Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20190626 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: audit audit-secondary btrfsmaintenance cloud-init (18.5 -> 19.1) ding-libs filesystem gcc9 (9.1.1+r271393 -> 9.1.1+r272147) glib-networking (2.60.2 -> 2.60.3) glib2 (2.60.3 -> 2.60.4) growpart hwdata (0.323 -> 0.324) kernel-firmware (20190514 -> 20190618) kernel-source (5.1.7 -> 5.1.10) libcontainers-common libseccomp (2.4.0 -> 2.4.1) libsolv (0.7.4 -> 0.7.5) libzypp (17.11.4 -> 17.12.0) microos-tools (1.0+git20190218.9e72dd7 -> 1.0+git20190611.6211f74) ncurses permissions (1550_20190429 -> 1550_20190521) python-base systemd-presets-common-SUSE sysvinit (2.90 -> 2.95) zlib zypper (1.14.27 -> 1.14.28) === Details === ==== audit ==== Subpackages: libaudit1 libauparse0 - Make use of some %make_install. ==== audit-secondary ==== Subpackages: audit python3-audit - Reduce scriptlets' hard dependency on systemd. ==== btrfsmaintenance ==== - spec: fix typo in macro name - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini ==== cloud-init ==== Version update (18.5 -> 19.1) - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini - Update to version 19.1 (bsc#1136440) + Remove, included upstream - fix-default-systemd-unit-dir.patch - cloud-init-sysconf-ethsetup.patch - cloud-init-handle-def-route-set.patch - cloud-init-no-empty-resolv.patch - cloud-init-proper-ipv6-varname.patch + Forward port - cloud-init-trigger-udev.patch + Add cloud-init-detect-nova.diff (bsc#1136440) + Modify cloud-init-python2-sigpipe.patch, import signal and constants + Update spec to account for new location of bash completion + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder] + tests: add Eoan release [Paride Legovini] + cc_mounts: check if mount -a on no-change fstab path [Jason Zions (MSFT)] (LP: #1825596) + replace remaining occurrences of LOG.warn [Daniel Watkins] + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo] + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo] + git tests: no longer show warning about safe yaml. + tools/read-version: handle errors [Chad Miller] + net/sysconfig: only indicate available on known sysconfig distros (LP: #1819994) + packages: update rpm specs for new bash completion path [Daniel Watkins] (LP: #1825444) + test_azure: mock util.SeLinuxGuard where needed [Jason Zions (MSFT)] (LP: #1825253) + setup.py: install bash completion script in new location [Daniel Watkins] + mount_cb: do not pass sync and rw options to mount [Gonéri Le Bouder] (LP: #1645824) + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel] + Revert "DataSource: move update_events from a class to an instance..." [Daniel Watkins] + Change DataSourceNoCloud to ignore file system label's case. [Risto Oikarinen] + cmd:main.py: Fix missing 'modules-init' key in modes dict [Antonio Romito] (LP: #1815109) + ubuntu_advantage: rewrite cloud-config module + Azure: Treat _unset network configuration as if it were absent [Jason Zions (MSFT)] (LP: #1823084) + DatasourceAzure: add additional logging for azure datasource [Anh Vo] + cloud_tests: fix apt_pipelining test-cases + Azure: Ensure platform random_seed is always serializable as JSON. [Jason Zions (MSFT)] + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert] + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold] + net: Fix ipv6 static routes when using eni renderer [Raphael Glon] (LP: #1818669) + Add ubuntu_drivers config module [Daniel Watkins] + doc: Refresh Azure walinuxagent docs [Daniel Watkins] + tox: bump pylint version to latest (2.3.1) [Daniel Watkins] + DataSource: move update_events from a class to an instance attribute [Daniel Watkins] (LP: #1819913) + net/sysconfig: Handle default route setup for dhcp configured NICs [Robert Schweikert] (LP: #1812117) + DataSourceEc2: update RELEASE_BLOCKER to be more accurate [Daniel Watkins] + cloud-init-per: POSIX sh does not support string subst, use sed (LP: #1819222) + Support locking user with usermod if passwd is not available. + Example for Microsoft Azure data disk added. [Anton Olifir] + clean: correctly determine the path for excluding seed directory [Daniel Watkins] (LP: #1818571) + helpers/openstack: Treat unknown link types as physical [Daniel Watkins] (LP: #1639263) + drop Python 2.6 support and our NIH version detection [Daniel Watkins] + tip-pylint: Fix assignment-from-return-none errors + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig [Kurt Stieger] (LP: #1818032) + cc_apt_pipelining: stop disabling pipelining by default [Daniel Watkins] (LP: #1794982) + tests: fix some slow tests and some leaking state [Daniel Watkins] + util: don't determine string_types ourselves [Daniel Watkins] + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967) + Enable encrypted_data_bag_secret support for Chef [Eric Williams] (LP: #1817082) + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)] + doc: update merging doc with fixes and some additional details/examples + tests: integration test failure summary to use traceback if empty error + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676 [Vitaly Kuznetsov] + EC2: Rewrite network config on AWS Classic instances every boot [Guilherme G. Piccoli] (LP: #1802073) + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries (LP: #1779672) + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051) + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel] + correct grammar issue in instance metadata documentation [Dominic Schlegel] (LP: #1802188) + clean: cloud-init clean should not trace when run from within cloud_dir (LP: #1795508) + Resolve flake8 comparison and pycodestyle over-ident issues [Paride Legovini] + opennebula: also exclude epochseconds from changed environment vars (LP: #1813641) + systemd: Render generator from template to account for system differences. [Robert Schweikert] + sysconfig: On SUSE, use STARTMODE instead of ONBOOT [Robert Schweikert] (LP: #1799540) + flake8: use ==/!