[opensuse-factory] New Tumbleweed snapshot 20190411 released!

12 Apr 2019

      Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20190411

Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports

Packages changed:
  desktop-translations (84.87.20190314.58da68e1 -> 84.87.20190409.048e157e)
  dvd+rw-tools
  ffmpeg-4 (4.1.2 -> 4.1.3)
  fwupd
  gjs (1.54.3 -> 1.56.0)
  glib-networking (2.60.0.1 -> 2.60.1)
  gnutls (3.6.6 -> 3.6.7)
  kernel-source (5.0.6 -> 5.0.7)
  libbluray (1.1.0 -> 1.1.1)
  libgnomesu (2.0.2 -> 2.0.3)
  libopenmpt (0.4.3 -> 0.4.4)
  purpose
  python-kiwi (9.17.15 -> 9.17.35)
  python-pycurl
  python-rpm-macros (20190402.c88be49 -> 20190408.32abece)
  vim (8.1.1066 -> 8.1.1137)
  wget (1.20.2 -> 1.20.3)
  xawtv

=== Details ===

==== desktop-translations ====
Version update (84.87.20190314.58da68e1 -> 84.87.20190409.048e157e)

- Update to version 84.87.20190409.048e157e:
  * Translated using Weblate (Arabic)
  * Translated using Weblate (German)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Spanish)

==== dvd+rw-tools ====

- Add fix-build-with-recent-glibc.patch.
- Refresh dvd+rw-tools-buffer.patch
- Refresh growisofs-dvd-dl-undersized.patch
- Run spec-cleaner

==== ffmpeg-4 ====
Version update (4.1.2 -> 4.1.3)
Subpackages: libavcodec58 libavdevice58 libavfilter7 libavformat58 libavresample4 libavutil56 libpostproc55 libswresample3 libswscale5

- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.

==== fwupd ====
Subpackages: fwupd-lang libfwupd2

- Add fwupd-bsc1130056-change-esp-os-name.patch to change the
  OS directory in ESP (bsc#1130056)
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Link fwupd*.efi.signed to fwupd*.efi as requested by fwupd
  (bsc#1129466)

==== gjs ====
Version update (1.54.3 -> 1.56.0)
Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0

- Update to version 3.32.0:
  + Stable release version bump.
- Update to version 1.55.92:
  + Possible memory allocation/deallocation bug (possibly in
    js_free() in GJS).
  + cairo-context: Special-case 0-sized vector.
  + Add some more eslint rules.
  + NMake/libgjs-private: Export all the public symbols there.
- Update to version 1.55.91:
  + The problem of freezing while running the tests using GCC's
    sanitizers was determined to be a bug in GCC, which was fixed
    in GCC 9.0.1.
  + Closed bugs and merge requests:
  - gnome-sound-recorder crashes deep inside libgjs.
  - Various maintenance.
  - wrapperutils: Define $gtype property as non-enumerable.
- Update to version 1.55.90:
  + New JS API: It's now possible to call and implement DBus
    methods whose parameters or return types include file
    descriptor lists (type signature 'h'). This involves passing or
    receiving a Gio.UnixFDList instance along with the parameters
    or return values.
  + To call a method with a file descriptor list, pass the
    Gio.UnixFDList along with the rest of the parameters, in any
    order, the same way you would pass a Gio.Cancellable or async
    callback.
  + For return values, things are a little more complicated, in
    order to avoid breaking existing code. Previously,
    synchronously called DBus proxy methods would return an
    unpacked GVariant. Now, but only if called with a
    Gio.UnixFDList, they will return [unpacked GVariant,
    Gio.UnixFDList]. This does not break existing code because it
    was not possible to call a method with a Gio.UnixFDList before,
    and the return value is unchanged if not calling with a
    Gio.UnixFDList. This does mean, unfortunately, that if you have
    a method with an 'h' in its return signature but not in its
    argument signatures, you will have to call it with an empty
    FDList in order to receive an FDList with the return value,
    when calling synchronously.
  + On the DBus service side, when receiving a method call, we now
    pass the Gio.UnixFDList received from DBus to the called
    method. Previously, sync methods were passed the parameters,
    and async methods were passed the parameters plus the
    Gio.DBusInvocation object. Appending the Gio.UnixFDList to
    those parameters also should not break existing code.
  + See the new tests in installed-tests/js/testGDBus.js for
    examples of calling methods with FD lists.
  + We have observed on the CI server that GJS 1.55.90 will hang
    forever while running the test suite compiled with GCC 9.0.0
    and configured with the --enable-asan and --enable-ubsan
    arguments. This should be addressed in one of the following
    1.55.x releases.
  + Closed bugs and merge requests:
  - GDBus proxy overrides should support
    Gio.DBusProxy.call_with_unix_fd_list().
  - Add regression tests for GObject vfuncs.
  - GjsPrivate: Sources should be C files.
  - build: Vendor last-good version of AX_CODE_COVERAGE.
- Update to version 1.55.4:
  + Various maintenance.
  + Boxed copy constructor should not be called, split Boxed into
    prototype and instance structs.
- Update to version 1.55.3:
  + Manually constructed ByteArray toString segfaults.
  + signals: Add _signalHandlerIsConnected method.
  + Various maintenance.
- Changes from version 1.55.2:
  + Gnome-shell crashes on destroying cached param specs.
  + Various maintenance.
  + Auto pointers builder.
  + configure.ac: Update bug link.
  + SIGSEGV when exiting gnome-shell.
  + Fix build with --enable-dtrace and create CI job to ensure it
    doesn't break in the future.
  + Delay JSString-to-UTF8 conversion.
  + Annotate return values.
  + Fix a regression with GError toString().
  + GType memleak fixes.
  + Atoms refactor.
  + Write a "Code Hospitable" README file.
  + object: Method lookup repeatedly traverses introspection.
  + Handler of GtkEditable::insert-text signal is not run.
- Changes from version 1.55.1:
  + object: Implement newEnumerate hook for GObject.
  + Various maintenance.
  + ByteArray.toString should stop at null bytes.
  + Byte arrays that represent encoded strings should be
    0-terminated.
  + context: Defer and therefore batch forced GC runs.
  + context: use timeout with seconds to schedule a gc trigger.
  + arg: Add special-case for byte arrays going to C.

==== glib-networking ====
Version update (2.60.0.1 -> 2.60.1)
Subpackages: glib-networking-lang

- Handle new GnuTLS error GNUTLS_E_CERTIFICATE_REQUIRED
  + https://gitlab.gnome.org/GNOME/glib-networking/issues/70
  + add 0001-gnutls-Handle-new-GNUTLS_E_CERTIFICATE_REQUIRED.patch
- Update to version 2.60.1:
  + Improve reliability of client auth failure tests.
  + Fix excessive CPU usage after sync handshake.

