Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20201114 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (20.2.1 -> 20.2.2) Mesa-drivers (20.2.1 -> 20.2.2) cups-filters kexec-tools libinput (1.16.2 -> 1.16.3) libwacom (1.5 -> 1.6) microos-tools (2.7 -> 2.9) open-lldp (1.0.1+69.e8f522565f5a -> 1.1+15.ef8495548d04) patterns-base sddm (0.18.1 -> 0.19.0) selinux-policy srt (1.3.4 -> 1.4.2) sshfs (3.7.0 -> 3.7.1) transactional-update (2.28.2 -> 2.28.3) ucode-intel (20200616 -> 20201110) xen (4.14.0_10 -> 4.14.0_12) yast2 (4.3.38 -> 4.3.41) === Details === ==== Mesa ==== Version update (20.2.1 -> 20.2.2) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 20.2.2 * second bugfix release for the 20.2 branch ==== Mesa-drivers ==== Version update (20.2.1 -> 20.2.2) Subpackages: Mesa-dri Mesa-gallium - update to 20.2.2 * second bugfix release for the 20.2 branch ==== cups-filters ==== - The wrapper backends /usr/lib/cups/backend/beh and /usr/lib/cups/backend/implicitclass must be installed with 0700 permissions so that cupsd runs them as root (backends with root-only permissions are run as root by cupsd) because otherwise wrapper backends cannot run other backends that need to run as root in particular the ipp backend runs as root and the implicitclass wrapper backend runs it to print via queues that are generated by cupsd-browsed, see the upstream issue https://github.com/OpenPrinting/cups-filters/issues/183 (boo#1178604). ==== kexec-tools ==== - Remove kexec-tools-xen-balloon-up.patch (bsc#1176606) This patch was introduced to address bug#694863, it enabled kexec for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset" for HVM domUs. This host feature removed the requirement to un-ballon the domU prior kexec. With Xen 4.13 cpuid faulting became the default, which affected the approach used in this patch to detect the domU type. As a result invoking kexec in dom0 failed. ==== libinput ==== Version update (1.16.2 -> 1.16.3) - Update to release 1.16.3 * evdev: reduce the "your system is slow" warning to 5 per hour ==== libwacom ==== Version update (1.5 -> 1.6) Subpackages: libwacom-data libwacom2 - update to 1.6: * add XP Pen G640 * add XP Pen G430 * build fixes ==== microos-tools ==== Version update (2.7 -> 2.9) - Update to version 2.9 - Use absolute path for selinuxenabled in systemd generator - Update to version 2.8 - Don't propagate umounts into the real root - Use content of .autorelabel only if it exists ==== open-lldp ==== Version update (1.0.1+69.e8f522565f5a -> 1.1+15.ef8495548d04) Subpackages: liblldp_clif1 - Update to version v1.1+15.ef8495548d04, by merging upstream version 1.1 + latest, including: * Fix merge error: remove bogus line * vdp22: manpage typo * lldptool: fix manpage * lldp_head: remove all references * add_rtattr: only copy if data is provided This removed the need for the patch disable-werror.patch. ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - Add selinux pattern ==== sddm ==== Version update (0.18.1 -> 0.19.0) Subpackages: sddm-branding-openSUSE - Use pam derived username (fix sssd with multiple domains and local groups) * 0001-Use-PAM-s-username.patch - Revert switch to %service_del_postun_without_restart for Leap ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Updated fix_corecommand.patch to set correct types for the OBS build tools ==== srt ==== Version update (1.3.4 -> 1.4.2) - Update to version 1.4.2 New Features and Enhancements * Added support for C++11. Reworked timing and synchronization objects. Three sources of timing are now available (selected via a build option): + POSIX gettimeofday() - default build mode (affected by discontinuous jumps in the system time); + POSIX CLOCK_MONOTONIC. CMake build option: - DENABLE_MONOTONIC_CLOCK=ON. See --enable-monotonic-clock in BuildOptions.md; + C++11 std::chrono::steady_clock, std::thread, std::mutex, etc. CMake build option: - DENABLE_STDCXX_SYNC=ON. See --enable-stdcxx-sync in BuildOptions.md. * Added SRT Source Time API support. It allows setting a source timestamp on a packet