8864) Fixed libldap ASYNC TLS so it works (ITS#8957,ITS#8980) Fixed libldap ASYNC connections with Solaris 10 (ITS#8968) Fixed libldap with SASL_NOCANON=on and ldapi connections (ITS#7585) Fixed libldap to be able to unset syncrepl TLS options (ITS#7042) Fixed libldap race condition in ldap_int_initialize (ITS#7996, ITS#8450) Fixed libldap return code in ldap_create_assertion_control_value (ITS#8674) Fixed libldap to correctly disable IPv6 when configured to do so (ITS#8754) Fixed libldap to correctly close TLS connection (ITS#8755) Fixed libldap with non-blocking TLS and referals (ITS#8167) Fixed libldap_r handling of deprecated OpenSSL function (ITS#8353) Fixed liblunicode case correspondance (ITS#8508) Fixed slapd with an idletimeout of less than four seconds (ITS#8952) Fixed slapd config parser variable for Windows64 (ITS#9012) Fixed slapd syncrepl fallback handling with delta-syncrepl (ITS#9015) Fixed slapd telephoneNumberNormalize, cert DN validation (ITS#8999) Fixed slapd syncrepl for relax with delta-syncrepl (ITS#8037) Fixed slapd to restrict rootDN proxyauthz to its own databases (ITS#9038) Fixed slapd to initialize SASL SSF per connection (ITS#9052) Fixed slapo-accesslog with SLAP_MOD_SOFT modifications (ITS#8990) Fixed slapd-ldap starttls connections timeout behavior (ITS#8963) Fixed slapd-ldap segfault when entry result doesn't match filter (ITS#8997) Fixed slapd-meta conversion from slapd.conf to cn=config (ITS#8743) Fixed slapd-meta assertion when network interface goes down (ITS#8841) Fixed slapd-mdb fix bitshift integer overflow (ITS#8989) Fixed slapd-mdb index cleanup with cn=config (ITS#8472) Fixed slapd-mdb to improve performance with alias deref (ITS#7657) Fixed slapo-accesslog possible assert with exops (ITS#8971) Fixed slapo-chain to correctly reject multiple chaining URIs (ITS#8637) Fixed slapo-chain conversion from slapd.conf to cn=config (ITS#8799) Fixed slapo-memberof conversion from slapd.conf to cn=config (ITS#8663) Fixed slapo-memberof for group name change to itself (ITS#9000) Fixed slapo-ppolicy behavior when pwdInHistory is changed (ITS#8349) Fixed slapo-rwm to not free original filter (ITS#8964) Fixed slapo-syncprov contextCSN generation (ITS#9015) Build Environment Fixed slapd to only link to BDB libraries with static build (ITS#8948) Fixed libldap implicit declaration with LDAP_CONNECTIONLESS (ITS#8794) Fixed libldap double inclusion of limits.h in cyrus.c (ITS#9041) Documentation General - Fixed minor typos (ITS#8764, ITS#8761) admin24 - Miscellaneous updates promoting mdb and fixing examples (ITS#9031) slapd.access(5) - Note MDB is the primary backend (ITS#8881) slapd.backends(5) - Note MDB is the recommended backend (ITS#8771) slapd-ldap(5) - Document starttls parameter (ITS#8693) Contrib Added slapo-lastbind capability to forward authTimestamp updates (ITS#7721) ==== parted ==== Subpackages: libparted0 - changed: parted-fix-crash-due-to-improper-partition-number-in.patch Changed the patch to behave in the same way like before last change for numbers with leading zeroes. ==== patterns-containers ==== - Add kail to kubernetes_utilities - Add weave-k8s-yaml to kubeadm pattern ==== perl-Bootloader ==== Version update (0.923 -> 0.925) - merge gh#openSUSE/perl-bootloader#122 - Replace --suse-signed-grub by --suse-force-signed to follow update from boo#1136601 - 0.925 - merge gh#openSUSE/perl-bootloader#121 - Fix secureboot on aarch64 (boo#1136601) - [RFC] Fix secureboot on aarch64 (boo#1136601) - 0.924 ==== pinentry ==== - Fix a dangling pointer in qt/main.cpp [bsc#1141883] * Added pinentry-qt-Fix-use-of-dangling-pointer.patch - Updated spec file with spec-cleaner ==== shadow ==== - Fix incorrect variable name in usermod (shadow-usermod-variable.patch). - shadow-login_defs-comments.patch: * Drop SHA_CRYPT_*_ROUNDS that are in the upstream login.defs. * Add missing LASTLOG_UID_MAX. * Refresh shadow-login_defs-suse.patch. - Port shadow-login_defs-check.sh to match the current spec file and login.defs. - Provide "useradd_or_adduser_dep" for sysuser-shadow - shadow-login_defs-suse.patch: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7). - Fix comment about patch in spec file ==== sysuser-tools ==== Version update (2.0 -> 3.0) - Use suggests shadow to prefer that over busybox in normal systems - Add support for busybox adduser/addgroup - Change requirements from shadow to useradd_or_adduser_dep ==== wpa_supplicant ==== - Refresh spec-file via spec-cleaner and manual optimizations. * Change URL and Source0 to actual project homepage. * Remove macro %{?systemd_requires} and rm (not needed). * Add %autopatch macro. * Add %make_build macro. - Chenged patch wpa_supplicant-flush-debug-output.patch (to -p1). - Changed service-files for start after network (systemd-networkd). ==== yast2 ==== Version update (4.2.3 -> 4.2.17) - Allow to know if there is a forced base product (bsc#1124590, bsc#1143943). - 4.2.17 - Add a dependency on hostname, as it is needed by the Hostname module (boo#1142595). - 4.2.16 - Stop "ls: write error: Broken pipe" messages (bsc#1128032) - 4.2.15 - Release the sources to avoid using up all server connections (bsc#1141127) - 4.2.14 - Fixed evaluating the base products to avoid the "No base product found" error message at upgrade, for reading the product data prefer the new products (bsc#1142522) - 4.2.13 - fixed symlink creation in jenkins - Infer the right module name from desktop files (bsc#1140233). - 4.2.12 - bsc#1138668 - Fixed failing old testsuite in yast2-dns-server package: do not depend on the environment, skip bind absence in Mode.test() - 4.2.11 - deprecate Arch.ia64 and drop all support for ia64 (last seen in SLE 11) - bsc#1137992 - PackageSystem.Installed: Fixed typo when passing the allowed return codes to Execute. - 4.2.10 - bsc#1137992 - PackageSystem.Installed: Use Yast::Execute instead of SCR to avoid false positives. - 4.2.9 - Slideshow: Flag for switching on/off release notes tab. (bsc#1136708) - 4.2.8 - bsc#1137992 - PackageSystem.Installed: Increase the logs details. - 4.2.7 - bsc#1086454 - Recognize IB interfaces based on IPOIB_MODE ifcfg attribute - 4.2.6 - Use new schema of desktop files (boo#1084864) - Clean up spec - Rename desktop files - 4.2.5 - Drop old testsuite - Convert from autotools to rake based installation - create log directory with control.xml and merged installation.xml - 4.2.4 ==== zlib ==== - Update the s390 patchset bsc#1137624: * 410.patch ==== zstd ==== Version update (1.4.1 -> 1.4.2) - Add disk _constraints to fix ppc64le build - Update to version 1.4.2: * bug: Fix bug in zstd-0.5 decoder by @terrelln (#1696) * bug: Fix seekable decompression in-memory API by @iburinoc (#1695) * bug: Close minor memory leak in CLI by @LeeYoung624 (#1701) * misc: Validate blocks are smaller than size limit by @vivekmig (#1685) * misc: Restructure source files by @ephiepark (#1679) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kubic+owner@opensuse.org