==== gnutls ====
Version update (3.6.6 -> 3.6.7)
Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit

- Trim useless %if..%endif guards that do not affect the build.
- Fix language errors in description again.
- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support in SLE since dane is not shipped there
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script.
  * * Added gnutls-3.6.6-set_guile_site_dir.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC

==== kernel-source ====
Version update (5.0.6 -> 5.0.7)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla

- Linux 5.0.7 (bnc#1012628).
- ext4: cleanup bh release code in ext4_ind_remove_space()
  (bnc#1012628).
- CIFS: fix POSIX lock leak and invalid ptr deref (bnc#1012628).
- nvme-fc: fix numa_node when dev is null (bnc#1012628).
- nvme-loop: init nvmet_ctrl fatal_err_work when allocate
  (bnc#1012628).
- h8300: use cc-cross-prefix instead of hardcoding
  h8300-unknown-linux- (bnc#1012628).
- f2fs: fix to adapt small inline xattr space in
  __find_inline_xattr() (bnc#1012628).
- f2fs: fix to avoid deadlock in f2fs_read_inline_dir()
  (bnc#1012628).
- apparmor: fix double free when unpack of secmark rules fails
  (bnc#1012628).
- tracing: kdb: Fix ftdump to not sleep (bnc#1012628).
- net/mlx5e: Fix access to non-existing receive queue
  (bnc#1012628).
- net/mlx5: Avoid panic when setting vport rate (bnc#1012628).
- net/mlx5: Avoid panic when setting vport mac, getting vport
  config (bnc#1012628).
- xsk: fix to reject invalid flags in xsk_bind (bnc#1012628).
- clk: ti: clkctrl: Fix clkdm_name regression for
  TI_CLK_CLKCTRL_COMPAT (bnc#1012628).
- gpio: gpio-omap: fix level interrupt idling (bnc#1012628).
- include/linux/relay.h: fix percpu annotation in struct rchan
  (bnc#1012628).
- sysctl: handle overflow for file-max (bnc#1012628).
- net: stmmac: Avoid sometimes uninitialized Clang warnings
  (bnc#1012628).
- enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
  (bnc#1012628).
- libbpf: force fixdep compilation at the start of the build
  (bnc#1012628).
- scsi: hisi_sas: Set PHY linkrate when disconnected
  (bnc#1012628).
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO
  (bnc#1012628).
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver
  (bnc#1012628).
- x86/hyperv: Fix kernel panic when kexec on HyperV (bnc#1012628).
- perf c2c: Fix c2c report for empty numa node (bnc#1012628).
- mm/sparse: fix a bad comparison (bnc#1012628).
- mm/cma.c: cma_declare_contiguous: correct err handling
  (bnc#1012628).
- mm/page_ext.c: fix an imbalance with kmemleak (bnc#1012628).
- mm, swap: bounds check swap_info array accesses to avoid NULL
  derefs (bnc#1012628).
- docs/core-api/mm: fix user memory accessors formatting
  (bnc#1012628).
- mm,oom: don't kill global init via memory.oom.group
  (bnc#1012628).
- memcg: killed threads should not invoke memcg OOM killer
  (bnc#1012628).
- mm, mempolicy: fix uninit memory access (bnc#1012628).
- mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512! (bnc#1012628).
- mm/slab.c: kmemleak no scan alien caches (bnc#1012628).
- ocfs2: fix a panic problem caused by o2cb_ctl (bnc#1012628).
- f2fs: do not use mutex lock in atomic context (bnc#1012628).
- f2fs: fix to data block override node segment by mistake
  (bnc#1012628).
- fs/file.c: initialize init_files.resize_wait (bnc#1012628).
- page_poison: play nicely with KASAN (bnc#1012628).
- kasan: fix kasan_check_read/write definitions (bnc#1012628).
- cifs: use correct format characters (bnc#1012628).
- dm thin: add sanity checks to thin-pool and external snapshot
  creation (bnc#1012628).
- f2fs: fix to check inline_xattr_size boundary correctly
  (bnc#1012628).
- cifs: Accept validate negotiate if server return
  NT_STATUS_NOT_SUPPORTED (bnc#1012628).
- perf beauty msg_flags: Add missing %s lost when adding prefix
  suppression logic (bnc#1012628).
- netfilter: nf_tables: check the result of dereferencing
  base_chain->stats (bnc#1012628).
- PCI: mediatek: Fix memory mapped IO range size computation
  (bnc#1012628).
- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bnc#1012628).
- iommu/vt-d: Disable ATS support on untrusted devices
  (bnc#1012628).
- jbd2: fix invalid descriptor block checksum (bnc#1012628).
- ext4: fix bigalloc cluster freeing when hole punching under load
  (bnc#1012628).
- fs: fix guard_bio_eod to check for real EOD errors
  (bnc#1012628).
- tools lib traceevent: Fix buffer overflow in arg_eval
  (bnc#1012628).
- mm/resource: Return real error codes from walk failures
  (bnc#1012628).
- PCI/PME: Fix hotplug/sysfs remove deadlock in pcie_pme_remove()
  (bnc#1012628).
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies
  (bnc#1012628).
- mt76: fix a leaked reference by adding a missing of_node_put
  (bnc#1012628).
- ath10k: Fix the wrong updation of BW in tx_stats debugfs entry
  (bnc#1012628).
- lockdep/lib/tests: Fix run_tests.sh (bnc#1012628).
- crypto: crypto4xx - add missing of_node_put after
  of_device_is_available (bnc#1012628).
- crypto: cavium/zip - fix collision with generic cra_driver_name
  (bnc#1012628).
- tools/bpf: selftests: add map lookup to test_map_in_map bpf prog
  (bnc#1012628).
- usb: chipidea: Grab the (legacy) USB PHY by phandle first
  (bnc#1012628).
- powerpc/powernv/ioda: Fix locked_vm counting for memory used
  by IOMMU tables (bnc#1012628).
- scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
  (bnc#1012628).
- kbuild: invoke syncconfig if include/config/auto.conf.cmd is
  missing (bnc#1012628).
- kbuild: make -r/-R effective in top Makefile for old Make
  versions (bnc#1012628).
- btrfs: save drop_progress if we drop refs at all (bnc#1012628).
- drm/amd/display: Fix reference counting for struct dc_sink
  (bnc#1012628).
- ath10k: don't report unset rssi values to mac80211
  (bnc#1012628).
- powerpc/xmon: Fix opcode being uninitialized in
  print_insn_powerpc (bnc#1012628).
- coresight: etm4x: Add support to enable ETMv4.2 (bnc#1012628).
- serial: 8250_pxa: honor the port number from devicetree
  (bnc#1012628).
- ARM: 8840/1: use a raw_spinlock_t in unwind (bnc#1012628).
- ARM: 8845/1: use unified assembler in c files (bnc#1012628).
- iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables
  (bnc#1012628).
- powerpc/hugetlb: Handle mmap_min_addr correctly in
  get_unmapped_area callback (bnc#1012628).
- net: dsa: mv88e6xxx: Default CMODE to 1000BaseX only on 6390X