that corresponds to a packet creation/reception time. See the Time Access section of the API docs. * Added an improved retransmission algorithm which reduces the retransmission overhead on a link. Set option SRTO_RETRANSMITALGO=1. * Added SRTO_BINDTODEVICE option to bind a socket to a specified NIC. SRTO_BINDTODEVICE option reflects the system option SO_BINDTODEVICE for an SRT socket. * Customizable rejection reason code. SRT library now lets the application provide a code with rejection reason (in a listener callback) if connection request has been rejected by the application. See Rejection Codes in the Access Control guide. * Added new rejection reason: on timeout. See SRT_REJ_TIMEOUT in API-functions.md. * Extended SRT statistics with pktSentUniqueTotal, pktRecvUniqueTotal. Statistics documentation now has a summary table for better navigation. * Added srt_getversion() API function. * Moved socket options documentation to a separate file APISocketOptions.md. It now has a summary table for better navigation. * Socket options SRTO_INPUTBW and SRTO_OHEADBW are now readable. * The logging functionality has been improved by means of defining new and more fine-grained Functional Areas (FA) to which log messages are assigned. This is done to prevent too many debug log messages from the library influencing performance with the debug logging turned on. Fixed Issues * Fixed bug: finding the listener's muxer only by port number was wrong. * Fixed wrong reject reason on async connect. * Fixed CSndLossList::insert with negative offset. * Fixed default binding for IPv6-target rendezvous. * Fixed HS TSBPD flags check. * Improved CRcvLossList protection from concurrent access. * Fixed error reporting on connect/accept. * Correctly handle IPv4 connections on IPv6 listener. * Fixed Moving Average for receiver and sender buffers. * Protecting RCV buffer access. * Fixed local storage depleted issue #486. * Fixed restrictions on pre-bind only options. * Avoid reporting packets rebuilt by FEC as lost. * Improved inserting a serial element into sender's loss list. * Fixed handling of stale loss report. * Fixed closing the crypto control. * Added CSync class as a high-level CV wrapper. * Renamed legacy UDT_EPOLL_* symbols. * Eliminated ref_t. Some more convention fixes. * Crypto: Reset the passphrase in memory on close for security reasons. Deprecated or Renamed * Removed deprecated socket options: SRTO_TWOWAYDATA, SRTO_TSBPDMAXLAG, SRTO_CC, SRTO_MAXMSG, SRTO_MSGTTL, SRTO_SNDPBKEYLEN, SRTO_RCVPBKEYLEN. * Removed deprecated option names: SRTO_SMOOTHER (use SRTO_CONGESTION), SRTO_STRICTENC (use SRTO_ENFORCEDENCRYPTION). version 1.4.1: Improvements * Improved periodic NAK report timing * Use monotonic clock in CTimer::sleepto() * Initial reorder tolerance set to maximum value (SRTO_LOSSMAXTTL) * Added pktReorderTolerance to stats * Use busy wait only to refine below 1 ms * Added SRTO_LOSSMAXTTL to srt_getopt() * Update SND loss list on lite ACK Fixes * Fixed catching exception from CUDTUnited::connect_complete() * Fixed missing vertical FEC/CTL packet * Fixed bandwidth measurement on non-monotonic or retransmitted packets * Fixed srt_getopt(...): optlen is not set in some cases. * Fixed EPoll update_usock * Fixed checkTimers interval (100ms -> 10 ms) * Fixed SRT Stats backward compatibility (CBytePerfMon fields order) * Fixed FEC crash when a large number of dropped packets occur * Fixed FEC crash (access item out of range) * Fixed FileCC crash. Prevented 0 pktsInFlight to be used in the calculation for loss percentage version 1.4.0: New Features and Enhancements * Updates to epoll API. Added edge-triggered epoll wait. * srt-live-transmit default chunk size set to 1456 * Added forward error correction (FEC) packet filter * Added Packet filter API * File congestion control improvements Fixed Issues * Free addrinfo if bind fails (potential memory leak) * Fixed SRTO_LOSSMAXTTL option on accepted socket * Fixed blocking srt_connect call (state update) * Fixed potential sender's sockets list overflow * Use