= to compare str, bytes, and int literals [Paride Legovini] + opennebula: exclude EPOCHREALTIME as known bash env variable with a delta (LP: #1813383) + tox: fix disco httpretty dependencies for py37 (LP: #1813361) + run-container: uncomment baseurl in yum.repos.d/*.repo when using a proxy [Paride Legovini] + lxd: install zfs-linux instead of zfs meta package [Johnson Shi] (LP: #1799779) + net/sysconfig: do not write a resolv.conf file with only the header. [Robert Schweikert] + net: Make sysconfig renderer compatible with Network Manager. [Eduardo Otubo] + cc_set_passwords: Fix regex when parsing hashed passwords [Marlin Cremers] (LP: #1811446) + net: Wait for dhclient to daemonize before reading lease file [Jason Zions] (LP: #1794399) + [Azure] Increase retries when talking to Wireserver during metadata walk [Jason Zions] + Add documentation on adding a datasource. + doc: clean up some datasource documentation. + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo. + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc] + OVF: simplify expected return values of transport functions. + Vmware: Add support for the com.vmware.guestInfo OVF transport. (LP: #1807466) + HACKING.rst: change contact info to Josh Powers + Update to pylint 2.2.2. ==== ding-libs ==== Subpackages: libbasicobjects0 libcollection4 libdhash1 libini_config5 libpath_utils1 libref_array1 - Add patch fixing errors writeout to stdout: * INI-Remove-definiton-of-TRACE_LEVEL.patch ==== filesystem ==== - Re-add /var/cache and /var/log (revert [bsc#1078466] because of [bsc#1078466]) - Fix permission of fs-var.conf ==== gcc9 ==== Version update (9.1.1+r271393 -> 9.1.1+r272147) Subpackages: libgcc_s1 libstdc++6 - Update to gcc-9-branch head (r272147). * Pulls fix for random debug info differences when compiling D code. [gcc#90778] - Update to gcc-9-branch head (r271995). * installs workaround for broken lapack C interfaces - Drop gcc9-spectrev1.patch, add gcc9-reproducible-builds.patch and gcc9-reproducible-builds-buildid-for-checksum.patch moving reproducible build improvements over from GCC 8 package. - Split out libstdc++ pretty-printers into a separate package supplementing gdb and the installed runtime. [bsc#1135254] - Update to gcc-9-branch head (r271643). ==== glib-networking ==== Version update (2.60.2 -> 2.60.3) - Update to version 2.60.3: + Fix clobbering of the thread-default main context after certificate verification failure during async handshakes since 2.60.1. + Fix GTlsDatabase initialization failures in OpenSSL backend due to uninitialized memory use. + Fix minor leak of ALPN protocols. ==== glib2 ==== Version update (2.60.3 -> 2.60.4) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.60.4: + Fixes to improved network status detection with NetworkManager. + Leak fixes to some `glib-genmarshal` generated code. + Further fixes to the Happy Eyeballs (RFC 8305) implementation. + File system permissions fix to clamp down permissions in a small time window when copying files (CVE-2019-12450). + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788, glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793, glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878. ==== growpart ==== - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini ==== hwdata ==== Version update (0.323 -> 0.324) - Update to version 0.324: * Updated pci, usb and vendor ids. ==== kernel-firmware ==== Version update (20190514 -> 20190618) Subpackages: ucode-amd - Update to version 20190618: * cavium: Add firmware for CNN55XX crypto driver. * linux-firmware: Update firmware file for Intel Bluetooth 22161 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update AMD SEV firmware * linux-firmware: update licence text for Marvell firmware - Update to version 20190607: * linux-firmware: update firmware for mhdp8546 * linux-firmware: rsi: update firmware images for Redpine 9113 chipset * imx: sdma: update firmware to v3.5/v4.5 * nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108 ==== kernel-source ==== Version update (5.1.7 -> 5.1.10) Subpackages: kernel-debug kernel-default - move patches from .fixes to .suse There is no patches.fixes in stable. - commit ad24342 - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (bsc#1137586 CVE-2019-11479). - tcp: add tcp_min_snd_mss sysctl (bsc#1137586 CVE-2019-11479). - tcp: tcp_fragment() should apply sane memory limits (bsc#1137586 CVE-2019-11478). - tcp: limit payload size of sacked skbs (bsc#1137586 CVE-2019-11477). - commit a5ec6d9 - Linux 5.1.10 (bnc#1012628). - media: rockchip/vpu: Fix/re-order probe-error/remove path (bnc#1012628). - media: rockchip/vpu: Add missing dont_use_autosuspend() calls (bnc#1012628). - rapidio: fix a NULL pointer dereference when create_workqueue() fails (bnc#1012628). - fs/fat/file.c: issue flush after the writeback of FAT (bnc#1012628). - sysctl: return -EINVAL if val violates minmax (bnc#1012628). - ipc: prevent lockup on alloc_msg and free_msg (bnc#1012628). - drm/msm: correct attempted NULL pointer dereference in debugfs (bnc#1012628). - drm/pl111: Initialize clock spinlock early (bnc#1012628). - mm/mprotect.c: fix compilation warning because of unused 'mm' variable (bnc#1012628). - ARM: prevent tracing IPI_CPU_BACKTRACE (bnc#1012628). - mm/hmm: select mmu notifier when selecting HMM (bnc#1012628). - hugetlbfs: on restore reserve error path retain subpool reservation (bnc#1012628). - mm/memory_hotplug: release memory resource after arch_remove_memory() (bnc#1012628). - mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE (bnc#1012628). - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails (bnc#1012628). - initramfs: free initrd memory if opening /initrd.image fails (bnc#1012628). - mm/compaction.c: fix an undefined behaviour (bnc#1012628). - mm/memory_hotplug.c: fix the wrong usage of N_HIGH_MEMORY (bnc#1012628). - mm/cma.c: fix the bitmap status to show failed allocation reason (bnc#1012628). - mm: page_mkclean vs MADV_DONTNEED race (bnc#1012628). - mm/cma_debug.c: fix the break condition in cma_maxchunk_get() (bnc#1012628). - mm/slab.c: fix an infinite loop in leaks_show() (bnc#1012628). - kernel/sys.c: prctl: fix false positive in validate_prctl_map() (bnc#1012628). - thermal: rcar_gen3_thermal: disable interrupt in .remove (bnc#1012628). - drivers: thermal: tsens: Don't print error message on - EPROBE_DEFER (bnc#1012628). - mfd: tps65912-spi: Add missing of table registration (bnc#1012628). - mfd: intel-lpss: Set the device in reset state when init (bnc#1012628). - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration (bnc#1012628). - mfd: twl6040: Fix device init errors for ACCCTL register (bnc#1012628). - perf/x86/intel: Allow PEBS multi-entry in watermark mode (bnc#1012628). - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change (bnc#1012628). - drm/nouveau: fix duplication of nv50_head_atom struct (bnc#1012628). - drm/bridge: adv7511: Fix low refresh rate selection (bnc#1012628). - objtool: Don't use ignore flag for fake jumps (bnc#1012628). - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks (bnc#1012628). - bpf: fix undefined behavior in narrow load handling (bnc#1012628). - EDAC/mpc85xx: Prevent building as a module (bnc#1012628). - pwm: meson: Use the spin-lock only to protect register modifications (bnc#1012628). - mailbox: stm32-ipcc: check invalid irq (bnc#1012628). - ntp: Allow TAI-UTC offset to be set to zero (bnc#1012628). - f2fs: fix to avoid panic in do_recover_data() (bnc#1012628). - f2fs: fix to avoid panic in f2fs_inplace_write_data() (bnc#1012628). - f2fs: fix error path of recovery (bnc#1012628). - f2fs: fix to avoid panic in f2fs_remove_inode_page() (bnc#1012628). - f2fs: fix to do sanity check on free nid (bnc#1012628). - f2fs: fix to clear dirty inode in error path of f2fs_iget() (bnc#1012628). - f2fs: fix to avoid panic in dec_valid_block_count() (bnc#1012628). - f2fs: fix to use inline space only if inline_xattr is enable (bnc#1012628). - f2fs: fix to avoid panic in dec_valid_node_count() (bnc#1012628). - f2fs: fix to do sanity check on valid block count of segment (bnc#1012628). - f2fs: fix to avoid deadloop in foreground GC (bnc#1012628). - f2fs: fix to retrieve inline xattr space (bnc#1012628). - f2fs: fix to do checksum even if inode page is uptodate (bnc#1012628). - media: atmel: atmel-isc: fix asd memory allocation (bnc#1012628). - percpu: remove spurious lock dependency between percpu and sched (bnc#1012628). - configfs: fix possible use-after-free in configfs_register_group (bnc#1012628). - uml: fix a boot splat wrt use of cpu_all_mask (bnc#1012628). - PCI: dwc: Free MSI in dw_pcie_host_init() error path (bnc#1012628). - PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi() (bnc#1012628). - fbcon: Don't reset logo_shown when logo is currently shown (bnc#1012628). - ovl: do not generate duplicate fsnotify events for "fake" path (bnc#1012628). - mmc: mmci: Prevent polling for busy detection in IRQ context (bnc#1012628). - netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast (bnc#1012628). - netfilter: nf_conntrack_h323: restore boundary check correctness (bnc#1012628). - mips: Make sure dt memory regions are valid (bnc#1012628). - netfilter: nf_tables: fix base chain stat rcu_dereference usage (bnc#1012628). - watchdog: imx2_wdt: Fix set_timeout for big timeout values (bnc#1012628). - watchdog: fix compile time error of pretimeout governors (bnc#1012628). - blk-mq: move cancel of requeue_work into blk_mq_release (bnc#1012628). - iommu/vt-d: Set intel_iommu_gfx_mapped correctly (bnc#1012628). - vfio-pci/nvlink2: Fix potential VMA leak (bnc#1012628). - misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test (bnc#1012628). - PCI: designware-ep: Use aligned ATU window for raising MSI interrupts (bnc#1012628). - nvme-pci: unquiesce admin queue on shutdown (bnc#1012628). - nvme-pci: shutdown on timeout during deletion (bnc#1012628). - netfilter: nf_flow_table: check ttl value in flow offload data path (bnc#1012628). - netfilter: nf_flow_table: fix netdev refcnt leak (bnc#1012628). - ALSA: hda - Register irq handler after the chip initialization (bnc#1012628). - powerpc/pseries: Track LMB nid instead of using device tree (bnc#1012628). - arm64: defconfig: Update UFSHCD for Hi3660 soc (bnc#1012628). - iommu/vt-d: Don't request page request irq under dmar_global_lock (bnc#1012628). - nvmem: core: fix read buffer in place (bnc#1012628). - nvmem: sunxi_sid: Support SID on A83T and H5 (bnc#1012628). - fuse: retrieve: cap requested size to negotiated max_write (bnc#1012628). - nfsd: allow fh_want_write to be called twice (bnc#1012628). - nfsd: avoid uninitialized variable warning (bnc#1012628). - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING" (bnc#1012628). - iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel (bnc#1012628). - switchtec: Fix unintended mask of MRPC event (bnc#1012628). - net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending (bnc#1012628). - x86/PCI: Fix PCI IRQ routing table memory leak (bnc#1012628). - soc/tegra: pmc: Remove reset sysfs entries on error (bnc#1012628). - i40e: Queues are reserved despite "Invalid argument" error (bnc#1012628). - power: supply: cpcap-battery: Fix signed counter sample register (bnc#1012628). - platform/chrome: cros_ec_proto: check for NULL transfer function (bnc#1012628). - PCI: keystone: Invoke phy_reset() API before enabling PHY (bnc#1012628). - PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64 (bnc#1012628). - soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bnc#1012628). - clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 (bnc#1012628). - usb: ohci-da8xx: disable the regulator if the overcurrent irq fired (bnc#1012628). - iommu/vt-d: Flush IOTLB for untrusted device in time (bnc#1012628). - soc: rockchip: Set the proper PWM for rk3288 (bnc#1012628). - arm64: dts: imx8mq: Mark iomuxc_gpr as i.MX6Q compatible (bnc#1012628). - ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA (bnc#1012628). - ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA (bnc#1012628). - ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA (bnc#1012628). - ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA (bnc#1012628). - ARM: dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA (bnc#1012628). - ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA (bnc#1012628). - ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA (bnc#1012628). - ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA (bnc#1012628). - ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA (bnc#1012628). - PCI: rpadlpar: Fix leaked device_node references in add/remove paths (bnc#1012628). - drm/amd/display: disable link before changing link settings (bnc#1012628). - drm/amd/display: Use plane->color_space for dpp if specified (bnc#1012628). - ARM: OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it (bnc#1012628). - pinctrl: pinctrl-intel: move gpio suspend/resume to noirq phase (bnc#1012628). - platform/x86: intel_pmc_ipc: adding error handling (bnc#1012628). - power: supply: max14656: fix potential use-before-alloc (bnc#1012628). - f2fs: fix potential recursive call when enabling data_flush (bnc#1012628). - net: hns3: return 0 and print warning when hit duplicate MAC (bnc#1012628). - PCI: dwc: Remove default MSI initialization for platform specific MSI chips (bnc#1012628). - PCI: rcar: Fix a potential NULL pointer dereference (bnc#1012628). - PCI: rcar: Fix 64bit MSI message address handling (bnc#1012628). - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bnc#1012628). - Input: goodix - add GT5663 CTP support (bnc#1012628). - video: hgafb: fix potential NULL pointer dereference (bnc#1012628). - video: imsttfb: fix potential NULL pointer dereferences (bnc#1012628). - block, bfq: increase idling for weight-raised queues (bnc#1012628). - PCI: xilinx: Check for __get_free_pages() failure (bnc#1012628). - arm64: dts: qcom: qcs404: Fix regulator supply names (bnc#1012628). - gpio: gpio-omap: add check for off wake capable gpios (bnc#1012628). - gpio: gpio-omap: limit errata 1.101 handling to wkup domain gpios only (bnc#1012628). - ice: Add missing case in print_link_msg for printing flow control (bnc#1012628). - media: v4l2-ctrl: v4l2_ctrl_request_setup returns with error upon failure (bnc#1012628). - batman-adv: Adjust name for batadv_dat_send_data (bnc#1012628). - ice: Enable LAN_EN for the right recipes (bnc#1012628). - ice: Do not set LB_EN for prune switch rules (bnc#1012628). - dmaengine: idma64: Use actual device for DMA transfers (bnc#1012628). - pwm: tiehrpwm: Update shadow register for disabling PWMs (bnc#1012628). - media: v4l2-fwnode: Defaults may not override endpoint configuration in firmware (bnc#1012628). - ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa (bnc#1012628). - pwm: Fix deadlock warning when removing PWM device (bnc#1012628). - ARM: exynos: Fix undefined instruction during Exynos5422 resume (bnc#1012628). - usb: typec: fusb302: Check vconn is off when we start toggling (bnc#1012628). - soc: renesas: Identify R-Car M3-W ES1.3 (bnc#1012628). - ARM: shmobile: porter: enable R-Car Gen2 regulator quirk (bnc#1012628). - gpio: vf610: Do not share irq_chip (bnc#1012628). - percpu: do not search past bitmap when allocating an area (bnc#1012628). - Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" (bnc#1012628). - Revert "drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)" (bnc#1012628). - ovl: check the capability before cred overridden (bnc#1012628). - ovl: support stacked SEEK_HOLE/SEEK_DATA (bnc#1012628). - ALSA: seq: Cover unsubscribe_port() in list_mutex (bnc#1012628). - io_uring: fix failure to verify SQ_AFF cpu (bnc#1012628). - Refresh patches.suse/RFC-Bluetooth-Check-key-sizes-only-when-Secure-Simple-Pairing-is-enabled.patch. - commit 0aa1dd8 - Update config files. The previous commit did not play well. 5.1.9 is broken with =n of that option, so leave it as =y as it was before 5.1.9. - commit e68f829 - Update config files. Set CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT=n, the same as master. - commit cf58ab1 - Linux 5.1.9 (bnc#1012628). - ethtool: fix potential userspace buffer overflow (bnc#1012628). - Fix memory leak in sctp_process_init (bnc#1012628). - ipv4: not do cache for local delivery if bc_forwarding is enabled (bnc#1012628). - ipv6: fix the check before getting the cookie in rt6_get_cookie (bnc#1012628). - net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set (bnc#1012628). - net: mvpp2: Use strscpy to handle stat strings (bnc#1012628). - net: rds: fix memory leak in rds_ib_flush_mr_pool (bnc#1012628). - net: sfp: read eeprom in maximum 16 byte increments (bnc#1012628). - packet: unconditionally free po->rollover (bnc#1012628). - pktgen: do not sleep with the thread lock held (bnc#1012628). - Revert "fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied" (bnc#1012628). - udp: only choose unbound UDP socket for multicast when not in a VRF (bnc#1012628). - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 (bnc#1012628). - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl (bnc#1012628). - net: aquantia: fix wol configuration not applied sometimes (bnc#1012628). - neighbor: Reset gc_entries counter if new entry is released before insert (bnc#1012628). - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit (bnc#1012628). - cls_matchall: avoid panic when receiving a packet before filter set (bnc#1012628). - ipmr_base: Do not reset index in mr_table_dump (bnc#1012628). - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (bnc#1012628). - net/tls: replace the sleeping lock around RX resync with a bit lock (bnc#1012628). - rcu: locking and unlocking need to always be at least barriers (bnc#1012628). - habanalabs: fix debugfs code (bnc#1012628). - ARC: mm: SIGSEGV userspace trying to access kernel virtual memory (bnc#1012628). - parisc: Use implicit space register selection for loading the coherence index of I/O pdirs (bnc#1012628). - parisc: Fix crash due alternative coding for NP iopdir_fdc bit (bnc#1012628). - SUNRPC fix regression in umount of a secure mount (bnc#1012628). - SUNRPC: Fix a use after free when a server rejects the RPCSEC_GSS credential (bnc#1012628). - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (bnc#1012628). - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled (bnc#1012628). - fuse: fallocate: fix return with locked inode (bnc#1012628). - fuse: fix copy_file_range() in the writeback case (bnc#1012628). - pstore: Set tfm to NULL on free_buf_for_compression (bnc#1012628). - pstore/ram: Run without kernel crash dump region (bnc#1012628). - kbuild: use more portable 'command -v' for cc-cross-prefix (bnc#1012628). - memstick: mspro_block: Fix an error code in mspro_block_issue_req() (bnc#1012628). - mmc: tmio: fix SCC error handling to avoid false positive CRC error (bnc#1012628). - mmc: sdhci_am654: Fix SLOTTYPE write (bnc#1012628). - x86/power: Fix 'nosmt' vs hibernation triple fault during resume (bnc#1012628). - x86/insn-eval: Fix use-after-free access to LDT entry (bnc#1012628). - i2c: xiic: Add max_read_len quirk (bnc#1012628). - s390/mm: fix address space detection in exception handling (bnc#1012628). - nvme-rdma: fix queue mapping when queue count is limited (bnc#1012628). - xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bnc#1012628). - MIPS: Bounds check virt_addr_valid (bnc#1012628). - MIPS: pistachio: Build uImage.gz by default (bnc#1012628). - genwqe: Prevent an integer overflow in the ioctl (bnc#1012628). - test_firmware: Use correct snprintf() limit (bnc#1012628). - drm/rockchip: fix fb references in async update (bnc#1012628). - drm/vc4: fix fb references in async update (bnc#1012628). - drm/gma500/cdv: Check vbt config bits when detecting lvds panels (bnc#1012628). - drm/msm: fix fb references in async update (bnc#1012628). - drm: add non-desktop quirk for Valve HMDs (bnc#1012628). - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3) (bnc#1012628). - drm: add non-desktop quirks to Sensics and OSVR headsets (bnc#1012628). - drm: Fix timestamp docs for variable refresh properties (bnc#1012628). - drm/amdgpu/psp: move psp version specific function pointers to early_init (bnc#1012628). - drm/radeon: prefer lower reference dividers (bnc#1012628). - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in (bnc#1012628). - drm/i915: Fix I915_EXEC_RING_MASK (bnc#1012628). - drm/amdgpu/soc15: skip reset on init (bnc#1012628). - drm/amd/display: Add ASICREV_IS_PICASSO (bnc#1012628). - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) (bnc#1012628). - drm/i915/fbc: disable framebuffer compression on GeminiLake (bnc#1012628). - drm/i915/gvt: emit init breadcrumb for gvt request (bnc#1012628). - drm: don't block fb changes for async plane updates (bnc#1012628). - drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack (bnc#1012628). - drm/amd: fix fb references in async update (bnc#1012628). - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled (bnc#1012628). - commit 8904439 - Revert "drm: allow render capable master with DRM_AUTH ioctls" (fix radv check). - commit 3ca4077 - drm/i915: Maintain consistent documentation subsection ordering (fix kernel-doc). - Delete patches.rpmify/Revert-doc-Cope-with-the-deprecation-of-AutoReporter.patch. Use usptream fix instead of revert. - commit 4e8aae9 - scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() (bsc#1136922 cve-2019-12456). - commit 0c3fc9f - Revert "doc: Cope with the deprecation of AutoReporter" (fix kernel-doc). - commit 1c5c2b4 - Linux 5.1.8 (bnc#1012628). - sparc64: Fix regression in non-hypervisor TLB flush xcall (bnc#1012628). - include/linux/bitops.h: sanitize rotate primitives (bnc#1012628). - xhci: update bounce buffer with correct sg num (bnc#1012628). - xhci: Use %zu for printing size_t type (bnc#1012628). - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() (bnc#1012628). - usb: xhci: avoid null pointer deref when bos field is NULL (bnc#1012628). - usbip: usbip_host: fix BUG: sleeping function called from invalid context (bnc#1012628). - usbip: usbip_host: fix stub_dev lock context imbalance regression (bnc#1012628). - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor (bnc#1012628). - USB: sisusbvga: fix oops in error path of sisusb_probe (bnc#1012628). - USB: Add LPM quirk for Surface Dock GigE adapter (bnc#1012628). - USB: rio500: refuse more than one device at a time (bnc#1012628). - USB: rio500: fix memory leak in close after disconnect (bnc#1012628). - media: usb: siano: Fix general protection fault in smsusb (bnc#1012628). - media: usb: siano: Fix false-positive "uninitialized variable" warning (bnc#1012628). - media: smsusb: better handle optional alignment (bnc#1012628). - brcmfmac: fix NULL pointer derefence during USB disconnect (bnc#1012628). - scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bnc#1012628). - scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bnc#1012628). - tracing: Avoid memory leak in predicate_parse() (bnc#1012628). - Btrfs: fix wrong ctime and mtime of a directory after log replay (bnc#1012628). - Btrfs: fix race updating log root item during fsync (bnc#1012628). - Btrfs: fix fsync not persisting changed attributes of a directory (bnc#1012628). - btrfs: correct zstd workspace manager lock to use spin_lock_bh() (bnc#1012628). - btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bnc#1012628). - Btrfs: incremental send, fix file corruption when no-holes feature is enabled (bnc#1012628). - btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bnc#1012628). - iio: dac: ds4422/ds4424 fix chip verification (bnc#1012628). - iio: adc: ads124: avoid buffer overflow (bnc#1012628). - iio: adc: modify NPCM ADC read reference voltage (bnc#1012628). - iio: adc: ti-ads8688: fix timestamp is not updated in buffer (bnc#1012628). - s390/crypto: fix gcm-aes-s390 selftest failures (bnc#1012628). - s390/crypto: fix possible sleep during spinlock aquired (bnc#1012628). - KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts (bnc#1012628). - KVM: PPC: Book3S HV: Fix lockdep warning when entering guest on POWER9 (bnc#1012628). - KVM: PPC: Book3S HV: Restore SPRG3 in kvmhv_p9_guest_entry() (bnc#1012628). - powerpc/perf: Fix MMCRA corruption by bhrb_filter (bnc#1012628). - powerpc/kexec: Fix loading of kernel + initramfs with kexec_file_load() (bnc#1012628). - ALSA: line6: Assure canceling delayed work at disconnection (bnc#1012628). - ALSA: hda/realtek - Set default power save node to 0 (bnc#1012628). - ALSA: hda/realtek - Improve the headset mic for Acer Aspire laptops (bnc#1012628). - KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID (bnc#1012628). - drm/nouveau/i2c: Disable i2c bus access after ->fini() (bnc#1012628). - i2c: mlxcpld: Fix wrong initialization order in probe (bnc#1012628). - i2c: synquacer: fix synquacer_i2c_doxfer() return value (bnc#1012628). - tty: serial: msm_serial: Fix XON/XOFF (bnc#1012628). - tty: max310x: Fix external crystal register setup (bnc#1012628). - mm, memcg: consider subtrees in memory.events (bnc#1012628). - kasan: initialize tag to 0xff in __kasan_kmalloc (bnc#1012628). - kernel/signal.c: trace_signal_deliver when signal_group_exit (bnc#1012628). - signal/arm64: Use force_sig not force_sig_fault for SIGKILL (bnc#1012628). - mm, compaction: make sure we isolate a valid PFN (bnc#1012628). - arm64: Fix the arm64_personality() syscall wrapper redirection (bnc#1012628). - docs: Fix conf.py for Sphinx 2.0 (bnc#1012628). - doc: Cope with the deprecation of AutoReporter (bnc#1012628). - doc: Cope with Sphinx logging deprecations (bnc#1012628). - x86/ima: Check EFI_RUNTIME_SERVICES before using (bnc#1012628). - ima: fix wrong signed policy requirement when not appraising (bnc#1012628). - ima: show rules with IMA_INMASK correctly (bnc#1012628). - evm: check hash algorithm passed to init_desc() (bnc#1012628). - clk: imx: imx8mm: fix int pll clk gate (bnc#1012628). - vt/fbcon: deinitialize resources in visual_init() after failed memory allocation (bnc#1012628). - serial: sh-sci: disable DMA for uart_console (bnc#1012628). - staging: vc04_services: prevent integer overflow in create_pagelist() (bnc#1012628). - staging: wlan-ng: fix adapter initialization failure (bnc#1012628). - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case (bnc#1012628). - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (bnc#1012628). - Revert "lockd: Show pid of