  (bnc#1012628).
- ice: fix ice_remove_rule_internal vsi_list handling
  (bnc#1012628).
- perf script: Handle missing fields with -F +. (bnc#1012628).
- btrfs: qgroup: Make qgroup async transaction commit more
  aggressive (bnc#1012628).
- btrfs: don't enospc all tickets on flush failure (bnc#1012628).
- mmc: omap: fix the maximum timeout setting (bnc#1012628).
- net: dsa: mv88e6xxx: Add lockdep classes to fix false positive
  splat (bnc#1012628).
- net: hns3: fix setting of the hns reset_type for rdma hw errors
  (bnc#1012628).
- veth: Fix -Wformat-truncation (bnc#1012628).
- e1000e: Fix -Wformat-truncation warnings (bnc#1012628).
- mlxsw: spectrum: Avoid -Wformat-truncation warnings
  (bnc#1012628).
- i2c: Allow recovery of the initial IRQ by an I2C client device
  (bnc#1012628).
- platform/x86: ideapad-laptop: Fix no_hw_rfkill_list for Lenovo
  RESCUER R720-15IKBN (bnc#1012628).
- platform/mellanox: mlxreg-hotplug: Fix KASAN warning
  (bnc#1012628).
- loop: set GENHD_FL_NO_PART_SCAN after blkdev_reread_part()
  (bnc#1012628).
- i2c: designware: Do not allow i2c_dw_xfer() calls while
  suspended (bnc#1012628).
- IB/mlx4: Increase the timeout for CM cache (bnc#1012628).
- clk: fractional-divider: check parent rate only if flag is set
  (bnc#1012628).
- perf annotate: Fix getting source line failure (bnc#1012628).
- powerpc/44x: Force PCI on for CURRITUCK (bnc#1012628).
- ASoC: qcom: Fix of-node refcount unbalance in
  qcom_snd_parse_of() (bnc#1012628).
- cpufreq: acpi-cpufreq: Report if CPU doesn't support boost
  technologies (bnc#1012628).
- efi: cper: Fix possible out-of-bounds access (bnc#1012628).
- s390/ism: ignore some errors during deregistration
  (bnc#1012628).
- scsi: megaraid_sas: return error when create DMA pool failed
  (bnc#1012628).
- scsi: fcoe: make use of fip_mode enum complete (bnc#1012628).
- drm/amd/display: Clear stream->mode_changed after commit
  (bnc#1012628).
- perf test: Fix failure of 'evsel-tp-sched' test on s390
  (bnc#1012628).
- mwifiex: don't advertise IBSS features without FW support
  (bnc#1012628).
- perf report: Don't shadow inlined symbol with different addr
  range (bnc#1012628).
- SoC: imx-sgtl5000: add missing put_device() (bnc#1012628).
- media: ov7740: fix runtime pm initialization (bnc#1012628).
- media: sh_veu: Correct return type for mem2mem buffer helpers
  (bnc#1012628).
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers
  (bnc#1012628).
- media: rockchip/rga: Correct return type for mem2mem buffer
  helpers (bnc#1012628).
- media: s5p-g2d: Correct return type for mem2mem buffer helpers
  (bnc#1012628).
- media: mx2_emmaprp: Correct return type for mem2mem buffer
  helpers (bnc#1012628).
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers
  (bnc#1012628).
- media: rockchip/vpu: Correct return type for mem2mem buffer
  helpers (bnc#1012628).
- mt76: usb: do not run mt76u_queues_deinit twice (bnc#1012628).
- gpio: of: Apply regulator-gpio quirk only to enable-gpios
  (bnc#1012628).
- xen/gntdev: Do not destroy context while dma-bufs are in use
  (bnc#1012628).
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset
  == -1 (bnc#1012628).
- HID: intel-ish-hid: avoid binding wrong ishtp_cl_device
  (bnc#1012628).
- cgroup, rstat: Don't flush subtree root unless necessary
  (bnc#1012628).
- efi: Fix build error due to enum collision between efi.h and
  ima.h (bnc#1012628).
- drm/sched: Fix entities with 0 rqs (bnc#1012628).
- regulator: core: Take lock before applying system load
  (bnc#1012628).
- jbd2: fix race when writing superblock (bnc#1012628).
- leds: lp55xx: fix null deref on firmware load failure
  (bnc#1012628).
- tools build: Add -lrt to FEATURE_CHECK_LDFLAGS-libaio
  (bnc#1012628).
- tools build: Add test-reallocarray.c to test-all.c to fix the
  build (bnc#1012628).
- perf beauty waitid options: Fix up prefix showing logic
  (bnc#1012628).
- perf trace: Check if the 'fd' is negative when mapping it to
  pathname (bnc#1012628).
- perf report: Add s390 diagnosic sampling descriptor size
  (bnc#1012628).
- perf coresight: Do not test for libopencsd by default
  (bnc#1012628).
- iwlwifi: pcie: fix emergency path (bnc#1012628).
- ACPI / video: Refactor and fix dmi_is_desktop() (bnc#1012628).
- =?UTF-8?q?selftests:=20ir:=20fix=20warning:=20"%s"=20dire?=
  =?UTF-8?q?ctive=20output=20may=20be=20truncated=20=E2=80=99=20directive?=
  =?UTF-8?q?=20output=20may=20be=20truncated?= (bnc#1012628).
- selftests: skip seccomp get_metadata test if not real root
  (bnc#1012628).
- kprobes: Prohibit probing on bsearch() (bnc#1012628).
- kprobes: Prohibit probing on RCU debug routine (bnc#1012628).
- netfilter: conntrack: fix cloned unconfirmed skb->_nfct race
  in __nf_conntrack_confirm (bnc#1012628).
- ARM: 8833/1: Ensure that NEON code always compiles with Clang
  (bnc#1012628).
- ARM: dts: meson8b: fix the Ethernet data line signals in
  eth_rgmii_pins (bnc#1012628).
- ALSA: PCM: check if ops are defined before suspending PCM
  (bnc#1012628).
- ath10k: fix shadow register implementation for WCN3990
  (bnc#1012628).
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access
  (bnc#1012628).
- sched/topology: Fix percpu data types in struct sd_data &
  struct s_data (bnc#1012628).
- bcache: fix input overflow to cache set sysfs file
  io_error_halflife (bnc#1012628).
- bcache: fix input overflow to sequential_cutoff (bnc#1012628).
- bcache: fix potential div-zero error of
  writeback_rate_i_term_inverse (bnc#1012628).
- bcache: improve sysfs_strtoul_clamp() (bnc#1012628).
- genirq: Avoid summation loops for /proc/stat (bnc#1012628).
- net: marvell: mvpp2: fix stuck in-band SGMII negotiation
  (bnc#1012628).
- iw_cxgb4: fix srqidx leak during connection abort (bnc#1012628).
- net: phy: consider latched link-down status in polling mode
  (bnc#1012628).
- fbdev: fbmem: fix memory access if logo is bigger than the
  screen (bnc#1012628).
- cdrom: Fix race condition in cdrom_sysctl_register
  (bnc#1012628).
- drm: rcar-du: add missing of_node_put (bnc#1012628).
- drm/amd/display: Don't re-program planes for DPMS changes
  (bnc#1012628).
- bpf: test_maps: fix possible out of bound access warning
  (bnc#1012628).
- x86/kexec: Fill in acpi_rsdp_addr from the first kernel
  (bnc#1012628).
- powerpc/ptrace: Mitigate potential Spectre v1 (bnc#1012628).
- drm/amd/display: Disconnect mpcc when changing tg (bnc#1012628).
- perf/aux: Make perf_event accessible to setup_aux()