MONOTONIC clock in Garbage Collector thread - Drop CVE-2019-15784.patch (fixed upstream) ==== sshfs ==== Version update (3.7.0 -> 3.7.1) - Update to version 3.7.1 * Minor bugfixes ==== transactional-update ==== Version update (2.28.2 -> 2.28.3) Subpackages: transactional-update-zypp-config - Version 2.38.3 - SELinux: Make synchronisation work for both pre-SELinux snapshots and later snapshots; SELinux support should be ready for most tasks now. ==== ucode-intel ==== Version update (20200616 -> 20201110) - Updated Intel CPU Microcode to 20201110 official release. - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446) - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594) - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592) - Releasenotes: - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00...). - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00...). - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details. - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details. - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-upda...) for details. - Update for functional issues. Refer to [10th Gen Intel® Core? Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-g...) for details. - Update for functional issues. Refer to [8th and 9th Gen Intel® Core? Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-ge...) for details. - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-...) for details. - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details. - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-...) for details. - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e...) for details. [#]## New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CPX-SP | A1 | 06-55-0b/bf | | 0700001e | Xeon Scalable Gen3 | LKF | B2/B3 | 06-8a-01/10 | | 00000028 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | | 00000068 | Core Gen11 Mobile | CML-H | R1 | 06-a5-02/20 | | 000000e0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | | 000000e0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | | 000000e0 | Core Gen10 | CML-U62 V2 | K0 | 06-a6-01/80 | | 000000e0 | Core Gen10 Mobile [#]## Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKL-U23e | K1 | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2 | APL | D0 | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5 | GKL-R | R0 | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile | CML-U62 | A0 | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile ==== xen ==== Version update (4.14.0_10 -> 4.14.0_12) - bsc#1178591 - VUL-0: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351 xsa351-1.patch xsa351-2.patch xsa351-3.patch - bsc#1177950 - adjust help for --max_iters, default is 5 libxl.set-migration-constraints-from-cmdline.patch - jsc#SLE-16899 - improve performance of live migration remove allocations and memcpy from hotpaths on sending and receiving side to get more throughput on 10Gbs+ connections libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc-sr-readv_exact.patch libxc-sr-restore-handle_buffered_page_data.patch libxc-sr-restore-handle_incoming_page_data.patch libxc-sr-restore-map_errs.patch libxc-sr-restore-mfns.patch libxc-sr-restore-pfns.patch libxc-sr-restore-populate_pfns-mfns.patch libxc-sr-restore-populate_pfns-pfns.patch libxc-sr-restore-read_record.patch libxc-sr-restore-types.patch libxc-sr-save-errors.patch libxc-sr-save-guest_data.patch libxc-sr-save-iov.patch libxc-sr-save-local_pages.patch libxc-sr-save-mfns.patch libxc-sr-save-rec_pfns.patch libxc-sr-save-show_transfer_rate.patch libxc-sr-save-types.patch libxc-sr-use-xc_is_known_page_type.patch adjust libxc.sr.superpage.patch adjust libxc.migrate_tracking.patch ==== yast2 ==== Version update (4.3.38 -> 4.3.41) - add methods to decide if hibernation should be proposed (jsc#SLE-12280) - 4.3.41 - Ensure #current_items always returns a list. - Related to bsc#1177137. - 4.3.40 - CWM ComboBox: query the current items offered by the widget when the list of items is extended by a new value (bsc#1177137) - 4.3.39