lockd for remote locks" (bnc#1012628). - gcc-plugins: Fix build failures under Darwin host (bnc#1012628). - drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() (bnc#1012628). - drm/vmwgfx: Fix user space handle equal to zero (bnc#1012628). - drm/vmwgfx: Fix compat mode shader operation (bnc#1012628). - drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set (bnc#1012628). - drm/sun4i: Fix sun8i HDMI PHY clock initialization (bnc#1012628). - drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz (bnc#1012628). - drm/imx: ipuv3-plane: fix atomic update status query for non-plus i.MX6Q (bnc#1012628). - drm/fb-helper: generic: Call drm_client_add() after setup is done (bnc#1012628). - drm/atomic: Wire file_priv through for property changes (bnc#1012628). - drm: Expose "FB_DAMAGE_CLIPS" property to atomic aware user-space only (bnc#1012628). - drm/rockchip: shutdown drm subsystem on shutdown (bnc#1012628). - drm/lease: Make sure implicit planes are leased (bnc#1012628). - drm/cma-helper: Fix drm_gem_cma_free_object() (bnc#1012628). - Revert "x86/build: Move _etext to actual end of .text" (bnc#1012628). - x86/kprobes: Set instruction page as executable (bnc#1012628). - commit ed4965b - s390: drop meaningless 'targets' from tools Makefile (s390 kmp build fix). - commit c8cc0ca ==== libcontainers-common ==== - Update to libpod v1.4.0 - The podman checkpoint and podman restore commands can now be used to migrate containers between Podman installations on different systems - The podman cp command now supports a pause flag to pause containers while copying into them - The remote client now supports a configuration file for pre-configuring connections to remote Podman installations - Fixed CVE-2019-10152 - The podman cp command improperly dereferenced symlinks in host context - Fixed a bug where podman commit could improperly set environment variables that contained = characters - Fixed a bug where rootless Podman would sometimes fail to start containers with forwarded ports - Fixed a bug where podman version on the remote client could segfault - Fixed a bug where podman container runlabel would use /proc/self/exe instead of the path of the Podman command when printing the command being executed - Fixed a bug where filtering images by label did not work - Fixed a bug where specifying a bing mount or tmpfs mount over an image volume would cause a container to be unable to start - Fixed a bug where podman generate kube did not work with containers with named volumes - Fixed a bug where rootless Podman would receive permission denied errors accessing conmon.pid - Fixed a bug where podman cp with a folder specified as target would replace the folder, as opposed to copying into it - Fixed a bug where rootless Podman commands could double-unlock a lock, causing a crash - Fixed a bug where Podman incorrectly set tmpcopyup on /dev/ mounts, causing errors when using the Kata containers runtime - Fixed a bug where podman exec would fail on older kernels - The podman commit command is now usable with the Podman remote client - The --signature-policy flag (used with several image-related commands) has been deprecated - The podman unshare command now defines two environment variables in the spawned shell: CONTAINERS_RUNROOT and CONTAINERS_GRAPHROOT, pointing to temporary and permanent storage for rootless containers - Updated vendored containers/storage and containers/image libraries with numerous bugfixes - Updated vendored Buildah to v1.8.3 - Podman now requires Conmon v0.2.0 - The podman cp command is now aliased as podman container cp - Rootless Podman will now default init_path using root Podman's configuration files (/etc/containers/libpod.conf and /usr/share/containers/libpod.conf) if not overridden in the rootless configuration - Update to image v1.5.1 - Vendor in latest containers/storage - docker/docker_client: Drop redundant Domain(ref.ref) call - pkg/blobinfocache: Split implementations into subpackages - copy: progress bar: show messages on completion - docs: rename manpages to *.5.command - add container-certs.d.md manpage - pkg/docker/config: Bring auth tests from docker/docker_client_test - Don't allocate a sync.Mutex separately - Update to storage v1.12.10 - Add function to parse out mount options from graphdriver - Merge the disparate parts of all of the Unix-like lockfiles - Fix unix-but-not-Linux compilation - Return XDG_RUNTIME_DIR as RootlessRuntimeDir if set - Cherry-pick moby/moby #39292 for CVE-2018-15664 fixes - lockfile: add RecursiveLock() API - Update generated files - Fix crash on tesing of aufs code - Let consumers know when Layers and Images came from read-only stores - chown: do not change owner for the mountpoint - locks: correctly mark updates to the layers list - CreateContainer: don't worry about mapping layers unless necessary - docs: fix manpage for containers-storage.conf - docs: sort configuration options alphabetically - docs: document OSTree file deduplication - Add missing options to man page for containers-storage - overlay: use the layer idmapping if present - vfs: prefer layer custom idmappings - layers: propagate down the idmapping settings - Recreate symlink when not found - docs: fix manpage for configuration file - docs: add special handling for manpages in sect 5 - overlay: fix single-lower test - Recreate symlink when not found - overlay: propagate errors from mountProgram - utils: root in a userns uses global conf file - Fix handling of additional stores - Correctly check permissions on rootless directory - Fix possible integer overflow on 32bit builds - Evaluate device path for lvm - lockfile test: make concurrent RW test determinisitc - lockfile test: make concurrent read tests deterministic - drivers.DirCopy: fix filemode detection - storage: move the logic to detect rootless into utils.go - Don't set (struct flock).l_pid - Improve documentation of getLockfile - Rename getLockFile to createLockerForPath, and document it - Add FILES section to containers-storage.5 man page - add digest locks - drivers/copy: add a non-cgo fallback - Add default SLES mounts for container-suseconnect usage ==== libseccomp ==== Version update (2.4.0 -> 2.4.1) - Update to new upstream release 2.4.1 * Fix a BPF generation bug where the optimizer mistakenly identified duplicate BPF code blocks. ==== libsolv ==== Version update (0.7.4 -> 0.7.5) - make cleandeps jobs on patterns work [bnc#1137977] - fix favorq leaking between solver runs if the solver is reused - fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason - be more correct with multiversion packages that obsolete their own name [bnc#1127155] - allow building with swig-4.0.0 [bnc#1135749] - bump version to 0.7.5 - always prefer to stay with the same package name if there are multiple alternatives [bnc#1131823] ==== libzypp ==== Version update (17.11.4 -> 17.12.0) - Drop unused InterProcessMutex class and test - Drop unused WebpinResult class and test - Give posttrans script a parameter of 0 (issue #168) - Use CURL_HTTP_VERSION_2TLS if available (fixes #141) - version 17.12.0 (12) ==== microos-tools ==== Version update (1.0+git20190218.9e72dd7 -> 1.0+git20190611.6211f74) - Update to version 1.0+git20190611.6211f74: * Rename 51-corefiles.conf to 30-corefiles.conf, so that an user can override it by installing telemectrics-client or systemd-coredump. ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add ncurses patch 20190609 + add mintty, mintty-direct (adapted from patch by Thomas Wolff). Some of the suggested user-defined capabilities are commented-out, to allow builds with ncurses 5.9 and 6.0 + add Smol/Rmol for tmux, vte-2018 (patch by Nicholas Marriott). + add rs1 to konsole, mlterm -TD + modify _nc_merge_entry() to make a copy of the data which it merges, to avoid modifying the source-data when aligning extended names. - Add ncurses patch 20190601 + modify an internal call to vid_puts to pass extended color pairs e.g., from tty_update.c and lib_mvcur.c (report by Niegodziwy Beru). + improve manual page description of init_tabs capability and TABSIZE variable. - Add ncurses patch 20190525 + modify reset_cmd.c to allow for tabstops at intervals other than 8 (report by Vincent Huisman). - Add ncurses patch 20190518 + update xterm-new to xterm patch #345 -TD + add/use xterm+keypad in xterm-new (report by Alain D D Williams) -TD + update terminator entry -TD + remove hard-tabs from ti703 (report by Robert Clausecker) + mention meml/memu/box1 in user_caps manual page. + mention user_caps.5 in tic and infocmp manual pages. - Adopt the patches ncurses-5.9-ibm327x.dif and ncurses-6.1.dif ==== permissions ==== Version update (1550_20190429 -> 1550_20190521) Subpackages: chkstat permissions-config - Update to version 20190521: * singluarity: Add starter-suid for version 3.2.0 * adjust settings for amanda to current binary layout - Move BuildRequires: back to main package - Moved requires to subpackages (bsc#1137257) ==== python-base ==== Subpackages: libpython2_7-1_0 - Set _lto_cflags to nil as it will prevent to propage LTO for Python modules that are built in a separate package. - bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch Address the issue by disallowing URL paths with embedded whitespace or control characters through into the underlying http client request. Such potentially malicious header injection URLs now cause a ValueError to be raised. ==== systemd-presets-common-SUSE ==== - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini ==== sysvinit ==== Version update (2.90 -> 2.95) - Remove logsave as well as the manual page as those as part of package e2fsprogs already - Update to sysvinit 2.95 * new logsave helper - Update to startpar-0.63 * move startpar from /sbin to /bin - Port our patches * startpar-0.58.dif * sysvinit-2.88dsf-suse.patch * sysvinit-2.90-no-kill.patch * sysvinit-2.90.dif ==== zlib ==== - Do not enable the previous patchset on s390 but just s390x bsc#1137624 - Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717: * 410.patch ==== zypper ==== Version update (1.14.27 -> 1.14.28) - man: split '--with[out]' like options to ease searching. - Unhide 'ps' command in help - Add option to show more conflict information - Rephrased `zypper ps` hint (bsc#859480) - Fix repo refresh not returning 106-ZYPPER_EXIT_INF_REPOS_SKIPPED if --root is used (bsc#1134226) - Fix unknown package handling in zypper install (fixes bsc#1127608) - Fix the package build failure with CMake 3.14. - Re-show progress bar after pressing retry upon install error (bsc#1131113) - version 1.14.28 - Fix build with CMake >= 3.14 Starting with CMake 3.14, EXCLUDE_FROM_ALL now spreads from directories to targets. 'make -C someSubdir' when 'someSubdir' uses the 'EXCLUDE_FROM_ALL' keyword does nothing. - Remove unneeded CMake commands.