  (bnc#1012628).
- e1000e: fix cyclic resets at link up with active tx
  (bnc#1012628).
- e1000e: Exclude device from suspend direct complete optimization
  (bnc#1012628).
- platform/x86: intel_pmc_core: Fix PCH IP sts reading
  (bnc#1012628).
- i2c: of: Try to find an I2C adapter matching the parent
  (bnc#1012628).
- staging: spi: mt7621: Add return code check on device_reset()
  (bnc#1012628).
- iwlwifi: mvm: fix RFH config command with >=10 CPUs
  (bnc#1012628).
- ASoC: fsl-asoc-card: fix object reference leaks in
  fsl_asoc_card_probe (bnc#1012628).
- sched/debug: Initialize sd_sysctl_cpus if
  !CONFIG_CPUMASK_OFFSTACK (bnc#1012628).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bnc#1012628).
- sched/core: Use READ_ONCE()/WRITE_ONCE() in
  move_queued_task()/task_rq_lock() (bnc#1012628).
- drm/vkms: Bugfix racing hrtimer vblank handle (bnc#1012628).
- drm/vkms: Bugfix extra vblank frame (bnc#1012628).
- ARM: dts: lpc32xx: Remove leading 0x and 0s from bindings
  notation (bnc#1012628).
- efi/arm/arm64: Allow SetVirtualAddressMap() to be omitted
  (bnc#1012628).
- soc: qcom: gsbi: Fix error handling in gsbi_probe()
  (bnc#1012628).
- drm/msm/dpu: Convert to a chained irq chip (bnc#1012628).
- mt7601u: bump supported EEPROM version (bnc#1012628).
- ARM: 8830/1: NOMMU: Toggle only bits in EXC_RETURN we are
  really care of (bnc#1012628).
- ARM: avoid Cortex-A9 livelock on tight dmb loops (bnc#1012628).
- block, bfq: fix in-service-queue check for queue merging
  (bnc#1012628).
- block, bfq: fix queue removal from weights tree (bnc#1012628).
- bpf: fix missing prototype warnings (bnc#1012628).
- selftests/bpf: skip verifier tests for unsupported program types
  (bnc#1012628).
- powerpc/64s: Clear on-stack exception marker upon exception
  return (bnc#1012628).
- cgroup/pids: turn cgroup_subsys->free() into
  cgroup_subsys->release() to fix the accounting (bnc#1012628).
- backlight: pwm_bl: Use gpiod_get_value_cansleep() to get
  initial state (bnc#1012628).
- tty: increase the default flip buffer limit to 2*640K
  (bnc#1012628).
- powerpc/pseries: Perform full re-add of CPU for topology update
  post-migration (bnc#1012628).
- drm/amd/display: Enable vblank interrupt during CRC capture
  (bnc#1012628).
- ALSA: dice: add support for Solid State Logic Duende
  Classic/Mini (bnc#1012628).
- regulator: mcp16502: Include linux/gpio/consumer.h to fix
  build error (bnc#1012628).
- usb: dwc3: gadget: Fix OTG events when gadget driver isn't
  loaded (bnc#1012628).
- platform/x86: intel-hid: Missing power button release on some
  Dell models (bnc#1012628).
- perf trace: Fixup etcsnoop example (bnc#1012628).
- perf script python: Use PyBytes for attr in trace-event-python
  (bnc#1012628).
- perf script python: Add trace_context extension module to
  sys.modules (bnc#1012628).
- media: mt9m111: set initial frame size other than 0x0
  (bnc#1012628).
- hwrng: virtio - Avoid repeated init of completion (bnc#1012628).
- soc/tegra: fuse: Fix illegal free of IO base address
  (bnc#1012628).
- selftests/bpf: suppress readelf stderr when probing for BTF
  support (bnc#1012628).
- HID: intel-ish: ipc: handle PIMR before ish_wakeup also clear
  PISR busy_clear bit (bnc#1012628).
- f2fs: UBSAN: set boolean value iostat_enable correctly
  (bnc#1012628).
- f2fs: fix to initialize variable to avoid UBSAN/smatch warning
  (bnc#1012628).
- hpet: Fix missing '=' character in the __setup() code of
  hpet_mmap_enable (bnc#1012628).
- pinctrl: meson: fix G12A ao pull registers base address
  (bnc#1012628).
- pinctrl: sh-pfc: r8a77990: Fix MOD_SEL bit numbering
  (bnc#1012628).
- pinctrl: sh-pfc: r8a77995: Fix MOD_SEL bit numbering
  (bnc#1012628).
- cpu/hotplug: Mute hotplug lockdep during init (bnc#1012628).
- dmaengine: imx-dma: fix warning comparison of distinct pointer
  types (bnc#1012628).
- dmaengine: qcom_hidma: assign channel cookie correctly
  (bnc#1012628).
- dmaengine: qcom_hidma: initialize tx flags in hidma_prep_dma_*
  (bnc#1012628).
- netfilter: physdev: relax br_netfilter dependency (bnc#1012628).
- media: rcar-vin: Allow independent VIN link enablement
  (bnc#1012628).
- media: s5p-jpeg: Check for fmt_ver_flag when doing fmt
  enumeration (bnc#1012628).
- PCI: pciehp: Assign ctrl->slot_ctrl before writing it to
  hardware (bnc#1012628).
- audit: hand taken context to audit_kill_trees for syscall
  logging (bnc#1012628).
- regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
  (bnc#1012628).
- pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins
  (bnc#1012628).
- drm: Auto-set allow_fb_modifiers when given modifiers at plane
  init (bnc#1012628).
- drm/nouveau: Stop using drm_crtc_force_disable (bnc#1012628).
- x86/build: Specify elf_i386 linker emulation explicitly for
  i386 objects (bnc#1012628).
- selinux: do not override context on context mounts
  (bnc#1012628).
- brcmfmac: Use firmware_request_nowarn for the clm_blob
  (bnc#1012628).
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure
  (bnc#1012628).
- x86/build: Mark per-CPU symbols as absolute explicitly for LLD
  (bnc#1012628).
- drm/fb-helper: fix leaks in error path of
  drm_fb_helper_fbdev_setup (bnc#1012628).
- clk: meson: clean-up clock registration (bnc#1012628).
- ARM: shmobile: Fix R-Car Gen2 regulator quirk (bnc#1012628).
- clk: rockchip: fix frac settings of GPLL clock for rk3328
  (bnc#1012628).
- dmaengine: tegra: avoid overflow of byte tracking (bnc#1012628).
- staging: iio: adt7316: fix dac_bits assignment (bnc#1012628).
- Input: soc_button_array - fix mapping of the 5th GPIO in a
  PNP0C40 device (bnc#1012628).
- ASoC: simple-card-utils: check "reg" property on
  asoc_simple_card_get_dai_id() (bnc#1012628).
- drm: Reorder set_property_atomic to avoid returning with an
  active ww_ctx (bnc#1012628).
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
  (bnc#1012628).
- net: stmmac: Avoid one more sometimes uninitialized Clang
  warning (bnc#1012628).
- appletalk: Fix compile regression (bnc#1012628).
- gpio: of: Restrict enable-gpio quirk to regulator-gpio
  (bnc#1012628).
- ACPI / video: Extend chassis-type detection with a "Lunch Box"
  check (bnc#1012628).
- bcache: fix potential div-zero error of
  writeback_rate_p_term_inverse (bnc#1012628).
- kbuild: add workaround for Debian make-kpkg (bnc#1012628).
- kbuild: skip sub-make for in-tree build with GNU Make 4.x
  (bnc#1012628).
- commit 8f18342

==== libbluray ====
Version update (1.1.0 -> 1.1.1)

- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Fixed libbluray-pkgconfig.patch.

==== libgnomesu ====
Version update (2.0.2 -> 2.0.3)
Subpackages: libgnomesu-lang libgnomesu0

- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.

==== libopenmpt ====
Version update (0.4.3 -> 0.4.4)
Subpackages: libmodplug1 libopenmpt0

- Update to version 0.4.4:
  * [Bug] Channel VU meters were swapped.
  * Startrekker: Clamp speed to 31 ticks per row.
  * MTM: Ignore unused Exy commands on import.
    Command E5x (Set Finetune) is now applied correctly.
  * MOD: Sample swapping was always enabled since it has been
    separated from the ProTracker 1/2 compatibility flag. Now it is
    always enabled for Amiga-style modules and otherwise the old
    heuristic is used again.

==== purpose ====
Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang

- Add knotifications-devel BuildRequires to build kfileitemaction
  plugin (boo#1131759)

==== python-kiwi ====
Version update (9.17.15 -> 9.17.35)

- Bump version: 9.17.34 ? 9.17.35
- Fix regression on kiwi-repart dracut module
  There was a regression introduced in #1035 (048b5c3e). We mask
  systemd-fsck-root.service during the repart, but we are not always
  unmasking it. If the repart is not possible the service is masked but
  not unmasked, which causes the boot to fail.
  With this commit after masking the fsck service we trap EXIT and run the
  unmask command on script exit. This way we ensure the unmask command is
  always executed.
- Doc fix for lex literal_block as xml
- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created
- Add the possibility to disable runtime checks
  This commit adds runtime configuration parameters to disable the runtime
  checks. This is specially handy if someone does not want to use the kiwi
  dracut modules and provide custom ones instead. In orde disable some
  runtime check consider a runtime config yaml like:
  runtime_checks:
  - disable:
  - check_dracut_module_for_oem_install_in_package_list
  - check_dracut_module_for_live_iso_in_package_list
  This commit fixes #893
- Fixup has_rpm method from RpmDataBase class
  The method checked for the presence of /usr/bin/rpm. But
  that binary is also provided by another toolkit named
  busybox. Thus to check if the rpm we are aiming for is
  present the check has been modified to look for /usr/bin/rpmdb
  which is exclusively provided by rpm only. This Fixes #1037
- Fixed creation of image metadata files
  At the end of a build process the metadata information files .packages
  and .verified are created. On rpm based systems, rpm is invoked as
  chrooted operation inside the new root tree. For images that gets
  installed exclusively from the bootstrap phase there is no rpm inside
  of the image and the call fails. The result are empty metadata files.
  This patch prevents calling rpm inside of the image root tree if it's
  not installed and also uses the RpmDataBase interface instead of
  directly calling rpm. This Fixes #1037
- Bump version: 9.17.33 ? 9.17.34
- kiwi-repart: avoid race between repart and fsck
  See issue #1034, this fixes non-booting CentOS-7 OEM images that fail
  during repartition / FS resize.
  Summary: all parted actions trigger a rescan of partition tables and
  this repeatedly starts / stops systemd-fsck-root.service until it
  finally fails. The workaround is to mask systemd-fsck-root.service
  during repartitioning / FS resize.
- Update travis doc building target
  Disable doc test on travis, we have this in the gitlab-ci
  pipeline.
- Move sphinx config to python3
  Disable modules that have not been ported to sphinx 2.0 API
- Disable linkcheck/spellcheck
  The spellcheck plugin has not been moved to the sphinx 2.0 API
  and there are tons of spelling mistakes reported due to the use
  of technical terms that are unknown to spellcheck. Also disabled
  the linkcheck because it just stands more in our way than it
  reports issues that needs to be fixed.
- Bump version: 9.17.32 ? 9.17.33
- Added integration test for bootstrap only builds
- Fixed bootstrap only building
  Image descriptions that define packages in the bootstrap section
  only don't need a package manager inside of the image. However
  the code to update the location of the rpm database did not
  check the presence of rpm and failed on such image descriptions.
  This Fixes #1030
- Replace @staticmethod with @classmethod when needed
  @classmethod are used in Python to represent methods that can
  query and update the class (cls parameter). Is expected to be
  used for metaprograming, or advanced techniques that require the
  access to the class itself, before we have an instance.
  @staticmethod are used to associate a function to a class. It will
  not be have access to the instance (self) not the class (cls). In
  other programming languages are known as class methods.
  This patch replace all the @classmethod with @staticmethod when
  there is not need to access to the cls parameter, because the
  intention is to be used as normal functions.
- Add intersphinx extension to the docs
- New method: Path.access - thin wrapper arround os.access
  This function calls os.access, but first checks whether the input parameters are
  sane, instead of simply returning false when the file in question does not exist
  or an invalid mode was specified.
- Added doc chapter on Fstab modifications
- Split code_style_plus_unit_test into two jobs for parallel runs
- Addapt documentation to changed script calling convention
- Only execute scripts via bash when they are not user executable
  Currently we call scripts directly through bash, which has the unfortunate
  disadvantage, that the shebang line is completely ignored.
  Now we instead check whether the owner of the script is allowed to execute it
  and if yes, we let the OS execute it (which takes the shebang into account) or
  otherwise call it through bash.
- Support optional fstab.patch file
  In addition to the support for fstab.append, users can now also
  provide a patch file to change the contents of the fstab file
  as it got written by kiwi. The feature is probably rarely used
  but needed in the area of suse's transactional update mechanism.
  This Fixes bsc#1129566 and Fixes #945
- Add warning about a missing /vagrant/ folder to the documentation
- Fix libvirt vagrant box Vagrantfile to use rsync by default
  The documentation is suggesting that rsync is used by default to synchronize the
  shared folders, yet the libvirt vagrant boxes used the system default (=nfs).
- Bump version: 9.17.31 ? 9.17.32
- relax the live iso root dir permissions
  The root of the live ISO has permissions 0700, which is inconvenient if
  you mount it to explore its contents. Relax to 0755 instead.
  Without this, the mounted ISO FS can only be accessed by root.
- Fixed race condition on live overlay mount
  Make sure to wait for all targets of the overlay mount
  This Fixes #1015
- Bump version: 9.17.30 ? 9.17.31
- Update the documentation regarding vagrant boxes
  Extend the documentation on how to build VirtualBox vagrant boxes
  All this was done by Dan ?erm�k <dcermak@suse.com>
- Refactor incremental changelog update
  The creation of the package changelog is based on a reference file.
  However that reference file contained log information in a specific
  timezone which requires to hardcode the region of that timezone
  in the code to correctly run date/time calculations. This can
  be done better from a conceptual point of view. This patch changes
  the handling in a way that the reference file is a git log
  excerpt including the dates as git log lists them. The dates
  contains complete numeric time/date/zone information and can be
  used for calculations. The changelog helper tool converts the
  result data to match the requirements of rpm changelog files
  and prints the time/date information localized to the callers
  timezone or as UTC if the --utc switch is given. By default the
  user local timezone settings applies. That way the setup of
  the local timezone is immaterial to the changelog processor
  and the workaround in the gitlab-ci rpm stage can be deleted
  too.
- Add buildah tool support for OCI and Docker types
  This commit adds buildah tool support for OCI and Docker types. It
  requires buildah and skopeo to be installed in the host. The use of
  umoci (kept as default choice) or buildah is configured using the
  runtime configuration file; consider the following structure:
  ```
  oci:
  - archive_tool: buildah
  ```
- Fix derived docker images build
  This commit fixes the derived docker images when the base image is a
  compressed file. After the refactor in #998 the decompression of the
  base image and the skopeo call to import the decompressed image happened
  in absolutely independent scopes. NamedTemporaryFile python class by
  default deletes the created temporary file when the class instance is
  destroyed, this class is used to decompress the base image. Because of
  isolated scopes at the time skopeo was called the NamedTemporaryFile
  instance was not there anymore. This commit makes sure that the
  temporary file instance is already in memory at the time skopeo is
  called.
- Fixed gitlab-ci rpm stage localtime setup
  By default the timezone of the container is set to UTC. However
  the reference changelog entries are created in the CET timezone.
  The current implementation uses dateutil.parser.parse to parse
  the reference date/time. That call takes the localtime into account
  and responds with a warning:
  + UnknownTimezoneWarning: tzname CET identified but not understood
  The current code does not convert the CET timezone into the
  localtime timezone (UTC in this case) and creates a timezone naive
  datetime object. That object however can't be used to compare
  with timezone aware datetime objects which causes a runtime
  exception. The qick fix here is to set the localtime to the
  timezone used in the reference changes file
- Limit scope of virtualbox_guest_additions_present
  This attribute is only used with the virtualbox provider.
  Added a schematron rule to limit the scope to the
  virtualbox provider only. This Fixes #1003
- Bump version: 9.17.29 ? 9.17.30
- Add consistency check to update_changelog
  Don't take commits into account that are older than the
  given reference commit. This would destroy the chronological
  order. Missing commits older than the reference can be
  incorporated by rebuild_changelog_reference.sh
- Fixed reading of container config
  The additional_tags attribute is optional. If not set
  the container config hash does not contain this key.
  Accessing the key without the get() method leads to
  an unhandled python exception
- add rd.kiwi.oem.maxdisk= boot parameter
  this limits the disks considered for oem deployment to a given size
- Abandon the bumpversion helper
  The bumpversion helper script updated the reference file
  with changes since the latest date of the existing reference.
  However even though the two pieces are in chronological order
  that does not mean that the concatenated version of those
  is still in chronological order. Thus that helper is deleted
  and a new helper rebuild_changelog_reference exists. That
  rebuilds the entire reference file from the history and
  makes sure it is in chronological order. The tool should
  only be called if the chronological order of the total changes
  information is violated which under normal conditions
  does not happen
- Allow --since|--until opts in update_changelog
  In addition to create changelog information since the
  latest date of a reference changelog, also allow to create
  changelog information until the latest data of a reference
  changelog
- Update changelog reference
- Bump version: 9.17.28 ? 9.17.29
- Update changelog reference
- Fixed bumpversion helper
  Make sure the commit for the changelog reference update
  and the commit for the version bump have different
  timestamps by sleeping 2sec between the two actions
- Update API documentation
  In reference to Refactor OCI images packing the difference
  between docker and OCI images is just on packing format.
  Thus the extra docker container subclass is no longer present.
- Bump version: 9.17.27 ? 9.17.28
- Update changelog reference
- kiwi-dump-image: fix kiwi_oemdevicefilter for rd.debug
- Added bumpversion helper
  Script that also updates the changelog reference file
  before the version bump. It's optional to use this but
  it would be handy as the commit would show the rpm
  changelog differences from one tag to the other
- Fixed code smells on completion_generator
  Also update python interpreter to use for the completion
  and the changelog helpers
- Update gitlab CI config
  The rpm stage needs python because the changelog script
  is now written in python
- Drop duplicate EPEL7 reference in the test CentOS appliance
  We already request the standard, update, and extras repos and
  the EPEL7 repo separately. There's no reason to request the
  "centos" EPEL7 repo which combines standard+update and EPEL7
  repos already.
- centos-appliance: reorder repos to fix build
  EPEL has older package versions of e.g. librepo, which breaks dnf.
  Re-prioritize to prefer the good CentOS packages instead of bad EPEL.
- Update changelog file
  Fix changelog entries for their encoding, author name and format
  Also make sure commits are shown in reverse chronological order
  of the author date. We intentionally don't use the commit date
  because a commit can be older than the latest entry in the current
  reference file and would then not be part of the git log
  information
- Introduce better changelog handling
  The current way of creating the changelog file for the package
  is based on reading the entire history of the git repository and
  turns that information into a changelog. The downside of this
  approach is that any change in the code that creates this changelog
  information will impact older entries and could cause a conflict
  on the changes file of the released package. This usually leads
  to declined package submissions and blocks us in fixing bugs
  in the changelog generator. This commit changes the process in
  a way that only changes related to the oldest entry of a reference
  changelog file compared to the current branch are taken into
  account. This Fixes #979
- Adding a derived docker image build test
- Bump version: 9.17.26 ? 9.17.27
- Use correct GRUB 2 and shim EFI packages for test CentOS 7 appliance
  CentOS 7 has inherited the changes from Fedora in how its EFI binaries
  are packaged, so we need to adapt to handle those and build the appliance
  properly.
- Fixed evaluation of @root size setup
  The @root volume setup allows to specify a size for the root
  volume in an LVM setup. The size setting was not respected and
  the root volume was always resized to the rest space available.
  This patch fixes the read_volume_setup_all_free method
  on the dracut kiwi library to know if there is root volume
  setup and respect its contents. This Fixes #983
- Update generated configuration file for DNF
  The dnf.conf file generated by KIWI contained some obsolete
  options as well as options that have been renamed.
  This change updates the options set so that they match what
  is expected by DNF and configures the appropriate behavior.
- Bump version: 9.17.25 ? 9.17.26
- hotfix runtime check for count of fullsize volumes
  The check did not respect images that do not come up with
  a systemdisk section. systemdisk is an optional section and
  the test did not respect this and failed with a stack trace
- Bump version: 9.17.24 ? 9.17.25
- Update provider support status in vagrant docs
- Rebuild schema docs
  Create an up to date state of the oxygen schema doc in the repo
- Fixed Title underline too short warning in the doc
- Fixed permanent redirect links in documentation
- Bump version: 9.17.23 ? 9.17.24
- Cleanup example_dot_profile_config.xml
  Don't use multiple all size volumes
- Add different installation methods to the documentation
- Check for multiple allsize volumes setup
  Added runtime check check_volume_setup_defines_multiple_fullsize_volumes
  which reads the volume setup and counts the number of volumes that
  define a 'all' volume. Only one is allowed
- Complete test coverage on iso tools testing
  If there is no mkisofs/genisoimage present on the system, the
  tests based on real example iso files are skipped. The code
  tested in this case is now covered in a mock style to run
  through the logic even without the tools in place
- Follow up fix for zypper compat link
  Move the code handling the compat setup of the rpm database
  to the correct method of the repository API. Call the
  import of the signing keys only if there are signing
  keys
- Fix suseRemoveYaST to work with set -e
  When the config.sh is invoked with set -e then suseRemoveYaST causes the whole
  script to fail when no yast packages are present. The problem is that `grep
  yast` returns 1 in that case.
  => Explicitly ignore the return value of grep
  Furthermore, if no YaST packages were found, we don't want to invoke rpm, as
  that would fail too (as it is called without any parameters).
- Care for update alternatives on rpmdb move
  In set_database_to_image_path we also have to care for the
  move of the alternatives path to the new rpmdb location
- Fixup zypper/suse link to rpm database
  The compat code generating the /var/lib/rpm link was only
  effective if a signing key was specified, however it should
  be effective in any case
- Run cdrtools based unit tests on demand
  Only if the underlaying system provides legacy cdrtools,
  run the unit tests which actually reads the test data iso
  using those tools.
- Add GitLab CI pipeline status to README.rst
- Improve error messages
  The error messages for running a build against an undefined
  image definition as well as the error message to explain why
  the imageinclude attribute can only be used with public repos
  has been improved by suggestions from J. Mixer
- pxe: use dracut's network code, drop own setup
- Extend the GitLab-CI pipeline
  - build the documentation in the build_doc stage
  - run tests for all supported Python versions in tox_check
  - build an RPM for Fedora 29 & OpenSUSE Tumbleweed in RPM stage
- Ensure DNF is installed for kiwi itself and the test CentOS 7 appliance
  In e33f53aa4513c38a42736c82db3ec5e0b9da41d4, we switched to DNF when requesting YUM.
  This now means we need to ensure DNF is installed for images where
  we previously used YUM for that.
- Add environment for running the unit tests with Python 3.7 to tox
  Python 3.7 does only appear to be available on Ubuntu Xenial with sudo enabled
- Extend documentation about using KIWI to build vagrant images
- Extend documentation on how to build inside OBS
- Bump required minimum disk space
- Extend index.rst by a "advertising" section
- Add url to PyPI & use https instead of http
- Extend quickstart to be more viable as a stand-alone document
- Reorder TOCs so that the most important comes first
- (whitespace-cleanup) on doc/source/overview/workflow.rst
- Rework package manager selection to use DNF when YUM is requested
  YUM v3 is no longer developed, having been superseded by DNF for
  several years. With DNF now available as a usable package manager
  in Red Hat Enterprise Linux 7 through the Extras channel and
  SUSE Linux Enterprise 15 through PackageHub, there is no reason for
  keeping support for YUM v3 around.
  We are keeping support for requesting YUM because in Red Hat Enterprise
  Linux 7, DNF is referred to as "YUM v4", and it is simply referred to
  as "YUM" in Red Hat Enterprise Linux 8. To avoid confusion from people,
  we're just going to leave it in place as an alias to the DNF package
  manager.
  As for why this is happening now, Fedora is retiring YUM v3 in
  Fedora 31, so we might as well get it over with and cut over now.
  Reference: https://fedoraproject.org/wiki/Changes/Retire_YUM_3
- Fix some spelling mistakes & sentence order in the docs
- GitLab CI integration
  Run tox targets on demand. With GitLab CI selected containers
  are small but also limited in their scope.
- Fixed iso tools unit test
  Test was not environment independent and behaved differently
  compared to which iso tool change is installed.
- GitLab CI integration
  Select 3.6 image to run the test
- Fixed shellcheck issue on kiwi-partitions-lib.sh
  Fixup SC2046: Quote this to prevent word splitting
- GitLab CI integration
  Not so easy to get pip running there. Try standard binary
  name of after pip ugrade to install the rest of the chain
- GitLab CI integration
  No alternative naming for py3 commands
- GitLab CI integration
  Fixed install of tox on the runner
- GitLab CI integration
  Require tox to be installed on the runner
- GitLab CI integration
  pip not installed by default on the runner
- Looks like Travis will go away
  Try moving CI integration to GitLab
- Write sha256sum --check compatible shasum format
  Change the output format of the bundler shasum file to be
  compatible with a 'sha256sum --check' call.
  This fixes bsc#1127173
- Move azure integration test build to Factory repos
- Fixed package list of azure integration test
- Fixed repo setup from azure integration test
- Bump version: 9.17.22 ? 9.17.23
- Allow xdist to run the tests in parallel for the Python 2.7 env
  This reverts an accidental change that was introduced with
  942ed7a8eea65f1c99b5f51a8587cfbeae73b484, which removed the {posargs} from
  tox.ini for the python 2.7 environment.
- Added get_description method to XMLState
  In preparation to access the contents of the <description>
  section this pull requests adds a simple method to read
  the contents.
- Update tools from strip list for oemboot
  For legacy oemboot kiwi descriptions the strip list for
  tools to keep in the initrd is still active. On s390
  required tools for dasd_configure were missing and got
  added by this commit. This Fixes #963
- Fixed import of signing keys
  In reference to bsc#1112357 it was required to add the compat
  symlink /var/lib/rpm such that zypper can read the signing
  keys. Unfortunately zypper does not use the configured rpmdb
  from the rpm macro setup.
- add rd.kiwi.install.pass.bootparam boot parameter
  if this boolean is set, most boot parameters are passed on
  to the kexec kernel on OEM image deployments
- Bump version: 9.17.21 ? 9.17.22
- Followup fix for disk detection from root device
  No matter if one ore more devices are used in a multipath map,
  if the root device is managed by multipath kiwi has to use the
  mapped device for all operations, otherwise we run into busy
  or blocked state inside of the initrd operations. This is
  related to Issue #954 and bsc#1126283 and bsc#1126318
- Fixed relocation of GPT
  Simplify the relocation of the GPT to the end of the current
  disk by using sgdisk -e instead of gdisk. The possitive after
  effect of this is that the broken return value handling of
  gdisk in centos will be fixed and did not harm the kiwi
  deployment anymore. This Fixes #958
- Bump version: 9.17.20 ? 9.17.21
- Speedup the make build target
  Activated the pytest xdist feature Dan added for the
  make build target to speedup package creation
- Bump version: 9.17.19 ? 9.17.20
- Update vagrant libvirt unit test
  Take extra config from DiskFormatVagrantLibVirt as base for the
  test and don't mock that information as it was done before
  in the base class
- Extend the vagrant base class test
  Take an example for additional vagrant config settings into account
- Refactor unit tests for vagrant classes
  Better use of pytest capabilities, avoid mock rewrite of
  implementation classes
- Fixed DiskFormatVagrantBase docs and behavior
  Update class docs per review by Dan, also raise on use
  of methods without proper provider implementation
- Fixed create_box_img in DiskFormatVagrantLibVirt
  The call to create_box_img did not use the given tmpdir
  parameter but assumes an instance variable to provide this
  information
- fix network failure with "BOOTIF=" parameter
  If a BOOTIF= parameter (pxelinux "IPAPPEND 2" option) is present, dracut
  handles the network already *and* overwrites the 90-net.rules that
  kiwi-*-net-genrules.sh created, thus the interface is not named "lan0"
  and ifup is destined to fail.
  Work around the issue by detecting if the interface is already handled
  by generic dracut code and just skipping the ifup call.
  Fixes / improves issue #942
- Added some style fixes to the vagrant classes
  Adapt doc strings to match style on lists. Change variable
  names not class global to be lowercase. Use 80 chars per
  line. Don't reach code that potentially uses undefined
  variables
- Refactor vagrant storage subformat
  In preparation to support other vagrant providers a base class
  for Vagrant operations has been created. Original Code written
  by Dan?erm�k <dcermak@suse.com>
- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318
- Fixed losetup call due to move in option names
  util-linux dropped losetup-Add-support-for-setting-logical-blocksize.patch
  because different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux. This caused a change in the
  option to specify the logical sector size. The option --logical-blocksize
  was replaced by --sector-size. We adapt this now in kiwi too
- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
  - fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
  - enable parallel run on travis
  - document how to run the unit tests in parallel
- s390-test-image: add factory base project (same as on arm)
- Add support to build vagrant boxes with the Virtualbox provider
  This commits adds initial support to build Vagrant boxes with the Virtualbox
  provider.
  - The attribute 'provider' of the option <vagrantconfig> now supports the option
  "virtualbox".
  - A new boolean attribute 'virtualbox_guest_additions_present' was added to
  <vagrantconfig>. When set to true, KIWI will assume that guest additions have
  been installed into the base image and configure the shared folders to use
  vboxfs, otherwise rsync will be used.
  This fixes #532 (https://github.com/SUSE/kiwi/issues/532).
- Bump version: 9.17.18 ? 9.17.19
- Fixed isolinux fallback path
  In case isolinux-config failed or does not exist on the
  distribution a fallback path is called. That code hardlinks
  the files to the isolinux compiled in standard path. However
  due to the move of the grub unicode file for iso images
  the path contains a directory. Directories can't be hardlinked
  thus this patch uses 'cp -l' instead of the 'ln' command to
  create the linked target contents.
- Bump version: 9.17.17 ? 9.17.18
- Fix location of grub unicode font
  This is a follow up patch for #f5bac4495d34. The change of the
  location of the font file was not applied if an iso target, live
  or install image is being built. This patch completes the change
  and Fixes bsc#1124885
- Fix handling of zypper return codes
  The following codes should be handled as errors:
  104 - ZYPPER_EXIT_INF_CAP_NOT_FOUND
  105 - ZYPPER_EXIT_ON_SIGNAL
  106 - ZYPPER_EXIT_INF_REPOS_SKIPPED
- Refactor OCI images packing
  This commit refactors the OCI images support:
  * added import_container_image and export_container_image methods
  to oci_tools classes. 'umoci' and 'buildah' consume different
  formats thus the inital skopeo call to import a container is tool
  dependent.
  * use oci-archive transport for packing the OCI images, this causes
  docker and oci operations to just diverge on transport type.
  * add_tag method no longer needed in oci_tools/base, skopeo is used
  for that matter.
  * container/docker.py class is no longer needed. The difference
  between docker and OCI images is just on packing format which is just
  a parameter in skopeo. It does not deserve a dedicated class
  * system/root_import/docker.py class no longer needed. The difference
  between OCI and Docker class was just the transport type for the
  skopeo call. It does not deserve a dedicated class
- Sort file and dir entries in iso sortfile
- tox: Allow to run a single test
  using
  tox -v -e unit_py2_7 -- -vv ./test/unit/iso_tools_cdrtools_test.py
- Sort filesystem listings
  so that kiwi works in a reproducible way
  in spite of indeterministic filesystem readdir order
  and http://bugs.python.org/issue30461
  See https://reproducible-builds.org/ for why this is good.
- Moved azure integration test to Leap15
  Factory doesn't resolve well together with Cloud:Tools.
  I'd like to have stable integration tests and not getting
  screwed with any change on Factory
- Bump version: 9.17.16 ? 9.17.17
- Added new preferences subsection
  In the preferences section the following optional subsection
  can be configured:
  <rpm-locale-filtering>true|false</rpm-locale-filtering>
  If set to true the default locales POSIX, C, and C.UTF-8 are
  applied as rpm install_lang macro. If the locale section is
  configured in addition the list is extended by that information
  too
- Extend the .packages file by the license field
  For rpm based builds the License field from the rpm metadata
  is extracted into the .packages file. For Debian based build
  the license information is in an extra file and not taken
  into account for the moment.
- Bump version: 9.17.15 ? 9.17.16
- Added support for %_install_langs rpm macro
  During the image build the custom rpm macro %_install_langs
  is configured with the <locale> setup from the KIWI XML
  description. This allows to filter language specific packages
  on the rpm level and Fixes #771
- Add API for package manager returncode validation
  Allow to validate the return code from a package manager
  operation. In case of zypper the standard UNIX return
  code validation does not apply. Return codes from zypper
  which are >= 100 are not treated as an error anymore
- Fix Failed to cache rpm database on zypper addrepo
  Occasionally zypper fails when adding the repo with the
  rpm error message 'Failed to cache rpm database'. I was
  not able to find out why this happens and I also could
  not find a way to reproduce it safely. However this
  commit adds a workaround that seems to fix the issue
  when it happens. If the first call of zypper addrepo
  fails kiwi now issues the exact same call again and
  only if that fails too an exception is thrown
  In addition the patch changes the zypper call and avoids
  the option --type. That option is marked legacy and ignored
  by zypper but causes a misleading warning message
- Handle location of the rpm DB on the macro level
  The location of the rpm database is no longer a standard
  path one can trust. Some distributions put it to /var/lib
  others to /usr/lib. This introduces the problem of dealing
  with different locations between the bootstrapping (host rpm)
  phase and the image installation (image rpm) phase.
  This commit implements a solution based on an intermediate
  rpm database configuration. KIWI creates the macros.kiwi file
  inside of the image root which is read by any call of rpm
  in the inner and outer system. During bootstrap phase the
  rpm dbpath from the host system is used and later in the
  install phase the dbpath from the rpm package as it was
  installed by the target image distribution is used. In case
  of a dbpath difference the database is automatically moved
  to the new location by setting the _dbpath_rebuild macro
  to the correct location. At the end the custom KIWI macro
  is deleted.
  As this process allows custom macro defintions during the
  KIWI run it also serves as the base for a solution to
  Issue #771 which will be done in a follow up request to
  this commit.
  Also the workaround for bsc#1112357 which uses a static
  dbpath to store an optionally given signing key will be
  addressed with this commit. The macro setup happens before
  the import_trusted_keys method which makes any specification
  for a strict dbpath obsolete.
  Last the implementation deletes the obsolete
  dump_reload_package_database code. rpm is able to automatically
  do the conversion of different db versions such that the code
  in kiwi is obsolete. In addition that code only worked for
  rather old db versions. The public API has not changed though,
  but the method is marked obsolete and does nothing anymore.
  In addition to the deletion of obsolete code a new API
  method post_process_install_requests_bootstrap has been
  introduced to handle actions required after bootstrap
  and before installing of packages from inside the new image
- Add custom partitioning docs
  This commit adds two new documentation chapters. One covering
  custom partitioning scheme in KIWI. And another covering setting
  custom volumes in KIWI

==== python-pycurl ====
Subpackages: python2-pycurl python3-pycurl

- bsc#1128355: update to the Factory package to get multibuild and
  better working tests.
- Refreshed patch against the new minor release tarball:
  - pycurl-libssh.patch
- Added patches:
  - disable_randomly_failing_tests.patch
  - python-pycurl-7.43.0-tls-backend.patch (from
    https://src.fedoraproject.org/rpms/python-pycurl/blob/master/f/0002-python-p...)

==== python-rpm-macros ====
Version update (20190402.c88be49 -> 20190408.32abece)

- Update to version 20190408.32abece bsc#1128323:
  * Multiline macros don't work correctly on older RPMs.

==== vim ====
Version update (8.1.1066 -> 8.1.1137)
Subpackages: gvim vim-data vim-data-common

- Updated to version 8.1.1137, fixes the following problems
- refreshed disable-unreliable-tests.patch
  * Cannot get all the information about current completion.
  * Source README file doesn't look nice on github.
  * Issue templates are not good enough.
  * Cannot get composing characters from the screen.
  * Extending sign and foldcolumn below the text is confusing.
  * Space in number column is on wrong side with 'rightleft' set.
  * Python test doesn't wipe out hidden buffer.
  * Function reference count wrong in Python code.
  * File for Insert mode is much too big.
  * reg_executing() is reset by calling input().
  * When 'listchars' is set a composing char on a space is wrong.
  * No need for a separate ScreenLinesUtf8() test function.
  * When a screendump test fails, moving the file is a hassle.
  current code page.
  * "Conceal" match is mixed up with 'hlsearch' match.
  * Cannot delete a match from another window. (Paul Jolly)
  * Compiler warning for possibly uninitialized variable. (Tony Mechelynck)
  * Too many curly braces.
  * tag stack is incorrect after CTRL-T and then :tag
  * Height of quickfix window not retained with vertical split.
  * Tutor does not check $LC_MESSAGES.
  * Setting 'guifont' when maximized resizes the Vim window. When 'guioptions'
  contains "k" gvim may open with a tiny window.
  * Support for outdated tags format slows down tag parsing.
  * Long line in tags file causes error.
  * Quickfix code duplication.
  * The do_tag() function is too long.
  * Tag file without trailing newline no longer works. (Marco Hinz)
  * Signals test may fail in the GUI.
  * Long escape sequences may be split up.
  * No test for 'writedelay'.
  * No test for 'visualbell'.
  * Test for 'visualbell' doesn't work.
  * Deleted file still in list of distributed files.
  * Composing chars on space wrong when 'listchars' is set.
  * It is not easy to check for infinity.
  * Duplicate code in quickfix file.
  * Making an autocommand trigger once is not so easy.
  * Confusing overloaded operator "." for string concatenation.
  * Cannot build with older C compiler.
  * Cannot enforce a Vim script style.
  * Build failure without the +eval feature.
  * A couple of conditions are hard to understand.
  * Cannot easily get directory entry matches.
  * Test for term_gettitle() was disabled.
  * char2nr() does not handle composing characters.
  * No way to avoid filtering for autocomplete function, causing flickering
  of the popup menu.
  * Insert completion flags are mixed up.
  * Libvterm does not handle the window position report.
  * Build failure with +terminal but without tgetent.
  * When making a new screendump test have to create the file.
  * Compiler warning for uninitialized struct member. (Yegappan Lakshmanan)
  * Buffer for quickfix window is reused for another file.
  * Build failure for small version. (Tony Mechelynck)
  * Decoding of mouse click escape sequence is not tested.
  * Xterm mouse wheel escape sequence is not tested.

==== wget ====
Version update (1.20.2 -> 1.20.3)

- Upgrade to GNU wget 1.20.3:
  * Finally fixed the buffer overflow vulnerability
  [CVE-2019-5953]

==== xawtv ====
Subpackages: pia tv-common v4l-conf

- Add fix-build-with-recent-glibc.patch
- Run spec-cleaner

-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org
To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

[opensuse-factory] New Tumbleweed snapshot 20190411 released!

Dominique Leuenberger